Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/d4b1740ea2a0a7d61e972f05f60184756c790a77.roa
File: d4b1740ea2a0a7d61e972f05f60184756c790a77.roa (raw, json)
Hash identifier: RDMM9v8Np+uryBfU33gwADeIup68ZwmLu2WMrb4Oyqk=
Subject key identifier: 06:07:46:3A:31:BC:47:66:C8:EC:6F:2B:31:51:50:78:7B:08:75:37
Certificate issuer: /CN=96da91711589e877379a24b4e7e81faaa3d64334
Certificate serial: 0861C4
Authority key identifier: CA:10:D4:24:56:66:80:FA:E1:CC:9A:CC:05:65:76:E0:6E:24:E0:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96da91711589e877379a24b4e7e81faaa3d64334.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/d4b1740ea2a0a7d61e972f05f60184756c790a77.roa
Signing time: Tue 04 Apr 2023 18:47:21 +0000
ROA not before: Mon 03 Apr 2023 18:47:21 +0000
ROA not after: Fri 04 Apr 2025 18:47:21 +0000
asID: 269978
IP address blocks: 189.45.176.0/22 maxlen: 24
2803:ee0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549316 (0x861c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96da91711589e877379a24b4e7e81faaa3d64334
Validity
Not Before: Apr 3 18:47:21 2023 GMT
Not After : Apr 4 18:47:21 2025 GMT
Subject: CN=d4b1740ea2a0a7d61e972f05f60184756c790a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:9f:3b:3b:c0:b9:a9:c2:09:d7:0d:86:f9:
59:db:5f:d3:ce:48:a9:91:95:03:3c:a0:01:be:e2:
e3:99:d1:43:2f:6a:68:83:a7:78:bc:c4:1f:5d:37:
bb:b6:0a:a0:55:91:e3:a2:76:f6:3e:9f:92:3a:6e:
60:8e:a2:12:da:78:a3:fd:1d:19:f1:94:3f:4a:90:
02:52:7b:46:fa:3e:da:4f:5c:dc:99:9a:89:de:f0:
ed:3d:1d:0d:f5:51:88:7f:2f:bb:95:34:77:30:75:
6d:ac:88:08:02:2b:b5:2a:c7:52:21:17:a2:23:2e:
26:fb:0e:58:04:4d:57:08:10:c8:56:47:da:74:ec:
02:57:91:85:e9:28:c9:9a:58:79:51:23:5e:9c:df:
44:e0:d0:6a:92:c6:de:f1:d1:b7:4e:f0:d9:cb:88:
fe:ff:36:31:61:74:6b:f9:b0:1b:f5:8c:eb:9b:de:
c0:02:ec:1d:ea:c5:23:3b:81:ce:79:e9:bd:23:ed:
79:80:19:bb:ee:59:1c:90:f0:c9:a7:66:37:9d:d5:
9e:a5:3e:38:5b:1a:01:7e:cb:24:9f:7b:dc:26:ad:
f7:30:2b:17:54:1c:0e:89:fc:38:f5:40:12:8f:2b:
b5:2b:c9:56:91:a3:f3:02:bc:c9:8c:72:c0:0b:4c:
8e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:07:46:3A:31:BC:47:66:C8:EC:6F:2B:31:51:50:78:7B:08:75:37
X509v3 Authority Key Identifier:
keyid:CA:10:D4:24:56:66:80:FA:E1:CC:9A:CC:05:65:76:E0:6E:24:E0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96da91711589e877379a24b4e7e81faaa3d64334.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/d4b1740ea2a0a7d61e972f05f60184756c790a77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/96da91711589e877379a24b4e7e81faaa3d64334.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.176.0/22
IPv6:
2803:ee0::/32
Signature Algorithm: sha256WithRSAEncryption
70:a0:1a:32:3c:d5:d5:ee:f8:8a:25:11:d9:22:77:55:b2:d6:
19:de:5d:5e:ce:3f:93:b7:de:cd:16:d1:69:cc:9a:1a:94:65:
19:a5:94:92:b0:d5:c2:06:ea:3f:99:19:26:da:f1:c4:d4:05:
b4:2c:a3:6c:fd:a0:ef:b7:ec:c4:8b:db:0b:98:5b:bc:d3:3a:
97:46:41:39:3b:b3:53:bd:fb:28:88:e0:a2:21:49:13:6b:f2:
35:9f:8c:ac:b0:24:ec:a8:f8:89:21:f1:3c:0d:35:5b:86:3d:
07:eb:85:ea:a8:66:3b:1b:f6:a9:9a:ea:0d:10:76:20:41:5f:
a5:c7:1d:34:70:1d:c4:02:af:d8:fb:c4:5e:d3:79:bb:d5:bb:
72:2a:b5:81:a9:f1:d7:70:ae:b2:87:fa:2a:33:8a:31:1a:de:
d0:a0:13:b7:db:35:aa:a7:f5:fe:3a:a0:2c:6c:39:61:5d:5f:
a8:1e:ab:29:50:00:e8:83:f1:5e:06:56:03:35:bf:3a:4b:63:
fc:76:9d:ea:c2:35:a0:4f:44:8d:46:1f:3a:a4:4f:aa:96:62:
39:4a:8d:68:45:ee:a8:6c:f9:eb:bc:eb:61:da:a7:41:6c:7c:
5c:1a:fb:ae:4e:73:f5:7f:44:47:45:4d:3e:5c:bb:6e:9b:db:
11:55:70:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDCGHEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk2
ZGE5MTcxMTU4OWU4NzczNzlhMjRiNGU3ZTgxZmFhYTNkNjQzMzQwHhcNMjMwNDAz
MTg0NzIxWhcNMjUwNDA0MTg0NzIxWjAzMTEwLwYDVQQDEyhkNGIxNzQwZWEyYTBh
N2Q2MWU5NzJmMDVmNjAxODQ3NTZjNzkwYTc3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqoqfOzvAuanCCdcNhvlZ21/TzkipkZUDPKABvuLjmdFDL2po
g6d4vMQfXTe7tgqgVZHjonb2Pp+SOm5gjqIS2nij/R0Z8ZQ/SpACUntG+j7aT1zc
mZqJ3vDtPR0N9VGIfy+7lTR3MHVtrIgIAiu1KsdSIReiIy4m+w5YBE1XCBDIVkfa
dOwCV5GF6SjJmlh5USNenN9E4NBqksbe8dG3TvDZy4j+/zYxYXRr+bAb9Yzrm97A
Auwd6sUjO4HOeem9I+15gBm77lkckPDJp2Y3ndWepT44WxoBfsskn3vcJq33MCsX
VBwOifw49UASjyu1K8lWkaPzArzJjHLAC0yOrwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFAYHRjoxvEdmyOxvKzFRUHh7CHU3MB8GA1UdIwQYMBaAFMoQ1CRWZoD64cya
zAVlduBuJOBGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTZkYTkx
NzExNTg5ZTg3NzM3OWEyNGI0ZTdlODFmYWFhM2Q2NDMzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDhjNzJlYjEtM2Y4OS00ZjkxLTkxMTYtYjBkYjNk
ODU0ZjQwL2Q0YjE3NDBlYTJhMGE3ZDYxZTk3MmYwNWY2MDE4NDc1NmM3OTBhNzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wOGM3MmViMS0zZjg5LTRmOTEtOTExNi1iMGRi
M2Q4NTRmNDAvOTZkYTkxNzExNTg5ZTg3NzM3OWEyNGI0ZTdlODFmYWFhM2Q2NDMz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAr0tsDANBAIAAjAHAwUAKAMO4DANBgkqhkiG9w0BAQsFAAOC
AQEAcKAaMjzV1e74iiUR2SJ3VbLWGd5dXs4/k7fezRbRacyaGpRlGaWUkrDVwgbq
P5kZJtrxxNQFtCyjbP2g77fsxIvbC5hbvNM6l0ZBOTuzU737KIjgoiFJE2vyNZ+M
rLAk7Kj4iSHxPA01W4Y9B+uF6qhmOxv2qZrqDRB2IEFfpccdNHAdxAKv2PvEXtN5
u9W7ciq1ganx13Cusof6KjOKMRre0KATt9s1qqf1/jqgLGw5YV1fqB6rKVAA6IPx
XgZWAzW/Oktj/Had6sI1oE9EjUYfOqRPqpZiOUqNaEXuqGz567zrYdqnQWx8XBr7
rk5z9X9ER0VNPly7bpvbEVVwaw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:56 2024 by rpki-client on console-ams.rpki-client.org