Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09fb7567-0cbf-4778-ab6a-9c153df7e410/8e26af21a087c68b89e30f1115b53b863d50ce8f.roa
File: 8e26af21a087c68b89e30f1115b53b863d50ce8f.roa (raw, json)
Hash identifier: fQuWmqRbWRuQdCGEhcqyK8o8fjwWz+eC3I2JAqlaW8g=
Subject key identifier: 68:E8:B4:C5:D4:68:75:DE:8B:B4:70:87:C9:7A:61:DF:61:30:01:40
Certificate issuer: /CN=09388c479448ba5275aecc1ebce8e9e6fdf027ef
Certificate serial: 1DABBE
Authority key identifier: 0D:AC:0D:E6:3E:9B:D7:77:0F:3F:6D:94:83:8F:0B:9D:E4:51:60:3A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09388c479448ba5275aecc1ebce8e9e6fdf027ef.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/09fb7567-0cbf-4778-ab6a-9c153df7e410/8e26af21a087c68b89e30f1115b53b863d50ce8f.roa
Signing time: Thu 16 Nov 2023 20:19:11 +0000
ROA not before: Thu 16 Nov 2023 20:19:11 +0000
ROA not after: Sun 16 Nov 2025 20:19:11 +0000
asID: 272803
IP address blocks: 45.231.216.0/22 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1944510 (0x1dabbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09388c479448ba5275aecc1ebce8e9e6fdf027ef
Validity
Not Before: Nov 16 20:19:11 2023 GMT
Not After : Nov 16 20:19:11 2025 GMT
Subject: CN=8e26af21a087c68b89e30f1115b53b863d50ce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:5a:de:cd:25:f6:47:95:61:af:9f:fc:62:
f8:7f:b3:11:0b:3c:d0:60:bf:f7:b7:ae:57:c7:77:
00:c3:cf:d2:b7:d5:82:df:a2:2c:0e:7b:75:c3:b2:
e7:00:b0:3e:5c:42:9f:37:11:a3:67:ac:10:49:0d:
eb:a1:e8:a9:70:ae:80:19:98:b8:25:5b:03:63:12:
f8:f2:5f:ea:96:cc:fb:d8:13:38:c5:a6:4e:ea:47:
0a:c7:6d:bf:83:80:bd:46:00:80:75:34:77:61:80:
91:df:da:f8:58:43:80:81:03:c0:28:2b:49:bf:7e:
70:f6:2a:61:24:94:c3:e8:38:af:40:cf:47:d6:95:
6e:1d:09:1b:1e:43:b3:48:53:5b:ea:ef:06:59:6e:
09:86:a8:ec:38:fb:0d:bb:82:15:79:24:0d:0e:57:
51:d8:91:92:6b:e4:20:43:74:6d:32:e7:e2:fa:9a:
a8:6d:84:0e:7b:3b:22:3d:b2:e8:ab:85:c5:69:f6:
06:6d:2f:6f:88:97:0c:1c:a9:c5:86:b1:ca:b7:b8:
0d:be:21:37:60:2d:59:17:39:dd:89:8d:c7:31:8b:
79:2b:29:05:e7:b3:b8:54:9c:e3:15:e8:00:0a:84:
1b:37:c3:39:cb:ed:4c:9e:33:de:19:c1:1e:bf:61:
35:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E8:B4:C5:D4:68:75:DE:8B:B4:70:87:C9:7A:61:DF:61:30:01:40
X509v3 Authority Key Identifier:
keyid:0D:AC:0D:E6:3E:9B:D7:77:0F:3F:6D:94:83:8F:0B:9D:E4:51:60:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09388c479448ba5275aecc1ebce8e9e6fdf027ef.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09fb7567-0cbf-4778-ab6a-9c153df7e410/8e26af21a087c68b89e30f1115b53b863d50ce8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/09fb7567-0cbf-4778-ab6a-9c153df7e410/09388c479448ba5275aecc1ebce8e9e6fdf027ef.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.216.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:9f:5e:ca:5c:d3:f0:92:9b:38:49:81:36:af:17:05:af:39:
35:5a:d1:bd:be:15:6a:95:06:d3:e6:9e:0c:0c:b1:6f:fb:24:
98:62:93:0e:5d:f2:84:c0:55:7c:6c:5a:68:58:77:8a:33:34:
87:3f:f8:49:dd:00:33:09:b6:ab:5e:0e:5b:c8:c9:c1:1d:82:
2a:4b:ff:81:f6:82:91:bb:8c:2d:f6:91:01:f8:9b:8d:bd:5d:
3b:60:2c:9e:0b:24:c4:8c:51:81:82:eb:58:3a:de:bc:25:cf:
04:b2:6a:09:51:3f:8c:72:4f:1e:72:3a:70:ce:bc:be:51:72:
99:a8:3d:57:3e:19:00:e3:76:53:90:79:42:7e:f2:1a:0f:40:
3c:76:3c:f9:69:5d:48:d5:5b:de:c2:47:90:97:7e:21:eb:59:
69:97:55:1e:4c:32:f2:19:0d:9e:ea:8f:c3:ac:78:aa:14:20:
59:02:14:fe:14:87:d2:ff:1b:ea:e8:7c:6f:a1:aa:36:2f:4a:
e8:c1:b6:71:37:01:80:51:4b:a4:2c:3e:34:69:06:a8:bf:9f:
1a:96:a1:a0:9a:54:a7:1c:56:73:4b:a5:5f:1f:1b:34:7f:a2:
c7:a9:42:78:bb:76:0f:4e:e7:ec:12:c0:88:13:0c:f9:6b:e6:
6b:a6:7f:6e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHau+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
Mzg4YzQ3OTQ0OGJhNTI3NWFlY2MxZWJjZThlOWU2ZmRmMDI3ZWYwHhcNMjMxMTE2
MjAxOTExWhcNMjUxMTE2MjAxOTExWjAzMTEwLwYDVQQDEyg4ZTI2YWYyMWEwODdj
NjhiODllMzBmMTExNWI1M2I4NjNkNTBjZThmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyopa3s0l9keVYa+f/GL4f7MRCzzQYL/3t65Xx3cAw8/St9WC
36IsDnt1w7LnALA+XEKfNxGjZ6wQSQ3roeipcK6AGZi4JVsDYxL48l/qlsz72BM4
xaZO6kcKx22/g4C9RgCAdTR3YYCR39r4WEOAgQPAKCtJv35w9iphJJTD6DivQM9H
1pVuHQkbHkOzSFNb6u8GWW4JhqjsOPsNu4IVeSQNDldR2JGSa+QgQ3RtMufi+pqo
bYQOezsiPbLoq4XFafYGbS9viJcMHKnFhrHKt7gNviE3YC1ZFzndiY3HMYt5KykF
57O4VJzjFegACoQbN8M5y+1MnjPeGcEev2E1zQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGjotMXUaHXei7Rwh8l6Yd9hMAFAMB8GA1UdIwQYMBaAFA2sDeY+m9d3Dz9t
lIOPC53kUWA6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDkzODhj
NDc5NDQ4YmE1Mjc1YWVjYzFlYmNlOGU5ZTZmZGYwMjdlZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDlmYjc1NjctMGNiZi00Nzc4LWFiNmEtOWMxNTNk
ZjdlNDEwLzhlMjZhZjIxYTA4N2M2OGI4OWUzMGYxMTE1YjUzYjg2M2Q1MGNlOGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wOWZiNzU2Ny0wY2JmLTQ3NzgtYWI2YS05YzE1
M2RmN2U0MTAvMDkzODhjNDc5NDQ4YmE1Mjc1YWVjYzFlYmNlOGU5ZTZmZGYwMjdl
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3n2DANBgkqhkiG9w0BAQsFAAOCAQEAj59eylzT8JKbOEmB
Nq8XBa85NVrRvb4VapUG0+aeDAyxb/skmGKTDl3yhMBVfGxaaFh3ijM0hz/4Sd0A
Mwm2q14OW8jJwR2CKkv/gfaCkbuMLfaRAfibjb1dO2AsngskxIxRgYLrWDrevCXP
BLJqCVE/jHJPHnI6cM68vlFymag9Vz4ZAON2U5B5Qn7yGg9APHY8+WldSNVb3sJH
kJd+IetZaZdVHkwy8hkNnuqPw6x4qhQgWQIU/hSH0v8b6uh8b6GqNi9K6MG2cTcB
gFFLpCw+NGkGqL+fGpahoJpUpxxWc0ulXx8bNH+ix6lCeLt2D07n7BLAiBMM+Wvm
a6Z/bg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:56 2024 by rpki-client on console-ams.rpki-client.org