Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0e145a9a-058b-49d2-bac6-33621e9398e3/1c0acb47fdd251d0f0cb42c7c1223ba1a41f1d67.roa
File: 1c0acb47fdd251d0f0cb42c7c1223ba1a41f1d67.roa (raw, json)
Hash identifier: dTLSmTNQK1Pdd5ad4KLuB3OICu9ebHXJNINPhhf0EBk=
Subject key identifier: 6F:75:C2:FD:E8:A5:18:47:4E:8F:EF:9E:04:F0:03:BA:60:92:77:9D
Certificate issuer: /CN=7bba824531e9ca479de15a44d5f7974cbb2531e9
Certificate serial: 0D25FC
Authority key identifier: E2:13:28:0E:3F:93:86:5D:F1:6D:24:C4:8B:89:DC:6F:77:86:AD:45
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7bba824531e9ca479de15a44d5f7974cbb2531e9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0e145a9a-058b-49d2-bac6-33621e9398e3/1c0acb47fdd251d0f0cb42c7c1223ba1a41f1d67.roa
Signing time: Wed 24 Mar 2021 14:46:17 +0000
ROA not before: Wed 24 Mar 2021 14:46:17 +0000
ROA not after: Tue 24 Mar 2026 14:46:17 +0000
asID: 266673
IP address blocks: 45.228.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 861692 (0xd25fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bba824531e9ca479de15a44d5f7974cbb2531e9
Validity
Not Before: Mar 24 14:46:17 2021 GMT
Not After : Mar 24 14:46:17 2026 GMT
Subject: CN=1c0acb47fdd251d0f0cb42c7c1223ba1a41f1d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:db:67:f6:b5:ea:e6:cd:9b:fe:01:ae:8f:b6:
e5:97:a0:ca:d4:43:4f:3b:00:90:ab:3c:94:e1:d2:
43:2e:6d:a1:19:26:05:bd:16:b6:17:00:b2:48:6e:
27:e4:73:8a:5b:e1:5b:7e:82:cf:ab:f6:89:e0:20:
df:31:0c:9f:35:a3:01:ab:57:c0:d8:8e:1f:0b:73:
41:5e:ad:e2:00:69:f6:54:79:58:ca:f4:8f:6f:05:
35:1c:86:e8:fb:f6:f4:87:40:2e:e8:67:31:c2:10:
01:b2:15:e5:49:1e:f4:14:a7:ca:f7:9d:0d:04:93:
f2:f0:6f:b6:68:1e:83:11:8a:c3:46:8b:0f:9e:44:
ef:66:f9:7c:3f:63:6d:5f:d3:0a:43:96:ee:4f:2a:
b0:5e:f5:3e:72:35:a3:39:03:a5:0e:78:05:b3:fd:
1d:6d:65:d7:7a:b7:5c:77:ca:5f:50:4f:a6:66:5c:
9c:35:e6:1b:fb:0a:ca:6c:62:5e:f5:5b:52:22:ed:
d0:24:67:04:b4:72:60:6e:0e:bd:0e:bb:e0:fc:8d:
56:dc:49:24:d1:95:8e:7f:df:61:03:67:d6:39:b4:
c0:9f:d4:fb:a3:53:41:b4:be:12:2d:12:cf:90:0a:
5e:6f:d7:3a:18:ee:5e:58:c2:48:65:71:58:f1:02:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:75:C2:FD:E8:A5:18:47:4E:8F:EF:9E:04:F0:03:BA:60:92:77:9D
X509v3 Authority Key Identifier:
keyid:E2:13:28:0E:3F:93:86:5D:F1:6D:24:C4:8B:89:DC:6F:77:86:AD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7bba824531e9ca479de15a44d5f7974cbb2531e9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0e145a9a-058b-49d2-bac6-33621e9398e3/1c0acb47fdd251d0f0cb42c7c1223ba1a41f1d67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0e145a9a-058b-49d2-bac6-33621e9398e3/7bba824531e9ca479de15a44d5f7974cbb2531e9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.136.0/22
Signature Algorithm: sha256WithRSAEncryption
17:ea:58:47:b1:61:6a:92:ab:1f:4a:66:10:dd:db:65:4a:6a:
e4:c3:48:27:fb:ef:6c:cb:54:87:ce:a7:cc:a3:2c:3a:e8:f8:
f3:36:6a:a9:26:12:bc:d5:67:13:4f:a8:d5:19:14:94:b8:26:
ad:62:29:f9:bf:43:53:10:c7:67:8e:bb:fc:8c:fe:39:7d:25:
cc:b9:49:ab:7f:52:ea:19:45:df:e4:06:9c:4b:1f:7d:18:1f:
ab:3a:03:bc:35:c5:cb:63:38:ef:64:96:66:69:2a:45:79:c0:
9f:67:06:61:1a:65:d9:23:61:dd:d2:80:3a:ef:a5:cc:d7:04:
f8:62:8a:94:da:60:c9:1b:0a:38:b4:83:25:f3:40:1b:7b:21:
38:62:e5:4d:d6:fd:bc:1c:e0:a0:15:32:e4:39:71:05:a5:2b:
57:be:88:6e:e0:74:7a:67:b5:16:7e:0d:0f:f8:25:32:a6:8a:
ce:a3:18:5a:c6:93:f8:ab:2c:d8:47:60:ac:e2:e0:96:5d:c9:
7e:ce:8f:79:81:e1:42:d3:d8:51:a4:3f:cd:72:38:fd:1f:c1:
ea:d1:50:a8:02:ac:da:5e:cf:1b:dd:bc:32:66:04:bd:b2:86:
0f:ba:83:a0:f2:8b:01:ae:ec:98:68:14:bf:7a:16:ac:b0:e9:
d1:08:fc:96
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDSX8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdi
YmE4MjQ1MzFlOWNhNDc5ZGUxNWE0NGQ1Zjc5NzRjYmIyNTMxZTkwHhcNMjEwMzI0
MTQ0NjE3WhcNMjYwMzI0MTQ0NjE3WjAzMTEwLwYDVQQDEygxYzBhY2I0N2ZkZDI1
MWQwZjBjYjQyYzdjMTIyM2JhMWE0MWYxZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2Ntn9rXq5s2b/gGuj7bll6DK1ENPOwCQqzyU4dJDLm2hGSYF
vRa2FwCySG4n5HOKW+FbfoLPq/aJ4CDfMQyfNaMBq1fA2I4fC3NBXq3iAGn2VHlY
yvSPbwU1HIbo+/b0h0Au6GcxwhABshXlSR70FKfK950NBJPy8G+2aB6DEYrDRosP
nkTvZvl8P2NtX9MKQ5buTyqwXvU+cjWjOQOlDngFs/0dbWXXerdcd8pfUE+mZlyc
NeYb+wrKbGJe9VtSIu3QJGcEtHJgbg69Drvg/I1W3Ekk0ZWOf99hA2fWObTAn9T7
o1NBtL4SLRLPkApeb9c6GO5eWMJIZXFY8QI3IwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG91wv3opRhHTo/vngTwA7pgknedMB8GA1UdIwQYMBaAFOITKA4/k4Zd8W0k
xIuJ3G93hq1FMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2JiYTgy
NDUzMWU5Y2E0NzlkZTE1YTQ0ZDVmNzk3NGNiYjI1MzFlOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGUxNDVhOWEtMDU4Yi00OWQyLWJhYzYtMzM2MjFl
OTM5OGUzLzFjMGFjYjQ3ZmRkMjUxZDBmMGNiNDJjN2MxMjIzYmExYTQxZjFkNjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wZTE0NWE5YS0wNThiLTQ5ZDItYmFjNi0zMzYy
MWU5Mzk4ZTMvN2JiYTgyNDUzMWU5Y2E0NzlkZTE1YTQ0ZDVmNzk3NGNiYjI1MzFl
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3kiDANBgkqhkiG9w0BAQsFAAOCAQEAF+pYR7FhapKrH0pm
EN3bZUpq5MNIJ/vvbMtUh86nzKMsOuj48zZqqSYSvNVnE0+o1RkUlLgmrWIp+b9D
UxDHZ467/Iz+OX0lzLlJq39S6hlF3+QGnEsffRgfqzoDvDXFy2M472SWZmkqRXnA
n2cGYRpl2SNh3dKAOu+lzNcE+GKKlNpgyRsKOLSDJfNAG3shOGLlTdb9vBzgoBUy
5DlxBaUrV76IbuB0eme1Fn4ND/glMqaKzqMYWsaT+Kss2EdgrOLgll3Jfs6PeYHh
QtPYUaQ/zXI4/R/B6tFQqAKs2l7PG928MmYEvbKGD7qDoPKLAa7smGgUv3oWrLDp
0Qj8lg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-ams.rpki-client.org