Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a66cca1-e74f-4dc9-b7dc-c4463f217f03/da12cd694ecdae20fddefedda704d13d4c85182d.roa
File: da12cd694ecdae20fddefedda704d13d4c85182d.roa (raw, json)
Hash identifier: bYUSFnBUwQ5Y4gc+JKIcMSX7Q0Be2v36b7s5ybgnleU=
Subject key identifier: D5:DB:3F:8F:86:6D:D7:81:33:8F:8E:B8:16:77:53:88:8C:67:8B:A5
Certificate issuer: /CN=c619c73c049b2f8bbf3acabea01c01e066fd9b63
Certificate serial: 1ADB87
Authority key identifier: 28:7C:F6:8F:66:1F:D1:01:E0:BA:CE:16:60:D3:CE:31:81:A8:8F:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c619c73c049b2f8bbf3acabea01c01e066fd9b63.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1a66cca1-e74f-4dc9-b7dc-c4463f217f03/da12cd694ecdae20fddefedda704d13d4c85182d.roa
Signing time: Wed 08 Nov 2023 22:33:01 +0000
ROA not before: Wed 08 Nov 2023 22:33:00 +0000
ROA not after: Sat 08 Nov 2025 22:33:00 +0000
asID: 271797
IP address blocks: 45.224.100.0/22 maxlen: 24
2803:8010::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1760135 (0x1adb87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c619c73c049b2f8bbf3acabea01c01e066fd9b63
Validity
Not Before: Nov 8 22:33:00 2023 GMT
Not After : Nov 8 22:33:00 2025 GMT
Subject: CN=da12cd694ecdae20fddefedda704d13d4c85182d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:0c:06:bd:20:c9:71:d7:be:0d:67:c2:58:
ed:b5:7e:3f:cc:f9:87:30:4c:17:e8:b9:a3:22:b1:
ff:a8:8a:5b:2d:65:6e:1d:cb:1a:d0:4b:4b:4a:84:
df:5a:e5:d2:0d:17:ec:93:9c:1c:48:a9:ff:d2:e0:
fe:f2:17:b0:59:a2:42:1c:a4:95:21:8c:39:e5:5e:
8e:23:6f:ab:98:f3:c2:e8:a1:f5:b7:84:96:2b:0c:
23:73:bd:15:a1:3f:15:9c:ee:2c:7f:dc:77:ea:50:
1c:86:67:96:6c:85:95:54:fb:5b:4c:99:bc:47:49:
71:8d:f0:0f:99:37:b5:76:5c:b1:83:3d:3c:f2:e7:
47:5a:bd:13:81:c2:fb:d4:91:ca:96:be:df:f9:11:
ca:ec:3f:26:db:74:fc:2c:5d:12:6b:90:4a:5d:ce:
ee:0f:d0:f4:2b:d7:7c:2d:a9:88:3d:ca:e2:ce:55:
dd:7e:35:4c:da:c9:3f:fb:f5:c2:ed:95:61:6a:ea:
10:07:29:c3:3b:0c:95:6c:96:ca:f5:51:46:db:7a:
f2:69:59:e1:2d:6f:b0:0e:8f:ec:17:85:19:a1:b4:
57:df:9c:d2:56:89:6e:3b:5c:09:2d:74:f0:eb:ee:
a6:c2:b3:f7:52:79:b2:17:0c:d0:e4:56:e0:f8:36:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DB:3F:8F:86:6D:D7:81:33:8F:8E:B8:16:77:53:88:8C:67:8B:A5
X509v3 Authority Key Identifier:
keyid:28:7C:F6:8F:66:1F:D1:01:E0:BA:CE:16:60:D3:CE:31:81:A8:8F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c619c73c049b2f8bbf3acabea01c01e066fd9b63.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a66cca1-e74f-4dc9-b7dc-c4463f217f03/da12cd694ecdae20fddefedda704d13d4c85182d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1a66cca1-e74f-4dc9-b7dc-c4463f217f03/c619c73c049b2f8bbf3acabea01c01e066fd9b63.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.100.0/22
IPv6:
2803:8010::/32
Signature Algorithm: sha256WithRSAEncryption
92:ab:ae:8e:23:94:df:4a:b8:b0:d0:4f:13:dd:4e:26:32:28:
ae:be:05:51:5d:26:a7:34:5b:0a:f7:03:d7:bb:c6:a9:cf:a8:
a6:e5:21:b5:2a:90:2d:7d:fe:73:4b:df:d1:4f:0a:76:6f:85:
80:fd:06:7c:74:af:cc:83:dc:2f:44:e2:48:b1:99:cb:16:46:
c7:eb:d9:17:24:27:c1:6e:91:53:70:de:4a:75:de:a5:15:fb:
7b:18:03:08:b4:0f:57:58:ee:4a:47:3a:58:78:ae:a4:6b:9e:
58:b4:46:a7:65:4f:94:17:b3:21:4a:9e:e1:d8:e7:f3:22:9f:
df:e0:d3:a5:eb:41:f1:83:b9:b3:2e:b8:14:87:23:da:9c:10:
fe:b7:fd:26:74:5a:46:eb:4c:14:cf:0d:e2:30:e8:84:cb:59:
b2:65:1e:73:1f:db:81:df:77:13:b0:3d:a4:d8:a8:b8:99:bc:
6a:68:71:c5:cc:f6:cf:18:6f:71:e8:71:1a:04:54:da:e8:c8:
bf:7f:09:8c:66:75:dd:e8:e8:2a:22:04:8c:b3:88:14:c9:9d:
28:90:73:9b:e4:b9:40:c1:d0:a7:05:74:7c:28:8d:b9:23:40:
e8:a9:64:45:e8:b8:e4:9b:e0:88:3d:2e:1b:61:fc:2b:d0:19:
c5:fa:08:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDGtuHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM2
MTljNzNjMDQ5YjJmOGJiZjNhY2FiZWEwMWMwMWUwNjZmZDliNjMwHhcNMjMxMTA4
MjIzMzAwWhcNMjUxMTA4MjIzMzAwWjAzMTEwLwYDVQQDEyhkYTEyY2Q2OTRlY2Rh
ZTIwZmRkZWZlZGRhNzA0ZDEzZDRjODUxODJkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAz30MBr0gyXHXvg1nwljttX4/zPmHMEwX6LmjIrH/qIpbLWVu
Hcsa0EtLSoTfWuXSDRfsk5wcSKn/0uD+8hewWaJCHKSVIYw55V6OI2+rmPPC6KH1
t4SWKwwjc70VoT8VnO4sf9x36lAchmeWbIWVVPtbTJm8R0lxjfAPmTe1dlyxgz08
8udHWr0TgcL71JHKlr7f+RHK7D8m23T8LF0Sa5BKXc7uD9D0K9d8LamIPcrizlXd
fjVM2sk/+/XC7ZVhauoQBynDOwyVbJbK9VFG23ryaVnhLW+wDo/sF4UZobRX35zS
VoluO1wJLXTw6+6mwrP3UnmyFwzQ5Fbg+DbTeQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFNXbP4+GbdeBM4+OuBZ3U4iMZ4ulMB8GA1UdIwQYMBaAFCh89o9mH9EB4LrO
FmDTzjGBqI+xMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzYxOWM3
M2MwNDliMmY4YmJmM2FjYWJlYTAxYzAxZTA2NmZkOWI2My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWE2NmNjYTEtZTc0Zi00ZGM5LWI3ZGMtYzQ0NjNm
MjE3ZjAzL2RhMTJjZDY5NGVjZGFlMjBmZGRlZmVkZGE3MDRkMTNkNGM4NTE4MmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYTY2Y2NhMS1lNzRmLTRkYzktYjdkYy1jNDQ2
M2YyMTdmMDMvYzYxOWM3M2MwNDliMmY4YmJmM2FjYWJlYTAxYzAxZTA2NmZkOWI2
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3gZDANBAIAAjAHAwUAKAOAEDANBgkqhkiG9w0BAQsFAAOC
AQEAkquujiOU30q4sNBPE91OJjIorr4FUV0mpzRbCvcD17vGqc+opuUhtSqQLX3+
c0vf0U8Kdm+FgP0GfHSvzIPcL0TiSLGZyxZGx+vZFyQnwW6RU3DeSnXepRX7exgD
CLQPV1juSkc6WHiupGueWLRGp2VPlBezIUqe4djn8yKf3+DTpetB8YO5sy64FIcj
2pwQ/rf9JnRaRutMFM8N4jDohMtZsmUecx/bgd93E7A9pNiouJm8amhxxcz2zxhv
cehxGgRU2ujIv38JjGZ13ejoKiIEjLOIFMmdKJBzm+S5QMHQpwV0fCiNuSNA6Klk
Rei45JvgiD0uG2H8K9AZxfoItw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org