Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2c28e3ff-f732-46af-81e4-a0e58fbd74a0/d87ff371928014bb7d2c7b084ca13c14799bb13f.roa
File: d87ff371928014bb7d2c7b084ca13c14799bb13f.roa (raw, json)
Hash identifier: OXBzrxrv3UAsl/Tqf8EsdX7VTP7TweMnTPCjSbQhw44=
Subject key identifier: 07:01:A7:94:3E:0E:B1:A0:CA:8A:DE:C8:40:A0:04:4E:C3:6C:9A:19
Certificate issuer: /CN=477cbcab0219a0cea1fe864323f2777db756c459
Certificate serial: 17D708
Authority key identifier: 0A:8E:93:F0:37:65:CB:EB:24:BC:F4:B3:58:AC:40:22:B4:4D:AD:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/477cbcab0219a0cea1fe864323f2777db756c459.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2c28e3ff-f732-46af-81e4-a0e58fbd74a0/d87ff371928014bb7d2c7b084ca13c14799bb13f.roa
Signing time: Thu 18 May 2023 14:59:38 +0000
ROA not before: Wed 17 May 2023 14:59:38 +0000
ROA not after: Sun 18 May 2025 14:59:38 +0000
asID: 269916
IP address blocks: 45.191.188.0/22 maxlen: 24
2803:fce0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1562376 (0x17d708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477cbcab0219a0cea1fe864323f2777db756c459
Validity
Not Before: May 17 14:59:38 2023 GMT
Not After : May 18 14:59:38 2025 GMT
Subject: CN=d87ff371928014bb7d2c7b084ca13c14799bb13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7b:e7:64:af:37:fa:c6:36:f1:e5:5d:3e:7b:
22:30:f2:35:c5:16:05:c4:be:62:c7:78:ac:3c:20:
03:e7:15:b9:a9:62:5e:ca:ab:f2:2d:43:bf:7a:1c:
3d:ad:a6:31:06:be:ae:89:5d:db:e8:df:53:cd:19:
15:8f:fa:80:40:ca:86:2d:9c:8c:69:a0:98:e0:07:
dc:7c:29:72:c6:83:2b:ef:ea:a3:41:67:6b:d3:0c:
d4:e6:a5:e5:12:ef:b0:f3:8d:7e:1c:92:84:3b:62:
f3:aa:84:99:2f:c7:38:8b:8b:76:68:f4:3b:ec:37:
86:31:f3:f7:8a:bd:97:5b:20:81:cf:85:4f:4f:b7:
50:b7:37:14:68:40:96:44:65:1f:65:71:17:a8:50:
11:31:7e:c5:55:32:51:83:8d:ea:22:63:7b:6b:d3:
1b:d6:c2:e0:f2:d0:6c:f3:1f:46:1f:05:84:92:79:
41:a4:eb:c4:ff:61:40:2b:bb:fe:04:d7:e1:26:a9:
ec:fe:54:e1:eb:92:76:50:2f:92:a6:64:32:30:07:
c0:2d:4d:5c:fd:2d:22:78:95:18:a0:5f:b3:66:26:
61:75:fc:78:3f:c4:31:ba:6c:b2:22:92:68:55:d8:
15:a7:3e:2e:98:40:90:d9:d7:4a:a2:02:b8:c8:ba:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:01:A7:94:3E:0E:B1:A0:CA:8A:DE:C8:40:A0:04:4E:C3:6C:9A:19
X509v3 Authority Key Identifier:
keyid:0A:8E:93:F0:37:65:CB:EB:24:BC:F4:B3:58:AC:40:22:B4:4D:AD:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/477cbcab0219a0cea1fe864323f2777db756c459.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2c28e3ff-f732-46af-81e4-a0e58fbd74a0/d87ff371928014bb7d2c7b084ca13c14799bb13f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2c28e3ff-f732-46af-81e4-a0e58fbd74a0/477cbcab0219a0cea1fe864323f2777db756c459.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.188.0/22
IPv6:
2803:fce0::/32
Signature Algorithm: sha256WithRSAEncryption
16:7e:f6:a3:70:9b:36:ba:4a:e6:0a:70:ab:13:66:07:bf:fd:
04:cf:e3:b3:9a:18:d5:ac:a3:3d:8c:12:41:6d:07:8e:2c:7a:
5d:30:82:87:31:68:dd:ff:20:4a:6a:6d:bf:05:bd:9b:3e:0f:
e9:a5:83:eb:be:ba:cc:25:85:a9:8e:c9:50:c6:e7:b0:b4:fa:
a9:c6:06:a7:01:53:bd:80:48:fd:b6:53:f4:2a:6b:c1:72:bd:
74:a7:be:4f:07:24:41:9c:74:24:8f:4e:67:db:4d:7f:cf:be:
73:bf:c7:11:e6:1c:e3:df:7a:44:a0:5c:0c:34:64:14:cd:3b:
f6:1d:cf:03:59:e8:f6:dc:4a:62:6c:4a:27:5d:5e:1e:55:68:
31:3d:84:2b:c4:bd:fa:a1:61:27:bb:ab:27:c1:62:eb:c1:83:
af:03:b4:ec:a7:4c:a6:57:2a:d6:c8:c4:4a:84:b3:07:fe:b4:
bb:ae:2e:4c:05:5e:f2:e6:8d:80:4f:25:0a:41:e9:ce:49:0f:
a5:3d:45:2c:c1:27:40:41:b0:00:7b:a6:bc:b8:e8:0c:08:14:
49:4c:f3:5c:d0:cd:c5:27:e2:6e:a9:35:a6:93:a6:63:32:40:
78:d3:67:ec:85:a4:f0:f0:a0:60:dc:c7:4f:e0:0f:84:de:d6:
20:a8:c3:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDF9cIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ3
N2NiY2FiMDIxOWEwY2VhMWZlODY0MzIzZjI3NzdkYjc1NmM0NTkwHhcNMjMwNTE3
MTQ1OTM4WhcNMjUwNTE4MTQ1OTM4WjAzMTEwLwYDVQQDEyhkODdmZjM3MTkyODAx
NGJiN2QyYzdiMDg0Y2ExM2MxNDc5OWJiMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgHvnZK83+sY28eVdPnsiMPI1xRYFxL5ix3isPCAD5xW5qWJe
yqvyLUO/ehw9raYxBr6uiV3b6N9TzRkVj/qAQMqGLZyMaaCY4AfcfClyxoMr7+qj
QWdr0wzU5qXlEu+w841+HJKEO2LzqoSZL8c4i4t2aPQ77DeGMfP3ir2XWyCBz4VP
T7dQtzcUaECWRGUfZXEXqFARMX7FVTJRg43qImN7a9Mb1sLg8tBs8x9GHwWEknlB
pOvE/2FAK7v+BNfhJqns/lTh65J2UC+SpmQyMAfALU1c/S0ieJUYoF+zZiZhdfx4
P8QxumyyIpJoVdgVpz4umECQ2ddKogK4yLpT8wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFAcBp5Q+DrGgyoreyECgBE7DbJoZMB8GA1UdIwQYMBaAFAqOk/A3ZcvrJLz0
s1isQCK0Ta1/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDc3Y2Jj
YWIwMjE5YTBjZWExZmU4NjQzMjNmMjc3N2RiNzU2YzQ1OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmMyOGUzZmYtZjczMi00NmFmLTgxZTQtYTBlNThm
YmQ3NGEwL2Q4N2ZmMzcxOTI4MDE0YmI3ZDJjN2IwODRjYTEzYzE0Nzk5YmIxM2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yYzI4ZTNmZi1mNzMyLTQ2YWYtODFlNC1hMGU1
OGZiZDc0YTAvNDc3Y2JjYWIwMjE5YTBjZWExZmU4NjQzMjNmMjc3N2RiNzU2YzQ1
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2/vDANBAIAAjAHAwUAKAP84DANBgkqhkiG9w0BAQsFAAOC
AQEAFn72o3CbNrpK5gpwqxNmB7/9BM/js5oY1ayjPYwSQW0Hjix6XTCChzFo3f8g
SmptvwW9mz4P6aWD6766zCWFqY7JUMbnsLT6qcYGpwFTvYBI/bZT9CprwXK9dKe+
TwckQZx0JI9OZ9tNf8++c7/HEeYc4996RKBcDDRkFM079h3PA1no9txKYmxKJ11e
HlVoMT2EK8S9+qFhJ7urJ8Fi68GDrwO07KdMplcq1sjESoSzB/60u64uTAVe8uaN
gE8lCkHpzkkPpT1FLMEnQEGwAHumvLjoDAgUSUzzXNDNxSfibqk1ppOmYzJAeNNn
7IWk8PCgYNzHT+APhN7WIKjDeg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org