Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2e710bc2-1d6a-4e46-8f6f-50e9784520c6/9e1d6971d1edd302095c02b4f171a795502a75fa.roa
File: 9e1d6971d1edd302095c02b4f171a795502a75fa.roa (raw, json)
Hash identifier: 38Z/nY311vI46nDrILsfGW0x7tcIogr/ky/FuIuzdGo=
Subject key identifier: 0E:E1:A5:80:B4:F0:28:C0:4D:9B:57:AC:32:3C:A4:57:4F:B4:53:81
Certificate issuer: /CN=53bdb74e475b2a4347038eba8bfa2e4427b6097d
Certificate serial: 1E5508
Authority key identifier: 57:45:08:43:15:02:39:35:FD:2E:45:2F:39:E5:05:8C:8C:AE:AF:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53bdb74e475b2a4347038eba8bfa2e4427b6097d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2e710bc2-1d6a-4e46-8f6f-50e9784520c6/9e1d6971d1edd302095c02b4f171a795502a75fa.roa
Signing time: Mon 13 Nov 2023 15:49:23 +0000
ROA not before: Mon 13 Nov 2023 15:49:22 +0000
ROA not after: Thu 13 Nov 2025 15:49:22 +0000
asID: 269846
IP address blocks: 45.187.4.0/24 maxlen: 24
45.187.5.0/24 maxlen: 24
45.187.6.0/24 maxlen: 24
45.187.7.0/24 maxlen: 24
2803:40e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1987848 (0x1e5508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bdb74e475b2a4347038eba8bfa2e4427b6097d
Validity
Not Before: Nov 13 15:49:22 2023 GMT
Not After : Nov 13 15:49:22 2025 GMT
Subject: CN=9e1d6971d1edd302095c02b4f171a795502a75fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:31:ff:2e:cc:de:23:9a:dc:fc:38:ae:e3:8c:
c6:da:be:17:53:58:30:47:2a:27:31:0f:45:c0:ed:
76:a6:b4:0d:b7:00:12:37:15:06:b3:83:d2:94:19:
94:0c:77:0c:cf:8c:3f:c6:e5:06:cb:61:4e:63:64:
74:27:db:88:8d:db:89:2f:b3:fb:f4:c8:00:3d:a2:
5b:f8:8e:a4:3c:29:15:09:0c:91:3d:18:7f:a0:bc:
46:68:59:f7:ed:4b:e7:2a:8b:84:23:f8:b3:bc:f1:
b3:11:7c:ff:f6:e3:c0:04:47:0c:f7:41:b9:e6:48:
08:10:dc:46:fd:03:e2:b1:34:65:6e:e4:e8:71:5c:
ed:4f:54:56:6d:58:fd:8d:12:a6:db:df:8a:c1:1f:
2b:cf:2d:74:33:50:a2:35:8e:2e:46:62:4b:98:74:
67:c8:bf:89:f3:c2:da:6d:c5:d5:18:40:0c:a8:54:
97:33:4e:15:f5:63:b3:1b:c5:e2:94:e5:98:8b:3c:
6e:d8:64:d5:ef:e0:c9:74:26:41:68:03:ec:3d:6d:
97:76:00:d5:d6:b7:90:75:ee:93:76:ef:5e:14:3c:
1d:ce:7f:f6:b4:17:e5:fa:d9:ea:41:3a:06:0e:95:
bb:a2:a0:f9:7b:98:7a:7f:d8:d9:37:d1:f3:d1:49:
8c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E1:A5:80:B4:F0:28:C0:4D:9B:57:AC:32:3C:A4:57:4F:B4:53:81
X509v3 Authority Key Identifier:
keyid:57:45:08:43:15:02:39:35:FD:2E:45:2F:39:E5:05:8C:8C:AE:AF:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53bdb74e475b2a4347038eba8bfa2e4427b6097d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2e710bc2-1d6a-4e46-8f6f-50e9784520c6/9e1d6971d1edd302095c02b4f171a795502a75fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2e710bc2-1d6a-4e46-8f6f-50e9784520c6/53bdb74e475b2a4347038eba8bfa2e4427b6097d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.187.4.0/22
IPv6:
2803:40e0::/32
Signature Algorithm: sha256WithRSAEncryption
37:9d:b7:d3:b6:df:5d:3f:33:34:4a:be:93:42:14:69:56:05:
73:3a:50:54:78:03:6d:0f:5d:14:02:fb:c9:1d:21:73:54:a4:
52:f7:1d:78:c1:45:e1:2c:6d:69:c6:18:cb:c7:a0:76:4a:e0:
31:1d:64:21:79:26:98:19:68:a5:2f:13:13:dd:1c:4d:73:4c:
ad:51:1e:05:a0:72:b5:ff:c2:99:e6:77:9c:f3:89:fa:b1:43:
5c:0a:12:0e:fa:ea:28:bc:41:78:9a:32:8d:54:93:21:fa:5a:
ca:1c:cc:95:b4:0d:d5:d0:e7:11:46:49:e1:b2:6e:55:39:83:
9e:24:07:ba:6b:f0:23:35:50:3e:c0:dd:e2:bb:c1:34:ac:c0:
35:28:c4:43:75:a7:6e:27:3f:8e:f3:9c:9e:1c:c3:60:16:40:
86:ac:ba:b6:02:43:6f:6c:29:40:db:89:96:6f:6f:6e:b9:63:
8f:96:66:a8:dd:e1:1c:99:7c:28:37:31:17:05:ce:1f:08:b9:
4c:c9:9d:40:d2:5f:a2:9a:55:6f:67:b2:25:f3:bc:d3:47:47:
64:5e:9f:8f:20:fb:02:8f:68:cd:56:81:84:21:fa:67:0c:e9:
18:c1:a4:b8:51:4f:a9:2f:12:6d:4b:b2:02:d0:b9:95:60:76:
7e:2e:ea:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDHlUIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUz
YmRiNzRlNDc1YjJhNDM0NzAzOGViYThiZmEyZTQ0MjdiNjA5N2QwHhcNMjMxMTEz
MTU0OTIyWhcNMjUxMTEzMTU0OTIyWjAzMTEwLwYDVQQDEyg5ZTFkNjk3MWQxZWRk
MzAyMDk1YzAyYjRmMTcxYTc5NTUwMmE3NWZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkDH/LszeI5rc/Diu44zG2r4XU1gwRyonMQ9FwO12prQNtwAS
NxUGs4PSlBmUDHcMz4w/xuUGy2FOY2R0J9uIjduJL7P79MgAPaJb+I6kPCkVCQyR
PRh/oLxGaFn37UvnKouEI/izvPGzEXz/9uPABEcM90G55kgIENxG/QPisTRlbuTo
cVztT1RWbVj9jRKm29+KwR8rzy10M1CiNY4uRmJLmHRnyL+J88LabcXVGEAMqFSX
M04V9WOzG8XilOWYizxu2GTV7+DJdCZBaAPsPW2XdgDV1reQde6Tdu9eFDwdzn/2
tBfl+tnqQToGDpW7oqD5e5h6f9jZN9Hz0UmMGwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFA7hpYC08CjATZtXrDI8pFdPtFOBMB8GA1UdIwQYMBaAFFdFCEMVAjk1/S5F
LznlBYyMrq/TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTNiZGI3
NGU0NzViMmE0MzQ3MDM4ZWJhOGJmYTJlNDQyN2I2MDk3ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmU3MTBiYzItMWQ2YS00ZTQ2LThmNmYtNTBlOTc4
NDUyMGM2LzllMWQ2OTcxZDFlZGQzMDIwOTVjMDJiNGYxNzFhNzk1NTAyYTc1ZmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZTcxMGJjMi0xZDZhLTRlNDYtOGY2Zi01MGU5
Nzg0NTIwYzYvNTNiZGI3NGU0NzViMmE0MzQ3MDM4ZWJhOGJmYTJlNDQyN2I2MDk3
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi27BDANBAIAAjAHAwUAKANA4DANBgkqhkiG9w0BAQsFAAOC
AQEAN52307bfXT8zNEq+k0IUaVYFczpQVHgDbQ9dFAL7yR0hc1SkUvcdeMFF4Sxt
acYYy8egdkrgMR1kIXkmmBlopS8TE90cTXNMrVEeBaBytf/CmeZ3nPOJ+rFDXAoS
DvrqKLxBeJoyjVSTIfpayhzMlbQN1dDnEUZJ4bJuVTmDniQHumvwIzVQPsDd4rvB
NKzANSjEQ3Wnbic/jvOcnhzDYBZAhqy6tgJDb2wpQNuJlm9vbrljj5ZmqN3hHJl8
KDcxFwXOHwi5TMmdQNJfoppVb2eyJfO800dHZF6fjyD7Ao9ozVaBhCH6ZwzpGMGk
uFFPqS8SbUuyAtC5lWB2fi7qsQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:06 2024 by rpki-client on console-ams.rpki-client.org