Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3c4caea2-569f-4678-a145-28e3fd234454/cca3338fdcfec5ab1205fc9d6071908f04222081.roa
File: cca3338fdcfec5ab1205fc9d6071908f04222081.roa (raw, json)
Hash identifier: ElSpETs82DArwjufh1PetAM67sCT/vwFAa6wT8an+wc=
Subject key identifier: 4C:46:18:1F:43:35:E7:A8:86:2D:F7:B2:C3:79:6A:32:EE:ED:07:08
Certificate issuer: /CN=23604b73c22ca1f7419d3ca4dccb9ce28f4435a8
Certificate serial: 2107CE
Authority key identifier: D7:E8:15:32:35:AE:58:6B:50:47:7F:AC:6D:E7:E4:FA:79:9E:6C:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23604b73c22ca1f7419d3ca4dccb9ce28f4435a8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3c4caea2-569f-4678-a145-28e3fd234454/cca3338fdcfec5ab1205fc9d6071908f04222081.roa
Signing time: Tue 11 Jul 2023 02:34:28 +0000
ROA not before: Mon 10 Jul 2023 02:34:28 +0000
ROA not after: Fri 11 Jul 2025 02:34:28 +0000
asID: 264732
IP address blocks: 45.177.144.0/22 maxlen: 25
170.233.68.0/22 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164686 (0x2107ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23604b73c22ca1f7419d3ca4dccb9ce28f4435a8
Validity
Not Before: Jul 10 02:34:28 2023 GMT
Not After : Jul 11 02:34:28 2025 GMT
Subject: CN=cca3338fdcfec5ab1205fc9d6071908f04222081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:cb:d4:0a:54:79:31:c1:74:55:8f:df:99:
14:f3:d2:d1:26:4c:6f:3d:1b:e6:70:28:ac:80:92:
ad:a3:28:0c:cc:b9:85:ce:c7:92:c8:85:ea:99:58:
f9:b2:4f:92:9e:a1:b1:dc:b9:8e:ec:d6:74:3e:bc:
f1:af:e2:f1:0f:cc:3c:a4:58:16:e3:fe:71:fb:43:
94:8f:b3:38:b7:b9:4c:89:31:53:e2:33:18:22:72:
d1:b6:0b:04:4f:33:6f:f8:f1:74:bc:6b:1f:1c:a9:
11:f9:32:15:6a:ae:c9:b3:b0:7a:89:f8:b1:55:9c:
7f:48:0d:5c:4f:ca:e3:93:d0:38:86:46:38:66:85:
72:db:17:d5:47:5b:17:56:c7:4d:f7:48:94:79:ba:
9d:31:b4:17:a1:e2:ec:de:95:a3:f4:99:ec:e0:e0:
a6:05:2b:be:b6:7f:41:7a:a5:b4:b0:e4:d7:c8:4f:
9c:8d:99:fb:ed:d1:0a:2f:47:06:67:65:a1:87:a5:
c7:35:1e:ae:f5:af:74:81:04:c6:bf:58:e9:5b:36:
95:0c:5c:b5:45:02:c7:81:5e:cf:57:9e:ec:19:a6:
be:59:b3:8a:1b:af:de:17:7a:c7:16:8c:50:7b:af:
ed:09:1d:22:00:fe:6d:b0:94:e4:1b:44:93:d4:8b:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:46:18:1F:43:35:E7:A8:86:2D:F7:B2:C3:79:6A:32:EE:ED:07:08
X509v3 Authority Key Identifier:
keyid:D7:E8:15:32:35:AE:58:6B:50:47:7F:AC:6D:E7:E4:FA:79:9E:6C:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23604b73c22ca1f7419d3ca4dccb9ce28f4435a8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3c4caea2-569f-4678-a145-28e3fd234454/cca3338fdcfec5ab1205fc9d6071908f04222081.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3c4caea2-569f-4678-a145-28e3fd234454/23604b73c22ca1f7419d3ca4dccb9ce28f4435a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.177.144.0/22
170.233.68.0/22
Signature Algorithm: sha256WithRSAEncryption
84:12:24:48:89:55:17:dd:4d:94:1e:3f:0d:d2:a8:34:a2:37:
c0:47:38:e4:b7:d8:e2:6b:bc:cd:87:b9:95:e4:f6:79:b8:ca:
27:2d:f7:16:8b:21:c4:5c:68:eb:6c:5c:1d:b4:bd:54:ec:d4:
f5:df:d1:ad:92:f6:60:1b:ce:11:ae:ae:6c:2b:41:0d:49:49:
62:a1:a7:80:7d:23:ed:cf:8d:c0:7d:f6:05:b5:c5:4d:d9:3f:
b0:c3:10:a9:36:78:9a:f4:be:d1:9f:f2:46:7a:8f:4c:8d:09:
21:d8:6d:8b:2a:7a:83:0c:a4:04:00:ad:10:7b:66:2b:31:81:
63:0c:dd:28:4d:7b:ea:79:fe:76:1e:e6:d5:5b:9d:82:ec:5c:
4a:bf:f0:a0:fe:a1:77:e0:b5:36:dd:41:4e:ac:aa:43:4b:41:
70:3d:51:72:e0:61:1c:fd:67:cf:8d:44:69:63:81:75:9d:e6:
77:ca:9d:01:ef:43:86:ef:a5:de:7a:81:5f:17:28:e6:84:7a:
9a:24:59:bf:a9:7c:47:9e:66:6c:85:db:a0:c3:f1:60:10:aa:
0b:5d:d9:6c:57:c8:f5:49:8b:8a:20:55:57:ba:89:57:c1:4a:
a6:86:b5:86:ba:ae:55:c1:4d:ea:0f:42:38:2b:a5:51:32:ad:
12:3a:36:37
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDIQfOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIz
NjA0YjczYzIyY2ExZjc0MTlkM2NhNGRjY2I5Y2UyOGY0NDM1YTgwHhcNMjMwNzEw
MDIzNDI4WhcNMjUwNzExMDIzNDI4WjAzMTEwLwYDVQQDEyhjY2EzMzM4ZmRjZmVj
NWFiMTIwNWZjOWQ2MDcxOTA4ZjA0MjIyMDgxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnT7L1ApUeTHBdFWP35kU89LRJkxvPRvmcCisgJKtoygMzLmF
zseSyIXqmVj5sk+SnqGx3LmO7NZ0Przxr+LxD8w8pFgW4/5x+0OUj7M4t7lMiTFT
4jMYInLRtgsETzNv+PF0vGsfHKkR+TIVaq7Js7B6ifixVZx/SA1cT8rjk9A4hkY4
ZoVy2xfVR1sXVsdN90iUebqdMbQXoeLs3pWj9Jns4OCmBSu+tn9BeqW0sOTXyE+c
jZn77dEKL0cGZ2Whh6XHNR6u9a90gQTGv1jpWzaVDFy1RQLHgV7PV57sGaa+WbOK
G6/eF3rHFoxQe6/tCR0iAP5tsJTkG0ST1IsRkQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFExGGB9DNeeohi33ssN5ajLu7QcIMB8GA1UdIwQYMBaAFNfoFTI1rlhrUEd/
rG3n5Pp5nmw+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjM2MDRi
NzNjMjJjYTFmNzQxOWQzY2E0ZGNjYjljZTI4ZjQ0MzVhOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2M0Y2FlYTItNTY5Zi00Njc4LWExNDUtMjhlM2Zk
MjM0NDU0L2NjYTMzMzhmZGNmZWM1YWIxMjA1ZmM5ZDYwNzE5MDhmMDQyMjIwODEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zYzRjYWVhMi01NjlmLTQ2NzgtYTE0NS0yOGUz
ZmQyMzQ0NTQvMjM2MDRiNzNjMjJjYTFmNzQxOWQzY2E0ZGNjYjljZTI4ZjQ0MzVh
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAi2xkAMEAqrpRDANBgkqhkiG9w0BAQsFAAOCAQEAhBIkSIlV
F91NlB4/DdKoNKI3wEc45LfY4mu8zYe5leT2ebjKJy33FoshxFxo62xcHbS9VOzU
9d/RrZL2YBvOEa6ubCtBDUlJYqGngH0j7c+NwH32BbXFTdk/sMMQqTZ4mvS+0Z/y
RnqPTI0JIdhtiyp6gwykBACtEHtmKzGBYwzdKE176nn+dh7m1VudguxcSr/woP6h
d+C1Nt1BTqyqQ0tBcD1RcuBhHP1nz41EaWOBdZ3md8qdAe9Dhu+l3nqBXxco5oR6
miRZv6l8R55mbIXboMPxYBCqC13ZbFfI9UmLiiBVV7qJV8FKpoa1hrquVcFN6g9C
OCulUTKtEjo2Nw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org