Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/a067e3cfe266fb33cea86b6c6685c1f994b842cf.roa
File: a067e3cfe266fb33cea86b6c6685c1f994b842cf.roa (raw, json)
Hash identifier: bzStXr35aausD9Q+2JefAFp/RPUo578MDxKFccaNeyg=
Subject key identifier: 7F:77:E0:52:E6:25:F4:A6:EF:32:FB:51:22:7C:6F:9D:BD:44:A4:8C
Certificate issuer: /CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
Certificate serial: 24823F
Authority key identifier: F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/a067e3cfe266fb33cea86b6c6685c1f994b842cf.roa
Signing time: Wed 31 Jan 2024 00:48:12 +0000
ROA not before: Wed 31 Jan 2024 00:48:12 +0000
ROA not after: Sat 31 Jan 2026 00:48:12 +0000
asID: 269893
IP address blocks: 45.190.86.0/24 maxlen: 24
2803:94e0::/32 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2392639 (0x24823f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
Validity
Not Before: Jan 31 00:48:12 2024 GMT
Not After : Jan 31 00:48:12 2026 GMT
Subject: CN=a067e3cfe266fb33cea86b6c6685c1f994b842cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:3f:96:6d:1c:f7:d5:aa:17:a3:26:4b:1c:
ce:13:46:4a:4e:7f:6f:f7:2d:f1:cb:01:da:7b:61:
eb:2d:00:30:15:46:7b:f0:05:57:59:51:91:83:bd:
57:3c:45:1b:de:dc:c4:ee:dd:d4:42:1b:39:c7:43:
d2:ba:fc:20:27:92:61:18:a5:9a:df:f4:55:21:eb:
dd:13:fc:f4:dd:9a:96:8d:78:e0:dd:f0:fe:fe:13:
b7:ea:2c:55:55:24:15:b6:5f:b4:d8:1c:f5:67:d1:
45:13:80:cc:2d:52:85:82:c4:6c:d2:6f:ba:42:47:
f2:16:95:f7:a0:93:67:96:6d:8a:f6:71:2f:20:71:
2d:eb:67:7d:1e:7c:02:97:33:e9:61:69:1a:16:b0:
98:77:3b:77:5e:c9:54:dd:4f:f7:a0:4b:46:bd:5f:
32:08:b1:28:20:37:8e:07:12:63:79:41:14:04:cd:
b1:7f:11:28:0f:a2:2d:dd:d0:88:52:d8:b5:79:cb:
fc:b3:d9:41:f3:3f:b0:ad:f3:4b:23:95:10:9c:ab:
ec:59:e1:53:46:b2:99:10:af:a3:d5:c0:2b:3e:a5:
a7:6e:42:1b:ae:fa:e4:f8:01:d0:b6:c8:2a:b3:2f:
b1:49:ae:89:08:da:10:8f:f1:24:52:fa:80:67:81:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:77:E0:52:E6:25:F4:A6:EF:32:FB:51:22:7C:6F:9D:BD:44:A4:8C
X509v3 Authority Key Identifier:
keyid:F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/a067e3cfe266fb33cea86b6c6685c1f994b842cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.190.86.0/24
IPv6:
2803:94e0::/32
Signature Algorithm: sha256WithRSAEncryption
20:45:0d:1b:c8:92:9c:a7:08:b0:c8:0a:31:28:96:bf:08:b9:
da:a3:dc:1c:a4:7e:c4:23:52:45:78:d9:20:7f:69:d9:c1:3a:
a7:42:ed:c7:00:c1:dd:ba:82:4c:36:4d:25:41:92:18:48:b1:
08:a6:49:bf:b0:d4:68:23:e5:5b:c9:45:ff:96:59:f5:ed:0a:
28:65:13:de:a9:3a:54:5b:d3:49:c6:c0:ca:92:0f:b3:f8:a0:
a1:b9:8e:a3:c9:cc:b4:a6:ff:e4:fc:16:08:d8:91:0a:c2:a9:
fa:f4:a0:0a:5d:cd:42:24:d7:d5:70:69:8d:bf:e5:63:4f:2d:
2f:de:99:e4:ec:65:f8:6f:4c:69:79:a3:a2:8a:50:68:b5:b9:
b9:7b:00:71:3b:e1:e7:1e:df:0c:d4:78:a9:05:0e:bb:73:49:
df:af:59:47:33:07:0a:63:b5:f7:57:be:36:09:89:86:c1:ca:
0a:9a:75:78:8c:26:60:3c:47:02:16:53:82:07:d8:17:74:0e:
f8:10:df:d3:4b:93:70:14:74:66:89:e8:e3:b6:96:9b:bc:d3:
96:26:8d:d9:67:25:8d:78:8e:04:95:56:5e:27:a5:85:d6:3a:
6a:fa:b2:bb:82:9b:71:08:8a:6d:b0:22:2d:02:69:ef:4b:33:
c4:45:0a:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDJII/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgw
YmRiODcwYzRmN2QyZjkxNTQ0MDFiYmRjNzViNmEyMTBlZTNlY2YwHhcNMjQwMTMx
MDA0ODEyWhcNMjYwMTMxMDA0ODEyWjAzMTEwLwYDVQQDEyhhMDY3ZTNjZmUyNjZm
YjMzY2VhODZiNmM2Njg1YzFmOTk0Yjg0MmNmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwsM/lm0c99WqF6MmSxzOE0ZKTn9v9y3xywHae2HrLQAwFUZ7
8AVXWVGRg71XPEUb3tzE7t3UQhs5x0PSuvwgJ5JhGKWa3/RVIevdE/z03ZqWjXjg
3fD+/hO36ixVVSQVtl+02Bz1Z9FFE4DMLVKFgsRs0m+6QkfyFpX3oJNnlm2K9nEv
IHEt62d9HnwClzPpYWkaFrCYdzt3XslU3U/3oEtGvV8yCLEoIDeOBxJjeUEUBM2x
fxEoD6It3dCIUti1ecv8s9lB8z+wrfNLI5UQnKvsWeFTRrKZEK+j1cArPqWnbkIb
rvrk+AHQtsgqsy+xSa6JCNoQj/EkUvqAZ4GcIwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFH934FLmJfSm7zL7USJ8b529RKSMMB8GA1UdIwQYMBaAFPglrcNh9pRVJdlr
W17rb6zTZz0rMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODBiZGI4
NzBjNGY3ZDJmOTE1NDQwMWJiZGM3NWI2YTIxMGVlM2VjZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2YzY2M5YmYtMzI4ZS00Zjc4LTljMjUtNzc3Njkx
NDhhMzRmL2EwNjdlM2NmZTI2NmZiMzNjZWE4NmI2YzY2ODVjMWY5OTRiODQyY2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zZjNjYzliZi0zMjhlLTRmNzgtOWMyNS03Nzc2
OTE0OGEzNGYvODBiZGI4NzBjNGY3ZDJmOTE1NDQwMWJiZGM3NWI2YTIxMGVlM2Vj
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAC2+VjANBAIAAjAHAwUAKAOU4DANBgkqhkiG9w0BAQsFAAOC
AQEAIEUNG8iSnKcIsMgKMSiWvwi52qPcHKR+xCNSRXjZIH9p2cE6p0LtxwDB3bqC
TDZNJUGSGEixCKZJv7DUaCPlW8lF/5ZZ9e0KKGUT3qk6VFvTScbAypIPs/igobmO
o8nMtKb/5PwWCNiRCsKp+vSgCl3NQiTX1XBpjb/lY08tL96Z5Oxl+G9MaXmjoopQ
aLW5uXsAcTvh5x7fDNR4qQUOu3NJ369ZRzMHCmO191e+NgmJhsHKCpp1eIwmYDxH
AhZTggfYF3QO+BDf00uTcBR0Zono47aWm7zTliaN2WcljXiOBJVWXielhdY6avqy
u4KbcQiKbbAiLQJp70szxEUK1Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org