Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dd887bd-0ea8-459b-b945-daea7ada6183/88f36a1cd254eccf4b21426fc277a55d2022292e.roa
File: 88f36a1cd254eccf4b21426fc277a55d2022292e.roa (raw, json)
Hash identifier: d9d1oBpGVWDQHlja069EBKkaM6tf6siTAlQl+aYuLtQ=
Subject key identifier: 9D:3A:8A:99:62:05:94:B5:BE:93:C1:50:BB:F4:6B:F9:01:87:45:E8
Certificate issuer: /CN=f48a793247cd1f645923603f197e3d287d051040
Certificate serial: 0C368B
Authority key identifier: 79:3A:BC:6F:D4:8E:32:89:36:F7:E8:BA:DB:7E:2A:91:8E:39:B9:8A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f48a793247cd1f645923603f197e3d287d051040.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4dd887bd-0ea8-459b-b945-daea7ada6183/88f36a1cd254eccf4b21426fc277a55d2022292e.roa
Signing time: Wed 24 Mar 2021 14:46:10 +0000
ROA not before: Wed 24 Mar 2021 14:46:10 +0000
ROA not after: Tue 24 Mar 2026 14:46:10 +0000
asID: 267800
IP address blocks: 45.172.8.0/24 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 800395 (0xc368b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48a793247cd1f645923603f197e3d287d051040
Validity
Not Before: Mar 24 14:46:10 2021 GMT
Not After : Mar 24 14:46:10 2026 GMT
Subject: CN=88f36a1cd254eccf4b21426fc277a55d2022292e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:50:8d:14:56:a8:b4:ae:2c:49:3b:ea:b0:
99:e8:5e:95:27:b6:78:12:db:6f:ae:17:22:94:1e:
34:bd:70:63:06:06:96:4a:13:77:bb:64:30:d0:df:
67:62:24:8d:d5:e5:28:3d:2a:b4:94:4a:9a:c3:eb:
65:ee:06:56:36:d3:98:e2:e4:c9:3f:c8:8f:06:58:
d0:ac:ea:65:a9:d8:08:ad:99:7d:44:84:e2:15:e1:
e5:97:b4:cf:39:5a:a4:d5:3d:06:8b:85:54:85:54:
92:8c:4d:30:2d:68:a2:c1:db:07:4f:71:0b:d2:be:
ed:5a:29:07:7b:f0:6b:64:e9:ed:85:19:5d:a0:37:
e6:63:a9:52:ce:03:1c:64:91:d6:c1:8f:19:18:40:
91:34:04:75:d9:70:c2:16:1f:44:78:55:2f:ac:fe:
73:2d:ec:ad:0f:63:80:57:6e:68:d3:a2:09:fd:b8:
09:e8:bc:c1:06:39:60:5e:4e:2b:25:e0:35:10:06:
fb:c9:c7:20:86:d9:43:c1:4b:6b:f8:c5:bd:d7:ab:
7a:48:b9:59:63:13:e9:10:0e:f7:23:d9:c9:29:10:
36:39:77:f0:2b:07:bf:8a:45:53:6b:1c:cc:ee:b5:
da:c6:0b:18:1f:69:0e:ed:7d:5a:03:bc:1c:34:a5:
dc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3A:8A:99:62:05:94:B5:BE:93:C1:50:BB:F4:6B:F9:01:87:45:E8
X509v3 Authority Key Identifier:
keyid:79:3A:BC:6F:D4:8E:32:89:36:F7:E8:BA:DB:7E:2A:91:8E:39:B9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f48a793247cd1f645923603f197e3d287d051040.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dd887bd-0ea8-459b-b945-daea7ada6183/88f36a1cd254eccf4b21426fc277a55d2022292e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4dd887bd-0ea8-459b-b945-daea7ada6183/f48a793247cd1f645923603f197e3d287d051040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.8.0/24
Signature Algorithm: sha256WithRSAEncryption
15:9c:1b:71:c8:13:a2:b1:13:b0:8c:e8:0e:f6:5a:06:de:d8:
c3:3d:9f:16:79:37:79:f1:ac:ad:9f:d1:5f:2c:8e:46:ce:00:
76:6d:56:59:7d:9a:bd:eb:a3:14:1b:39:9b:f6:76:d5:6c:40:
9e:6e:cb:a3:a0:86:60:38:bd:8f:1f:e6:2b:fb:df:29:39:0f:
57:4e:c4:74:34:ef:b7:f3:aa:3d:39:f0:ae:85:43:bd:f4:d4:
9c:67:7d:78:a1:47:79:ee:ac:5a:1c:bb:c9:f8:58:e1:41:70:
62:c2:dc:16:e4:ce:20:44:c4:ae:6e:c2:24:5a:7e:fd:33:52:
e4:b4:b6:05:cb:c1:7c:62:3f:64:aa:bb:51:57:88:05:43:73:
5d:ab:b5:b8:5c:39:2f:4d:8f:48:1c:c7:c0:c4:3b:50:c8:e7:
11:2e:ea:72:f5:e8:fc:f0:df:c6:06:21:2d:1b:52:a5:b5:82:
27:30:51:04:95:67:4b:0b:60:e8:8f:1b:b5:8d:d4:b3:0e:43:
69:d0:c5:85:ae:a2:2c:f1:24:57:45:63:72:60:9a:92:7c:85:
c6:0d:d4:53:00:77:f5:99:8f:85:92:bc:ca:cb:d3:0b:12:d5:
fc:9c:d8:ce:d1:07:b3:7c:08:c6:1c:97:2c:a6:cc:3c:3d:75:
38:e5:83:a1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDDaLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY0
OGE3OTMyNDdjZDFmNjQ1OTIzNjAzZjE5N2UzZDI4N2QwNTEwNDAwHhcNMjEwMzI0
MTQ0NjEwWhcNMjYwMzI0MTQ0NjEwWjAzMTEwLwYDVQQDEyg4OGYzNmExY2QyNTRl
Y2NmNGIyMTQyNmZjMjc3YTU1ZDIwMjIyOTJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArGtQjRRWqLSuLEk76rCZ6F6VJ7Z4EttvrhcilB40vXBjBgaW
ShN3u2Qw0N9nYiSN1eUoPSq0lEqaw+tl7gZWNtOY4uTJP8iPBljQrOplqdgIrZl9
RITiFeHll7TPOVqk1T0Gi4VUhVSSjE0wLWiiwdsHT3EL0r7tWikHe/BrZOnthRld
oDfmY6lSzgMcZJHWwY8ZGECRNAR12XDCFh9EeFUvrP5zLeytD2OAV25o06IJ/bgJ
6LzBBjlgXk4rJeA1EAb7yccghtlDwUtr+MW916t6SLlZYxPpEA73I9nJKRA2OXfw
Kwe/ikVTaxzM7rXaxgsYH2kO7X1aA7wcNKXcNwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ06ipliBZS1vpPBULv0a/kBh0XoMB8GA1UdIwQYMBaAFHk6vG/UjjKJNvfo
utt+KpGOObmKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjQ4YTc5
MzI0N2NkMWY2NDU5MjM2MDNmMTk3ZTNkMjg3ZDA1MTA0MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGRkODg3YmQtMGVhOC00NTliLWI5NDUtZGFlYTdh
ZGE2MTgzLzg4ZjM2YTFjZDI1NGVjY2Y0YjIxNDI2ZmMyNzdhNTVkMjAyMjI5MmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZGQ4ODdiZC0wZWE4LTQ1OWItYjk0NS1kYWVh
N2FkYTYxODMvZjQ4YTc5MzI0N2NkMWY2NDU5MjM2MDNmMTk3ZTNkMjg3ZDA1MTA0
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2sCDANBgkqhkiG9w0BAQsFAAOCAQEAFZwbccgTorETsIzo
DvZaBt7Ywz2fFnk3efGsrZ/RXyyORs4Adm1WWX2aveujFBs5m/Z21WxAnm7Lo6CG
YDi9jx/mK/vfKTkPV07EdDTvt/OqPTnwroVDvfTUnGd9eKFHee6sWhy7yfhY4UFw
YsLcFuTOIETErm7CJFp+/TNS5LS2BcvBfGI/ZKq7UVeIBUNzXau1uFw5L02PSBzH
wMQ7UMjnES7qcvXo/PDfxgYhLRtSpbWCJzBRBJVnSwtg6I8btY3Usw5DadDFha6i
LPEkV0VjcmCaknyFxg3UUwB39ZmPhZK8ysvTCxLV/JzYztEHs3wIxhyXLKbMPD11
OOWDoQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org