Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/f9d59bbcd1b009b6a7d89d0fa91d3768d532dc68.roa
File: f9d59bbcd1b009b6a7d89d0fa91d3768d532dc68.roa (raw, json)
Hash identifier: Nwv/gDvr3IysgFBQcZZl6684kkKteAZFiTZdSociprM=
Subject key identifier: D8:0D:78:35:8B:E4:20:E8:02:85:7E:E8:FD:18:8B:7B:31:DD:B1:03
Certificate issuer: /CN=62beb9fd789670f1c0912cb57347edb76d8534d3
Certificate serial: 1574D8
Authority key identifier: C5:F1:CE:D4:7E:F4:99:CC:17:CD:B0:C2:CE:13:E4:16:C2:0D:B5:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62beb9fd789670f1c0912cb57347edb76d8534d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/f9d59bbcd1b009b6a7d89d0fa91d3768d532dc68.roa
Signing time: Sat 25 Mar 2023 02:52:55 +0000
ROA not before: Tue 21 Mar 2023 21:07:24 +0000
ROA not after: Sun 23 Mar 2025 21:07:24 +0000
asID: 267815
IP address blocks: 45.173.72.0/24 maxlen: 24
45.173.73.0/24 maxlen: 24
45.173.74.0/24 maxlen: 24
45.173.75.0/24 maxlen: 24
2803:b060::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1406168 (0x1574d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62beb9fd789670f1c0912cb57347edb76d8534d3
Validity
Not Before: Mar 21 21:07:24 2023 GMT
Not After : Mar 23 21:07:24 2025 GMT
Subject: CN=f9d59bbcd1b009b6a7d89d0fa91d3768d532dc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cc:65:0a:54:97:35:0c:7c:43:30:34:fe:81:
ea:b9:36:cd:3c:5e:20:25:9f:c4:b3:af:14:d2:bc:
9b:10:7d:be:21:59:c6:46:71:35:f7:a8:aa:b4:4c:
31:f1:27:d2:a9:39:ac:da:70:12:e4:fd:52:da:0f:
b4:64:b8:32:af:b7:df:39:42:b8:5b:c4:72:40:b3:
24:14:e5:c0:b5:c0:84:61:9b:e4:93:85:e2:dd:3e:
83:f9:80:bb:ba:bd:2f:20:b6:96:ed:e3:44:de:28:
b9:5c:35:a8:ad:2f:ee:9a:3b:fb:aa:fe:f9:8c:a2:
83:a4:dc:04:9a:15:97:88:3b:a1:a7:46:48:55:ff:
79:71:a8:1e:64:b2:bc:c2:4b:a5:69:6c:05:1c:29:
47:61:c8:10:a4:da:04:36:88:79:5b:38:16:c7:c8:
5b:20:97:e7:6a:4b:30:c5:90:a4:5a:62:1c:84:fa:
ee:04:b3:4b:bc:80:6d:46:be:de:0d:7a:e7:32:e2:
64:04:16:48:fd:a8:ac:ae:03:32:18:92:f0:0b:af:
cd:f1:72:87:60:3b:1d:80:fc:4b:35:58:75:d2:d1:
58:3c:26:4c:dc:c6:17:6a:3e:43:27:9b:27:42:39:
a2:d8:e5:c1:e5:46:5d:6d:4b:57:db:86:3f:6a:96:
bd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0D:78:35:8B:E4:20:E8:02:85:7E:E8:FD:18:8B:7B:31:DD:B1:03
X509v3 Authority Key Identifier:
keyid:C5:F1:CE:D4:7E:F4:99:CC:17:CD:B0:C2:CE:13:E4:16:C2:0D:B5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62beb9fd789670f1c0912cb57347edb76d8534d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/f9d59bbcd1b009b6a7d89d0fa91d3768d532dc68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/62beb9fd789670f1c0912cb57347edb76d8534d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.72.0/22
IPv6:
2803:b060::/32
Signature Algorithm: sha256WithRSAEncryption
73:4e:13:2f:5e:96:84:78:3d:74:9e:59:7a:3e:f2:5c:43:29:
51:44:79:c2:af:bb:65:80:9b:c8:f7:a9:83:0e:da:3b:11:cb:
92:2e:88:53:0a:fd:c8:1c:89:ff:46:f8:a1:93:a7:ae:8f:ca:
c3:0a:35:f8:9d:d1:4a:57:4c:8b:fd:4c:f1:93:11:b4:f5:fc:
20:f3:94:51:9c:2b:60:5a:a1:d1:ae:4b:8a:0e:14:c3:b3:c0:
e9:cf:b0:9f:c1:e9:56:ca:41:94:c9:b2:81:0c:13:2f:aa:db:
c3:28:56:5b:55:70:4d:8b:fb:34:27:92:f5:5e:ba:53:ca:d7:
5c:79:7e:bc:a4:ac:57:17:1a:de:45:b7:ae:16:9b:29:b4:fa:
c4:8c:b7:1d:70:4d:15:05:96:27:eb:37:ad:f4:c6:68:15:44:
99:58:96:48:de:2c:c7:2a:82:4c:0e:03:8a:98:cf:46:5f:5c:
7a:20:db:5b:49:c1:3f:48:e6:f0:6d:38:cd:4b:ea:50:53:3b:
31:91:4d:97:f0:b6:73:b0:17:b7:77:d2:3f:53:a6:03:17:2b:
79:cf:25:aa:51:b3:a8:19:96:9f:28:f3:d9:2c:a9:80:f7:63:
5f:ef:71:3c:bb:7a:b5:ba:0c:ec:11:f0:26:95:b0:d5:31:e5:
b8:b0:25:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDFXTYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYy
YmViOWZkNzg5NjcwZjFjMDkxMmNiNTczNDdlZGI3NmQ4NTM0ZDMwHhcNMjMwMzIx
MjEwNzI0WhcNMjUwMzIzMjEwNzI0WjAzMTEwLwYDVQQDEyhmOWQ1OWJiY2QxYjAw
OWI2YTdkODlkMGZhOTFkMzc2OGQ1MzJkYzY4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlcxlClSXNQx8QzA0/oHquTbNPF4gJZ/Es68U0rybEH2+IVnG
RnE196iqtEwx8SfSqTms2nAS5P1S2g+0ZLgyr7ffOUK4W8RyQLMkFOXAtcCEYZvk
k4Xi3T6D+YC7ur0vILaW7eNE3ii5XDWorS/umjv7qv75jKKDpNwEmhWXiDuhp0ZI
Vf95cageZLK8wkulaWwFHClHYcgQpNoENoh5WzgWx8hbIJfnakswxZCkWmIchPru
BLNLvIBtRr7eDXrnMuJkBBZI/aisrgMyGJLwC6/N8XKHYDsdgPxLNVh10tFYPCZM
3MYXaj5DJ5snQjmi2OXB5UZdbUtX24Y/apa9LwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFNgNeDWL5CDoAoV+6P0Yi3sx3bEDMB8GA1UdIwQYMBaAFMXxztR+9JnMF82w
ws4T5BbCDbVWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjJiZWI5
ZmQ3ODk2NzBmMWMwOTEyY2I1NzM0N2VkYjc2ZDg1MzRkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTA0MzJmYWEtN2E1Mi00YzRiLTgzYzgtYWEyMGUz
ZWExOGEyL2Y5ZDU5YmJjZDFiMDA5YjZhN2Q4OWQwZmE5MWQzNzY4ZDUzMmRjNjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MDQzMmZhYS03YTUyLTRjNGItODNjOC1hYTIw
ZTNlYTE4YTIvNjJiZWI5ZmQ3ODk2NzBmMWMwOTEyY2I1NzM0N2VkYjc2ZDg1MzRk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2tSDANBAIAAjAHAwUAKAOwYDANBgkqhkiG9w0BAQsFAAOC
AQEAc04TL16WhHg9dJ5Zej7yXEMpUUR5wq+7ZYCbyPepgw7aOxHLki6IUwr9yByJ
/0b4oZOnro/Kwwo1+J3RSldMi/1M8ZMRtPX8IPOUUZwrYFqh0a5Lig4Uw7PA6c+w
n8HpVspBlMmygQwTL6rbwyhWW1VwTYv7NCeS9V66U8rXXHl+vKSsVxca3kW3rhab
KbT6xIy3HXBNFQWWJ+s3rfTGaBVEmViWSN4sxyqCTA4DipjPRl9ceiDbW0nBP0jm
8G04zUvqUFM7MZFNl/C2c7AXt3fSP1OmAxcrec8lqlGzqBmWnyjz2SypgPdjX+9x
PLt6tboM7BHwJpWw1THluLAljw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org