Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54d79dd1-b832-45b2-8089-510d2188f353/6af4e4e243bb955809e4f5d291787fa0ccbf3878.roa
File: 6af4e4e243bb955809e4f5d291787fa0ccbf3878.roa (raw, json)
Hash identifier: culp9DmOCphjzPK0wci5b1JVHNU9WDC2EBjVIt6Eytg=
Subject key identifier: AD:FE:C2:62:57:9B:87:C6:65:89:82:C6:B0:FF:5D:DB:D7:72:5A:B1
Certificate issuer: /CN=5f064c090ca2fcd0a812fe3a5a67124da7aa7dfb
Certificate serial: 0C8D77
Authority key identifier: 51:23:63:D1:74:CB:1D:34:BB:21:6B:0C:5F:91:05:0B:21:0E:AE:11
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f064c090ca2fcd0a812fe3a5a67124da7aa7dfb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/54d79dd1-b832-45b2-8089-510d2188f353/6af4e4e243bb955809e4f5d291787fa0ccbf3878.roa
Signing time: Wed 24 Mar 2021 14:30:47 +0000
ROA not before: Wed 24 Mar 2021 14:30:47 +0000
ROA not after: Tue 24 Mar 2026 14:30:47 +0000
asID: 266883
IP address blocks: 45.161.8.0/22 maxlen: 24
2803:faa0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 822647 (0xc8d77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f064c090ca2fcd0a812fe3a5a67124da7aa7dfb
Validity
Not Before: Mar 24 14:30:47 2021 GMT
Not After : Mar 24 14:30:47 2026 GMT
Subject: CN=6af4e4e243bb955809e4f5d291787fa0ccbf3878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9d:ce:b4:c4:84:69:d3:87:5d:9e:e7:8f:ca:
83:45:0b:28:23:90:d4:71:c9:6e:7d:5f:41:29:0c:
40:d0:43:fa:f0:0d:d5:1e:9c:4d:ae:c5:77:f4:77:
14:a2:6c:55:51:dd:cb:3d:7b:8d:01:2b:d9:38:8d:
a1:9b:58:38:b8:be:29:92:32:dd:3d:65:ca:3f:1d:
86:1b:d9:a3:5b:5d:dc:41:ae:e5:c1:69:22:34:92:
cb:44:9d:54:e5:eb:e5:b9:f6:e5:c0:f3:bd:8a:b0:
81:62:47:df:ea:09:3f:ef:a6:21:a2:f0:bb:af:3d:
35:4f:89:03:e6:9e:13:03:4c:98:e5:3d:ee:e9:29:
cc:a7:c9:1b:e7:11:9b:09:60:69:b7:0d:40:45:c2:
75:5b:4f:b4:df:79:e6:15:43:ae:ab:e6:6b:a7:f1:
a6:28:fb:fd:1d:d0:8d:3c:02:5a:58:45:a4:23:56:
b6:4b:a7:64:1d:21:5d:5f:ac:ff:9b:d4:c3:36:cc:
a8:75:ab:f6:7a:af:a5:97:ab:62:b4:3f:fd:d1:87:
1d:b2:ef:3e:42:73:2a:23:77:e2:df:93:5b:61:8b:
cf:58:2f:af:8a:7b:e1:86:d9:40:ae:28:35:ff:eb:
ae:38:16:b2:c3:d6:9e:f4:7d:7e:53:18:08:ee:e0:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FE:C2:62:57:9B:87:C6:65:89:82:C6:B0:FF:5D:DB:D7:72:5A:B1
X509v3 Authority Key Identifier:
keyid:51:23:63:D1:74:CB:1D:34:BB:21:6B:0C:5F:91:05:0B:21:0E:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f064c090ca2fcd0a812fe3a5a67124da7aa7dfb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54d79dd1-b832-45b2-8089-510d2188f353/6af4e4e243bb955809e4f5d291787fa0ccbf3878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/54d79dd1-b832-45b2-8089-510d2188f353/5f064c090ca2fcd0a812fe3a5a67124da7aa7dfb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.8.0/22
IPv6:
2803:faa0::/32
Signature Algorithm: sha256WithRSAEncryption
95:bf:a5:0f:23:03:1e:2b:96:6e:4d:62:b5:1d:89:76:4c:23:
43:d4:77:c4:42:b2:60:6f:00:71:27:a5:65:e7:9a:d9:df:a0:
2d:16:52:3e:20:e0:ab:68:ca:25:2c:29:4b:a8:a4:a7:30:29:
db:01:28:0b:f8:3f:d3:46:2a:14:8b:fb:60:c7:47:4d:97:be:
c8:3f:78:c0:2c:df:6f:5c:c7:15:44:7e:c8:66:5f:f9:fe:86:
c1:03:d0:1d:e9:bd:b3:5c:97:b3:2a:03:e7:27:a5:d3:75:05:
db:7a:aa:57:91:d0:40:f1:5d:cb:5a:7b:c8:4d:30:6a:d1:61:
c2:54:73:e0:fc:0a:46:34:d3:fe:49:24:30:c8:63:31:73:e5:
13:5d:05:f5:6e:18:5f:2c:5c:83:db:ae:31:be:d8:0c:cf:a7:
94:25:cc:fa:16:88:41:cb:20:ac:f3:97:c7:0c:65:ca:56:8b:
ee:23:c6:e6:fd:d7:3b:ae:61:0f:b1:d2:e6:3c:1c:0e:b1:75:
3e:03:06:fd:dc:20:5d:6b:fd:6d:9f:54:d4:2d:2b:ff:5d:12:
e1:c4:09:0c:25:2d:72:b8:be:a5:a9:48:ac:4d:5c:0e:de:a6:
40:95:0c:0c:80:0e:26:b6:04:00:ca:17:86:6f:d2:2d:96:f8:
64:d7:eb:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDI13MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVm
MDY0YzA5MGNhMmZjZDBhODEyZmUzYTVhNjcxMjRkYTdhYTdkZmIwHhcNMjEwMzI0
MTQzMDQ3WhcNMjYwMzI0MTQzMDQ3WjAzMTEwLwYDVQQDEyg2YWY0ZTRlMjQzYmI5
NTU4MDllNGY1ZDI5MTc4N2ZhMGNjYmYzODc4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi53OtMSEadOHXZ7nj8qDRQsoI5DUcclufV9BKQxA0EP68A3V
HpxNrsV39HcUomxVUd3LPXuNASvZOI2hm1g4uL4pkjLdPWXKPx2GG9mjW13cQa7l
wWkiNJLLRJ1U5evlufblwPO9irCBYkff6gk/76YhovC7rz01T4kD5p4TA0yY5T3u
6SnMp8kb5xGbCWBptw1ARcJ1W0+033nmFUOuq+Zrp/GmKPv9HdCNPAJaWEWkI1a2
S6dkHSFdX6z/m9TDNsyodav2eq+ll6titD/90Ycdsu8+QnMqI3fi35NbYYvPWC+v
invhhtlArig1/+uuOBayw9ae9H1+UxgI7uCBMQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFK3+wmJXm4fGZYmCxrD/XdvXclqxMB8GA1UdIwQYMBaAFFEjY9F0yx00uyFr
DF+RBQshDq4RMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWYwNjRj
MDkwY2EyZmNkMGE4MTJmZTNhNWE2NzEyNGRhN2FhN2RmYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTRkNzlkZDEtYjgzMi00NWIyLTgwODktNTEwZDIx
ODhmMzUzLzZhZjRlNGUyNDNiYjk1NTgwOWU0ZjVkMjkxNzg3ZmEwY2NiZjM4Nzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NGQ3OWRkMS1iODMyLTQ1YjItODA4OS01MTBk
MjE4OGYzNTMvNWYwNjRjMDkwY2EyZmNkMGE4MTJmZTNhNWE2NzEyNGRhN2FhN2Rm
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2hCDANBAIAAjAHAwUAKAP6oDANBgkqhkiG9w0BAQsFAAOC
AQEAlb+lDyMDHiuWbk1itR2JdkwjQ9R3xEKyYG8AcSelZeea2d+gLRZSPiDgq2jK
JSwpS6ikpzAp2wEoC/g/00YqFIv7YMdHTZe+yD94wCzfb1zHFUR+yGZf+f6GwQPQ
Hem9s1yXsyoD5yel03UF23qqV5HQQPFdy1p7yE0watFhwlRz4PwKRjTT/kkkMMhj
MXPlE10F9W4YXyxcg9uuMb7YDM+nlCXM+haIQcsgrPOXxwxlylaL7iPG5v3XO65h
D7HS5jwcDrF1PgMG/dwgXWv9bZ9U1C0r/10S4cQJDCUtcri+palIrE1cDt6mQJUM
DIAOJrYEAMoXhm/SLZb4ZNfrTg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org