Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/28f15ac93be6cc7ae5ae7106937f329a7bdb4578.roa
File: 28f15ac93be6cc7ae5ae7106937f329a7bdb4578.roa (raw, json)
Hash identifier: qmu8q3baREfPazHCy+b+DYA8eS4HPLwZpYXQdDmfOMY=
Subject key identifier: AA:B0:28:8F:21:EA:11:71:52:0D:06:4C:74:C4:4C:4F:BE:39:51:13
Certificate issuer: /CN=1f65d1c37e495ab494edc3bad30b1a6d4f88e383
Certificate serial: 23F36A
Authority key identifier: 4D:2E:30:FD:EB:2F:B3:C6:6F:8F:67:26:09:36:9D:75:D9:DE:CF:52
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/28f15ac93be6cc7ae5ae7106937f329a7bdb4578.roa
Signing time: Tue 17 Oct 2023 20:19:25 +0000
ROA not before: Mon 16 Oct 2023 20:19:24 +0000
ROA not after: Fri 17 Oct 2025 20:19:24 +0000
asID: 264668
IP address blocks: 45.224.20.0/23 maxlen: 24
45.224.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2356074 (0x23f36a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f65d1c37e495ab494edc3bad30b1a6d4f88e383
Validity
Not Before: Oct 16 20:19:24 2023 GMT
Not After : Oct 17 20:19:24 2025 GMT
Subject: CN=28f15ac93be6cc7ae5ae7106937f329a7bdb4578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:db:b9:b8:9f:62:59:f0:1d:e2:d7:9c:5f:
14:05:ae:31:2c:1d:d2:9f:f9:36:ec:f6:50:30:ae:
55:60:6e:b2:bd:e4:32:b6:33:27:24:a1:73:1c:4b:
56:32:96:9a:c7:ca:35:7d:4c:33:03:04:d1:bb:93:
ca:9a:ab:63:02:c3:17:80:37:49:65:6e:15:7d:41:
00:ff:6f:82:f4:1f:d0:23:4f:1c:ae:5b:c1:a7:44:
3a:9f:01:26:f9:59:d4:a3:af:37:11:32:8c:f5:2b:
40:fa:85:4c:87:0b:ec:e7:1b:2f:c3:27:10:13:d7:
b9:99:5e:1e:a2:ec:f1:65:d9:d3:75:cd:7d:4a:a5:
a2:1c:48:13:d6:3c:eb:69:1e:d3:f7:23:7a:30:ca:
6c:40:f4:49:7b:63:06:eb:c0:ff:bd:9e:0f:5c:ed:
88:f1:3a:0b:de:c9:50:06:27:af:4e:5b:b4:7c:60:
85:a2:8a:ef:c5:77:25:c8:d6:ce:ad:b2:53:fe:6a:
af:59:eb:90:53:d2:ae:96:af:53:8e:34:c9:50:c5:
a9:7c:5d:72:0e:c9:63:41:62:12:de:7b:95:85:92:
f2:01:35:c3:d8:e8:c6:0c:69:f6:df:1d:3e:06:a4:
67:1d:87:47:43:0d:3d:1e:eb:59:0a:61:2b:3b:ea:
6f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B0:28:8F:21:EA:11:71:52:0D:06:4C:74:C4:4C:4F:BE:39:51:13
X509v3 Authority Key Identifier:
keyid:4D:2E:30:FD:EB:2F:B3:C6:6F:8F:67:26:09:36:9D:75:D9:DE:CF:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/28f15ac93be6cc7ae5ae7106937f329a7bdb4578.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.20.0/23
45.224.23.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a4:7a:7e:fb:3b:ee:42:c1:d8:4f:17:43:29:e9:fb:5b:70:
76:df:8e:7a:53:07:de:b5:34:44:d3:8d:31:8c:69:b4:20:03:
31:f2:b6:62:d4:4a:81:be:45:b7:b4:f8:ab:31:e9:ba:13:2f:
a8:6a:87:04:ef:b9:ba:c2:6b:3b:9c:58:e8:32:64:37:3a:81:
44:44:2d:86:7e:01:89:11:f8:9e:d7:1c:ff:1f:93:c7:cf:f4:
a4:96:ae:f1:66:90:a7:66:76:51:c8:35:9b:a2:82:46:0b:bc:
83:d6:8b:d6:bb:57:5d:81:bc:58:20:e9:9a:45:39:50:b5:1b:
4c:74:3e:c3:83:00:29:42:86:73:9d:80:5d:f6:07:6a:7f:da:
f9:6d:66:73:94:fe:bb:d3:cd:6e:54:78:82:f5:bd:a6:7f:48:
5b:f8:23:78:8b:14:7e:38:c0:04:20:4e:0b:d8:96:0b:4b:f0:
72:36:d6:62:10:6e:e4:fb:ec:62:0a:2a:5b:a4:d8:98:77:eb:
e8:51:4e:5a:9f:9b:c3:ad:df:89:a1:3a:74:a1:d3:92:43:66:
38:0a:38:8e:22:64:5c:0f:58:98:e4:9f:f4:6d:f0:5e:7c:93:
17:9a:7e:ee:66:d4:59:c8:ab:9c:a2:e8:68:3c:ca:cb:f2:7d:
a2:c6:07:f1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDI/NqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFm
NjVkMWMzN2U0OTVhYjQ5NGVkYzNiYWQzMGIxYTZkNGY4OGUzODMwHhcNMjMxMDE2
MjAxOTI0WhcNMjUxMDE3MjAxOTI0WjAzMTEwLwYDVQQDEygyOGYxNWFjOTNiZTZj
YzdhZTVhZTcxMDY5MzdmMzI5YTdiZGI0NTc4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn2DbubifYlnwHeLXnF8UBa4xLB3Sn/k27PZQMK5VYG6yveQy
tjMnJKFzHEtWMpaax8o1fUwzAwTRu5PKmqtjAsMXgDdJZW4VfUEA/2+C9B/QI08c
rlvBp0Q6nwEm+VnUo683ETKM9StA+oVMhwvs5xsvwycQE9e5mV4eouzxZdnTdc19
SqWiHEgT1jzraR7T9yN6MMpsQPRJe2MG68D/vZ4PXO2I8ToL3slQBievTlu0fGCF
oorvxXclyNbOrbJT/mqvWeuQU9Kulq9TjjTJUMWpfF1yDsljQWIS3nuVhZLyATXD
2OjGDGn23x0+BqRnHYdHQw09HutZCmErO+pvTQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFKqwKI8h6hFxUg0GTHTETE++OVETMB8GA1UdIwQYMBaAFE0uMP3rL7PGb49n
Jgk2nXXZ3s9SMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWY2NWQx
YzM3ZTQ5NWFiNDk0ZWRjM2JhZDMwYjFhNmQ0Zjg4ZTM4My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmM2ZmFlOTktMmZiNi00MWViLTlmYTktNWNkYTBm
NTNhMDRjLzI4ZjE1YWM5M2JlNmNjN2FlNWFlNzEwNjkzN2YzMjlhN2JkYjQ1Nzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YzZmYWU5OS0yZmI2LTQxZWItOWZhOS01Y2Rh
MGY1M2EwNGMvMWY2NWQxYzM3ZTQ5NWFiNDk0ZWRjM2JhZDMwYjFhNmQ0Zjg4ZTM4
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAS3gFAMEAC3gFzANBgkqhkiG9w0BAQsFAAOCAQEADaR6fvs7
7kLB2E8XQynp+1twdt+OelMH3rU0RNONMYxptCADMfK2YtRKgb5Ft7T4qzHpuhMv
qGqHBO+5usJrO5xY6DJkNzqBREQthn4BiRH4ntcc/x+Tx8/0pJau8WaQp2Z2Ucg1
m6KCRgu8g9aL1rtXXYG8WCDpmkU5ULUbTHQ+w4MAKUKGc52AXfYHan/a+W1mc5T+
u9PNblR4gvW9pn9IW/gjeIsUfjjABCBOC9iWC0vwcjbWYhBu5PvsYgoqW6TYmHfr
6FFOWp+bw63fiaE6dKHTkkNmOAo4jiJkXA9YmOSf9G3wXnyTF5p+7mbUWcirnKLo
aDzKy/J9osYH8Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org