Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/326acf6219d040220cb4b8b130fea1ce4b3cd246.roa
File: 326acf6219d040220cb4b8b130fea1ce4b3cd246.roa (raw, json)
Hash identifier: Pet+azlVXdKAI9/8aNfGufstf6QLuQq1oQGUT7Lgcbc=
Subject key identifier: C5:13:22:17:5A:3D:6E:0B:0A:CE:49:41:AA:75:A9:63:B0:D8:B7:C9
Certificate issuer: /CN=8d9ca26cda476eac56c2da41cd111c8e4a1b1f36
Certificate serial: 216998
Authority key identifier: 7E:FA:29:AF:AA:2C:F6:B6:97:AD:DE:DF:78:63:8F:06:E0:B7:E7:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/326acf6219d040220cb4b8b130fea1ce4b3cd246.roa
Signing time: Wed 05 Jul 2023 13:48:16 +0000
ROA not before: Tue 04 Jul 2023 13:48:16 +0000
ROA not after: Sat 05 Jul 2025 13:48:16 +0000
asID: 52468
IP address blocks: 45.224.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2189720 (0x216998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9ca26cda476eac56c2da41cd111c8e4a1b1f36
Validity
Not Before: Jul 4 13:48:16 2023 GMT
Not After : Jul 5 13:48:16 2025 GMT
Subject: CN=326acf6219d040220cb4b8b130fea1ce4b3cd246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:a3:6b:8e:9d:c7:88:9e:b5:ee:28:88:b9:
eb:a3:6e:36:92:1d:32:52:dd:f0:1f:80:75:90:52:
33:22:30:fa:a8:d7:d4:b1:4c:e9:fa:05:a1:82:8e:
22:f3:f1:6f:82:16:54:23:86:e9:a4:84:4f:33:6f:
0f:d0:27:aa:36:66:2b:e0:6c:31:57:04:8b:b3:77:
81:c6:74:c5:ee:4c:2e:68:02:d6:c2:c7:3a:5b:ce:
db:71:67:b0:c6:77:9e:77:7d:b8:51:e3:7d:29:7f:
50:9e:c5:b3:90:08:fd:a2:e6:84:5a:4e:41:76:28:
33:dd:ae:f5:30:86:f2:38:00:2b:42:72:e7:ce:1c:
cb:84:a6:f2:8e:21:96:c0:e7:06:45:10:9a:0e:04:
5e:c6:c5:c5:82:11:de:38:f7:b3:1c:ec:e5:a1:fc:
f6:5f:dc:ac:a3:16:32:53:d5:b2:a6:93:f2:6c:ce:
34:59:be:e2:04:bd:df:f8:3b:e1:25:30:79:a3:03:
a3:1a:2b:0c:dc:d0:4f:74:79:81:fc:4e:b6:f8:e3:
e8:30:82:41:4d:78:cf:5d:3e:94:9a:9c:fc:53:d5:
6b:3c:8d:db:a2:06:60:e1:ef:41:f7:9c:8d:90:bd:
04:38:fb:52:20:47:34:d5:84:a2:d7:f0:32:ea:5d:
05:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:13:22:17:5A:3D:6E:0B:0A:CE:49:41:AA:75:A9:63:B0:D8:B7:C9
X509v3 Authority Key Identifier:
keyid:7E:FA:29:AF:AA:2C:F6:B6:97:AD:DE:DF:78:63:8F:06:E0:B7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/326acf6219d040220cb4b8b130fea1ce4b3cd246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.152.0/22
Signature Algorithm: sha256WithRSAEncryption
89:0f:74:d6:29:6b:5c:1e:ab:30:b2:f4:48:35:da:6a:cf:6f:
7f:95:50:3b:f3:fb:33:2e:ea:29:fd:f7:ac:d6:63:6a:dc:41:
85:1c:83:2e:85:04:39:59:49:06:2a:93:22:33:0f:60:18:95:
e5:4c:bd:07:a7:6a:c4:9a:6f:64:43:4b:f1:6d:05:7e:0d:02:
9b:0c:ef:ce:7f:cf:92:cb:61:75:26:34:45:0b:0c:6e:14:60:
2d:d9:ea:d3:0e:bf:46:e1:ea:cc:c2:ff:b4:a6:fa:b1:61:55:
69:a8:86:a8:8d:6a:49:d2:97:2c:32:7f:78:b4:dd:db:e2:fb:
e7:ee:52:54:aa:5f:bd:b5:f6:93:e3:21:3a:42:ce:dc:64:03:
52:58:23:b2:4e:ff:f8:78:db:b8:09:e6:27:05:46:f2:64:c3:
45:0a:49:7e:46:36:9e:63:b4:1b:55:f3:14:90:65:5a:f3:71:
4d:22:90:ff:73:5a:ef:25:b5:51:c0:05:3d:80:3f:16:b0:f2:
c8:38:5a:3d:e3:31:01:65:d5:58:4f:46:53:f3:4d:37:6d:f0:
ea:50:54:2c:8b:80:92:09:94:8f:4a:d3:70:b7:58:a4:69:14:
48:d5:06:36:ed:5a:8c:5a:e4:14:06:2a:1d:09:b9:b1:ec:e5:
2f:14:13:27
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIWmYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhk
OWNhMjZjZGE0NzZlYWM1NmMyZGE0MWNkMTExYzhlNGExYjFmMzYwHhcNMjMwNzA0
MTM0ODE2WhcNMjUwNzA1MTM0ODE2WjAzMTEwLwYDVQQDEygzMjZhY2Y2MjE5ZDA0
MDIyMGNiNGI4YjEzMGZlYTFjZTRiM2NkMjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp1Sja46dx4iete4oiLnro242kh0yUt3wH4B1kFIzIjD6qNfU
sUzp+gWhgo4i8/FvghZUI4bppIRPM28P0CeqNmYr4GwxVwSLs3eBxnTF7kwuaALW
wsc6W87bcWewxneed324UeN9KX9QnsWzkAj9ouaEWk5Bdigz3a71MIbyOAArQnLn
zhzLhKbyjiGWwOcGRRCaDgRexsXFghHeOPezHOzlofz2X9ysoxYyU9WyppPybM40
Wb7iBL3f+DvhJTB5owOjGisM3NBPdHmB/E62+OPoMIJBTXjPXT6Umpz8U9VrPI3b
ogZg4e9B95yNkL0EOPtSIEc01YSi1/Ay6l0FJQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMUTIhdaPW4LCs5JQap1qWOw2LfJMB8GA1UdIwQYMBaAFH76Ka+qLPa2l63e
33hjjwbgt+dpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGQ5Y2Ey
NmNkYTQ3NmVhYzU2YzJkYTQxY2QxMTFjOGU0YTFiMWYzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzNkM2U0ZTAtMTEwNC00NjVmLTgwNDYtM2QwMDBm
Nzk4NGQxLzMyNmFjZjYyMTlkMDQwMjIwY2I0YjhiMTMwZmVhMWNlNGIzY2QyNDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83M2QzZTRlMC0xMTA0LTQ2NWYtODA0Ni0zZDAw
MGY3OTg0ZDEvOGQ5Y2EyNmNkYTQ3NmVhYzU2YzJkYTQxY2QxMTFjOGU0YTFiMWYz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3gmDANBgkqhkiG9w0BAQsFAAOCAQEAiQ901ilrXB6rMLL0
SDXaas9vf5VQO/P7My7qKf33rNZjatxBhRyDLoUEOVlJBiqTIjMPYBiV5Uy9B6dq
xJpvZENL8W0Ffg0Cmwzvzn/PksthdSY0RQsMbhRgLdnq0w6/RuHqzML/tKb6sWFV
aaiGqI1qSdKXLDJ/eLTd2+L75+5SVKpfvbX2k+MhOkLO3GQDUlgjsk7/+HjbuAnm
JwVG8mTDRQpJfkY2nmO0G1XzFJBlWvNxTSKQ/3Na7yW1UcAFPYA/FrDyyDhaPeMx
AWXVWE9GU/NNN23w6lBULIuAkgmUj0rTcLdYpGkUSNUGNu1ajFrkFAYqHQm5sezl
LxQTJw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org