Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7912fc9c-086c-458e-a97b-4ad15c52bc5b/1a98b91ae97435886cdda7ceca9e1c4c5479d047.roa
File: 1a98b91ae97435886cdda7ceca9e1c4c5479d047.roa (raw, json)
Hash identifier: aQrhBZbBQpRPDs1kv9WwkbH3cqX0zTzkT43IMTyLZac=
Subject key identifier: 9E:3E:E7:1B:9A:14:C2:2E:48:7A:7B:C0:6C:44:95:1D:D6:7C:E6:D5
Certificate issuer: /CN=a03a3f69e9a44aa1629814aa223324e0a63fa3f2
Certificate serial: 20130C
Authority key identifier: 23:E7:1C:BF:F6:FD:08:B5:80:81:63:5B:3F:5E:32:59:00:39:DC:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a03a3f69e9a44aa1629814aa223324e0a63fa3f2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7912fc9c-086c-458e-a97b-4ad15c52bc5b/1a98b91ae97435886cdda7ceca9e1c4c5479d047.roa
Signing time: Tue 12 Sep 2023 21:31:22 +0000
ROA not before: Mon 11 Sep 2023 21:31:22 +0000
ROA not after: Fri 12 Sep 2025 21:31:22 +0000
asID: 269872
IP address blocks: 45.189.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2102028 (0x20130c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a03a3f69e9a44aa1629814aa223324e0a63fa3f2
Validity
Not Before: Sep 11 21:31:22 2023 GMT
Not After : Sep 12 21:31:22 2025 GMT
Subject: CN=1a98b91ae97435886cdda7ceca9e1c4c5479d047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:66:83:e5:45:41:da:72:db:12:6c:22:00:
89:6b:5f:e4:a9:aa:1f:2f:c2:0a:ff:33:34:59:89:
02:92:0f:5e:4b:c6:11:b1:5a:98:cb:44:07:a3:7a:
c2:dc:d4:9a:6f:da:7b:a7:e6:46:dc:1c:79:f6:06:
d7:41:4c:7d:5f:ad:3a:97:11:3f:9b:40:11:08:bc:
7b:be:a9:e8:1e:06:e0:55:8e:d3:dd:13:2c:79:90:
8f:df:bc:7f:cb:b7:8e:64:5f:4d:a5:08:23:d1:3f:
19:40:1a:14:53:fd:b7:71:02:8b:d5:01:20:7a:c0:
08:91:45:9a:da:75:d1:af:a7:fd:91:e0:e0:2c:9d:
5d:a0:aa:c6:eb:89:57:21:d6:86:bf:19:6d:03:63:
7e:f9:f3:2e:21:91:8c:fa:c2:92:f8:16:6b:bd:7f:
ea:01:b2:80:77:44:c1:0e:c5:a7:8a:d8:21:f3:ec:
05:7f:3a:28:c1:fa:3e:b7:b2:4f:17:25:23:2c:2f:
d4:ea:81:01:c2:82:03:63:2e:11:fd:01:e2:f7:b2:
5d:62:f1:4c:d4:8c:53:70:ef:03:91:ad:fc:48:5f:
b7:62:9f:a7:57:83:f4:6d:1a:96:e2:71:5a:70:84:
ff:f6:07:c6:fb:cc:9d:28:00:3d:d7:05:05:04:b5:
39:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3E:E7:1B:9A:14:C2:2E:48:7A:7B:C0:6C:44:95:1D:D6:7C:E6:D5
X509v3 Authority Key Identifier:
keyid:23:E7:1C:BF:F6:FD:08:B5:80:81:63:5B:3F:5E:32:59:00:39:DC:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a03a3f69e9a44aa1629814aa223324e0a63fa3f2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7912fc9c-086c-458e-a97b-4ad15c52bc5b/1a98b91ae97435886cdda7ceca9e1c4c5479d047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7912fc9c-086c-458e-a97b-4ad15c52bc5b/a03a3f69e9a44aa1629814aa223324e0a63fa3f2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.200.0/22
Signature Algorithm: sha256WithRSAEncryption
82:76:36:b2:82:b3:b1:4a:59:93:82:4c:01:4e:df:57:db:24:
a4:ea:54:78:a0:72:a7:5f:62:e9:43:b9:3c:7f:62:4b:3e:dd:
45:f6:54:62:09:32:12:72:a8:7a:ec:ea:07:e3:4a:7a:7a:e4:
ce:38:ac:27:80:08:55:1e:b7:9b:ff:c4:e1:43:a4:42:2f:f4:
08:f2:fb:f7:07:8b:12:40:70:9f:e5:a3:87:1a:b1:8c:30:74:
46:d5:9d:63:96:b8:f1:45:c1:d5:fb:ff:4f:4b:04:84:15:96:
82:25:f0:87:d4:9f:d1:fd:83:4a:75:7a:8b:d1:3a:d1:28:29:
53:45:1a:ec:7a:8b:3e:b6:c6:1a:7f:fc:9c:64:3b:2d:b1:b5:
a7:03:f7:05:38:70:49:de:26:6b:23:54:28:20:29:bc:d4:3d:
a4:1d:24:4b:c9:c4:dc:71:13:87:82:c7:97:59:01:ad:4f:4d:
ca:6c:f0:03:28:f0:96:87:e5:34:47:cf:83:d4:45:5d:4c:64:
ef:97:ef:3b:f0:1e:e3:db:3b:2a:6e:f4:19:f7:ae:66:f9:0e:
08:19:c1:3c:f2:e7:cc:a8:1e:59:97:4b:95:62:ef:92:70:e3:
16:f2:41:8d:dd:45:7d:37:39:81:9d:fb:59:86:34:0f:44:1a:
59:9e:9f:7d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIBMMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEw
M2EzZjY5ZTlhNDRhYTE2Mjk4MTRhYTIyMzMyNGUwYTYzZmEzZjIwHhcNMjMwOTEx
MjEzMTIyWhcNMjUwOTEyMjEzMTIyWjAzMTEwLwYDVQQDEygxYTk4YjkxYWU5NzQz
NTg4NmNkZGE3Y2VjYTllMWM0YzU0NzlkMDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzKlmg+VFQdpy2xJsIgCJa1/kqaofL8IK/zM0WYkCkg9eS8YR
sVqYy0QHo3rC3NSab9p7p+ZG3Bx59gbXQUx9X606lxE/m0ARCLx7vqnoHgbgVY7T
3RMseZCP37x/y7eOZF9NpQgj0T8ZQBoUU/23cQKL1QEgesAIkUWa2nXRr6f9keDg
LJ1doKrG64lXIdaGvxltA2N++fMuIZGM+sKS+BZrvX/qAbKAd0TBDsWnitgh8+wF
fzoowfo+t7JPFyUjLC/U6oEBwoIDYy4R/QHi97JdYvFM1IxTcO8Dka38SF+3Yp+n
V4P0bRqW4nFacIT/9gfG+8ydKAA91wUFBLU5BQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ4+5xuaFMIuSHp7wGxElR3WfObVMB8GA1UdIwQYMBaAFCPnHL/2/Qi1gIFj
Wz9eMlkAOdyaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTAzYTNm
NjllOWE0NGFhMTYyOTgxNGFhMjIzMzI0ZTBhNjNmYTNmMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzkxMmZjOWMtMDg2Yy00NThlLWE5N2ItNGFkMTVj
NTJiYzViLzFhOThiOTFhZTk3NDM1ODg2Y2RkYTdjZWNhOWUxYzRjNTQ3OWQwNDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83OTEyZmM5Yy0wODZjLTQ1OGUtYTk3Yi00YWQx
NWM1MmJjNWIvYTAzYTNmNjllOWE0NGFhMTYyOTgxNGFhMjIzMzI0ZTBhNjNmYTNm
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi29yDANBgkqhkiG9w0BAQsFAAOCAQEAgnY2soKzsUpZk4JM
AU7fV9skpOpUeKByp19i6UO5PH9iSz7dRfZUYgkyEnKoeuzqB+NKenrkzjisJ4AI
VR63m//E4UOkQi/0CPL79weLEkBwn+WjhxqxjDB0RtWdY5a48UXB1fv/T0sEhBWW
giXwh9Sf0f2DSnV6i9E60SgpU0Ua7HqLPrbGGn/8nGQ7LbG1pwP3BThwSd4mayNU
KCApvNQ9pB0kS8nE3HETh4LHl1kBrU9NymzwAyjwloflNEfPg9RFXUxk75fvO/Ae
49s7Km70GfeuZvkOCBnBPPLnzKgeWZdLlWLvknDjFvJBjd1FfTc5gZ37WYY0D0Qa
WZ6ffQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org