Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/3cdd6f87b558d70e268470ebcaeb2d5eaca89faa.roa
File: 3cdd6f87b558d70e268470ebcaeb2d5eaca89faa.roa (raw, json)
Hash identifier: puAmalvGX30W2pkUCG2FCNzvO5oUT1z772aReu3mJNQ=
Subject key identifier: E7:01:7D:ED:01:4C:13:19:91:10:11:EC:C8:32:43:EB:5A:53:5E:A8
Certificate issuer: /CN=bf0c3190bc902c16f95a9189977c2b845fc1db00
Certificate serial: 278FC7
Authority key identifier: 5C:72:DD:19:84:85:C5:0B:E6:6D:CD:14:91:85:F0:6C:55:63:C2:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf0c3190bc902c16f95a9189977c2b845fc1db00.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/3cdd6f87b558d70e268470ebcaeb2d5eaca89faa.roa
Signing time: Sun 31 Mar 2024 00:49:59 +0000
ROA not before: Sun 31 Mar 2024 00:49:59 +0000
ROA not after: Sat 31 Mar 2029 00:49:59 +0000
asID: 64139
IP address blocks: 45.238.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2592711 (0x278fc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf0c3190bc902c16f95a9189977c2b845fc1db00
Validity
Not Before: Mar 31 00:49:59 2024 GMT
Not After : Mar 31 00:49:59 2029 GMT
Subject: CN=3cdd6f87b558d70e268470ebcaeb2d5eaca89faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b4:f5:04:cc:9d:09:ce:12:8d:00:9e:92:29:
de:09:52:47:6c:09:c2:d0:be:38:a7:40:ec:3d:cf:
15:9e:ac:60:fe:6d:0f:c8:8f:21:d6:89:7b:97:27:
84:dc:d5:1a:24:9b:34:1b:ae:af:60:cb:25:8c:1e:
41:01:63:51:13:bd:50:f6:7b:c5:05:fc:82:7e:2a:
cb:b8:65:95:50:f7:67:a8:d3:a7:8a:ec:37:ce:11:
ff:9b:cd:db:af:bb:30:27:27:a8:74:36:f4:8b:07:
9f:cf:7e:2c:69:c6:de:2e:c1:b2:97:e8:90:82:a6:
5f:13:8c:22:af:ba:4f:bf:39:80:f3:a3:ce:89:0f:
ae:6c:87:91:b8:0e:60:f8:30:f5:74:be:41:f1:79:
d5:39:75:b1:68:79:7e:15:c5:ca:b9:2e:16:19:b1:
90:a9:90:b9:99:84:3e:78:38:f8:0f:ea:14:76:fd:
b9:ba:17:c3:41:21:02:ce:e7:d2:4e:0e:98:c3:bc:
5d:5e:65:20:11:a4:f6:4d:56:ed:f7:85:67:a5:34:
69:f0:7e:9b:8c:a0:8f:db:7d:27:db:41:60:8f:55:
d5:66:7e:1d:0b:69:63:eb:d4:91:5c:24:ee:ef:7b:
61:de:68:54:e7:7e:36:84:94:a2:0f:91:c1:a1:a9:
b1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:01:7D:ED:01:4C:13:19:91:10:11:EC:C8:32:43:EB:5A:53:5E:A8
X509v3 Authority Key Identifier:
keyid:5C:72:DD:19:84:85:C5:0B:E6:6D:CD:14:91:85:F0:6C:55:63:C2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf0c3190bc902c16f95a9189977c2b845fc1db00.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/3cdd6f87b558d70e268470ebcaeb2d5eaca89faa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/bf0c3190bc902c16f95a9189977c2b845fc1db00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.176.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a9:12:39:87:60:a0:1b:8e:2b:90:5c:75:f4:0d:fa:c4:de:
ac:34:2a:c9:e1:d2:88:7b:17:ce:ea:70:f4:6c:fb:79:ce:3b:
ac:cd:65:9e:43:2d:48:e1:79:d4:45:b7:21:61:a9:43:82:79:
79:24:bd:12:1c:4c:c9:ec:00:fb:8b:f5:26:f7:13:86:d2:b2:
0e:25:8e:95:18:c1:de:9c:36:b5:af:7a:0e:90:9c:2d:e9:cd:
94:98:a3:65:b2:18:7b:0e:46:87:9f:91:2c:5c:88:ea:88:19:
e3:5d:e9:0f:b2:b9:6a:a0:e2:3c:cd:89:c1:8e:72:84:24:f7:
0a:9c:a3:3d:cc:33:52:63:8c:65:6d:d0:11:5b:9f:66:32:04:
bc:1b:42:08:c7:8b:24:45:ef:6c:d3:12:b2:ac:23:f3:ad:75:
f8:62:62:b8:ec:74:a3:30:84:3e:9a:8b:e1:ea:f2:17:49:2b:
36:f9:10:79:78:e9:80:fe:8d:ac:de:bd:e0:34:1b:00:50:0d:
8c:e9:a5:c4:56:07:5e:cd:69:28:ea:78:9d:1f:c6:61:86:19:
6e:b8:7b:d3:85:73:91:36:d0:8a:e3:aa:12:26:6b:26:d8:2d:
79:7c:8a:23:ab:bd:45:cb:7f:a5:ab:42:48:0a:12:4d:88:06:
20:48:5a:79
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ4/HMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
MGMzMTkwYmM5MDJjMTZmOTVhOTE4OTk3N2MyYjg0NWZjMWRiMDAwHhcNMjQwMzMx
MDA0OTU5WhcNMjkwMzMxMDA0OTU5WjAzMTEwLwYDVQQDEygzY2RkNmY4N2I1NThk
NzBlMjY4NDcwZWJjYWViMmQ1ZWFjYTg5ZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzLT1BMydCc4SjQCekineCVJHbAnC0L44p0DsPc8Vnqxg/m0P
yI8h1ol7lyeE3NUaJJs0G66vYMsljB5BAWNRE71Q9nvFBfyCfirLuGWVUPdnqNOn
iuw3zhH/m83br7swJyeodDb0iwefz34sacbeLsGyl+iQgqZfE4wir7pPvzmA86PO
iQ+ubIeRuA5g+DD1dL5B8XnVOXWxaHl+FcXKuS4WGbGQqZC5mYQ+eDj4D+oUdv25
uhfDQSECzufSTg6Yw7xdXmUgEaT2TVbt94VnpTRp8H6bjKCP230n20Fgj1XVZn4d
C2lj69SRXCTu73th3mhU5342hJSiD5HBoamx/QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOcBfe0BTBMZkRAR7MgyQ+taU16oMB8GA1UdIwQYMBaAFFxy3RmEhcUL5m3N
FJGF8GxVY8ICMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmYwYzMx
OTBiYzkwMmMxNmY5NWE5MTg5OTc3YzJiODQ1ZmMxZGIwMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2MyOTM2NjQtZjNlNy00NjkyLWFlNDMtNDE4M2Qz
ZDY0MjlhLzNjZGQ2Zjg3YjU1OGQ3MGUyNjg0NzBlYmNhZWIyZDVlYWNhODlmYWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83YzI5MzY2NC1mM2U3LTQ2OTItYWU0My00MTgz
ZDNkNjQyOWEvYmYwYzMxOTBiYzkwMmMxNmY5NWE5MTg5OTc3YzJiODQ1ZmMxZGIw
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3usDANBgkqhkiG9w0BAQsFAAOCAQEABqkSOYdgoBuOK5Bc
dfQN+sTerDQqyeHSiHsXzupw9Gz7ec47rM1lnkMtSOF51EW3IWGpQ4J5eSS9EhxM
yewA+4v1JvcThtKyDiWOlRjB3pw2ta96DpCcLenNlJijZbIYew5Gh5+RLFyI6ogZ
413pD7K5aqDiPM2JwY5yhCT3CpyjPcwzUmOMZW3QEVufZjIEvBtCCMeLJEXvbNMS
sqwj8611+GJiuOx0ozCEPpqL4eryF0krNvkQeXjpgP6NrN694DQbAFANjOmlxFYH
Xs1pKOp4nR/GYYYZbrh704VzkTbQiuOqEiZrJtgteXyKI6u9Rct/patCSAoSTYgG
IEhaeQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org