Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/ce0d5e2abd9449757fd11df67ece99b239071e83.roa
File: ce0d5e2abd9449757fd11df67ece99b239071e83.roa (raw, json)
Hash identifier: YIg5QWmJ7U9bfslitBCXKs18bdw/Ywii+pYOiNyMCx8=
Subject key identifier: 61:9C:7B:52:1B:19:28:E0:C8:13:F5:C5:0A:1D:A4:2B:4A:62:86:CA
Certificate issuer: /CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Certificate serial: 14A055
Authority key identifier: 84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/ce0d5e2abd9449757fd11df67ece99b239071e83.roa
Signing time: Fri 02 Feb 2024 03:20:39 +0000
ROA not before: Fri 02 Feb 2024 03:20:39 +0000
ROA not after: Mon 02 Feb 2026 03:20:39 +0000
asID: 23059
IP address blocks: 45.227.88.0/22 maxlen: 24
2801:114::/44 maxlen: 48
2803:9310::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1351765 (0x14a055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Validity
Not Before: Feb 2 03:20:39 2024 GMT
Not After : Feb 2 03:20:39 2026 GMT
Subject: CN=ce0d5e2abd9449757fd11df67ece99b239071e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:fb:cf:db:6e:05:0c:00:76:b2:91:a0:44:
b2:ef:fb:7d:bd:34:0e:34:fd:7f:48:e0:61:8b:87:
cd:57:5d:d9:bc:a2:33:47:dc:95:82:66:7f:c8:5b:
31:1d:fc:9d:3f:b0:79:07:2c:d1:f8:f2:8a:9b:c2:
c4:e4:a9:47:88:c2:43:34:6e:18:df:43:c4:be:c4:
d7:90:53:e2:76:23:fe:81:16:33:8b:24:e9:80:51:
0d:33:9a:45:2b:df:f4:16:7b:9e:38:88:e1:30:c7:
82:81:8f:93:a6:28:b4:11:34:72:aa:de:9e:63:86:
54:8c:9d:f7:a5:8c:0d:33:52:4f:72:57:de:b7:01:
ef:fa:69:2c:ed:79:ba:3e:35:88:18:93:5e:0d:3f:
0f:78:e1:f2:90:e2:75:7d:36:0b:9f:29:da:3d:f9:
42:ba:73:49:1c:df:02:45:db:8c:06:43:b5:2c:c1:
ad:c0:02:13:5f:9f:60:f2:99:38:56:7d:e7:f1:c6:
85:a8:f3:7f:b5:02:b9:6d:9c:d5:8b:47:cb:3d:89:
b6:6c:2b:43:03:5f:08:76:20:c0:22:81:e1:e1:9c:
4a:1b:ad:03:65:5f:97:cd:71:40:e8:2b:04:35:7c:
2f:c3:e0:59:65:a4:01:d5:e4:3f:cd:66:67:74:7a:
31:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9C:7B:52:1B:19:28:E0:C8:13:F5:C5:0A:1D:A4:2B:4A:62:86:CA
X509v3 Authority Key Identifier:
keyid:84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/ce0d5e2abd9449757fd11df67ece99b239071e83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.88.0/22
IPv6:
2801:114::/44
2803:9310::/32
Signature Algorithm: sha256WithRSAEncryption
80:ab:58:b0:38:93:c4:76:f0:41:c7:61:cd:2a:fc:23:5c:de:
75:c5:72:1c:bc:ce:28:ec:cd:0d:77:85:9b:ad:25:92:93:b4:
5a:d2:68:ee:73:c2:5e:ab:7d:4b:0e:01:32:4d:4c:8d:30:76:
1e:9c:4a:0d:55:25:aa:f1:56:ad:ec:9d:60:99:e7:50:00:7c:
ff:4e:d6:ce:59:12:63:17:73:50:0a:ee:5b:a7:62:79:cf:98:
e8:9f:a3:af:2b:5b:51:9c:b0:9d:81:fb:f3:4f:d0:f0:0b:6d:
6c:90:02:27:1d:11:c8:91:6d:09:b1:5f:eb:0f:7d:50:07:22:
99:94:33:86:1a:84:e3:86:5b:04:69:19:b2:15:17:ff:f9:fd:
ba:9d:0a:b2:13:75:98:16:02:6f:bd:f4:fd:05:a0:78:01:f3:
15:19:6b:63:ea:f6:7f:78:f3:9c:fa:6d:6e:f5:7b:55:74:1f:
d9:64:ce:c4:be:6c:cd:b4:8a:ae:2b:e2:68:2b:b7:fc:dd:94:
dc:27:ec:91:70:24:c4:51:1f:a1:9b:ec:2c:14:fd:de:62:9b:
0b:3e:1e:0f:86:c5:59:b5:4e:d0:eb:05:45:a1:ef:65:9e:27:
0d:a0:bc:a4:90:9f:7a:0f:15:e3:9f:93:92:b7:f0:79:e8:9a:
eb:f0:c9:c5
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDFKBVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ2
NGFhZjlkNzBjMjE2NTUxYjFiNjE5YmM0Yzg1NzNjM2IzZTFiNTIwHhcNMjQwMjAy
MDMyMDM5WhcNMjYwMjAyMDMyMDM5WjAzMTEwLwYDVQQDEyhjZTBkNWUyYWJkOTQ0
OTc1N2ZkMTFkZjY3ZWNlOTliMjM5MDcxZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwaf7z9tuBQwAdrKRoESy7/t9vTQONP1/SOBhi4fNV13ZvKIz
R9yVgmZ/yFsxHfydP7B5ByzR+PKKm8LE5KlHiMJDNG4Y30PEvsTXkFPidiP+gRYz
iyTpgFENM5pFK9/0FnueOIjhMMeCgY+Tpii0ETRyqt6eY4ZUjJ33pYwNM1JPclfe
twHv+mks7Xm6PjWIGJNeDT8PeOHykOJ1fTYLnynaPflCunNJHN8CRduMBkO1LMGt
wAITX59g8pk4Vn3n8caFqPN/tQK5bZzVi0fLPYm2bCtDA18IdiDAIoHh4ZxKG60D
ZV+XzXFA6CsENXwvw+BZZaQB1eQ/zWZndHoxzwIDAQABo4ICczCCAm8wHQYDVR0O
BBYEFGGce1IbGSjgyBP1xQodpCtKYobKMB8GA1UdIwQYMBaAFISm8Fb2MnQz/0/c
UNnzstjFz/6bMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDY0YWFm
OWQ3MGMyMTY1NTFiMWI2MTliYzRjODU3M2MzYjNlMWI1Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2VhZmY4OWEtODU3YS00ODcwLTgxMmMtN2E1NzRk
ZTE2YjI2L2NlMGQ1ZTJhYmQ5NDQ5NzU3ZmQxMWRmNjdlY2U5OWIyMzkwNzFlODMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZWFmZjg5YS04NTdhLTQ4NzAtODEyYy03YTU3
NGRlMTZiMjYvNDY0YWFmOWQ3MGMyMTY1NTFiMWI2MTliYzRjODU3M2MzYjNlMWI1
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQo
MCYwDAQCAAEwBgMEAi3jWDAWBAIAAjAQAwcEKAEBFAAAAwUAKAOTEDANBgkqhkiG
9w0BAQsFAAOCAQEAgKtYsDiTxHbwQcdhzSr8I1zedcVyHLzOKOzNDXeFm60lkpO0
WtJo7nPCXqt9Sw4BMk1MjTB2HpxKDVUlqvFWreydYJnnUAB8/07WzlkSYxdzUAru
W6diec+Y6J+jrytbUZywnYH780/Q8AttbJACJx0RyJFtCbFf6w99UAcimZQzhhqE
44ZbBGkZshUX//n9up0KshN1mBYCb730/QWgeAHzFRlrY+r2f3jznPptbvV7VXQf
2WTOxL5szbSKriviaCu3/N2U3CfskXAkxFEfoZvsLBT93mKbCz4eD4bFWbVO0OsF
RaHvZZ4nDaC8pJCfeg8V45+Tkrfweeia6/DJxQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:45:22 2025 by rpki-client