Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/1feec094e56cbde6aec43cfa4718663d0fc497bd.roa
File: 1feec094e56cbde6aec43cfa4718663d0fc497bd.roa (raw, json)
Hash identifier: 6iGIo+a4UhdJ24aryBPa3qoTT2h66ZdB3PkaOrDZ6eg=
Subject key identifier: D3:11:AE:DB:79:E3:47:59:8F:27:FF:F5:EC:2D:33:BF:E8:45:C9:C4
Certificate issuer: /CN=598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8
Certificate serial: 235D57
Authority key identifier: 27:30:5C:FD:AC:91:C7:E5:F4:45:EC:BC:15:6B:7D:1A:97:E6:E1:4C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/1feec094e56cbde6aec43cfa4718663d0fc497bd.roa
Signing time: Thu 12 Oct 2023 18:09:12 +0000
ROA not before: Wed 11 Oct 2023 18:09:11 +0000
ROA not after: Sun 12 Oct 2025 18:09:11 +0000
asID: 264825
IP address blocks: 45.169.144.0/24 maxlen: 24
45.169.145.0/24 maxlen: 24
45.169.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2317655 (0x235d57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8
Validity
Not Before: Oct 11 18:09:11 2023 GMT
Not After : Oct 12 18:09:11 2025 GMT
Subject: CN=1feec094e56cbde6aec43cfa4718663d0fc497bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:f4:22:3b:0c:03:0a:a7:bb:51:b8:91:7b:
d2:6d:4d:43:d1:6c:55:64:62:22:6f:f9:7a:e6:b4:
4a:c6:88:26:c2:17:db:c2:29:02:00:6e:8d:e3:9d:
b2:e5:c2:bd:32:bf:c5:2c:ac:43:87:af:9a:01:76:
0b:27:d8:ac:ea:a5:03:98:bc:b9:56:b5:f4:bb:42:
67:c1:84:c1:f7:c1:06:e8:dc:29:5e:82:fb:91:9f:
94:f8:a7:3c:08:d3:70:97:0c:76:d8:53:ae:3c:00:
71:35:87:5a:2d:2c:04:6c:aa:60:d4:45:82:4b:f8:
86:c8:fb:f3:2d:0c:f4:46:95:a6:85:bd:58:f8:d4:
09:ec:45:81:6c:aa:4b:da:95:0b:46:43:e1:25:4d:
ff:22:3c:14:e5:ee:c3:40:da:2b:72:59:65:58:8f:
18:6f:38:11:b8:7e:f4:98:84:32:a1:7d:5a:ee:a5:
3d:d7:99:90:fc:2a:25:ce:56:fe:84:f1:32:e6:65:
6d:9e:a9:9d:2f:3c:9a:90:1d:b0:41:36:b7:88:34:
7b:21:e7:8e:91:58:79:7a:16:65:ff:d1:1d:d1:e0:
1b:b4:f7:7c:7d:b9:6b:b4:ad:1d:6e:e9:a6:7d:75:
79:27:1b:56:21:8f:fe:c1:bb:60:98:a2:4c:e8:e5:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:11:AE:DB:79:E3:47:59:8F:27:FF:F5:EC:2D:33:BF:E8:45:C9:C4
X509v3 Authority Key Identifier:
keyid:27:30:5C:FD:AC:91:C7:E5:F4:45:EC:BC:15:6B:7D:1A:97:E6:E1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/1feec094e56cbde6aec43cfa4718663d0fc497bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.144.0/23
45.169.147.0/24
Signature Algorithm: sha256WithRSAEncryption
98:47:c4:e0:32:a7:21:d4:62:47:06:9d:eb:9f:15:24:a8:57:
37:b0:f4:e9:a1:b8:13:d3:61:4b:a6:58:9c:7f:18:8c:5b:28:
cf:35:e8:cb:4a:71:b9:c7:1d:ab:86:85:bb:ea:bf:00:54:71:
26:6c:da:f6:5b:34:11:c4:e8:8b:29:3c:7b:8a:08:06:a7:91:
e3:f2:e1:4d:48:79:f2:e5:c7:e3:8c:7f:c3:2c:3e:28:e7:67:
2b:1d:40:15:b5:ec:bf:37:57:94:eb:e5:aa:b5:ef:80:eb:4d:
6e:23:41:17:6f:05:cd:9a:aa:ed:6b:e0:69:9b:86:9c:27:20:
33:54:9f:40:3a:81:cd:31:5e:fb:5b:0b:02:65:12:7b:21:c5:
23:24:42:a5:5c:73:78:aa:8f:b3:2a:af:d7:d1:91:06:d6:5b:
66:50:d6:88:d5:e1:fb:12:db:d2:70:54:24:7c:70:48:fa:9f:
75:eb:ad:b0:11:8f:43:d1:9a:1a:6f:85:ac:61:80:86:60:a8:
47:a5:13:6f:f0:57:f1:ee:e6:c4:a5:82:94:d3:bc:82:b2:8c:
2f:bd:06:97:55:8f:e7:2f:ac:5e:7f:d8:4e:85:3f:f5:d3:1f:
b4:0a:00:e1:a1:f4:99:b0:ba:4e:e8:2c:a1:8d:6b:36:3b:1d:
9a:e8:bd:d2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDI11XMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU5
OGFhMmM5YzczYTgyZTE0ZGQ5ZTU4MmJhY2Y1Y2YwZDFmMWU2YTgwHhcNMjMxMDEx
MTgwOTExWhcNMjUxMDEyMTgwOTExWjAzMTEwLwYDVQQDEygxZmVlYzA5NGU1NmNi
ZGU2YWVjNDNjZmE0NzE4NjYzZDBmYzQ5N2JkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAloT0IjsMAwqnu1G4kXvSbU1D0WxVZGIib/l65rRKxogmwhfb
wikCAG6N452y5cK9Mr/FLKxDh6+aAXYLJ9is6qUDmLy5VrX0u0JnwYTB98EG6Nwp
XoL7kZ+U+Kc8CNNwlwx22FOuPABxNYdaLSwEbKpg1EWCS/iGyPvzLQz0RpWmhb1Y
+NQJ7EWBbKpL2pULRkPhJU3/IjwU5e7DQNorclllWI8YbzgRuH70mIQyoX1a7qU9
15mQ/Colzlb+hPEy5mVtnqmdLzyakB2wQTa3iDR7IeeOkVh5ehZl/9Ed0eAbtPd8
fblrtK0dbummfXV5JxtWIY/+wbtgmKJM6OUz6QIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFNMRrtt540dZjyf/9ewtM7/oRcnEMB8GA1UdIwQYMBaAFCcwXP2skcfl9EXs
vBVrfRqX5uFMMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTk4YWEy
YzljNzNhODJlMTRkZDllNTgyYmFjZjVjZjBkMWYxZTZhOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODU0NjVhMDAtNTMxMi00NzliLWIwYmMtNTBhODU1
NzEzMDU3LzFmZWVjMDk0ZTU2Y2JkZTZhZWM0M2NmYTQ3MTg2NjNkMGZjNDk3YmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NTQ2NWEwMC01MzEyLTQ3OWItYjBiYy01MGE4
NTU3MTMwNTcvNTk4YWEyYzljNzNhODJlMTRkZDllNTgyYmFjZjVjZjBkMWYxZTZh
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAS2pkAMEAC2pkzANBgkqhkiG9w0BAQsFAAOCAQEAmEfE4DKn
IdRiRwad658VJKhXN7D06aG4E9NhS6ZYnH8YjFsozzXoy0pxuccdq4aFu+q/AFRx
Jmza9ls0EcToiyk8e4oIBqeR4/LhTUh58uXH44x/wyw+KOdnKx1AFbXsvzdXlOvl
qrXvgOtNbiNBF28FzZqq7WvgaZuGnCcgM1SfQDqBzTFe+1sLAmUSeyHFIyRCpVxz
eKqPsyqv19GRBtZbZlDWiNXh+xLb0nBUJHxwSPqfdeutsBGPQ9GaGm+FrGGAhmCo
R6UTb/BX8e7mxKWClNO8grKML70Gl1WP5y+sXn/YToU/9dMftAoA4aH0mbC6Tugs
oY1rNjsdmui90g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org