Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/6009208fc01133bf5e7fb9a7065cea1b6334f325.roa
File: 6009208fc01133bf5e7fb9a7065cea1b6334f325.roa (raw, json)
Hash identifier: fNMC5lB90ZxruyhQ0ah6hdtxRSMgo6/vCcM09KKXi3M=
Subject key identifier: 04:B4:AC:AB:E0:B5:C2:67:2A:1F:A0:D7:E2:90:B9:06:94:CA:3F:22
Certificate issuer: /CN=72abba6b7cd25cc52bbab3345005452793c3070a
Certificate serial: 16A696
Authority key identifier: DF:A6:D1:42:79:C2:7D:AB:84:68:F0:56:15:83:0F:3A:0C:FB:A5:A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72abba6b7cd25cc52bbab3345005452793c3070a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/6009208fc01133bf5e7fb9a7065cea1b6334f325.roa
Signing time: Tue 23 Jan 2024 07:30:12 +0000
ROA not before: Tue 23 Jan 2024 07:30:12 +0000
ROA not after: Thu 22 Jan 2026 07:30:12 +0000
asID: 271938
IP address blocks: 45.5.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1484438 (0x16a696)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72abba6b7cd25cc52bbab3345005452793c3070a
Validity
Not Before: Jan 23 07:30:12 2024 GMT
Not After : Jan 22 07:30:12 2026 GMT
Subject: CN=6009208fc01133bf5e7fb9a7065cea1b6334f325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:94:91:31:24:6f:83:3a:33:18:81:65:e9:9c:
a4:33:bf:c0:bb:6b:a7:20:b4:a4:d0:40:c7:0b:af:
4d:00:d1:15:49:32:a2:1f:bd:9f:1c:65:a0:c3:91:
32:f5:e4:6a:8d:4a:20:2f:e9:7e:96:0b:ca:5a:33:
e2:cc:47:28:72:d9:0b:4d:69:49:e5:65:ad:eb:e9:
64:ab:0a:a9:f0:b2:a6:f7:93:a6:18:43:30:59:30:
66:82:e7:a9:49:be:9b:8e:71:ad:81:95:4f:a7:44:
f8:c0:0e:00:2f:04:7b:e9:58:9c:ff:4d:5f:e5:40:
66:08:da:e1:d4:0c:9c:43:69:d5:84:eb:98:db:9c:
ff:60:5f:c1:5d:4d:af:34:91:3c:d9:9a:4b:48:dd:
8e:b6:93:02:87:86:75:51:a2:51:73:7b:10:11:99:
30:80:0d:80:d4:e4:aa:22:d2:8d:c4:2f:47:a9:9b:
ad:3e:e7:25:ad:c7:ad:7a:ab:ca:0e:9c:60:7d:b0:
fb:06:9f:fe:0b:78:c1:0f:d1:b9:7c:ec:fd:c3:be:
b1:35:22:ac:fe:c5:f6:89:e8:84:45:97:3b:27:bf:
5c:44:6c:b8:cd:94:59:43:2c:2f:60:fb:4e:09:09:
19:41:87:63:b9:82:95:a5:6b:8d:ff:ca:61:6e:dd:
57:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B4:AC:AB:E0:B5:C2:67:2A:1F:A0:D7:E2:90:B9:06:94:CA:3F:22
X509v3 Authority Key Identifier:
keyid:DF:A6:D1:42:79:C2:7D:AB:84:68:F0:56:15:83:0F:3A:0C:FB:A5:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72abba6b7cd25cc52bbab3345005452793c3070a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/6009208fc01133bf5e7fb9a7065cea1b6334f325.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/72abba6b7cd25cc52bbab3345005452793c3070a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.216.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:f6:ac:b0:ee:87:1d:a6:d6:59:65:ed:38:52:55:2f:dc:6f:
a9:f5:a9:74:3d:02:67:38:43:87:11:9a:7e:58:7e:a5:15:c5:
41:85:0c:e9:6a:23:17:67:e9:00:8e:a6:8e:92:76:ac:55:6f:
33:3b:b6:be:e3:c3:04:ac:43:a0:a4:be:74:9c:8f:50:2b:89:
a1:aa:0f:4c:70:34:e9:24:8c:a4:f5:ec:ba:1a:77:cc:77:3c:
c4:f3:cb:94:34:3e:8c:d5:02:e9:f4:60:b9:22:e8:72:82:6e:
b9:ec:32:01:11:f4:c9:71:de:11:ea:62:f6:55:69:d4:2f:fd:
6a:30:81:0c:ee:59:cc:71:00:5d:49:00:88:ca:b7:5f:86:dd:
03:4d:65:99:a9:02:53:be:49:b9:f1:0f:08:72:d8:a9:21:2d:
31:58:68:84:99:1b:2f:39:1e:f5:44:ce:08:c5:5c:a6:2e:df:
39:ab:20:a9:4d:50:c8:b8:f5:dc:90:c7:d6:3c:6e:5c:fd:4f:
99:76:1b:bf:46:37:c9:d9:06:71:17:15:af:1a:6a:c5:90:b0:
f0:1b:da:c7:68:7f:32:53:21:20:34:40:8e:1e:8a:f2:19:d4:
e0:ed:8c:f2:26:39:86:eb:24:5b:3c:d7:9b:b5:e9:b3:3d:24:
46:03:85:73
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFqaWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcy
YWJiYTZiN2NkMjVjYzUyYmJhYjMzNDUwMDU0NTI3OTNjMzA3MGEwHhcNMjQwMTIz
MDczMDEyWhcNMjYwMTIyMDczMDEyWjAzMTEwLwYDVQQDEyg2MDA5MjA4ZmMwMTEz
M2JmNWU3ZmI5YTcwNjVjZWExYjYzMzRmMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA9JSRMSRvgzozGIFl6ZykM7/Au2unILSk0EDHC69NANEVSTKi
H72fHGWgw5Ey9eRqjUogL+l+lgvKWjPizEcoctkLTWlJ5WWt6+lkqwqp8LKm95Om
GEMwWTBmguepSb6bjnGtgZVPp0T4wA4ALwR76Vic/01f5UBmCNrh1AycQ2nVhOuY
25z/YF/BXU2vNJE82ZpLSN2OtpMCh4Z1UaJRc3sQEZkwgA2A1OSqItKNxC9HqZut
PuclrceteqvKDpxgfbD7Bp/+C3jBD9G5fOz9w76xNSKs/sX2ieiERZc7J79cRGy4
zZRZQywvYPtOCQkZQYdjuYKVpWuN/8phbt1X2QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAS0rKvgtcJnKh+g1+KQuQaUyj8iMB8GA1UdIwQYMBaAFN+m0UJ5wn2rhGjw
VhWDDzoM+6WjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzJhYmJh
NmI3Y2QyNWNjNTJiYmFiMzM0NTAwNTQ1Mjc5M2MzMDcwYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGQyYzU5MjItYTcwMi00NDcyLWI0MjctMjU3MzFk
NTMxZjAwLzYwMDkyMDhmYzAxMTMzYmY1ZTdmYjlhNzA2NWNlYTFiNjMzNGYzMjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZDJjNTkyMi1hNzAyLTQ0NzItYjQyNy0yNTcz
MWQ1MzFmMDAvNzJhYmJhNmI3Y2QyNWNjNTJiYmFiMzM0NTAwNTQ1Mjc5M2MzMDcw
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi0F2DANBgkqhkiG9w0BAQsFAAOCAQEArvassO6HHabWWWXt
OFJVL9xvqfWpdD0CZzhDhxGaflh+pRXFQYUM6WojF2fpAI6mjpJ2rFVvMzu2vuPD
BKxDoKS+dJyPUCuJoaoPTHA06SSMpPXsuhp3zHc8xPPLlDQ+jNUC6fRguSLocoJu
uewyARH0yXHeEepi9lVp1C/9ajCBDO5ZzHEAXUkAiMq3X4bdA01lmakCU75JufEP
CHLYqSEtMVhohJkbLzke9UTOCMVcpi7fOasgqU1QyLj13JDH1jxuXP1PmXYbv0Y3
ydkGcRcVrxpqxZCw8Bvax2h/MlMhIDRAjh6K8hnU4O2M8iY5huskWzzXm7Xpsz0k
RgOFcw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org