Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/4ea7955661dfb1fccc9b2b46b7c1aab03aed7011.roa
File: 4ea7955661dfb1fccc9b2b46b7c1aab03aed7011.roa (raw, json)
Hash identifier: A0tx3e+sTls+gIIYwjl348D0a8XNqtU1hed8ss7Rkt0=
Subject key identifier: 7D:AC:34:12:DC:E4:A8:2A:35:37:AA:98:1F:9C:32:35:AD:6E:77:B1
Certificate issuer: /CN=f4d58c84621ad64623cd4679aa4e983e69c0c959
Certificate serial: 01138C
Authority key identifier: 45:42:12:0F:D0:AB:E1:79:D6:C9:E8:E4:F9:35:D5:37:89:97:CF:BA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4d58c84621ad64623cd4679aa4e983e69c0c959.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/4ea7955661dfb1fccc9b2b46b7c1aab03aed7011.roa
Signing time: Wed 08 Jun 2022 14:14:22 +0000
ROA not before: Thu 28 Apr 2022 03:00:00 +0000
ROA not after: Sun 28 Apr 2024 03:00:00 +0000
asID: 14080
IP address blocks: 168.228.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70540 (0x1138c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d58c84621ad64623cd4679aa4e983e69c0c959
Validity
Not Before: Apr 28 03:00:00 2022 GMT
Not After : Apr 28 03:00:00 2024 GMT
Subject: CN=4ea7955661dfb1fccc9b2b46b7c1aab03aed7011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8f:cb:c2:95:b7:51:f6:fd:9d:dd:88:a4:99:
21:ca:7e:18:dd:d8:f6:eb:cc:ef:e6:63:81:da:4c:
dd:7d:6e:b9:77:95:81:14:83:d8:29:d0:b2:1c:64:
55:be:f3:c6:4b:d4:ed:2b:c3:c1:98:92:74:87:70:
f4:00:1c:cc:5a:3e:3f:f6:cd:8b:49:4a:48:2e:1f:
23:51:29:4b:af:0b:bc:93:e4:15:c0:9b:c2:f6:4c:
0b:2f:00:83:96:5b:f7:09:81:72:3f:c7:80:5d:7e:
bd:6a:1a:39:01:ff:db:ca:73:28:29:4f:19:c6:a5:
77:01:49:c8:05:18:1a:fc:ab:17:c1:11:61:de:02:
da:dc:03:d1:36:b3:7e:5a:d2:9c:ed:48:83:bc:54:
6f:5a:53:38:1e:19:e9:39:f0:91:cd:d5:c5:67:17:
57:cf:92:71:2c:6b:e3:a8:33:bf:cd:5e:59:33:c1:
62:8b:71:18:a9:14:9e:3b:17:3d:d8:a0:d1:c9:0c:
24:8e:5b:24:64:43:68:a2:09:e3:71:a2:98:03:61:
8f:bb:df:a5:72:b8:76:3b:81:89:9b:e3:b6:ee:33:
34:2f:09:91:66:29:a3:fc:78:92:9a:1e:bf:c6:cd:
1b:3d:81:20:11:1d:98:f6:af:33:bb:15:a7:43:d6:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AC:34:12:DC:E4:A8:2A:35:37:AA:98:1F:9C:32:35:AD:6E:77:B1
X509v3 Authority Key Identifier:
keyid:45:42:12:0F:D0:AB:E1:79:D6:C9:E8:E4:F9:35:D5:37:89:97:CF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4d58c84621ad64623cd4679aa4e983e69c0c959.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/4ea7955661dfb1fccc9b2b46b7c1aab03aed7011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/f4d58c84621ad64623cd4679aa4e983e69c0c959.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.108.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:e6:5d:a5:bb:0c:d1:dc:2e:f6:84:60:2b:f5:2f:48:7d:e2:
f8:9c:22:bb:77:83:e1:db:dc:06:09:a5:c4:a8:09:7c:9e:d9:
53:d0:bd:75:4e:6d:c0:41:37:63:08:d7:fe:bd:e8:53:ae:95:
b1:35:dd:ba:a0:62:f5:e2:b2:3b:f7:8c:76:2b:4b:bb:8c:a6:
8c:a6:68:e5:15:5d:cd:64:ad:2c:41:cd:45:ac:5d:02:91:30:
6f:0b:88:71:55:e0:2d:b2:3b:fd:e5:2d:42:d1:86:41:47:84:
5e:c5:d0:f8:5b:63:d5:5b:74:6a:13:9f:20:d5:b1:0d:89:80:
63:96:e1:ca:b2:18:4c:fa:81:76:98:e4:a0:65:66:ea:b4:40:
d6:ad:85:b8:8a:26:cf:1d:84:ae:43:b2:85:26:e2:65:d0:90:
05:eb:bb:c4:a0:8a:04:b1:c7:1b:3a:1b:ae:72:2b:06:e5:06:
92:c5:fa:73:f1:66:11:d8:98:9b:df:d4:42:66:1a:9d:8d:33:
cc:34:a4:4c:7c:51:4e:47:75:dd:bc:9f:39:5c:d0:56:75:a0:
89:35:30:b6:ee:33:e5:79:bf:c4:6d:40:f0:16:fd:16:c0:ad:
0c:6d:a9:77:7e:55:2f:cd:fd:28:5f:0f:46:eb:f4:10:41:98:
71:9e:68:e1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAROMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY0
ZDU4Yzg0NjIxYWQ2NDYyM2NkNDY3OWFhNGU5ODNlNjljMGM5NTkwHhcNMjIwNDI4
MDMwMDAwWhcNMjQwNDI4MDMwMDAwWjAzMTEwLwYDVQQDEyg0ZWE3OTU1NjYxZGZi
MWZjY2M5YjJiNDZiN2MxYWFiMDNhZWQ3MDExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmo/LwpW3Ufb9nd2IpJkhyn4Y3dj268zv5mOB2kzdfW65d5WB
FIPYKdCyHGRVvvPGS9TtK8PBmJJ0h3D0ABzMWj4/9s2LSUpILh8jUSlLrwu8k+QV
wJvC9kwLLwCDllv3CYFyP8eAXX69aho5Af/bynMoKU8ZxqV3AUnIBRga/KsXwRFh
3gLa3APRNrN+WtKc7UiDvFRvWlM4HhnpOfCRzdXFZxdXz5JxLGvjqDO/zV5ZM8Fi
i3EYqRSeOxc92KDRyQwkjlskZENoognjcaKYA2GPu9+lcrh2O4GJm+O27jM0LwmR
Zimj/HiSmh6/xs0bPYEgER2Y9q8zuxWnQ9a45QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFH2sNBLc5KgqNTeqmB+cMjWtbnexMB8GA1UdIwQYMBaAFEVCEg/Qq+F51sno
5Pk11TeJl8+6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjRkNThj
ODQ2MjFhZDY0NjIzY2Q0Njc5YWE0ZTk4M2U2OWMwYzk1OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTIxNjRkZmUtMDU4OC00ZTlkLTk1N2MtZjUxODcw
N2E1ZTM1LzRlYTc5NTU2NjFkZmIxZmNjYzliMmI0NmI3YzFhYWIwM2FlZDcwMTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85MjE2NGRmZS0wNTg4LTRlOWQtOTU3Yy1mNTE4
NzA3YTVlMzUvZjRkNThjODQ2MjFhZDY0NjIzY2Q0Njc5YWE0ZTk4M2U2OWMwYzk1
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqjkbDANBgkqhkiG9w0BAQsFAAOCAQEAx+ZdpbsM0dwu9oRg
K/UvSH3i+Jwiu3eD4dvcBgmlxKgJfJ7ZU9C9dU5twEE3YwjX/r3oU66VsTXduqBi
9eKyO/eMditLu4ymjKZo5RVdzWStLEHNRaxdApEwbwuIcVXgLbI7/eUtQtGGQUeE
XsXQ+Ftj1Vt0ahOfINWxDYmAY5bhyrIYTPqBdpjkoGVm6rRA1q2FuIomzx2ErkOy
hSbiZdCQBeu7xKCKBLHHGzobrnIrBuUGksX6c/FmEdiYm9/UQmYanY0zzDSkTHxR
Tkd13byfOVzQVnWgiTUwtu4z5Xm/xG1A8Bb9FsCtDG2pd35VL839KF8PRuv0EEGY
cZ5o4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org