Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/7221dbf8a4af2256979ec365e34816fb7ac6f28e.roa
File: 7221dbf8a4af2256979ec365e34816fb7ac6f28e.roa (raw, json)
Hash identifier: AZo0qNYxnDoyKKF3QzZLNNH/2ckbTEyFeAOOd+FPzTM=
Subject key identifier: 1A:98:7B:51:75:5F:F2:EE:40:BB:E7:F7:95:F3:E7:14:F0:F5:DB:49
Certificate issuer: /CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
Certificate serial: 248504
Authority key identifier: 57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/7221dbf8a4af2256979ec365e34816fb7ac6f28e.roa
Signing time: Sun 12 Nov 2023 14:08:25 +0000
ROA not before: Sun 12 Nov 2023 14:08:25 +0000
ROA not after: Wed 12 Nov 2025 14:08:25 +0000
asID: 263779
IP address blocks: 45.231.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2393348 (0x248504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
Validity
Not Before: Nov 12 14:08:25 2023 GMT
Not After : Nov 12 14:08:25 2025 GMT
Subject: CN=7221dbf8a4af2256979ec365e34816fb7ac6f28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:29:05:6f:e9:13:be:9a:cc:27:9e:9d:0c:
d0:40:99:8e:3a:d8:9a:bc:b7:4c:d9:9a:22:17:dc:
2c:16:6d:33:bd:1b:16:ba:12:13:bf:25:56:da:e0:
24:c7:9b:76:2d:a7:62:a3:00:8e:48:cb:cd:dc:e5:
1b:69:92:b3:7f:60:1f:94:5f:f3:8a:58:12:cc:11:
e6:44:21:6a:76:34:a7:03:24:c9:28:15:38:6c:f4:
51:e6:15:17:70:0f:10:23:b9:0a:9b:6d:2e:7a:e0:
5c:43:cc:53:15:23:4a:eb:f5:7c:1f:77:b4:11:66:
70:2c:8c:02:5b:9f:53:38:0b:dd:0a:46:52:e5:29:
45:83:13:13:93:8a:e9:3d:fb:2b:b7:30:f3:20:39:
7b:d2:a5:f4:7b:2d:49:14:87:02:31:d9:96:9a:92:
96:98:8c:24:31:ca:5d:59:63:3b:2b:4a:12:5a:ce:
30:f5:51:46:16:d8:f2:75:77:31:40:8a:6a:7a:1e:
c7:cb:71:02:e7:43:26:ab:30:ab:d6:ea:a6:81:bb:
ec:cb:22:99:86:ea:78:cb:0b:65:58:5c:b1:b3:ce:
7b:b7:eb:65:29:57:30:9d:55:91:2e:34:ff:29:63:
2e:2f:0f:15:32:7e:66:f2:f5:ca:48:1f:18:01:b0:
43:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:98:7B:51:75:5F:F2:EE:40:BB:E7:F7:95:F3:E7:14:F0:F5:DB:49
X509v3 Authority Key Identifier:
keyid:57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/7221dbf8a4af2256979ec365e34816fb7ac6f28e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.52.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1a:69:49:b7:17:8d:8b:be:39:ad:eb:7f:19:f5:c3:b4:45:
51:d2:04:33:18:51:c7:01:6f:21:99:3a:fb:5c:4a:44:17:f9:
fb:47:64:c7:88:c6:39:c1:ed:71:84:fb:ce:05:80:78:29:b0:
46:0d:9a:b7:94:d9:60:12:c4:f5:9b:fd:7e:50:ef:4e:ff:ed:
ed:2c:13:14:58:81:95:8f:14:13:44:98:46:08:39:8d:52:74:
6d:c2:a9:e6:af:5c:62:6a:31:61:45:82:b8:bb:2b:d0:a0:8c:
8f:79:a6:f5:f3:f7:4d:a5:44:26:35:a4:84:b0:4f:d3:90:5b:
72:01:b4:6c:4c:d4:6a:ba:c1:10:2d:0d:79:51:bf:28:30:06:
53:3b:60:41:6c:52:fe:b2:c0:b2:c9:44:39:30:3b:5d:15:46:
65:a4:f3:38:d7:1a:89:3e:05:7e:c6:e2:7b:f5:d3:35:65:61:
2d:1f:00:fe:ea:58:ab:0f:d9:2f:6f:93:cb:9b:3b:59:93:8f:
90:80:b1:d1:b2:e0:6e:e6:8f:cd:ca:0f:6c:5b:f5:a9:43:cd:
e5:b4:40:37:82:51:63:92:6b:9c:13:de:5a:6a:41:33:77:2c:
33:69:3d:aa:63:de:6c:7f:3d:3b:7e:fd:61:3d:ab:ed:85:9a:
86:dd:10:0f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJIUEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRk
NDUzNmY4YmE3OGVhOGE3YTAwZDk5ZjZlZjk5NDI3NGI0YTEwOTIwHhcNMjMxMTEy
MTQwODI1WhcNMjUxMTEyMTQwODI1WjAzMTEwLwYDVQQDEyg3MjIxZGJmOGE0YWYy
MjU2OTc5ZWMzNjVlMzQ4MTZmYjdhYzZmMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqtwpBW/pE76azCeenQzQQJmOOtiavLdM2ZoiF9wsFm0zvRsW
uhITvyVW2uAkx5t2LadiowCOSMvN3OUbaZKzf2AflF/zilgSzBHmRCFqdjSnAyTJ
KBU4bPRR5hUXcA8QI7kKm20ueuBcQ8xTFSNK6/V8H3e0EWZwLIwCW59TOAvdCkZS
5SlFgxMTk4rpPfsrtzDzIDl70qX0ey1JFIcCMdmWmpKWmIwkMcpdWWM7K0oSWs4w
9VFGFtjydXcxQIpqeh7Hy3EC50MmqzCr1uqmgbvsyyKZhup4ywtlWFyxs857t+tl
KVcwnVWRLjT/KWMuLw8VMn5m8vXKSB8YAbBDHQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBqYe1F1X/LuQLvn95Xz5xTw9dtJMB8GA1UdIwQYMBaAFFfWhTwMDHIQRVAr
tkN3UmvH0FAJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGQ0NTM2
ZjhiYTc4ZWE4YTdhMDBkOTlmNmVmOTk0Mjc0YjRhMTA5Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWZkOGZhMGYtYTViZS00YjhkLTk2ZmItM2YzYzNi
ODY4ZWYwLzcyMjFkYmY4YTRhZjIyNTY5NzllYzM2NWUzNDgxNmZiN2FjNmYyOGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZmQ4ZmEwZi1hNWJlLTRiOGQtOTZmYi0zZjNj
M2I4NjhlZjAvNGQ0NTM2ZjhiYTc4ZWE4YTdhMDBkOTlmNmVmOTk0Mjc0YjRhMTA5
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3nNDANBgkqhkiG9w0BAQsFAAOCAQEAJxppSbcXjYu+Oa3r
fxn1w7RFUdIEMxhRxwFvIZk6+1xKRBf5+0dkx4jGOcHtcYT7zgWAeCmwRg2at5TZ
YBLE9Zv9flDvTv/t7SwTFFiBlY8UE0SYRgg5jVJ0bcKp5q9cYmoxYUWCuLsr0KCM
j3mm9fP3TaVEJjWkhLBP05BbcgG0bEzUarrBEC0NeVG/KDAGUztgQWxS/rLAsslE
OTA7XRVGZaTzONcaiT4Ffsbie/XTNWVhLR8A/upYqw/ZL2+Ty5s7WZOPkICx0bLg
buaPzcoPbFv1qUPN5bRAN4JRY5JrnBPeWmpBM3csM2k9qmPebH89O379YT2r7YWa
ht0QDw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:42 2024 by rpki-client on console-ams.rpki-client.org