Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/af25318a9af6f7a0cfac5811dcbee4c15c4c64a8.roa
File: af25318a9af6f7a0cfac5811dcbee4c15c4c64a8.roa (raw, json)
Hash identifier: +dHhTgzuMRn38MwFL9/m7VJEM2Djq0n2THUsuM1MQqY=
Subject key identifier: 05:10:9E:99:4F:DD:C7:A5:04:F0:43:20:89:32:FA:09:4D:D2:A7:D2
Certificate issuer: /CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
Certificate serial: 03295E
Authority key identifier: A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/af25318a9af6f7a0cfac5811dcbee4c15c4c64a8.roa
Signing time: Tue 10 Jan 2023 14:02:59 +0000
ROA not before: Mon 09 Jan 2023 14:01:07 +0000
ROA not after: Fri 10 Jan 2025 14:01:07 +0000
asID: 265679
IP address blocks: 45.4.216.0/22 maxlen: 22
2803:c1c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207198 (0x3295e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
Validity
Not Before: Jan 9 14:01:07 2023 GMT
Not After : Jan 10 14:01:07 2025 GMT
Subject: CN=af25318a9af6f7a0cfac5811dcbee4c15c4c64a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:07:f9:cd:66:b3:a5:f5:03:de:74:af:f7:10:
00:33:c7:03:0c:8c:73:97:a3:56:a0:b9:1a:d2:e1:
ec:9e:cb:1b:ad:69:61:85:b6:81:33:2c:7c:56:e1:
21:b1:61:ad:c8:33:9c:1d:6f:c4:63:56:55:51:a8:
cd:f4:44:98:4d:63:fb:aa:f6:28:51:eb:c2:f3:cf:
ff:45:12:03:2c:95:15:1f:d3:e9:cc:b0:6c:c6:cc:
7a:1a:27:0a:62:e3:fd:a2:b9:d2:fd:7a:c0:c7:87:
f7:4f:34:7b:08:5f:1c:42:9d:2b:46:34:22:8b:8b:
f6:0e:f8:cf:74:ef:3e:da:e8:33:f4:69:0b:b5:ea:
cd:59:f2:6d:4e:68:43:5a:44:2e:29:56:86:f8:66:
b7:b5:f5:1b:34:ba:f3:d8:f8:2e:d0:a4:dc:18:4d:
0a:9f:4f:2f:9d:8a:00:34:a0:d6:4e:ef:9a:4e:a5:
71:f9:19:7a:b2:0b:e2:2c:37:cd:38:c1:e5:98:b3:
f5:63:1b:fa:8d:72:45:82:d1:db:c9:61:f4:5e:13:
5a:51:e1:f0:fd:4a:3e:b7:ec:9d:10:96:f2:da:fb:
bf:43:e3:f9:ff:8b:d8:bf:5e:47:4e:83:e1:0c:ba:
07:06:e1:94:b8:4c:e2:81:c8:78:8d:46:82:f9:46:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:10:9E:99:4F:DD:C7:A5:04:F0:43:20:89:32:FA:09:4D:D2:A7:D2
X509v3 Authority Key Identifier:
keyid:A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/af25318a9af6f7a0cfac5811dcbee4c15c4c64a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.216.0/22
IPv6:
2803:c1c0::/32
Signature Algorithm: sha256WithRSAEncryption
24:34:a7:06:4d:c5:90:c2:5c:8a:89:80:0d:fa:0a:97:78:8e:
d3:35:e0:46:8d:b2:6b:e0:52:08:3f:90:64:58:02:fb:3c:15:
20:9d:30:54:3f:18:94:8b:81:d0:e8:45:db:6d:9f:67:c4:84:
c7:91:16:9a:61:7d:dc:d0:e2:15:fc:49:be:4e:fd:10:b6:04:
16:6a:d1:72:96:34:18:d8:fd:e5:4f:b3:50:08:84:2d:16:16:
d5:19:28:36:fd:21:86:ed:93:ad:b2:ee:2c:c8:68:d6:36:69:
c5:37:f9:f8:1a:5a:85:af:25:16:b1:ea:af:cd:26:c6:27:d4:
cb:cd:52:a7:48:df:2d:74:19:64:01:76:bf:aa:7e:00:68:40:
69:d9:8f:eb:36:19:33:6c:99:cf:ba:2d:26:df:92:8b:23:31:
2a:53:f1:2e:c5:ee:b9:3d:e3:1c:bf:45:51:1a:f4:23:97:5e:
09:3d:1a:96:df:3a:e8:f0:25:0b:48:b1:6f:63:b7:10:2c:3b:
e8:46:38:71:2e:ab:91:54:f5:49:c8:13:e8:7b:e3:5d:1e:29:
74:93:fa:f9:71:bc:94:f6:ae:90:14:4e:71:89:e0:99:b7:56:
96:2e:0b:78:46:e6:7d:d3:82:1b:af:10:c8:15:93:03:98:4b:
05:e6:bb:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDAyleMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdh
ODZkN2IxMzhkOTc0YTFmMGM3MDgzOGViNmZiMmExMGFlMWFiNWIwHhcNMjMwMTA5
MTQwMTA3WhcNMjUwMTEwMTQwMTA3WjAzMTEwLwYDVQQDEyhhZjI1MzE4YTlhZjZm
N2EwY2ZhYzU4MTFkY2JlZTRjMTVjNGM2NGE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiQf5zWazpfUD3nSv9xAAM8cDDIxzl6NWoLka0uHsnssbrWlh
hbaBMyx8VuEhsWGtyDOcHW/EY1ZVUajN9ESYTWP7qvYoUevC88//RRIDLJUVH9Pp
zLBsxsx6GicKYuP9ornS/XrAx4f3TzR7CF8cQp0rRjQii4v2DvjPdO8+2ugz9GkL
terNWfJtTmhDWkQuKVaG+Ga3tfUbNLrz2Pgu0KTcGE0Kn08vnYoANKDWTu+aTqVx
+Rl6sgviLDfNOMHlmLP1Yxv6jXJFgtHbyWH0XhNaUeHw/Uo+t+ydEJby2vu/Q+P5
/4vYv15HToPhDLoHBuGUuEzigch4jUaC+UalGQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFAUQnplP3celBPBDIIky+glN0qfSMB8GA1UdIwQYMBaAFKQA0350Vv0ozJ/j
PirPTptOhLvvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2E4NmQ3
YjEzOGQ5NzRhMWYwYzcwODM4ZWI2ZmIyYTEwYWUxYWI1Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmE5ZDVjYTgtNzM5Ny00MDNjLWJiN2EtMjY1NGIw
MDgzMjEwL2FmMjUzMThhOWFmNmY3YTBjZmFjNTgxMWRjYmVlNGMxNWM0YzY0YTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYTlkNWNhOC03Mzk3LTQwM2MtYmI3YS0yNjU0
YjAwODMyMTAvN2E4NmQ3YjEzOGQ5NzRhMWYwYzcwODM4ZWI2ZmIyYTEwYWUxYWI1
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi0E2DANBAIAAjAHAwUAKAPBwDANBgkqhkiG9w0BAQsFAAOC
AQEAJDSnBk3FkMJciomADfoKl3iO0zXgRo2ya+BSCD+QZFgC+zwVIJ0wVD8YlIuB
0OhF222fZ8SEx5EWmmF93NDiFfxJvk79ELYEFmrRcpY0GNj95U+zUAiELRYW1Rko
Nv0hhu2TrbLuLMho1jZpxTf5+Bpaha8lFrHqr80mxifUy81Sp0jfLXQZZAF2v6p+
AGhAadmP6zYZM2yZz7otJt+SiyMxKlPxLsXuuT3jHL9FURr0I5deCT0alt866PAl
C0ixb2O3ECw76EY4cS6rkVT1ScgT6HvjXR4pdJP6+XG8lPaukBROcYngmbdWli4L
eEbmfdOCG68QyBWTA5hLBea76w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org