Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/de51ab7222cfc0514f1fe550261024d436aeaaab.roa
File: de51ab7222cfc0514f1fe550261024d436aeaaab.roa (raw, json)
Hash identifier: nRXYv95SVctQzEskxApMRkX8hXYXhwRPMgFUduFlsrk=
Subject key identifier: 75:FC:25:99:3A:AB:B6:05:0F:D0:49:88:B9:C0:6A:06:A7:E1:0B:EB
Certificate issuer: /CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
Certificate serial: 288857
Authority key identifier: EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/de51ab7222cfc0514f1fe550261024d436aeaaab.roa
Signing time: Thu 28 Mar 2024 19:02:03 +0000
ROA not before: Thu 28 Mar 2024 03:00:00 +0000
ROA not after: Sat 28 Mar 2026 03:00:00 +0000
asID: 52468
IP address blocks: 45.225.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2656343 (0x288857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
Validity
Not Before: Mar 28 03:00:00 2024 GMT
Not After : Mar 28 03:00:00 2026 GMT
Subject: CN=de51ab7222cfc0514f1fe550261024d436aeaaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9b:4c:e0:cd:80:fb:b9:e4:bb:fe:5e:c7:76:
a1:a6:50:d6:b8:e7:c5:07:11:bf:f0:67:f5:ca:8d:
b7:15:c9:20:ad:af:cd:c8:9c:b8:34:c9:62:06:fd:
95:7a:a7:36:f6:72:91:e9:00:5c:15:a4:0b:31:37:
c1:60:79:64:ac:79:03:17:ab:7f:ba:5d:f9:bc:b0:
98:d2:56:dc:b6:27:77:04:af:45:2e:d0:f0:74:df:
6d:e1:98:00:b8:1e:f3:1d:5b:2d:59:32:53:4b:93:
ca:a9:ca:32:2d:2d:ce:6c:ae:8a:8b:fd:1d:75:96:
1b:ee:8a:39:3c:ea:30:46:1b:80:e0:ef:d2:d0:77:
28:bf:47:97:04:77:28:68:57:cb:7b:ef:d1:cd:60:
8b:94:13:47:f9:d4:38:3a:98:21:c0:cc:bc:6e:e5:
9f:6f:85:24:16:74:43:2b:56:f0:d7:03:b8:09:64:
9b:63:5e:71:ce:3d:f6:75:78:26:c3:e8:33:82:6f:
62:44:db:f1:0f:9f:de:8b:50:1c:78:40:1b:73:72:
0f:c9:c1:49:53:07:66:d7:33:a8:b5:60:56:26:82:
98:07:2e:67:4a:08:60:05:28:1b:e9:3e:f1:34:a5:
b6:42:90:db:7c:86:6d:1e:9a:93:36:1d:4a:a5:f0:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FC:25:99:3A:AB:B6:05:0F:D0:49:88:B9:C0:6A:06:A7:E1:0B:EB
X509v3 Authority Key Identifier:
keyid:EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/de51ab7222cfc0514f1fe550261024d436aeaaab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.104.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:ad:6f:0e:3e:1a:41:84:cf:60:05:70:72:7a:02:be:d1:32:
e0:27:92:e0:4d:ef:6c:e4:09:a8:d9:ac:cc:67:06:84:04:56:
3b:7b:05:f2:7f:10:a8:7b:0c:ff:1a:4d:a6:29:e8:b5:a2:d6:
03:33:0f:10:45:2f:48:9e:ee:d0:12:54:c0:8b:91:75:ad:74:
10:f1:df:96:08:fc:fd:a1:d6:a7:f3:d5:95:35:76:15:21:e1:
0f:6c:29:7c:ec:8a:34:f5:fc:6d:41:90:e3:0a:70:79:b2:f7:
ad:21:6b:0c:5f:a4:52:23:70:a5:07:1d:33:c6:a8:04:ee:03:
b5:ac:f7:97:ad:4a:70:d7:b1:d3:26:39:41:97:e3:ab:7f:fe:
8f:4e:83:0d:5d:ee:50:3e:5a:56:83:38:20:c9:e2:49:3a:b7:
e4:6a:0b:94:62:54:3d:a9:99:15:50:75:9f:e1:95:41:5a:d2:
86:be:cb:2f:40:13:c6:13:0c:04:6a:04:39:1e:83:68:46:69:
5d:95:cc:7d:01:b3:25:b7:ed:f2:98:69:57:73:f4:17:9d:61:
0c:9b:7a:10:ac:87:9b:97:d1:7b:01:8d:62:dd:9e:ce:61:76:
a8:97:96:7f:b0:78:7c:9b:51:64:14:e8:31:00:47:d4:53:f9:
65:61:98:82
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKIhXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
MWZlMGM0ZTY1MGEzMzhlODBiNDA2NmUzMWU0OWU4MTIyY2RlYjEwHhcNMjQwMzI4
MDMwMDAwWhcNMjYwMzI4MDMwMDAwWjAzMTEwLwYDVQQDEyhkZTUxYWI3MjIyY2Zj
MDUxNGYxZmU1NTAyNjEwMjRkNDM2YWVhYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh5tM4M2A+7nku/5ex3ahplDWuOfFBxG/8Gf1yo23Fckgra/N
yJy4NMliBv2Veqc29nKR6QBcFaQLMTfBYHlkrHkDF6t/ul35vLCY0lbctid3BK9F
LtDwdN9t4ZgAuB7zHVstWTJTS5PKqcoyLS3ObK6Ki/0ddZYb7oo5POowRhuA4O/S
0Hcov0eXBHcoaFfLe+/RzWCLlBNH+dQ4OpghwMy8buWfb4UkFnRDK1bw1wO4CWSb
Y15xzj32dXgmw+gzgm9iRNvxD5/ei1AceEAbc3IPycFJUwdm1zOotWBWJoKYBy5n
SghgBSgb6T7xNKW2QpDbfIZtHpqTNh1KpfDIwQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHX8JZk6q7YFD9BJiLnAagan4QvrMB8GA1UdIwQYMBaAFOz7MiMnJia//GJW
1tjVhZ/+q+gLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkxZmUw
YzRlNjUwYTMzOGU4MGI0MDY2ZTMxZTQ5ZTgxMjJjZGViMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzUzZDZmNjMtOTFlMS00NGVkLWFmY2QtMTYyMjA2
MGM3ODRjL2RlNTFhYjcyMjJjZmMwNTE0ZjFmZTU1MDI2MTAyNGQ0MzZhZWFhYWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNTNkNmY2My05MWUxLTQ0ZWQtYWZjZC0xNjIy
MDYwYzc4NGMvZDkxZmUwYzRlNjUwYTMzOGU4MGI0MDY2ZTMxZTQ5ZTgxMjJjZGVi
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3haDANBgkqhkiG9w0BAQsFAAOCAQEAH61vDj4aQYTPYAVw
cnoCvtEy4CeS4E3vbOQJqNmszGcGhARWO3sF8n8QqHsM/xpNpinotaLWAzMPEEUv
SJ7u0BJUwIuRda10EPHflgj8/aHWp/PVlTV2FSHhD2wpfOyKNPX8bUGQ4wpwebL3
rSFrDF+kUiNwpQcdM8aoBO4Dtaz3l61KcNex0yY5QZfjq3/+j06DDV3uUD5aVoM4
IMniSTq35GoLlGJUPamZFVB1n+GVQVrShr7LL0ATxhMMBGoEOR6DaEZpXZXMfQGz
Jbft8phpV3P0F51hDJt6EKyHm5fRewGNYt2ezmF2qJeWf7B4fJtRZBToMQBH1FP5
ZWGYgg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org