Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d043e881-1700-4b8d-8f45-255495dc5181/f9c864b4c0eed2be65b217dc12c3f4198243bdaf.roa
File: f9c864b4c0eed2be65b217dc12c3f4198243bdaf.roa (raw, json)
Hash identifier: OLOBI7f5BjZCmNL9I04ITscmuVycAiCyo59WNh3CDuw=
Subject key identifier: 24:B3:11:05:44:18:14:8F:DC:A4:D0:27:F2:F6:4E:94:E6:E7:35:C5
Certificate issuer: /CN=cf32f89c33fc0cfad67adbc1d4a10a3113854f7c
Certificate serial: 06B3F0
Authority key identifier: 20:ED:5F:78:2C:4F:78:3A:93:08:89:B1:4F:E6:44:62:27:94:56:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf32f89c33fc0cfad67adbc1d4a10a3113854f7c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d043e881-1700-4b8d-8f45-255495dc5181/f9c864b4c0eed2be65b217dc12c3f4198243bdaf.roa
Signing time: Thu 28 Dec 2023 13:56:33 +0000
ROA not before: Thu 28 Dec 2023 13:56:33 +0000
ROA not after: Sun 28 Dec 2025 13:56:33 +0000
asID: 262191
IP address blocks: 45.169.37.0/24 maxlen: 24
45.169.38.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439280 (0x6b3f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf32f89c33fc0cfad67adbc1d4a10a3113854f7c
Validity
Not Before: Dec 28 13:56:33 2023 GMT
Not After : Dec 28 13:56:33 2025 GMT
Subject: CN=f9c864b4c0eed2be65b217dc12c3f4198243bdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:96:69:36:3e:03:f8:c3:5e:8c:49:52:ba:
31:b0:49:67:c3:57:41:55:99:9a:c9:85:03:96:b4:
d5:4c:39:b3:b3:ad:7b:2f:c0:af:c6:68:a5:46:08:
aa:c4:e8:9c:fa:49:8f:5c:1f:7d:0d:6e:ad:b6:0a:
0f:71:57:9e:b7:26:fa:c7:79:22:99:6f:ed:af:e6:
66:02:e6:bb:80:bb:49:60:ca:2a:c9:ea:6b:5c:d6:
7f:33:82:8f:ad:1a:58:ec:6d:2f:d4:01:cd:2c:05:
a2:92:e5:0d:87:f2:53:25:20:78:64:cb:8b:9e:f1:
60:91:e5:b0:04:38:aa:a5:9d:97:44:e9:1f:07:15:
54:d4:9e:55:34:c2:15:97:ee:56:54:08:f0:85:16:
55:1c:14:00:d3:fd:ab:a9:6e:1b:d7:27:7d:a6:69:
66:ee:56:e8:cd:e6:32:5c:9e:94:a1:45:5c:43:94:
25:26:3f:30:78:d1:82:c2:e4:dc:65:98:9f:aa:61:
44:fd:24:9b:e0:da:94:86:43:33:fd:b8:56:11:c4:
4c:9e:a4:b4:f0:f2:d0:d7:f1:83:cb:27:46:30:5e:
5b:61:bc:da:25:80:14:39:11:c5:2a:9f:cd:2f:c3:
21:22:f8:ec:08:93:6d:71:56:57:19:ae:c5:7d:e9:
42:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B3:11:05:44:18:14:8F:DC:A4:D0:27:F2:F6:4E:94:E6:E7:35:C5
X509v3 Authority Key Identifier:
keyid:20:ED:5F:78:2C:4F:78:3A:93:08:89:B1:4F:E6:44:62:27:94:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf32f89c33fc0cfad67adbc1d4a10a3113854f7c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d043e881-1700-4b8d-8f45-255495dc5181/f9c864b4c0eed2be65b217dc12c3f4198243bdaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d043e881-1700-4b8d-8f45-255495dc5181/cf32f89c33fc0cfad67adbc1d4a10a3113854f7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.37.0-45.169.39.255
Signature Algorithm: sha256WithRSAEncryption
69:ac:93:cc:6f:23:4e:bc:72:ee:11:e8:7b:43:8f:92:2c:53:
67:a4:eb:ca:f5:de:70:21:2f:60:ad:a1:8f:91:83:a1:4c:b1:
2f:e8:cc:bd:1e:3c:df:ca:7b:20:49:99:64:66:79:e2:9d:bd:
e6:36:84:1d:64:cd:33:b2:f9:59:1a:6e:d1:2d:7b:e8:04:af:
50:d8:fa:77:56:1c:3b:89:df:68:2a:51:94:ab:35:9b:ee:ab:
05:ac:77:cf:7d:1f:d9:a6:08:d9:65:12:45:74:e8:b3:e4:c8:
89:e8:1d:d7:74:df:02:33:3e:54:17:ac:56:55:34:e5:45:30:
d8:71:67:69:a0:3b:77:70:6a:62:f7:55:e2:11:04:71:99:bb:
72:ab:69:e1:14:56:90:5c:c5:a5:c4:95:6d:ab:0d:cb:e1:6a:
0c:3f:fd:51:49:8f:97:e9:e0:fa:9a:a9:aa:47:19:06:6a:04:
a7:73:98:f8:68:0e:87:0b:8c:6c:b4:3c:e7:ef:3a:25:a0:71:
d2:0b:3d:f4:cc:31:dd:86:bf:eb:d2:5f:b5:52:39:04:ce:fa:
41:3b:2d:1e:27:ed:75:1c:09:98:49:61:aa:f9:f8:f6:e3:ad:
f1:72:a2:bf:cf:ed:0a:37:16:07:cf:e5:a8:76:21:f8:a1:37:
ce:6d:90:34
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDBrPwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
MzJmODljMzNmYzBjZmFkNjdhZGJjMWQ0YTEwYTMxMTM4NTRmN2MwHhcNMjMxMjI4
MTM1NjMzWhcNMjUxMjI4MTM1NjMzWjAzMTEwLwYDVQQDEyhmOWM4NjRiNGMwZWVk
MmJlNjViMjE3ZGMxMmMzZjQxOTgyNDNiZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAne2WaTY+A/jDXoxJUroxsElnw1dBVZmayYUDlrTVTDmzs617
L8CvxmilRgiqxOic+kmPXB99DW6ttgoPcVeetyb6x3kimW/tr+ZmAua7gLtJYMoq
yeprXNZ/M4KPrRpY7G0v1AHNLAWikuUNh/JTJSB4ZMuLnvFgkeWwBDiqpZ2XROkf
BxVU1J5VNMIVl+5WVAjwhRZVHBQA0/2rqW4b1yd9pmlm7lbozeYyXJ6UoUVcQ5Ql
Jj8weNGCwuTcZZifqmFE/SSb4NqUhkMz/bhWEcRMnqS08PLQ1/GDyydGMF5bYbza
JYAUORHFKp/NL8MhIvjsCJNtcVZXGa7FfelC8wIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFCSzEQVEGBSP3KTQJ/L2TpTm5zXFMB8GA1UdIwQYMBaAFCDtX3gsT3g6kwiJ
sU/mRGInlFaOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2YzMmY4
OWMzM2ZjMGNmYWQ2N2FkYmMxZDRhMTBhMzExMzg1NGY3Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDA0M2U4ODEtMTcwMC00YjhkLThmNDUtMjU1NDk1
ZGM1MTgxL2Y5Yzg2NGI0YzBlZWQyYmU2NWIyMTdkYzEyYzNmNDE5ODI0M2JkYWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kMDQzZTg4MS0xNzAwLTRiOGQtOGY0NS0yNTU0
OTVkYzUxODEvY2YzMmY4OWMzM2ZjMGNmYWQ2N2FkYmMxZDRhMTBhMzExMzg1NGY3
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQALaklAwQDLakgMA0GCSqGSIb3DQEBCwUAA4IBAQBprJPM
byNOvHLuEeh7Q4+SLFNnpOvK9d5wIS9graGPkYOhTLEv6My9HjzfynsgSZlkZnni
nb3mNoQdZM0zsvlZGm7RLXvoBK9Q2Pp3Vhw7id9oKlGUqzWb7qsFrHfPfR/ZpgjZ
ZRJFdOiz5MiJ6B3XdN8CMz5UF6xWVTTlRTDYcWdpoDt3cGpi91XiEQRxmbtyq2nh
FFaQXMWlxJVtqw3L4WoMP/1RSY+X6eD6mqmqRxkGagSnc5j4aA6HC4xstDzn7zol
oHHSCz30zDHdhr/r0l+1UjkEzvpBOy0eJ+11HAmYSWGq+fj2463xcqK/z+0KNxYH
z+WodiH4oTfObZA0
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org