Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/be7f936341d7dfe28d70abc7974de91e1c8b4c34.roa
File: be7f936341d7dfe28d70abc7974de91e1c8b4c34.roa (raw, json)
Hash identifier: Vz8cVZVXUcuThT+w6tuJKEfky5lyhboH4MDDytzfYpg=
Subject key identifier: DF:9D:FE:45:38:50:96:93:E5:7C:3C:4A:37:F5:90:6C:ED:76:0F:E4
Certificate issuer: /CN=8669f75329643f51ee734f5266f76ad26961b120
Certificate serial: 5002
Authority key identifier: 5F:D3:D7:22:E0:42:41:7A:72:CD:74:40:C4:7E:3C:47:6D:A2:DA:45
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8669f75329643f51ee734f5266f76ad26961b120.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/be7f936341d7dfe28d70abc7974de91e1c8b4c34.roa
Signing time: Sun 08 Oct 2023 01:24:30 +0000
ROA not before: Sat 07 Oct 2023 01:24:30 +0000
ROA not after: Wed 08 Oct 2025 01:24:30 +0000
asID: 28435
IP address blocks: 45.189.148.0/22 maxlen: 22
45.189.148.0/24 maxlen: 24
45.189.149.0/24 maxlen: 24
45.189.150.0/24 maxlen: 24
45.189.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20482 (0x5002)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8669f75329643f51ee734f5266f76ad26961b120
Validity
Not Before: Oct 7 01:24:30 2023 GMT
Not After : Oct 8 01:24:30 2025 GMT
Subject: CN=be7f936341d7dfe28d70abc7974de91e1c8b4c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:41:0e:e6:bc:ed:af:58:be:5e:e9:74:d3:77:
32:ee:e3:23:d7:d4:0c:5e:aa:fc:83:91:c3:87:d7:
fe:e9:4f:5a:32:aa:ed:d2:8b:95:80:e7:87:53:4e:
ac:cf:6d:97:0c:ac:5f:69:9b:3a:d6:c0:d0:5b:5d:
35:b6:ea:bf:70:c3:b0:62:cc:a4:49:0e:9f:4f:af:
3b:e7:8a:72:25:6d:35:e5:0b:ff:31:34:e7:68:ec:
3a:4c:26:78:1b:f8:25:ef:2b:ac:6a:e9:18:04:32:
cc:e2:5b:9d:64:f1:11:e7:61:f9:3f:fa:f8:dd:1f:
46:a5:58:40:f2:d0:c2:6f:01:29:82:d0:a2:d2:7d:
d1:89:31:31:4b:8b:a4:49:ed:02:8f:56:82:81:b3:
e7:ae:bf:46:7e:11:13:73:31:ff:55:59:0c:8a:93:
97:bf:84:34:85:28:4b:0e:3b:73:34:0c:e7:b3:c4:
50:44:0c:51:60:86:8e:1d:12:88:d4:7b:b8:eb:94:
8a:9f:33:b9:98:6f:64:cd:68:37:e3:5d:51:26:a2:
3b:16:59:7a:9c:95:14:84:ef:3b:a9:e7:d4:74:be:
e6:82:92:f3:ea:ce:96:0b:58:78:dc:9d:31:64:96:
db:06:ba:d5:b8:ea:95:66:95:c9:c0:90:1e:85:00:
5e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9D:FE:45:38:50:96:93:E5:7C:3C:4A:37:F5:90:6C:ED:76:0F:E4
X509v3 Authority Key Identifier:
keyid:5F:D3:D7:22:E0:42:41:7A:72:CD:74:40:C4:7E:3C:47:6D:A2:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8669f75329643f51ee734f5266f76ad26961b120.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/be7f936341d7dfe28d70abc7974de91e1c8b4c34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/8669f75329643f51ee734f5266f76ad26961b120.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.148.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:52:fa:bd:c9:4d:26:fe:0b:57:68:8d:27:2c:67:f4:89:c2:
24:db:3f:74:96:6d:fd:5f:dc:99:bd:26:dd:d2:2f:fd:48:7a:
3d:ce:fa:9a:89:ce:40:57:23:9e:9e:d7:d4:81:db:fa:98:ae:
05:2c:7d:8b:ed:52:af:d4:6f:1f:12:42:3d:d4:35:50:61:ef:
1a:c6:61:ea:2a:54:d9:82:7e:66:29:87:2c:a6:15:48:8c:ac:
64:68:ba:73:c6:6e:3e:0f:d7:cd:45:94:fc:e9:0c:d1:12:da:
28:8d:cb:5f:a4:2f:ee:52:a6:e1:33:72:a7:06:44:54:89:0a:
60:e7:6f:10:68:4c:c2:a7:94:c6:38:c0:51:3d:7e:8b:5b:2e:
5c:be:c2:fc:e7:fa:50:0f:50:e5:26:71:d3:ec:90:a0:e7:90:
d6:68:6a:5b:a4:df:79:d0:96:c6:85:2a:02:28:59:05:d2:0f:
00:11:ab:02:6d:d9:28:3d:05:14:85:6a:04:a6:f4:0b:a5:20:
6e:89:6a:59:83:7c:21:f5:2b:35:ae:76:7d:d8:87:e8:98:87:
cc:07:71:99:03:75:b3:cf:5e:af:9d:1a:85:41:14:1f:1e:a5:
32:d8:5c:21:44:cc:b7:3c:14:ef:9f:f0:88:e8:d0:93:c7:7c:
a4:9c:ea:fb
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICUAIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODY2
OWY3NTMyOTY0M2Y1MWVlNzM0ZjUyNjZmNzZhZDI2OTYxYjEyMDAeFw0yMzEwMDcw
MTI0MzBaFw0yNTEwMDgwMTI0MzBaMDMxMTAvBgNVBAMTKGJlN2Y5MzYzNDFkN2Rm
ZTI4ZDcwYWJjNzk3NGRlOTFlMWM4YjRjMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChQQ7mvO2vWL5e6XTTdzLu4yPX1AxeqvyDkcOH1/7pT1oyqu3S
i5WA54dTTqzPbZcMrF9pmzrWwNBbXTW26r9ww7BizKRJDp9PrzvninIlbTXlC/8x
NOdo7DpMJngb+CXvK6xq6RgEMsziW51k8RHnYfk/+vjdH0alWEDy0MJvASmC0KLS
fdGJMTFLi6RJ7QKPVoKBs+euv0Z+ERNzMf9VWQyKk5e/hDSFKEsOO3M0DOezxFBE
DFFgho4dEojUe7jrlIqfM7mYb2TNaDfjXVEmojsWWXqclRSE7zup59R0vuaCkvPq
zpYLWHjcnTFkltsGutW46pVmlcnAkB6FAF4ZAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQU353+RThQlpPlfDxKN/WQbO12D+QwHwYDVR0jBBgwFoAUX9PXIuBCQXpyzXRA
xH48R22i2kUwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS84NjY5Zjc1
MzI5NjQzZjUxZWU3MzRmNTI2NmY3NmFkMjY5NjFiMTIwLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9kMmM3ODM0Zi1kOWZiLTQ2MDItYTE5ZC1lYmMwNDU3
NTAzNDQvYmU3ZjkzNjM0MWQ3ZGZlMjhkNzBhYmM3OTc0ZGU5MWUxYzhiNGMzNC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2QyYzc4MzRmLWQ5ZmItNDYwMi1hMTlkLWViYzA0
NTc1MDM0NC84NjY5Zjc1MzI5NjQzZjUxZWU3MzRmNTI2NmY3NmFkMjY5NjFiMTIw
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLb2UMA0GCSqGSIb3DQEBCwUAA4IBAQAaUvq9yU0m/gtXaI0n
LGf0icIk2z90lm39X9yZvSbd0i/9SHo9zvqaic5AVyOentfUgdv6mK4FLH2L7VKv
1G8fEkI91DVQYe8axmHqKlTZgn5mKYcsphVIjKxkaLpzxm4+D9fNRZT86QzREtoo
jctfpC/uUqbhM3KnBkRUiQpg528QaEzCp5TGOMBRPX6LWy5cvsL85/pQD1DlJnHT
7JCg55DWaGpbpN950JbGhSoCKFkF0g8AEasCbdkoPQUUhWoEpvQLpSBuiWpZg3wh
9Ss1rnZ92IfomIfMB3GZA3Wzz16vnRqFQRQfHqUy2FwhRMy3PBTvn/CI6NCTx3yk
nOr7
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org