Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/d0f60d11db7efadba0eb7054c56557b6c598a3f2.roa
File: d0f60d11db7efadba0eb7054c56557b6c598a3f2.roa (raw, json)
Hash identifier: m174cWwQPr1crKpAMW26RA9GjXLKiInEJy0O7blqr48=
Subject key identifier: 05:1C:7C:14:6D:E2:69:67:FD:99:C7:4E:04:57:79:5B:33:D7:48:1F
Certificate issuer: /CN=dd0af7b6e3a89703bf69f14c87e734e6e57b2b98
Certificate serial: 264399
Authority key identifier: 04:6A:4C:3C:87:8A:D1:A8:AA:46:E0:62:E3:55:44:96:1D:1A:CA:3B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/d0f60d11db7efadba0eb7054c56557b6c598a3f2.roa
Signing time: Thu 04 Jan 2024 14:58:51 +0000
ROA not before: Sun 16 Apr 2023 03:00:00 +0000
ROA not after: Thu 17 Apr 2025 03:00:00 +0000
asID: 266771
IP address blocks: 45.232.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2507673 (0x264399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0af7b6e3a89703bf69f14c87e734e6e57b2b98
Validity
Not Before: Apr 16 03:00:00 2023 GMT
Not After : Apr 17 03:00:00 2025 GMT
Subject: CN=d0f60d11db7efadba0eb7054c56557b6c598a3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fa:16:28:d8:6a:3e:06:75:7e:9e:53:d6:8e:
4f:b5:29:bc:83:af:c1:ec:ec:14:78:9a:c8:04:32:
38:03:63:38:d6:0b:61:63:2a:2d:55:fe:fe:21:51:
ab:4d:6c:20:89:5c:da:a9:21:49:01:86:27:4b:bd:
4e:9a:66:ef:cd:ea:c5:34:37:5d:54:fb:76:2d:37:
01:f3:ac:22:38:85:e6:da:44:e8:01:56:52:74:41:
15:76:09:fd:b6:75:62:79:fc:1c:46:3d:21:97:ff:
01:7f:7b:5c:07:cb:dc:be:93:72:52:29:97:56:31:
0e:1c:a4:2f:c2:5a:51:68:c7:c1:60:86:ef:a5:f9:
ec:82:06:c0:f9:30:61:73:d0:c5:74:87:36:87:b9:
25:e4:c4:4d:05:37:12:b6:6b:38:4b:4f:2e:e8:18:
e4:d0:dc:07:de:f8:34:42:43:b3:3f:3c:ef:86:5f:
30:00:a6:98:41:db:8b:ca:84:22:90:54:58:0e:e5:
90:b6:1c:53:61:bf:c7:bf:4c:7c:31:2d:0b:71:7a:
9c:16:5a:22:1b:ca:12:df:99:20:33:40:72:25:90:
0e:24:0c:0b:fb:98:2a:64:25:5a:94:aa:5a:42:71:
e2:c0:af:49:8a:5f:54:58:d8:78:da:33:1c:c0:ad:
18:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1C:7C:14:6D:E2:69:67:FD:99:C7:4E:04:57:79:5B:33:D7:48:1F
X509v3 Authority Key Identifier:
keyid:04:6A:4C:3C:87:8A:D1:A8:AA:46:E0:62:E3:55:44:96:1D:1A:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/d0f60d11db7efadba0eb7054c56557b6c598a3f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.176.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:39:1a:e5:06:b2:8c:95:ac:75:05:45:d1:6d:37:5d:9d:fb:
56:66:60:29:13:3c:14:43:c5:2a:d5:ec:f7:09:57:91:ce:7a:
53:3c:3b:01:e9:f0:d0:2f:1a:dc:6f:d6:f2:c4:6e:32:1e:c4:
8e:d8:2d:de:80:d6:03:72:62:83:e4:a1:b1:1c:8b:57:65:04:
1b:f1:30:fe:f8:af:03:59:71:94:1a:3c:a8:7c:e6:d4:e2:35:
80:96:9c:48:0e:de:57:17:cc:46:ef:d5:fc:d0:3e:4a:aa:4f:
c8:b3:aa:01:9a:1a:e9:3f:03:74:1e:db:93:b7:49:11:84:43:
09:a9:38:50:48:7d:5d:c6:fb:a5:6f:a8:05:b2:d7:1d:86:01:
cc:59:90:d8:38:88:ee:f7:03:55:1f:1f:94:f2:c5:ff:ed:8d:
f6:32:ec:b3:eb:da:81:62:46:5d:f5:dd:82:69:15:8c:89:12:
50:a6:08:3f:14:bd:4b:c2:15:97:a2:80:98:42:0f:26:12:02:
11:45:34:60:19:9e:13:01:69:5f:1b:dd:05:34:90:49:32:b2:
91:89:3d:96:85:63:af:68:b0:05:31:e8:c5:c4:da:cc:a7:65:
3b:c2:b3:15:63:ca:a3:42:34:8e:62:25:89:8c:86:14:1f:c5:
7f:9e:04:23
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJkOZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRk
MGFmN2I2ZTNhODk3MDNiZjY5ZjE0Yzg3ZTczNGU2ZTU3YjJiOTgwHhcNMjMwNDE2
MDMwMDAwWhcNMjUwNDE3MDMwMDAwWjAzMTEwLwYDVQQDEyhkMGY2MGQxMWRiN2Vm
YWRiYTBlYjcwNTRjNTY1NTdiNmM1OThhM2YyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhPoWKNhqPgZ1fp5T1o5PtSm8g6/B7OwUeJrIBDI4A2M41gth
YyotVf7+IVGrTWwgiVzaqSFJAYYnS71OmmbvzerFNDddVPt2LTcB86wiOIXm2kTo
AVZSdEEVdgn9tnViefwcRj0hl/8Bf3tcB8vcvpNyUimXVjEOHKQvwlpRaMfBYIbv
pfnsggbA+TBhc9DFdIc2h7kl5MRNBTcStms4S08u6Bjk0NwH3vg0QkOzPzzvhl8w
AKaYQduLyoQikFRYDuWQthxTYb/Hv0x8MS0LcXqcFloiG8oS35kgM0ByJZAOJAwL
+5gqZCValKpaQnHiwK9Jil9UWNh42jMcwK0YhwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAUcfBRt4mln/ZnHTgRXeVsz10gfMB8GA1UdIwQYMBaAFARqTDyHitGoqkbg
YuNVRJYdGso7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGQwYWY3
YjZlM2E4OTcwM2JmNjlmMTRjODdlNzM0ZTZlNTdiMmI5OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDQ3YjcxMDQtNDA4OS00YTE4LTkzNDUtMmE3NTE0
YWI1MzRhL2QwZjYwZDExZGI3ZWZhZGJhMGViNzA1NGM1NjU1N2I2YzU5OGEzZjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNDdiNzEwNC00MDg5LTRhMTgtOTM0NS0yYTc1
MTRhYjUzNGEvZGQwYWY3YjZlM2E4OTcwM2JmNjlmMTRjODdlNzM0ZTZlNTdiMmI5
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3osDANBgkqhkiG9w0BAQsFAAOCAQEAKzka5QayjJWsdQVF
0W03XZ37VmZgKRM8FEPFKtXs9wlXkc56Uzw7Aenw0C8a3G/W8sRuMh7Ejtgt3oDW
A3Jig+ShsRyLV2UEG/Ew/vivA1lxlBo8qHzm1OI1gJacSA7eVxfMRu/V/NA+SqpP
yLOqAZoa6T8DdB7bk7dJEYRDCak4UEh9Xcb7pW+oBbLXHYYBzFmQ2DiI7vcDVR8f
lPLF/+2N9jLss+vagWJGXfXdgmkVjIkSUKYIPxS9S8IVl6KAmEIPJhICEUU0YBme
EwFpXxvdBTSQSTKykYk9loVjr2iwBTHoxcTazKdlO8KzFWPKo0I0jmIliYyGFB/F
f54EIw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org