Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d8e5b88d-1ced-40b9-b9bf-1d699fc0f960/7a196ff93114b25db6626d26788a772fb3a1a21c.roa
File: 7a196ff93114b25db6626d26788a772fb3a1a21c.roa (raw, json)
Hash identifier: NY0WC4TP/p40SuoJPoxTQslThWqBI+PsRWXCJXZWL9U=
Subject key identifier: BF:61:89:07:BE:A0:5E:A0:F5:52:58:2D:FE:9F:17:A4:E9:F3:0C:DB
Certificate issuer: /CN=d344c3cd696b6a27237f504e0c016714b7710f9f
Certificate serial: 273909
Authority key identifier: F4:0B:11:89:28:67:2B:14:31:54:1A:C3:C4:2F:8A:F8:20:F9:2A:45
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d344c3cd696b6a27237f504e0c016714b7710f9f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d8e5b88d-1ced-40b9-b9bf-1d699fc0f960/7a196ff93114b25db6626d26788a772fb3a1a21c.roa
Signing time: Fri 15 Mar 2024 13:43:30 +0000
ROA not before: Fri 15 Mar 2024 13:43:28 +0000
ROA not after: Thu 15 Mar 2029 13:43:28 +0000
asID: 266793
IP address blocks: 45.234.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2570505 (0x273909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d344c3cd696b6a27237f504e0c016714b7710f9f
Validity
Not Before: Mar 15 13:43:28 2024 GMT
Not After : Mar 15 13:43:28 2029 GMT
Subject: CN=7a196ff93114b25db6626d26788a772fb3a1a21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:e6:38:45:6a:3c:97:85:ba:8f:cf:67:45:
fb:61:4e:af:72:3d:ba:fa:05:cf:90:e7:55:50:2a:
b5:86:71:34:d5:a0:37:4a:96:01:b6:73:96:eb:0f:
4b:cd:38:0a:47:db:b9:2e:53:00:95:69:dd:6b:59:
d4:d4:6e:b3:14:7b:98:89:77:f5:9d:7e:95:47:ee:
42:26:b0:95:1b:f8:d1:d0:b8:a6:95:96:7e:e8:b7:
8f:42:90:65:c5:47:8d:d9:7a:3e:92:ed:37:59:0f:
52:6d:92:67:b1:e1:4f:12:47:9a:18:ed:c3:68:c6:
5c:a9:c0:78:c1:a7:5f:2f:6e:82:25:c8:e1:78:2c:
ee:c5:29:d9:14:a5:c2:e9:19:a1:0e:0f:f6:40:3b:
96:9f:a5:6f:a9:af:5c:94:24:12:e2:1d:f3:ff:bb:
68:e4:ec:04:29:03:5b:f9:75:93:21:f4:52:c6:e2:
36:39:03:0d:e0:c1:c9:35:a6:b4:22:97:f5:58:51:
6f:be:4e:67:37:9a:c7:50:ba:6a:3b:76:fd:e4:b4:
9e:a2:51:3b:20:ca:f7:89:06:25:a4:5c:c5:de:3b:
93:89:8f:67:1a:64:47:b2:9c:3c:f8:ee:30:61:05:
25:7d:fa:52:7f:cb:40:78:61:16:50:88:ca:5c:f1:
f9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:61:89:07:BE:A0:5E:A0:F5:52:58:2D:FE:9F:17:A4:E9:F3:0C:DB
X509v3 Authority Key Identifier:
keyid:F4:0B:11:89:28:67:2B:14:31:54:1A:C3:C4:2F:8A:F8:20:F9:2A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d344c3cd696b6a27237f504e0c016714b7710f9f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d8e5b88d-1ced-40b9-b9bf-1d699fc0f960/7a196ff93114b25db6626d26788a772fb3a1a21c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d8e5b88d-1ced-40b9-b9bf-1d699fc0f960/d344c3cd696b6a27237f504e0c016714b7710f9f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.161.0/24
Signature Algorithm: sha256WithRSAEncryption
84:0f:30:8d:ad:fa:f8:a9:f1:9b:0c:4c:1f:2a:84:e8:78:ec:
18:52:f2:d5:15:82:8d:5b:bd:02:96:54:85:22:78:8b:c5:93:
7d:7a:36:91:4e:9f:b0:5b:f6:74:b3:d3:39:0e:ee:05:9b:5e:
8c:36:6a:df:1c:0a:02:3e:ef:13:e0:ab:e1:18:bf:6a:04:9b:
82:33:0b:c6:b4:ac:c9:b0:d0:11:0e:2b:20:66:e0:52:39:51:
62:35:1f:4f:a9:26:45:33:d5:e0:1e:b2:fa:85:c8:07:ab:e5:
12:96:88:2e:bc:aa:9d:42:b7:98:48:fc:ad:a5:af:08:87:df:
29:f0:ba:a3:52:6f:bb:ab:64:38:cd:d2:0f:e7:9e:a4:9c:fe:
31:ec:ea:4e:19:29:d0:93:59:32:22:64:63:dd:93:b0:5b:08:
a3:61:8b:43:47:fc:e9:c3:46:70:c9:ef:ca:be:a3:08:9f:b7:
64:80:dd:d5:92:24:e8:0b:b5:36:b8:eb:30:5e:ec:8d:38:e0:
7b:76:dd:71:02:73:1e:75:2f:77:4d:1c:77:f1:65:75:18:91:
af:36:f6:41:de:67:e2:0f:f6:01:0e:54:0d:3b:13:72:11:a9:
75:01:3f:8f:3f:47:4c:1a:f5:a7:7e:7b:b2:86:71:4e:f7:3a:
41:11:02:3f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJzkJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQz
NDRjM2NkNjk2YjZhMjcyMzdmNTA0ZTBjMDE2NzE0Yjc3MTBmOWYwHhcNMjQwMzE1
MTM0MzI4WhcNMjkwMzE1MTM0MzI4WjAzMTEwLwYDVQQDEyg3YTE5NmZmOTMxMTRi
MjVkYjY2MjZkMjY3ODhhNzcyZmIzYTFhMjFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAti7mOEVqPJeFuo/PZ0X7YU6vcj26+gXPkOdVUCq1hnE01aA3
SpYBtnOW6w9LzTgKR9u5LlMAlWnda1nU1G6zFHuYiXf1nX6VR+5CJrCVG/jR0Lim
lZZ+6LePQpBlxUeN2Xo+ku03WQ9SbZJnseFPEkeaGO3DaMZcqcB4wadfL26CJcjh
eCzuxSnZFKXC6RmhDg/2QDuWn6Vvqa9clCQS4h3z/7to5OwEKQNb+XWTIfRSxuI2
OQMN4MHJNaa0Ipf1WFFvvk5nN5rHULpqO3b95LSeolE7IMr3iQYlpFzF3juTiY9n
GmRHspw8+O4wYQUlffpSf8tAeGEWUIjKXPH5vQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFL9hiQe+oF6g9VJYLf6fF6Tp8wzbMB8GA1UdIwQYMBaAFPQLEYkoZysUMVQa
w8Qvivgg+SpFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDM0NGMz
Y2Q2OTZiNmEyNzIzN2Y1MDRlMGMwMTY3MTRiNzcxMGY5Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDhlNWI4OGQtMWNlZC00MGI5LWI5YmYtMWQ2OTlm
YzBmOTYwLzdhMTk2ZmY5MzExNGIyNWRiNjYyNmQyNjc4OGE3NzJmYjNhMWEyMWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOGU1Yjg4ZC0xY2VkLTQwYjktYjliZi0xZDY5
OWZjMGY5NjAvZDM0NGMzY2Q2OTZiNmEyNzIzN2Y1MDRlMGMwMTY3MTRiNzcxMGY5
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3qoTANBgkqhkiG9w0BAQsFAAOCAQEAhA8wja36+KnxmwxM
HyqE6HjsGFLy1RWCjVu9ApZUhSJ4i8WTfXo2kU6fsFv2dLPTOQ7uBZtejDZq3xwK
Aj7vE+Cr4Ri/agSbgjMLxrSsybDQEQ4rIGbgUjlRYjUfT6kmRTPV4B6y+oXIB6vl
EpaILryqnUK3mEj8raWvCIffKfC6o1Jvu6tkOM3SD+eepJz+MezqThkp0JNZMiJk
Y92TsFsIo2GLQ0f86cNGcMnvyr6jCJ+3ZIDd1ZIk6Au1NrjrMF7sjTjge3bdcQJz
HnUvd00cd/FldRiRrzb2Qd5n4g/2AQ5UDTsTchGpdQE/jz9HTBr1p357soZxTvc6
QRECPw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org