Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d8e5b88d-1ced-40b9-b9bf-1d699fc0f960/b20da12fe7dfbc67ceb9c30bbd364645d2742ed1.roa
File: b20da12fe7dfbc67ceb9c30bbd364645d2742ed1.roa (raw, json)
Hash identifier: +e6e0akLDOWPVbGTgjNjLBslny/bId6Yhs+BuQenEGM=
Subject key identifier: 9A:43:AF:54:C2:05:47:E2:E6:B7:E2:B0:06:7A:3C:96:42:53:C5:12
Certificate issuer: /CN=d344c3cd696b6a27237f504e0c016714b7710f9f
Certificate serial: 27325A
Authority key identifier: F4:0B:11:89:28:67:2B:14:31:54:1A:C3:C4:2F:8A:F8:20:F9:2A:45
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d344c3cd696b6a27237f504e0c016714b7710f9f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d8e5b88d-1ced-40b9-b9bf-1d699fc0f960/b20da12fe7dfbc67ceb9c30bbd364645d2742ed1.roa
Signing time: Fri 15 Mar 2024 13:43:29 +0000
ROA not before: Fri 15 Mar 2024 13:43:28 +0000
ROA not after: Thu 15 Mar 2029 13:43:28 +0000
asID: 266793
IP address blocks: 45.234.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2568794 (0x27325a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d344c3cd696b6a27237f504e0c016714b7710f9f
Validity
Not Before: Mar 15 13:43:28 2024 GMT
Not After : Mar 15 13:43:28 2029 GMT
Subject: CN=b20da12fe7dfbc67ceb9c30bbd364645d2742ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:d2:33:e2:78:9e:c8:04:b4:60:18:26:4c:
37:05:fe:f0:ba:59:6f:44:28:68:17:e6:64:e5:1e:
fe:ad:b9:ff:71:6c:77:ff:69:16:a8:6b:f5:df:7d:
c1:de:88:48:2e:24:3f:6a:6f:43:62:0b:68:8a:cc:
11:3c:9d:ab:27:d0:70:b1:fd:70:17:84:b2:96:a8:
d3:38:33:0b:84:18:6a:c8:18:8e:96:ae:e6:67:ad:
7d:87:8a:88:91:65:9e:8e:38:97:b3:6d:a9:f1:cc:
51:c5:23:ef:b5:0b:f8:7b:54:f2:cf:3f:9f:e3:e5:
e3:01:37:e9:6d:28:e1:d7:ed:ac:90:91:a2:b3:85:
f6:db:5a:18:fc:4b:05:cf:7c:3e:0e:81:09:14:bd:
b0:c0:93:24:68:0e:8b:eb:6c:e1:6c:53:0b:cc:6f:
bd:ca:5b:a6:4c:4c:7a:f6:f8:e2:b4:c8:d4:8a:63:
7c:a3:c9:bd:d2:19:a0:10:fe:f8:52:0a:f0:4d:45:
6c:bc:3a:97:81:be:c5:58:e1:6d:7f:5a:fd:69:8e:
a3:1b:05:92:b3:e2:17:4c:c9:f4:13:2c:4d:7e:99:
06:a2:ab:52:59:ab:a0:79:a5:52:dc:21:ba:af:c9:
7c:8c:d4:78:d0:a2:73:a5:2a:62:1f:c1:ac:28:cc:
7f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:43:AF:54:C2:05:47:E2:E6:B7:E2:B0:06:7A:3C:96:42:53:C5:12
X509v3 Authority Key Identifier:
keyid:F4:0B:11:89:28:67:2B:14:31:54:1A:C3:C4:2F:8A:F8:20:F9:2A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d344c3cd696b6a27237f504e0c016714b7710f9f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d8e5b88d-1ced-40b9-b9bf-1d699fc0f960/b20da12fe7dfbc67ceb9c30bbd364645d2742ed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d8e5b88d-1ced-40b9-b9bf-1d699fc0f960/d344c3cd696b6a27237f504e0c016714b7710f9f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.160.0/24
Signature Algorithm: sha256WithRSAEncryption
01:4b:13:14:a1:75:0b:c6:2a:d6:5d:14:9e:44:41:57:c8:72:
b5:77:6b:0d:3c:b8:56:8c:a9:d3:c0:72:0b:3e:39:2b:3d:23:
92:28:b3:66:58:7e:bd:f7:7f:ca:8b:a8:cd:fe:de:9c:f3:e9:
7f:06:53:0c:ce:ca:00:93:55:5c:82:b4:68:9a:ed:98:3a:54:
0d:40:01:f4:d9:75:61:04:10:8c:40:62:f0:58:71:d8:a9:6f:
6d:93:7f:84:21:4b:fa:4a:0a:00:db:ec:09:69:7f:cc:1b:3f:
4f:9a:1a:bd:de:56:96:e4:e7:b7:dd:eb:88:2f:63:2c:6a:f8:
d3:81:f4:0b:d2:70:d9:fe:a8:6d:83:21:42:c3:c1:60:23:51:
ef:3f:60:87:1e:0c:e4:65:14:1d:ec:b1:65:86:a0:08:d0:1f:
d5:c4:b7:27:2d:26:76:a5:41:b5:93:22:ff:79:d0:22:4d:a4:
4d:6e:8a:01:99:5b:0b:58:46:1b:84:1a:e6:22:b7:a5:b8:4c:
72:09:18:a4:bd:03:9f:96:2c:0f:95:6e:28:7c:4b:12:9a:75:
ac:7e:2b:ed:6e:cc:56:2a:ae:ec:ce:75:be:3c:f6:38:7a:89:
17:7f:a0:d6:67:6a:4f:43:a9:1f:2e:cd:c5:2c:44:93:5a:86:
3f:8e:55:a3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJzJaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQz
NDRjM2NkNjk2YjZhMjcyMzdmNTA0ZTBjMDE2NzE0Yjc3MTBmOWYwHhcNMjQwMzE1
MTM0MzI4WhcNMjkwMzE1MTM0MzI4WjAzMTEwLwYDVQQDEyhiMjBkYTEyZmU3ZGZi
YzY3Y2ViOWMzMGJiZDM2NDY0NWQyNzQyZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAs/zSM+J4nsgEtGAYJkw3Bf7wullvRChoF+Zk5R7+rbn/cWx3
/2kWqGv1333B3ohILiQ/am9DYgtoiswRPJ2rJ9Bwsf1wF4SylqjTODMLhBhqyBiO
lq7mZ619h4qIkWWejjiXs22p8cxRxSPvtQv4e1Tyzz+f4+XjATfpbSjh1+2skJGi
s4X221oY/EsFz3w+DoEJFL2wwJMkaA6L62zhbFMLzG+9ylumTEx69vjitMjUimN8
o8m90hmgEP74UgrwTUVsvDqXgb7FWOFtf1r9aY6jGwWSs+IXTMn0EyxNfpkGoqtS
WaugeaVS3CG6r8l8jNR40KJzpSpiH8GsKMx/qwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJpDr1TCBUfi5rfisAZ6PJZCU8USMB8GA1UdIwQYMBaAFPQLEYkoZysUMVQa
w8Qvivgg+SpFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDM0NGMz
Y2Q2OTZiNmEyNzIzN2Y1MDRlMGMwMTY3MTRiNzcxMGY5Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDhlNWI4OGQtMWNlZC00MGI5LWI5YmYtMWQ2OTlm
YzBmOTYwL2IyMGRhMTJmZTdkZmJjNjdjZWI5YzMwYmJkMzY0NjQ1ZDI3NDJlZDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOGU1Yjg4ZC0xY2VkLTQwYjktYjliZi0xZDY5
OWZjMGY5NjAvZDM0NGMzY2Q2OTZiNmEyNzIzN2Y1MDRlMGMwMTY3MTRiNzcxMGY5
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3qoDANBgkqhkiG9w0BAQsFAAOCAQEAAUsTFKF1C8Yq1l0U
nkRBV8hytXdrDTy4Voyp08ByCz45Kz0jkiizZlh+vfd/youozf7enPPpfwZTDM7K
AJNVXIK0aJrtmDpUDUAB9Nl1YQQQjEBi8Fhx2KlvbZN/hCFL+koKANvsCWl/zBs/
T5oavd5WluTnt93riC9jLGr404H0C9Jw2f6obYMhQsPBYCNR7z9ghx4M5GUUHeyx
ZYagCNAf1cS3Jy0mdqVBtZMi/3nQIk2kTW6KAZlbC1hGG4Qa5iK3pbhMcgkYpL0D
n5YsD5VuKHxLEpp1rH4r7W7MViqu7M51vjz2OHqJF3+g1mdqT0OpHy7NxSxEk1qG
P45Vow==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org