Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/85f7275c68a03cdbebda423da97b0e9c9b850d6f.roa
File: 85f7275c68a03cdbebda423da97b0e9c9b850d6f.roa (raw, json)
Hash identifier: SV04KMKjtDfi9DgNzscwYkUPEv+x8QMhDjeXYNPQYTA=
Subject key identifier: 67:A8:F4:F9:04:2A:B4:D6:3E:13:28:83:2F:09:8E:EB:AA:41:4D:5B
Certificate issuer: /CN=2a96158adc7e9d3c9c541c010ab3e9435225e88f
Certificate serial: 12E3B3
Authority key identifier: C1:8C:F1:B8:10:78:69:1C:C2:02:8C:1F:4A:A4:74:E8:BD:BC:0E:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a96158adc7e9d3c9c541c010ab3e9435225e88f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/85f7275c68a03cdbebda423da97b0e9c9b850d6f.roa
Signing time: Mon 27 Nov 2023 07:30:02 +0000
ROA not before: Mon 27 Nov 2023 07:30:02 +0000
ROA not after: Wed 26 Nov 2025 07:30:02 +0000
asID: 3257
IP address blocks: 45.238.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1237939 (0x12e3b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a96158adc7e9d3c9c541c010ab3e9435225e88f
Validity
Not Before: Nov 27 07:30:02 2023 GMT
Not After : Nov 26 07:30:02 2025 GMT
Subject: CN=85f7275c68a03cdbebda423da97b0e9c9b850d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:08:32:90:9d:a8:48:e2:ab:c5:03:6b:5c:df:
00:26:28:a4:91:f4:c0:24:ac:c6:8c:2f:79:a8:e5:
6c:b1:46:aa:b5:ad:16:6f:c2:f3:76:5c:14:ee:16:
cd:ec:67:bb:09:f1:b6:de:d6:54:c6:98:b4:4a:a1:
1d:6e:bd:6b:9f:0b:d6:46:35:bf:10:55:d6:94:48:
83:14:7d:24:d2:a6:25:07:85:2b:4d:c1:33:13:40:
04:34:99:2a:f0:c1:fa:e7:f0:cc:e0:d5:99:4f:73:
03:bb:05:c9:c9:e5:fe:df:a6:9f:49:8d:73:83:11:
c8:4d:05:a8:10:2a:63:df:ca:6e:b6:c2:c6:52:09:
74:26:91:dc:bb:51:39:a4:04:b9:e1:7a:a5:7b:4e:
56:7c:57:01:9e:53:09:a4:fd:fd:d2:e6:f8:43:e1:
a0:cd:23:de:56:c1:55:b6:53:ac:1d:ff:d3:d8:78:
57:cd:9a:b4:ba:98:15:94:fe:b6:50:07:ef:52:52:
4e:9d:c4:ed:9f:d4:88:69:fe:57:ba:44:b6:3d:e8:
45:b9:19:ff:f3:a7:6d:bf:e2:25:bc:e9:bc:42:a8:
63:80:ec:48:eb:ff:d1:8c:dd:1c:a0:ba:68:44:1d:
b3:3e:1c:20:f8:50:aa:93:a0:dd:95:80:6d:74:58:
03:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A8:F4:F9:04:2A:B4:D6:3E:13:28:83:2F:09:8E:EB:AA:41:4D:5B
X509v3 Authority Key Identifier:
keyid:C1:8C:F1:B8:10:78:69:1C:C2:02:8C:1F:4A:A4:74:E8:BD:BC:0E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a96158adc7e9d3c9c541c010ab3e9435225e88f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/85f7275c68a03cdbebda423da97b0e9c9b850d6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/2a96158adc7e9d3c9c541c010ab3e9435225e88f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.156.0/22
Signature Algorithm: sha256WithRSAEncryption
29:d2:f6:bb:58:07:54:e9:d2:75:e6:5f:7c:0e:bb:62:d1:68:
40:a8:7e:15:3f:d0:dd:c0:87:03:e2:ae:40:39:e3:bd:87:4a:
55:b3:00:8e:98:a5:62:ee:6f:f5:a6:1c:64:a5:ff:cf:b5:86:
a2:b4:ab:cb:ce:e0:bb:fe:3d:cd:b9:90:50:de:c8:df:56:f9:
ec:08:aa:82:c2:23:0a:50:1a:77:ad:11:c5:2d:41:69:72:d2:
47:be:c5:dc:95:32:26:35:6a:ce:ea:41:be:9b:0e:08:df:d5:
35:1b:20:a1:1e:6f:1c:4d:73:e1:26:35:bb:18:57:e4:8e:c9:
91:00:8a:8c:0c:bf:66:93:6f:23:43:ec:aa:e0:9a:2d:a1:dc:
e5:35:e9:d0:33:ba:99:fe:36:6a:a5:fb:32:a0:34:f1:ff:69:
ab:63:5f:9d:15:2f:e1:69:b3:7b:f0:e8:9e:05:e9:87:79:ad:
12:f2:93:e4:38:9e:dd:95:29:e7:d5:42:eb:65:20:19:67:6d:
ca:d5:eb:4b:e5:4c:15:36:e5:75:9d:a3:5c:f5:3a:02:fe:6d:
98:91:82:94:99:3d:44:ee:52:b8:d6:17:2b:1f:ad:51:32:33:
0c:94:d1:b0:fd:d6:39:d7:1e:6f:e1:1d:10:26:9f:93:eb:5d:
ad:5e:a5:f0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEuOzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
OTYxNThhZGM3ZTlkM2M5YzU0MWMwMTBhYjNlOTQzNTIyNWU4OGYwHhcNMjMxMTI3
MDczMDAyWhcNMjUxMTI2MDczMDAyWjAzMTEwLwYDVQQDEyg4NWY3Mjc1YzY4YTAz
Y2RiZWJkYTQyM2RhOTdiMGU5YzliODUwZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmAgykJ2oSOKrxQNrXN8AJiikkfTAJKzGjC95qOVssUaqta0W
b8LzdlwU7hbN7Ge7CfG23tZUxpi0SqEdbr1rnwvWRjW/EFXWlEiDFH0k0qYlB4Ur
TcEzE0AENJkq8MH65/DM4NWZT3MDuwXJyeX+36afSY1zgxHITQWoECpj38putsLG
Ugl0JpHcu1E5pAS54Xqle05WfFcBnlMJpP390ub4Q+GgzSPeVsFVtlOsHf/T2HhX
zZq0upgVlP62UAfvUlJOncTtn9SIaf5XukS2PehFuRn/86dtv+IlvOm8QqhjgOxI
6//RjN0coLpoRB2zPhwg+FCqk6DdlYBtdFgDZQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGeo9PkEKrTWPhMogy8JjuuqQU1bMB8GA1UdIwQYMBaAFMGM8bgQeGkcwgKM
H0qkdOi9vA54MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmE5NjE1
OGFkYzdlOWQzYzljNTQxYzAxMGFiM2U5NDM1MjI1ZTg4Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGU0ZTU2MjAtZDkwMC00NjA2LTgwMTYtZjNmZWEy
NWVkMDUxLzg1ZjcyNzVjNjhhMDNjZGJlYmRhNDIzZGE5N2IwZTljOWI4NTBkNmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kZTRlNTYyMC1kOTAwLTQ2MDYtODAxNi1mM2Zl
YTI1ZWQwNTEvMmE5NjE1OGFkYzdlOWQzYzljNTQxYzAxMGFiM2U5NDM1MjI1ZTg4
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3unDANBgkqhkiG9w0BAQsFAAOCAQEAKdL2u1gHVOnSdeZf
fA67YtFoQKh+FT/Q3cCHA+KuQDnjvYdKVbMAjpilYu5v9aYcZKX/z7WGorSry87g
u/49zbmQUN7I31b57AiqgsIjClAad60RxS1BaXLSR77F3JUyJjVqzupBvpsOCN/V
NRsgoR5vHE1z4SY1uxhX5I7JkQCKjAy/ZpNvI0PsquCaLaHc5TXp0DO6mf42aqX7
MqA08f9pq2NfnRUv4Wmze/DongXph3mtEvKT5Die3ZUp59VC62UgGWdtytXrS+VM
FTbldZ2jXPU6Av5tmJGClJk9RO5SuNYXKx+tUTIzDJTRsP3WOdceb+EdECafk+td
rV6l8A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org