Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/2b33ccf88e827b5657c39bc7bc77aeacf919499d.roa
File: 2b33ccf88e827b5657c39bc7bc77aeacf919499d.roa (raw, json)
Hash identifier: wCGptb+Ze3EI4u01W+voSzfDyrS5A6APcrQe9X2QJh8=
Subject key identifier: EE:26:47:E6:9F:E0:5E:0C:A5:8F:64:DB:22:D8:1D:AF:36:EC:A9:DD
Certificate issuer: /CN=fd73397c8b35c9d5277acc116720117fd7bd3019
Certificate serial: 235EDE
Authority key identifier: 42:D7:DB:F5:52:44:E1:80:47:26:DE:07:0F:65:8E:F6:A6:AA:D4:D6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd73397c8b35c9d5277acc116720117fd7bd3019.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/2b33ccf88e827b5657c39bc7bc77aeacf919499d.roa
Signing time: Wed 20 Sep 2023 08:30:02 +0000
ROA not before: Tue 19 Sep 2023 08:30:02 +0000
ROA not after: Thu 18 Sep 2025 08:30:02 +0000
asID: 265826
IP address blocks: 45.70.228.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2318046 (0x235ede)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd73397c8b35c9d5277acc116720117fd7bd3019
Validity
Not Before: Sep 19 08:30:02 2023 GMT
Not After : Sep 18 08:30:02 2025 GMT
Subject: CN=2b33ccf88e827b5657c39bc7bc77aeacf919499d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:ef:e3:3c:5c:0e:13:d1:37:a0:10:b9:d4:
4d:c9:84:39:54:2c:6b:b9:59:d8:0a:6b:48:d6:27:
9f:d2:73:b7:7d:fa:a0:9e:07:cd:31:5a:85:bc:0c:
5d:48:22:1f:71:61:b7:c2:0d:6b:79:53:57:bf:45:
06:40:5e:4e:38:54:88:39:4a:72:7d:8e:ae:e1:ad:
08:6f:23:19:99:ad:bc:77:c7:33:41:67:ff:2e:8f:
6e:f6:90:b2:65:0b:d1:9e:0d:89:f5:90:f8:af:05:
e2:a1:65:fb:4a:e2:36:ad:1f:c5:da:41:4d:05:10:
09:db:59:54:c2:72:dc:5c:d4:6b:e7:20:14:39:9a:
bb:db:22:f0:4f:61:a6:f9:72:ae:1e:9f:4b:6d:8f:
f6:81:43:7d:60:85:c3:6d:2f:23:18:22:cb:76:47:
c8:4a:b4:64:8b:c8:21:4f:24:fc:d6:dc:db:82:4e:
0c:aa:f1:20:b5:b5:18:aa:83:6a:9c:55:99:86:c7:
25:b2:e0:e7:92:39:a3:93:ac:af:cd:e4:23:a2:10:
9f:37:4d:c6:cf:5a:d3:04:b1:23:cb:89:d6:e9:44:
9d:f3:98:ea:ba:83:43:c8:3a:14:07:a6:01:f7:3d:
d9:32:80:9a:d3:92:b6:3d:81:94:f0:76:97:02:8b:
74:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:26:47:E6:9F:E0:5E:0C:A5:8F:64:DB:22:D8:1D:AF:36:EC:A9:DD
X509v3 Authority Key Identifier:
keyid:42:D7:DB:F5:52:44:E1:80:47:26:DE:07:0F:65:8E:F6:A6:AA:D4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd73397c8b35c9d5277acc116720117fd7bd3019.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/2b33ccf88e827b5657c39bc7bc77aeacf919499d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/fd73397c8b35c9d5277acc116720117fd7bd3019.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.228.0/22
Signature Algorithm: sha256WithRSAEncryption
29:56:82:b5:ba:b4:34:f4:1d:4c:ed:95:ce:18:47:79:e5:44:
f6:f3:d8:a2:b4:3c:25:39:06:61:d6:af:d2:01:9c:40:f8:19:
04:34:08:b7:ba:1d:c2:ac:b2:87:de:9d:d2:5a:f0:65:4a:98:
15:88:f2:f1:39:40:97:01:4b:8a:d3:8b:f1:e4:1a:4e:a2:d9:
67:0f:d4:a5:c9:f7:fe:56:59:08:42:6d:a6:2d:ae:45:6e:fd:
c8:47:7b:e2:f4:96:07:58:08:e6:9e:32:f6:aa:3e:16:40:6e:
95:05:42:23:ea:92:32:48:96:84:02:b0:83:8f:b2:cc:bb:b2:
06:65:4a:37:dd:77:10:24:0b:24:e6:c9:c8:e4:b2:9a:d8:af:
97:06:fd:e7:03:34:36:fb:c0:f2:23:c6:ef:ad:c8:eb:b2:22:
44:5f:0a:c6:10:1c:73:d5:0c:1d:f0:2b:14:7a:4d:af:3b:32:
81:f1:17:10:87:fc:d1:83:b3:dd:d8:0a:ee:bf:4d:f6:68:ab:
37:b0:b0:51:6d:19:ee:72:78:30:01:43:87:13:2c:58:33:17:
9d:16:c0:77:0e:b2:32:90:e3:9f:5c:a4:fe:2c:a1:16:09:8c:
cd:32:10:97:52:ca:c9:1f:8f:cb:ca:3f:41:02:4d:5a:2b:b6:
85:a1:24:7c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI17eMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZk
NzMzOTdjOGIzNWM5ZDUyNzdhY2MxMTY3MjAxMTdmZDdiZDMwMTkwHhcNMjMwOTE5
MDgzMDAyWhcNMjUwOTE4MDgzMDAyWjAzMTEwLwYDVQQDEygyYjMzY2NmODhlODI3
YjU2NTdjMzliYzdiYzc3YWVhY2Y5MTk0OTlkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsr/v4zxcDhPRN6AQudRNyYQ5VCxruVnYCmtI1ief0nO3ffqg
ngfNMVqFvAxdSCIfcWG3wg1reVNXv0UGQF5OOFSIOUpyfY6u4a0IbyMZma28d8cz
QWf/Lo9u9pCyZQvRng2J9ZD4rwXioWX7SuI2rR/F2kFNBRAJ21lUwnLcXNRr5yAU
OZq72yLwT2Gm+XKuHp9LbY/2gUN9YIXDbS8jGCLLdkfISrRki8ghTyT81tzbgk4M
qvEgtbUYqoNqnFWZhsclsuDnkjmjk6yvzeQjohCfN03Gz1rTBLEjy4nW6USd85jq
uoNDyDoUB6YB9z3ZMoCa05K2PYGU8HaXAot01wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFO4mR+af4F4MpY9k2yLYHa827KndMB8GA1UdIwQYMBaAFELX2/VSROGARybe
Bw9ljvamqtTWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmQ3MzM5
N2M4YjM1YzlkNTI3N2FjYzExNjcyMDExN2ZkN2JkMzAxOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTIyODUxODYtMWE3ZS00NjUwLTk4OWUtNzVjOWM2
N2YwYjAxLzJiMzNjY2Y4OGU4MjdiNTY1N2MzOWJjN2JjNzdhZWFjZjkxOTQ5OWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMjI4NTE4Ni0xYTdlLTQ2NTAtOTg5ZS03NWM5
YzY3ZjBiMDEvZmQ3MzM5N2M4YjM1YzlkNTI3N2FjYzExNjcyMDExN2ZkN2JkMzAx
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi1G5DANBgkqhkiG9w0BAQsFAAOCAQEAKVaCtbq0NPQdTO2V
zhhHeeVE9vPYorQ8JTkGYdav0gGcQPgZBDQIt7odwqyyh96d0lrwZUqYFYjy8TlA
lwFLitOL8eQaTqLZZw/Upcn3/lZZCEJtpi2uRW79yEd74vSWB1gI5p4y9qo+FkBu
lQVCI+qSMkiWhAKwg4+yzLuyBmVKN913ECQLJObJyOSymtivlwb95wM0NvvA8iPG
763I67IiRF8KxhAcc9UMHfArFHpNrzsygfEXEIf80YOz3dgK7r9N9mirN7CwUW0Z
7nJ4MAFDhxMsWDMXnRbAdw6yMpDjn1yk/iyhFgmMzTIQl1LKyR+Py8o/QQJNWiu2
haEkfA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org