Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/08bfcdc982341aa17bff7955448d2389626bf77c.roa
File: 08bfcdc982341aa17bff7955448d2389626bf77c.roa (raw, json)
Hash identifier: i+pultrgT0tmM68joHLmROoN3HppLTnaqJfbU+GuHQI=
Subject key identifier: A2:FD:69:8E:8A:B0:A5:9C:1B:2D:C3:AB:A7:C7:F4:9C:BD:A1:D0:C4
Certificate issuer: /CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
Certificate serial: 23637C
Authority key identifier: 18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/08bfcdc982341aa17bff7955448d2389626bf77c.roa
Signing time: Thu 06 Jul 2023 04:47:57 +0000
ROA not before: Wed 05 Jul 2023 04:47:56 +0000
ROA not after: Sun 06 Jul 2025 04:47:56 +0000
asID: 266880
IP address blocks: 45.225.44.0/23 maxlen: 24
2803:d220::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2319228 (0x23637c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
Validity
Not Before: Jul 5 04:47:56 2023 GMT
Not After : Jul 6 04:47:56 2025 GMT
Subject: CN=08bfcdc982341aa17bff7955448d2389626bf77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:3a:d2:c7:b2:f4:96:2b:11:33:dc:57:12:
62:e1:c4:7e:b6:c7:b4:02:5a:ca:7c:2a:03:ad:e3:
d9:b4:a0:a7:60:6c:e3:f0:30:8f:f8:a1:aa:b8:2f:
03:df:d2:d7:39:f4:f2:6f:6d:59:b3:3a:bc:88:b4:
52:8d:67:49:db:69:31:28:ee:81:09:19:a8:ea:74:
13:5a:fc:b8:f7:84:de:73:dc:a6:65:df:58:85:9a:
67:33:78:c4:21:a7:12:15:f8:64:94:53:75:98:66:
54:f6:f9:60:17:02:1e:45:5e:f8:8a:53:3d:ee:e1:
34:12:1d:eb:16:b7:6e:2b:50:d6:a8:b7:43:c2:d8:
02:73:ea:3b:49:7a:da:76:8b:ec:57:12:70:c2:77:
a5:45:91:c4:b2:37:a8:4a:d9:09:07:91:df:63:ed:
4a:ef:21:7f:a8:62:44:9d:6e:26:31:5a:86:67:3d:
9f:51:68:b1:7d:f9:b8:1d:1e:9f:d8:21:60:be:11:
49:7e:c5:f0:b7:76:f1:0a:65:6b:bc:be:80:72:54:
f4:ef:87:3d:84:81:f8:88:de:b2:09:66:50:7a:31:
97:95:b2:62:68:b2:67:02:71:03:1a:87:48:b8:a6:
24:dc:c7:00:d8:ae:99:bc:39:da:9a:20:0d:bc:a1:
8e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FD:69:8E:8A:B0:A5:9C:1B:2D:C3:AB:A7:C7:F4:9C:BD:A1:D0:C4
X509v3 Authority Key Identifier:
keyid:18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/08bfcdc982341aa17bff7955448d2389626bf77c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/413a1d7ffe2a543b661759c728d9274cfaa4061f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.44.0/23
IPv6:
2803:d220::/32
Signature Algorithm: sha256WithRSAEncryption
6f:4d:c8:01:54:da:13:48:82:78:52:a4:5c:a7:01:53:17:c4:
2a:e9:58:bb:5a:86:d8:4e:23:4e:dd:a1:26:49:26:3d:6f:ce:
b6:37:85:8a:cf:9b:82:63:46:f1:80:67:f8:6a:86:5e:a5:42:
78:6d:a5:e0:19:6d:fc:f8:ec:25:27:d7:cf:44:85:ba:22:61:
55:df:f0:5f:b4:3a:cf:62:4c:96:66:1b:69:fb:8e:5f:a9:03:
cf:75:e1:95:5c:78:8d:e5:f8:78:af:57:e8:b8:7d:38:84:6e:
1f:e7:45:c4:9c:19:65:36:06:88:a0:de:5d:1e:aa:14:51:15:
46:92:30:94:3e:ff:72:e3:95:48:1d:df:e2:fc:c0:57:27:89:
0e:10:e0:86:f9:c7:8b:21:d3:95:d8:b3:b1:3b:ea:a0:c9:ea:
27:fd:d2:42:a7:61:d1:02:8d:9f:7f:15:b7:a1:a7:ff:d4:c2:
f7:0f:cf:f1:41:58:67:9c:9e:6d:6f:b2:c7:87:22:04:33:32:
b0:b3:91:b3:26:63:a0:09:5f:6f:c0:6a:14:8a:e4:c3:77:93:
e1:18:a9:d5:2b:9f:36:5c:04:09:5a:31:24:d1:3c:4c:1c:5b:
e7:e1:19:17:b4:d6:c0:72:ff:96:a8:8f:81:de:18:b7:b1:01:
f3:a8:e1:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDI2N8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQx
M2ExZDdmZmUyYTU0M2I2NjE3NTljNzI4ZDkyNzRjZmFhNDA2MWYwHhcNMjMwNzA1
MDQ0NzU2WhcNMjUwNzA2MDQ0NzU2WjAzMTEwLwYDVQQDEygwOGJmY2RjOTgyMzQx
YWExN2JmZjc5NTU0NDhkMjM4OTYyNmJmNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo9Y60sey9JYrETPcVxJi4cR+tse0AlrKfCoDrePZtKCnYGzj
8DCP+KGquC8D39LXOfTyb21Zszq8iLRSjWdJ22kxKO6BCRmo6nQTWvy494Tec9ym
Zd9YhZpnM3jEIacSFfhklFN1mGZU9vlgFwIeRV74ilM97uE0Eh3rFrduK1DWqLdD
wtgCc+o7SXradovsVxJwwnelRZHEsjeoStkJB5HfY+1K7yF/qGJEnW4mMVqGZz2f
UWixffm4HR6f2CFgvhFJfsXwt3bxCmVrvL6AclT074c9hIH4iN6yCWZQejGXlbJi
aLJnAnEDGodIuKYk3McA2K6ZvDnamiANvKGOvQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFKL9aY6KsKWcGy3Dq6fH9Jy9odDEMB8GA1UdIwQYMBaAFBiUvFB4+kwxapCu
YsWCAjD1oR5cMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDEzYTFk
N2ZmZTJhNTQzYjY2MTc1OWM3MjhkOTI3NGNmYWE0MDYxZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTZhNGE0ODktYWNlYS00YzYwLThmNGUtMzQ5YzYz
ODdlZWViLzA4YmZjZGM5ODIzNDFhYTE3YmZmNzk1NTQ0OGQyMzg5NjI2YmY3N2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNmE0YTQ4OS1hY2VhLTRjNjAtOGY0ZS0zNDlj
NjM4N2VlZWIvNDEzYTFkN2ZmZTJhNTQzYjY2MTc1OWM3MjhkOTI3NGNmYWE0MDYx
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAS3hLDANBAIAAjAHAwUAKAPSIDANBgkqhkiG9w0BAQsFAAOC
AQEAb03IAVTaE0iCeFKkXKcBUxfEKulYu1qG2E4jTt2hJkkmPW/OtjeFis+bgmNG
8YBn+GqGXqVCeG2l4Blt/PjsJSfXz0SFuiJhVd/wX7Q6z2JMlmYbafuOX6kDz3Xh
lVx4jeX4eK9X6Lh9OIRuH+dFxJwZZTYGiKDeXR6qFFEVRpIwlD7/cuOVSB3f4vzA
VyeJDhDghvnHiyHTldizsTvqoMnqJ/3SQqdh0QKNn38Vt6Gn/9TC9w/P8UFYZ5ye
bW+yx4ciBDMysLORsyZjoAlfb8BqFIrkw3eT4Rip1SufNlwECVoxJNE8TBxb5+EZ
F7TWwHL/lqiPgd4Yt7EB86jhOg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org