Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15002c32-6b1c-4402-8a0c-0e7ba5e20e3f/8370be508ffffe3501dead2678b52f0c3d37635d.roa
File: 8370be508ffffe3501dead2678b52f0c3d37635d.roa (raw, json)
Hash identifier: 44eNIyxjY1v9LSSSBinbg4mi7oVpUop9Igg2A8l069Y=
Subject key identifier: 0B:EA:9D:66:19:83:A1:E8:20:1A:40:C0:CF:0F:3F:6C:48:D0:79:23
Certificate issuer: /CN=5fe5c2604d32dd22e2e6492a72a6c037ea4c4303
Certificate serial: 0BAC51
Authority key identifier: 60:27:BE:17:C3:AD:35:EE:71:29:14:87:83:3E:C2:1B:C4:14:76:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fe5c2604d32dd22e2e6492a72a6c037ea4c4303.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/15002c32-6b1c-4402-8a0c-0e7ba5e20e3f/8370be508ffffe3501dead2678b52f0c3d37635d.roa
Signing time: Wed 24 Mar 2021 14:43:01 +0000
ROA not before: Wed 24 Mar 2021 14:43:00 +0000
ROA not after: Tue 24 Mar 2026 14:43:00 +0000
asID: 24940
IP address blocks: 201.131.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 765009 (0xbac51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe5c2604d32dd22e2e6492a72a6c037ea4c4303
Validity
Not Before: Mar 24 14:43:00 2021 GMT
Not After : Mar 24 14:43:00 2026 GMT
Subject: CN=8370be508ffffe3501dead2678b52f0c3d37635d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:a7:b9:72:19:67:84:90:c2:c4:c4:aa:c8:
63:38:f9:c2:5e:a3:a2:a9:d7:c0:d0:6e:b9:33:3b:
a2:05:a9:bb:3b:40:3f:6e:cf:07:18:d0:2e:0f:b8:
ce:8c:4b:67:c0:d7:dc:0b:70:4b:28:8b:92:c6:23:
78:af:17:a5:cf:31:8a:18:d4:8c:6c:2c:94:9d:39:
86:d3:9b:3c:49:65:a0:57:7b:47:32:80:39:77:29:
57:35:2b:3a:1f:55:a3:4d:9d:96:85:d5:56:23:52:
b8:c6:38:cb:37:89:3a:fc:b7:82:a7:bf:13:b3:bc:
b4:7e:87:0e:05:6a:08:67:2d:4e:96:58:90:0b:23:
80:0d:7e:be:3d:fd:31:82:df:e0:0e:b9:f3:71:d9:
a4:4a:02:d0:4b:ff:5d:9a:b6:c2:aa:fd:01:f5:2e:
2d:cf:13:9e:6f:7b:75:e6:28:81:8e:66:b1:2e:6b:
00:10:8e:df:81:35:f2:4c:32:ec:2d:98:43:3c:04:
a2:07:2a:81:56:6a:61:f8:de:a5:4a:1c:a0:0a:db:
50:4b:5f:d1:c6:60:4b:0e:fd:b8:ce:fa:a8:42:dc:
69:67:64:6c:e9:b3:3a:c6:b8:9f:e1:77:32:a1:f3:
f7:68:1d:23:62:0d:d4:b4:fa:01:4f:1b:e2:28:62:
ce:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EA:9D:66:19:83:A1:E8:20:1A:40:C0:CF:0F:3F:6C:48:D0:79:23
X509v3 Authority Key Identifier:
keyid:60:27:BE:17:C3:AD:35:EE:71:29:14:87:83:3E:C2:1B:C4:14:76:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fe5c2604d32dd22e2e6492a72a6c037ea4c4303.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15002c32-6b1c-4402-8a0c-0e7ba5e20e3f/8370be508ffffe3501dead2678b52f0c3d37635d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/15002c32-6b1c-4402-8a0c-0e7ba5e20e3f/5fe5c2604d32dd22e2e6492a72a6c037ea4c4303.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:6b:7a:c1:3d:87:cd:2e:c9:c0:7e:fc:99:63:32:23:7b:c0:
6f:0f:cc:14:5c:ad:cd:d5:bb:3c:25:d6:e8:00:93:91:88:c1:
e7:1c:6d:b8:86:26:b9:0a:88:8c:e6:40:8e:0f:7f:f6:98:6a:
62:1b:67:85:6a:3b:eb:a8:3b:45:10:5c:f3:a9:72:98:d6:ef:
5e:59:68:01:61:d4:9d:10:15:32:2d:d3:49:94:0b:86:d2:b7:
6f:5c:9a:73:45:79:e4:e5:3b:6b:f6:99:88:e4:52:fb:74:83:
f5:8c:f7:95:54:91:dd:6a:9b:3d:14:2e:7f:55:a8:e2:63:eb:
63:86:47:00:83:2e:61:6a:a7:87:2c:a7:0c:17:b6:69:93:84:
13:86:6e:e1:d2:94:1e:8a:e2:fd:4b:37:d6:ef:94:67:d6:ab:
47:ce:a0:ce:53:12:db:f0:8e:a7:a7:60:f0:4d:d2:6c:e0:70:
9f:16:b5:e9:7c:e1:7a:a8:a3:7a:d0:a4:6c:b2:e8:42:fd:86:
66:7d:9d:35:d5:5f:e7:fd:26:80:be:66:da:c5:14:e5:d1:16:
db:f1:47:4d:ba:a2:a5:30:47:20:54:e6:a9:c0:f0:3b:4f:3e:
1b:f7:31:0b:32:01:89:c5:50:25:7d:ff:aa:8f:7d:f3:f2:85:
26:b5:cc:cd
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC6xRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVm
ZTVjMjYwNGQzMmRkMjJlMmU2NDkyYTcyYTZjMDM3ZWE0YzQzMDMwHhcNMjEwMzI0
MTQ0MzAwWhcNMjYwMzI0MTQ0MzAwWjAzMTEwLwYDVQQDEyg4MzcwYmU1MDhmZmZm
ZTM1MDFkZWFkMjY3OGI1MmYwYzNkMzc2MzVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsGmnuXIZZ4SQwsTEqshjOPnCXqOiqdfA0G65MzuiBam7O0A/
bs8HGNAuD7jOjEtnwNfcC3BLKIuSxiN4rxelzzGKGNSMbCyUnTmG05s8SWWgV3tH
MoA5dylXNSs6H1WjTZ2WhdVWI1K4xjjLN4k6/LeCp78Ts7y0focOBWoIZy1OlliQ
CyOADX6+Pf0xgt/gDrnzcdmkSgLQS/9dmrbCqv0B9S4tzxOeb3t15iiBjmaxLmsA
EI7fgTXyTDLsLZhDPASiByqBVmph+N6lShygCttQS1/RxmBLDv24zvqoQtxpZ2Rs
6bM6xrif4XcyofP3aB0jYg3UtPoBTxviKGLO/QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAvqnWYZg6HoIBpAwM8PP2xI0HkjMB8GA1UdIwQYMBaAFGAnvhfDrTXucSkU
h4M+whvEFHboMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWZlNWMy
NjA0ZDMyZGQyMmUyZTY0OTJhNzJhNmMwMzdlYTRjNDMwMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTUwMDJjMzItNmIxYy00NDAyLThhMGMtMGU3YmE1
ZTIwZTNmLzgzNzBiZTUwOGZmZmZlMzUwMWRlYWQyNjc4YjUyZjBjM2QzNzYzNWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xNTAwMmMzMi02YjFjLTQ0MDItOGEwYy0wZTdi
YTVlMjBlM2YvNWZlNWMyNjA0ZDMyZGQyMmUyZTY0OTJhNzJhNmMwMzdlYTRjNDMw
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMmDAzANBgkqhkiG9w0BAQsFAAOCAQEACmt6wT2HzS7JwH78
mWMyI3vAbw/MFFytzdW7PCXW6ACTkYjB5xxtuIYmuQqIjOZAjg9/9phqYhtnhWo7
66g7RRBc86lymNbvXlloAWHUnRAVMi3TSZQLhtK3b1yac0V55OU7a/aZiORS+3SD
9Yz3lVSR3WqbPRQuf1Wo4mPrY4ZHAIMuYWqnhyynDBe2aZOEE4Zu4dKUHori/Us3
1u+UZ9arR86gzlMS2/COp6dg8E3SbOBwnxa16XzheqijetCkbLLoQv2GZn2dNdVf
5/0mgL5m2sUU5dEW2/FHTbqipTBHIFTmqcDwO08+G/cxCzIBicVQJX3/qo998/KF
JrXMzQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org