Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/0a49b074303cf71d74932eacaaa4386862d6c09e.roa
File: 0a49b074303cf71d74932eacaaa4386862d6c09e.roa (raw, json)
Hash identifier: MDhzxfmd/oEgloh3n61fdESHvv1Gy2Wh/m9sijwS34w=
Subject key identifier: C1:47:49:53:A9:76:51:5B:90:71:6D:D8:5D:BE:C4:3D:6A:69:7C:2A
Certificate issuer: /CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Certificate serial: 0E1886
Authority key identifier: 5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/0a49b074303cf71d74932eacaaa4386862d6c09e.roa
Signing time: Wed 24 Mar 2021 14:42:05 +0000
ROA not before: Wed 24 Mar 2021 14:42:05 +0000
ROA not after: Tue 24 Mar 2026 14:42:05 +0000
asID: 27773
IP address blocks: 200.30.131.0/24 maxlen: 24
200.30.138.0/24 maxlen: 24
200.30.152.0/23 maxlen: 24
200.30.171.0/24 maxlen: 24
200.30.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923782 (0xe1886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Validity
Not Before: Mar 24 14:42:05 2021 GMT
Not After : Mar 24 14:42:05 2026 GMT
Subject: CN=0a49b074303cf71d74932eacaaa4386862d6c09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:63:ca:d0:97:29:9a:cd:77:b9:ab:47:0d:fd:
fd:85:2f:67:d8:a2:c8:51:f1:2c:cd:6b:8c:d8:2e:
ca:70:ee:68:92:18:82:9c:3c:cb:bf:a2:e9:fe:c6:
96:4b:8f:9e:45:d6:78:b9:be:de:66:30:30:b1:d8:
db:6d:5b:1e:94:0a:01:2f:6f:7a:bc:eb:6e:ae:cf:
3a:44:3e:73:19:c1:f9:53:de:f4:07:9a:04:5d:7f:
43:a3:24:57:10:74:49:de:cf:fe:3a:50:02:c2:6c:
54:e4:36:8e:71:78:a9:09:0d:27:aa:ed:5d:9b:f0:
93:6a:31:37:c1:71:89:c9:03:93:a2:83:02:87:a8:
6f:72:c0:f6:fc:14:1f:2e:a5:94:dc:8c:83:1b:48:
1b:cc:df:32:0c:99:d3:d3:73:a3:0e:1d:50:42:88:
6d:74:f2:ff:89:55:c1:d0:71:1f:ac:c4:6e:be:19:
39:6f:4f:c6:49:bb:4f:62:3f:e9:82:f3:e9:ee:08:
ea:4c:7a:44:a6:df:36:da:30:b0:8d:da:6f:d9:c2:
2a:55:f4:42:51:83:ea:7b:ce:d0:03:74:4e:a2:9b:
be:18:4c:3e:7b:91:d3:2a:fa:ed:69:c2:86:fd:02:
f4:7b:ef:b1:fc:27:9b:51:ba:e0:48:1d:5f:7a:e6:
25:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:47:49:53:A9:76:51:5B:90:71:6D:D8:5D:BE:C4:3D:6A:69:7C:2A
X509v3 Authority Key Identifier:
keyid:5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/0a49b074303cf71d74932eacaaa4386862d6c09e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.30.131.0/24
200.30.138.0/24
200.30.152.0/23
200.30.171.0/24
200.30.179.0/24
Signature Algorithm: sha256WithRSAEncryption
39:5a:00:39:f5:08:2d:28:bb:e1:f3:cd:ad:cb:3f:dd:87:03:
3c:42:0a:67:44:d3:e7:e1:40:0b:2d:5f:4f:45:2b:62:76:4e:
45:43:18:69:ad:e0:bc:49:14:3f:56:c3:4c:d4:ba:50:b2:06:
c2:38:09:92:27:01:eb:dd:ef:b2:88:b4:5e:e3:8e:8d:29:e6:
49:ac:6b:1b:31:b0:f5:1a:ed:c4:2d:fc:0b:2c:e6:ff:a4:71:
8a:f2:94:37:05:69:c6:bc:5c:a7:45:13:4d:d2:ab:a5:45:64:
1e:f8:01:ed:1d:b2:60:fd:4a:52:88:ae:a0:f5:ec:89:a8:6e:
23:cf:0d:02:af:d4:e9:fc:67:6f:44:86:a7:69:66:64:cb:98:
f4:b9:10:75:3f:ac:86:3d:c2:9e:ab:1f:16:23:2f:e6:f8:86:
77:b3:a6:4d:43:a3:01:5a:2f:99:6a:25:12:da:bf:c3:db:91:
b7:89:3f:46:62:15:4e:c4:51:ba:af:69:3a:c3:e0:77:e5:c7:
a3:5f:7e:d4:4a:6c:5f:7b:3b:8a:30:1e:0a:10:39:bf:98:15:
69:20:15:c2:e3:d9:87:63:b9:f5:89:5a:f6:d5:de:6b:d7:56:
79:b5:f7:de:0e:6c:95:f9:33:6b:f0:d7:86:68:d9:0a:b7:7b:
cb:07:dc:74
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDDhiGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdh
YWIzYTFiMWQzMGIxNGI2ZDlhM2ZlMzljZWZlODY3ZDYwZmYzNTAwHhcNMjEwMzI0
MTQ0MjA1WhcNMjYwMzI0MTQ0MjA1WjAzMTEwLwYDVQQDEygwYTQ5YjA3NDMwM2Nm
NzFkNzQ5MzJlYWNhYWE0Mzg2ODYyZDZjMDllMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjWPK0Jcpms13uatHDf39hS9n2KLIUfEszWuM2C7KcO5okhiC
nDzLv6Lp/saWS4+eRdZ4ub7eZjAwsdjbbVselAoBL296vOturs86RD5zGcH5U970
B5oEXX9DoyRXEHRJ3s/+OlACwmxU5DaOcXipCQ0nqu1dm/CTajE3wXGJyQOTooMC
h6hvcsD2/BQfLqWU3IyDG0gbzN8yDJnT03OjDh1QQohtdPL/iVXB0HEfrMRuvhk5
b0/GSbtPYj/pgvPp7gjqTHpEpt822jCwjdpv2cIqVfRCUYPqe87QA3ROopu+GEw+
e5HTKvrtacKG/QL0e++x/CebUbrgSB1feuYlbQIDAQABo4ICczCCAm8wHQYDVR0O
BBYEFMFHSVOpdlFbkHFt2F2+xD1qaXwqMB8GA1UdIwQYMBaAFF9YxoPO1cgOD9/b
FLkd3K884qsrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2FhYjNh
MWIxZDMwYjE0YjZkOWEzZmUzOWNlZmU4NjdkNjBmZjM1MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWE2NDZhNWEtZTAzYi00OGVjLThlYzMtODA2NWNj
ZTEwZTllLzBhNDliMDc0MzAzY2Y3MWQ3NDkzMmVhY2FhYTQzODY4NjJkNmMwOWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYTY0NmE1YS1lMDNiLTQ4ZWMtOGVjMy04MDY1
Y2NlMTBlOWUvN2FhYjNhMWIxZDMwYjE0YjZkOWEzZmUzOWNlZmU4NjdkNjBmZjM1
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQo
MCYwJAQCAAEwHgMEAMgegwMEAMgeigMEAcgemAMEAMgeqwMEAMgeszANBgkqhkiG
9w0BAQsFAAOCAQEAOVoAOfUILSi74fPNrcs/3YcDPEIKZ0TT5+FACy1fT0UrYnZO
RUMYaa3gvEkUP1bDTNS6ULIGwjgJkicB693vsoi0XuOOjSnmSaxrGzGw9RrtxC38
Cyzm/6RxivKUNwVpxrxcp0UTTdKrpUVkHvgB7R2yYP1KUoiuoPXsiahuI88NAq/U
6fxnb0SGp2lmZMuY9LkQdT+shj3CnqsfFiMv5viGd7OmTUOjAVovmWolEtq/w9uR
t4k/RmIVTsRRuq9pOsPgd+XHo19+1EpsX3s7ijAeChA5v5gVaSAVwuPZh2O59Yla
9tXea9dWebX33g5slfkza/DXhmjZCrd7ywfcdA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org