Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/66cd5e9b1d3a8f7530148b00f4a6a2b5c6163e70.roa
File: 66cd5e9b1d3a8f7530148b00f4a6a2b5c6163e70.roa (raw, json)
Hash identifier: RjFRHcuI6XzumIydzY7UW5XJmaiS54vt+kdZ3F6LiXs=
Subject key identifier: 6D:79:9F:CB:8A:6F:3E:C8:06:DB:B3:27:5E:DD:A4:F2:B2:7C:D0:37
Certificate issuer: /CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
Certificate serial: 0ABA9B
Authority key identifier: B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/66cd5e9b1d3a8f7530148b00f4a6a2b5c6163e70.roa
Signing time: Wed 24 Mar 2021 14:35:37 +0000
ROA not before: Wed 24 Mar 2021 14:35:37 +0000
ROA not after: Tue 24 Mar 2026 14:35:37 +0000
asID: 27951
IP address blocks: 45.189.235.0/24 maxlen: 24
201.131.88.0/23 maxlen: 23
2803:84e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703131 (0xaba9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
Validity
Not Before: Mar 24 14:35:37 2021 GMT
Not After : Mar 24 14:35:37 2026 GMT
Subject: CN=66cd5e9b1d3a8f7530148b00f4a6a2b5c6163e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6d:cc:9f:90:c0:e5:76:5c:a7:c3:7e:7a:8f:
a7:94:66:80:21:d2:e4:bb:46:b6:91:17:84:7f:a3:
5b:f6:a3:89:81:b6:5f:0e:82:c1:28:7d:c3:12:bc:
86:03:32:b2:21:b3:96:3d:ff:a4:e8:88:be:20:08:
e9:22:90:17:98:ae:e5:58:ff:4d:04:6b:2b:53:60:
45:4b:cf:9c:8e:93:d9:7b:7e:12:4e:03:13:49:f8:
82:eb:9e:2a:0a:8f:91:8e:f9:43:0a:1b:77:1d:f8:
39:16:2a:11:ab:fc:4e:b5:db:00:81:de:e6:b4:08:
29:54:57:1a:83:1a:6a:f7:a5:58:06:cf:f5:3a:4d:
3f:1f:a6:93:8e:6b:51:ca:1d:27:2c:10:96:b2:d2:
fc:e0:01:5f:ab:16:9b:71:28:fb:10:a1:c1:93:5c:
6c:0c:62:55:0d:59:92:d8:70:e9:92:e1:22:dd:da:
6b:65:56:96:f8:7b:98:bc:69:95:2a:44:73:e3:9f:
33:9f:f0:9a:ea:64:bc:f6:9d:28:82:aa:c2:7e:ec:
5d:47:42:56:8c:e5:29:14:40:55:6d:b9:be:e7:6d:
f6:6c:05:7f:ae:aa:d0:6e:c1:aa:ca:8d:dc:0a:84:
bf:ef:0b:f4:f8:d0:82:90:80:78:0d:3f:19:1d:53:
dd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:79:9F:CB:8A:6F:3E:C8:06:DB:B3:27:5E:DD:A4:F2:B2:7C:D0:37
X509v3 Authority Key Identifier:
keyid:B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/66cd5e9b1d3a8f7530148b00f4a6a2b5c6163e70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/71dea23d89f89e25e8692a6c0b1c413e909da1ca.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.235.0/24
201.131.88.0/23
IPv6:
2803:84e0::/32
Signature Algorithm: sha256WithRSAEncryption
4a:e7:8b:bf:b5:72:79:f5:04:90:10:99:3e:e0:5c:93:c0:57:
c3:96:3d:9f:ef:16:10:6c:57:7b:bc:e1:de:aa:bf:82:ed:f1:
01:57:2d:c0:54:4a:51:a5:6b:79:af:42:6c:b1:a4:cd:c3:68:
3a:82:eb:bf:d6:81:cf:70:d7:1e:85:63:cb:76:34:04:7d:2d:
3b:a1:a8:43:96:b4:b8:12:3f:66:27:21:e2:25:41:0c:4f:b0:
9b:40:77:57:70:aa:00:70:6f:e4:6c:bb:3b:c9:fb:26:6f:2a:
a7:b1:6e:26:d8:b3:68:33:41:c9:22:dc:46:85:c1:c2:a0:a1:
42:a8:b9:8f:64:b9:6f:3d:e9:d5:e3:f1:ea:64:fc:1f:80:d1:
1b:a8:57:8c:22:a8:4d:0e:cb:a8:78:60:84:a4:1f:15:0f:87:
6a:f6:b8:b0:28:b8:77:ee:1e:ee:1d:1a:18:c1:d2:c4:75:f4:
07:21:42:20:9c:d1:cd:1c:22:84:a1:1f:c5:74:d6:02:ff:98:
e4:54:54:be:e3:24:19:31:c4:1a:ba:41:bd:26:1e:4c:0d:52:
13:9e:ae:cf:0e:66:48:37:56:1b:3c:69:6b:e5:65:0f:ee:16:
33:e4:db:a6:92:94:dc:a2:78:0e:b3:67:7e:18:74:9c:fc:77:
81:3f:06:79
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDCrqbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx
ZGVhMjNkODlmODllMjVlODY5MmE2YzBiMWM0MTNlOTA5ZGExY2EwHhcNMjEwMzI0
MTQzNTM3WhcNMjYwMzI0MTQzNTM3WjAzMTEwLwYDVQQDEyg2NmNkNWU5YjFkM2E4
Zjc1MzAxNDhiMDBmNGE2YTJiNWM2MTYzZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh23Mn5DA5XZcp8N+eo+nlGaAIdLku0a2kReEf6Nb9qOJgbZf
DoLBKH3DEryGAzKyIbOWPf+k6Ii+IAjpIpAXmK7lWP9NBGsrU2BFS8+cjpPZe34S
TgMTSfiC654qCo+RjvlDCht3Hfg5FioRq/xOtdsAgd7mtAgpVFcagxpq96VYBs/1
Ok0/H6aTjmtRyh0nLBCWstL84AFfqxabcSj7EKHBk1xsDGJVDVmS2HDpkuEi3dpr
ZVaW+HuYvGmVKkRz458zn/Ca6mS89p0ogqrCfuxdR0JWjOUpFEBVbbm+5232bAV/
rqrQbsGqyo3cCoS/7wv0+NCCkIB4DT8ZHVPdTQIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFG15n8uKbz7IBtuzJ17dpPKyfNA3MB8GA1UdIwQYMBaAFLmaRc/clgAPAvwG
bM+YWfBSwphfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzFkZWEy
M2Q4OWY4OWUyNWU4NjkyYTZjMGIxYzQxM2U5MDlkYTFjYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVlODc1MmQtM2I5ZC00OTBhLWI4OGYtODE1MTM4
MDZjNGRhLzY2Y2Q1ZTliMWQzYThmNzUzMDE0OGIwMGY0YTZhMmI1YzYxNjNlNzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWU4NzUyZC0zYjlkLTQ5MGEtYjg4Zi04MTUx
MzgwNmM0ZGEvNzFkZWEyM2Q4OWY4OWUyNWU4NjkyYTZjMGIxYzQxM2U5MDlkYTFj
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAC296wMEAcmDWDANBAIAAjAHAwUAKAOE4DANBgkqhkiG9w0B
AQsFAAOCAQEASueLv7VyefUEkBCZPuBck8BXw5Y9n+8WEGxXe7zh3qq/gu3xAVct
wFRKUaVrea9CbLGkzcNoOoLrv9aBz3DXHoVjy3Y0BH0tO6GoQ5a0uBI/Zich4iVB
DE+wm0B3V3CqAHBv5Gy7O8n7Jm8qp7FuJtizaDNBySLcRoXBwqChQqi5j2S5bz3p
1ePx6mT8H4DRG6hXjCKoTQ7LqHhghKQfFQ+Hava4sCi4d+4e7h0aGMHSxHX0ByFC
IJzRzRwihKEfxXTWAv+Y5FRUvuMkGTHEGrpBvSYeTA1SE56uzw5mSDdWGzxpa+Vl
D+4WM+TbppKU3KJ4DrNnfhh0nPx3gT8GeQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org