Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/df3023c500cb32c22172e28f34d23e2c332d67fa.roa
File: df3023c500cb32c22172e28f34d23e2c332d67fa.roa (raw, json)
Hash identifier: SHCTgd6YZ5WGyvaxieO0AQhxVTLv4wddfihw5FHq6YQ=
Subject key identifier: FE:26:37:39:55:71:95:82:30:0E:30:A2:5F:03:F2:D1:E5:AA:5F:FC
Certificate issuer: /CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
Certificate serial: 037D1E
Authority key identifier: 5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/df3023c500cb32c22172e28f34d23e2c332d67fa.roa
Signing time: Thu 23 Nov 2023 18:33:55 +0000
ROA not before: Thu 23 Nov 2023 18:33:55 +0000
ROA not after: Sun 23 Nov 2025 18:33:55 +0000
asID: 13999
IP address blocks: 201.159.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228638 (0x37d1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
Validity
Not Before: Nov 23 18:33:55 2023 GMT
Not After : Nov 23 18:33:55 2025 GMT
Subject: CN=df3023c500cb32c22172e28f34d23e2c332d67fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:61:c5:6e:84:26:cf:ef:7f:c4:ec:b4:68:
6c:35:1f:73:3b:95:de:ee:b3:41:e9:bd:bb:22:1b:
51:1e:31:d8:90:f4:d3:08:f7:dd:de:8c:d9:3a:23:
fe:d5:b8:a3:cc:77:a9:54:3a:33:da:4c:e1:9d:81:
87:c1:d0:6d:40:af:fb:7e:1d:32:dc:b7:b9:16:79:
ec:fd:65:53:a3:52:bc:1b:fc:c9:24:59:2a:23:ee:
18:2f:5a:db:f4:97:98:34:89:6a:3b:58:07:a2:4f:
0f:88:f0:2a:1e:01:92:79:be:c0:c8:7b:69:db:46:
8b:b8:af:6b:97:95:13:c0:ef:15:c0:84:ed:21:bd:
cd:96:8c:e6:a6:e1:2b:6f:b4:15:c2:33:7c:4e:6d:
d8:b2:be:a9:8d:7f:59:83:4a:7d:fa:7a:e1:cc:61:
e6:73:2d:2d:87:35:3e:84:e3:af:78:25:92:9a:5a:
6d:4e:35:ec:f1:16:5a:e2:d8:91:ea:32:2a:45:13:
75:b6:62:91:47:f0:fe:8c:b9:19:54:cb:5a:de:23:
06:e7:97:50:bd:ed:f4:48:a7:09:43:91:7c:1a:ac:
7a:e7:70:87:81:69:bf:8b:3e:f3:1e:2a:78:32:b9:
8c:71:78:6d:95:61:96:a5:68:22:bc:76:c5:fd:53:
15:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:26:37:39:55:71:95:82:30:0E:30:A2:5F:03:F2:D1:E5:AA:5F:FC
X509v3 Authority Key Identifier:
keyid:5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/df3023c500cb32c22172e28f34d23e2c332d67fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.208.0/21
Signature Algorithm: sha256WithRSAEncryption
90:7d:96:5c:e9:be:fe:22:d6:57:28:27:78:01:e6:c7:68:86:
fe:3e:eb:42:85:05:01:95:fb:95:90:16:ef:95:46:87:43:8a:
92:e9:c9:54:69:40:d9:df:47:fe:ba:aa:0b:0a:ed:e1:b4:5d:
62:bb:0b:28:f7:83:cb:4f:02:17:b1:ef:ea:c9:0f:03:12:65:
dd:61:16:81:4b:9b:b6:05:d5:76:34:ff:0b:72:99:a8:52:72:
50:77:44:e5:b1:64:48:43:ef:03:57:1e:89:e7:39:a3:39:76:
f9:1e:18:bb:16:65:d8:4e:70:2b:97:cc:86:80:1c:30:43:0f:
f3:98:2c:dc:89:b7:f7:77:f6:d2:03:99:37:b4:8f:74:6d:a7:
f1:3f:9c:13:67:12:ca:22:17:1b:95:88:37:2b:1a:7a:79:29:
23:5c:93:d9:70:8d:ad:37:2e:da:5a:69:9f:d1:f3:58:43:d7:
7d:d0:d9:2f:c0:5e:05:ac:cc:f0:25:c5:f5:e0:5d:61:4f:0b:
68:4f:aa:83:c6:5b:35:20:f8:1e:7f:04:bd:53:11:eb:b9:3f:
39:61:9c:c7:8c:bb:73:0d:ee:00:f7:7c:7e:da:9c:f4:5f:d3:
b4:ae:6f:ed:e3:91:ab:2a:13:cb:b8:48:ab:7b:7d:13:64:37:
1c:fe:63:08
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA30eMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRi
YTVmOGJmNGI5ZTljZTk4NzFmMWQwNDkwNWYyOTY3NmYxYWNhZjcwHhcNMjMxMTIz
MTgzMzU1WhcNMjUxMTIzMTgzMzU1WjAzMTEwLwYDVQQDEyhkZjMwMjNjNTAwY2Iz
MmMyMjE3MmUyOGYzNGQyM2UyYzMzMmQ2N2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAojVhxW6EJs/vf8TstGhsNR9zO5Xe7rNB6b27IhtRHjHYkPTT
CPfd3ozZOiP+1bijzHepVDoz2kzhnYGHwdBtQK/7fh0y3Le5Fnns/WVTo1K8G/zJ
JFkqI+4YL1rb9JeYNIlqO1gHok8PiPAqHgGSeb7AyHtp20aLuK9rl5UTwO8VwITt
Ib3NlozmpuErb7QVwjN8Tm3Ysr6pjX9Zg0p9+nrhzGHmcy0thzU+hOOveCWSmlpt
TjXs8RZa4tiR6jIqRRN1tmKRR/D+jLkZVMta3iMG55dQve30SKcJQ5F8Gqx653CH
gWm/iz7zHip4MrmMcXhtlWGWpWgivHbF/VMVnQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFP4mNzlVcZWCMA4wol8D8tHlql/8MB8GA1UdIwQYMBaAFFsK6yPWxcEFCAVo
JsQnjdmR6jvYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGJhNWY4
YmY0YjllOWNlOTg3MWYxZDA0OTA1ZjI5Njc2ZjFhY2FmNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQwMDQzMmQtOTA0MC00ZGQ2LWE2YTItZDA2OTY2
YWY1ZjJiL2RmMzAyM2M1MDBjYjMyYzIyMTcyZTI4ZjM0ZDIzZTJjMzMyZDY3ZmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDAwNDMyZC05MDQwLTRkZDYtYTZhMi1kMDY5
NjZhZjVmMmIvNGJhNWY4YmY0YjllOWNlOTg3MWYxZDA0OTA1ZjI5Njc2ZjFhY2Fm
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA8mf0DANBgkqhkiG9w0BAQsFAAOCAQEAkH2WXOm+/iLWVygn
eAHmx2iG/j7rQoUFAZX7lZAW75VGh0OKkunJVGlA2d9H/rqqCwrt4bRdYrsLKPeD
y08CF7Hv6skPAxJl3WEWgUubtgXVdjT/C3KZqFJyUHdE5bFkSEPvA1ceiec5ozl2
+R4YuxZl2E5wK5fMhoAcMEMP85gs3Im393f20gOZN7SPdG2n8T+cE2cSyiIXG5WI
NysaenkpI1yT2XCNrTcu2lppn9HzWEPXfdDZL8BeBazM8CXF9eBdYU8LaE+qg8Zb
NSD4Hn8EvVMR67k/OWGcx4y7cw3uAPd8ftqc9F/TtK5v7eORqyoTy7hIq3t9E2Q3
HP5jCA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org