Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9f0db517-5b08-424e-b352-5292bc6636db/611fb8c796d6e0e93c3d1e3de6fca2ae78d909fe.roa
File: 611fb8c796d6e0e93c3d1e3de6fca2ae78d909fe.roa (raw, json)
Hash identifier: ur/d0nsoGpFbQN53H5WzB2Od97STKvq+atfp2kneNwQ=
Subject key identifier: 6A:77:06:41:79:5E:D9:17:89:DB:E5:52:60:82:B8:33:0C:04:63:06
Certificate issuer: /CN=ecc9a7cf8cd28da7666e8648a4847d34d878fdcd
Certificate serial: 0D8570
Authority key identifier: 58:69:D0:57:05:08:32:46:08:EE:2C:6F:83:08:52:C3:1B:4A:08:ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9f0db517-5b08-424e-b352-5292bc6636db/611fb8c796d6e0e93c3d1e3de6fca2ae78d909fe.roa
Signing time: Wed 24 Mar 2021 14:29:41 +0000
ROA not before: Wed 24 Mar 2021 14:29:41 +0000
ROA not after: Tue 24 Mar 2026 14:29:41 +0000
asID: 27851
IP address blocks: 200.110.184.0/21 maxlen: 24
200.81.152.0/21 maxlen: 24
170.231.36.0/22 maxlen: 24
2803:3680::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886128 (0xd8570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc9a7cf8cd28da7666e8648a4847d34d878fdcd
Validity
Not Before: Mar 24 14:29:41 2021 GMT
Not After : Mar 24 14:29:41 2026 GMT
Subject: CN=611fb8c796d6e0e93c3d1e3de6fca2ae78d909fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:4e:8c:8a:ae:3e:85:40:98:a9:bd:07:93:
88:6d:56:e6:d8:d7:ff:84:e1:fe:ab:00:1d:04:77:
a7:1c:e5:92:15:37:02:a1:1b:e3:84:77:b0:e6:30:
c5:f6:f0:5a:9b:ad:03:9c:54:03:28:a5:49:c8:49:
d9:40:3d:f9:b4:ca:3f:6c:4e:a9:95:db:de:08:47:
7f:6d:ef:dc:da:bb:a2:3a:35:59:03:ca:74:05:8a:
4a:d1:6e:0a:52:19:0c:f7:18:34:be:92:03:19:61:
63:6d:38:c7:ab:78:93:5b:74:59:8b:fa:33:52:22:
3e:88:3d:55:33:bf:e6:3c:dc:3f:d9:ab:6d:05:94:
91:e5:62:bf:46:2a:0e:db:02:fe:6b:ac:21:2e:48:
dc:54:c0:58:33:97:88:68:2b:fe:ed:44:f5:93:60:
a7:88:04:52:14:0f:04:c4:52:f3:7b:42:fe:ed:9c:
2a:a8:a7:88:ef:7b:9c:4e:6a:2c:5a:2f:e4:0b:c6:
a1:c4:5d:7c:53:12:75:18:77:3a:68:5e:11:74:9e:
4b:b6:e8:a6:aa:c9:7f:17:0a:f6:a1:0a:80:08:ab:
8e:4f:67:6e:1a:1c:f7:16:f3:94:dc:62:ce:03:b2:
d0:e2:44:e9:ed:a4:16:56:6d:3d:ba:ff:4a:9a:72:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:77:06:41:79:5E:D9:17:89:DB:E5:52:60:82:B8:33:0C:04:63:06
X509v3 Authority Key Identifier:
keyid:58:69:D0:57:05:08:32:46:08:EE:2C:6F:83:08:52:C3:1B:4A:08:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9f0db517-5b08-424e-b352-5292bc6636db/611fb8c796d6e0e93c3d1e3de6fca2ae78d909fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9f0db517-5b08-424e-b352-5292bc6636db/ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.36.0/22
200.81.152.0/21
200.110.184.0/21
IPv6:
2803:3680::/32
Signature Algorithm: sha256WithRSAEncryption
1e:26:de:67:dc:6a:06:4c:db:43:6f:6a:8a:5f:92:ea:ad:57:
1f:da:5e:cc:b3:25:1e:e1:81:70:0e:99:ea:0b:d3:8d:a9:10:
c9:c7:29:11:70:75:29:86:27:e9:a1:3c:99:9d:5c:3d:dc:03:
eb:db:a5:d6:f7:93:b1:b6:b7:fd:27:06:54:e8:79:85:54:92:
7a:dd:66:2a:db:9b:ec:35:f4:61:38:5b:94:b4:d4:a8:69:f7:
80:d7:bb:60:7f:e4:36:1a:40:d9:a2:ab:a3:a1:56:05:fd:6e:
1f:a0:31:3b:0e:4a:cc:14:de:c4:97:24:88:72:48:ba:36:73:
9c:cb:ce:e8:82:8c:a7:ce:05:4a:02:4c:ba:b8:12:f9:14:1f:
3b:ea:a4:fe:2e:4f:e9:7b:8c:4a:28:53:73:10:76:02:55:ae:
53:c9:0e:00:57:91:ff:3a:21:9c:3c:3e:05:1f:89:75:70:18:
4e:69:d8:95:d9:6f:63:27:d9:20:f2:ca:9a:0c:f1:94:a9:00:
9b:f7:d4:5b:a2:16:4b:cf:5a:83:42:5d:f8:d7:2a:77:8f:6f:
d8:2a:f9:ff:de:f3:17:c0:68:28:31:50:53:58:f4:d7:87:36:
60:9c:13:9e:37:18:07:49:92:fd:e4:17:26:e2:92:86:50:f1:
65:cb:b0:ff
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIDDYVwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVj
YzlhN2NmOGNkMjhkYTc2NjZlODY0OGE0ODQ3ZDM0ZDg3OGZkY2QwHhcNMjEwMzI0
MTQyOTQxWhcNMjYwMzI0MTQyOTQxWjAzMTEwLwYDVQQDEyg2MTFmYjhjNzk2ZDZl
MGU5M2MzZDFlM2RlNmZjYTJhZTc4ZDkwOWZlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqrhOjIquPoVAmKm9B5OIbVbm2Nf/hOH+qwAdBHenHOWSFTcC
oRvjhHew5jDF9vBam60DnFQDKKVJyEnZQD35tMo/bE6pldveCEd/be/c2ruiOjVZ
A8p0BYpK0W4KUhkM9xg0vpIDGWFjbTjHq3iTW3RZi/ozUiI+iD1VM7/mPNw/2att
BZSR5WK/RioO2wL+a6whLkjcVMBYM5eIaCv+7UT1k2CniARSFA8ExFLze0L+7Zwq
qKeI73ucTmosWi/kC8ahxF18UxJ1GHc6aF4RdJ5Ltuimqsl/Fwr2oQqACKuOT2du
Ghz3FvOU3GLOA7LQ4kTp7aQWVm09uv9KmnLUBwIDAQABo4ICdjCCAnIwHQYDVR0O
BBYEFGp3BkF5XtkXidvlUmCCuDMMBGMGMB8GA1UdIwQYMBaAFFhp0FcFCDJGCO4s
b4MIUsMbSgjtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWNjOWE3
Y2Y4Y2QyOGRhNzY2NmU4NjQ4YTQ4NDdkMzRkODc4ZmRjZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWYwZGI1MTctNWIwOC00MjRlLWIzNTItNTI5MmJj
NjYzNmRiLzYxMWZiOGM3OTZkNmUwZTkzYzNkMWUzZGU2ZmNhMmFlNzhkOTA5ZmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZjBkYjUxNy01YjA4LTQyNGUtYjM1Mi01Mjky
YmM2NjM2ZGIvZWNjOWE3Y2Y4Y2QyOGRhNzY2NmU4NjQ4YTQ4NDdkMzRkODc4ZmRj
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQr
MCkwGAQCAAEwEgMEAqrnJAMEA8hRmAMEA8huuDANBAIAAjAHAwUAKAM2gDANBgkq
hkiG9w0BAQsFAAOCAQEAHibeZ9xqBkzbQ29qil+S6q1XH9pezLMlHuGBcA6Z6gvT
jakQyccpEXB1KYYn6aE8mZ1cPdwD69ul1veTsba3/ScGVOh5hVSSet1mKtub7DX0
YThblLTUqGn3gNe7YH/kNhpA2aKro6FWBf1uH6AxOw5KzBTexJckiHJIujZznMvO
6IKMp84FSgJMurgS+RQfO+qk/i5P6XuMSihTcxB2AlWuU8kOAFeR/zohnDw+BR+J
dXAYTmnYldlvYyfZIPLKmgzxlKkAm/fUW6IWS89ag0Jd+Ncqd49v2Cr5/97zF8Bo
KDFQU1j014c2YJwTnjcYB0mS/eQXJuKShlDxZcuw/w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org