Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233322e302f32332d3233203d3e203133393939.roa
File: 3230302e39352e3233322e302f32332d3233203d3e203133393939.roa (raw, json)
Hash identifier: jdRv1L9ZL6M4/k72g3pZypcvUqJ2QN2OMGF4BplVjQc=
Subject key identifier: 20:59:DD:D7:E3:D6:8B:66:FD:1A:6E:43:9F:0B:C7:35:07:97:9B:7B
Certificate issuer: /CN=8578B31074E0B57459B1C2A690B89261860EA94C
Certificate serial: 036C678E35EFA83316E4299F43FED161B1D83B03
Authority key identifier: 85:78:B3:10:74:E0:B5:74:59:B1:C2:A6:90:B8:92:61:86:0E:A9:4C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233322e302f32332d3233203d3e203133393939.roa
Signing time: Wed 15 May 2024 13:15:01 +0000
ROA not before: Wed 15 May 2024 13:10:01 +0000
ROA not after: Wed 14 May 2025 13:15:01 +0000
asID: 13999
IP address blocks: 200.95.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:6c:67:8e:35:ef:a8:33:16:e4:29:9f:43:fe:d1:61:b1:d8:3b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8578B31074E0B57459B1C2A690B89261860EA94C
Validity
Not Before: May 15 13:10:01 2024 GMT
Not After : May 14 13:15:01 2025 GMT
Subject: CN=2059DDD7E3D68B66FD1A6E439F0BC73507979B7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:22:98:33:ec:68:71:f7:68:4f:5a:f1:af:
ff:30:9e:95:15:e0:2f:7f:f1:cb:ee:11:21:e4:a0:
58:e3:d3:b0:b9:5f:f5:29:6a:ba:c0:0c:35:58:50:
79:47:52:14:68:8f:73:bb:0d:84:2c:7a:63:30:75:
95:07:13:8c:b8:72:07:2c:50:52:41:eb:30:6a:c0:
31:d6:bc:00:ba:35:e9:5a:89:c0:11:1b:93:2d:c6:
c1:47:82:7a:9a:87:b2:06:af:ac:f7:28:1b:fc:d9:
3d:cf:26:e6:46:38:a2:18:d8:b3:2d:c7:6f:b9:0c:
e6:ba:44:95:d2:70:24:8c:a4:e6:1f:fd:a1:8d:78:
c7:f4:30:e3:71:a8:d4:74:8e:0f:8a:f6:74:5f:3d:
ae:0c:4a:52:08:ff:1b:52:16:fe:f0:cc:0a:26:28:
3c:4c:61:83:05:70:cd:8e:b2:99:68:10:75:ab:da:
f6:88:41:18:b5:ec:03:bd:b7:7b:0f:25:91:c4:85:
a1:6b:b8:a6:dc:68:d3:4d:16:d4:20:79:39:f7:a8:
01:74:45:f3:bf:c0:96:76:3e:cf:6e:bb:d3:ae:fa:
27:53:ce:e9:c4:77:be:ca:1a:54:81:ce:e3:bd:71:
10:7c:98:7b:b5:58:b1:48:cb:1f:d2:6d:01:5f:fe:
6b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:59:DD:D7:E3:D6:8B:66:FD:1A:6E:43:9F:0B:C7:35:07:97:9B:7B
X509v3 Authority Key Identifier:
keyid:85:78:B3:10:74:E0:B5:74:59:B1:C2:A6:90:B8:92:61:86:0E:A9:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233322e302f32332d3233203d3e203133393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.95.232.0/23
Signature Algorithm: sha256WithRSAEncryption
37:0c:66:7a:53:2e:52:a5:70:97:69:b4:98:a4:2b:cf:bf:c0:
3b:24:dc:6e:04:11:15:5f:90:c5:1a:01:09:b4:91:2c:75:6d:
7c:08:60:5e:c7:c7:4a:8e:28:21:5d:9f:ea:7c:ff:7b:89:34:
84:0a:68:aa:00:37:96:b4:5b:d8:55:b4:88:e8:75:9c:b4:24:
f3:06:ab:17:46:61:1c:00:6d:c0:bf:84:44:2e:c2:c6:19:0e:
00:ff:2f:7c:9b:af:3d:8e:a3:47:6e:2c:99:4b:34:f6:43:cc:
7c:3e:fb:cd:a1:32:14:09:78:03:0c:24:a4:85:ab:5e:65:6e:
fc:65:a4:05:2e:bc:83:52:38:c7:5b:b8:98:9a:dc:4c:d5:2f:
68:f4:57:c6:26:52:fb:18:89:88:23:91:21:c2:10:57:38:b7:
af:f1:46:70:f8:00:d0:94:35:da:47:5a:9d:d7:9f:51:09:e4:
7a:40:80:77:0b:c2:d9:fb:1f:fe:bf:25:9d:e6:6b:ba:9c:55:
fa:0c:32:97:93:91:d9:f7:74:b1:52:e6:d9:e7:43:63:40:dd:
21:54:e5:cf:68:91:43:fb:8d:1d:bc:40:5a:f6:3f:12:e5:6d:
a5:4a:10:4e:a3:e1:f3:b3:fe:5d:d1:a7:79:7b:62:31:b6:2e:
d8:82:cb:5b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUA2xnjjXvqDMW5CmfQ/7RYbHYOwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU3OEIzMTA3NEUwQjU3NDU5QjFDMkE2OTBCODkyNjE4
NjBFQTk0QzAeFw0yNDA1MTUxMzEwMDFaFw0yNTA1MTQxMzE1MDFaMDMxMTAvBgNV
BAMTKDIwNTlEREQ3RTNENjhCNjZGRDFBNkU0MzlGMEJDNzM1MDc5NzlCN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/CKYM+xocfdoT1rxr/8wnpUV
4C9/8cvuESHkoFjj07C5X/UparrADDVYUHlHUhRoj3O7DYQsemMwdZUHE4y4cgcs
UFJB6zBqwDHWvAC6NelaicARG5MtxsFHgnqah7IGr6z3KBv82T3PJuZGOKIY2LMt
x2+5DOa6RJXScCSMpOYf/aGNeMf0MONxqNR0jg+K9nRfPa4MSlII/xtSFv7wzAom
KDxMYYMFcM2OsploEHWr2vaIQRi17AO9t3sPJZHEhaFruKbcaNNNFtQgeTn3qAF0
RfO/wJZ2Ps9uu9Ou+idTzunEd77KGlSBzuO9cRB8mHu1WLFIyx/SbQFf/mtFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUIFnd1+PWi2b9Gm5DnwvHNQeXm3swHwYDVR0j
BBgwFoAUhXizEHTgtXRZscKmkLiSYYYOqUwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMEVCNkQ5NTYxNUUzNkRDQUQzNTE2NEE2OTkxMDk3OTJD
M0ZDRDNGODYxQjhDN0QxQTYwMTA2QUQzM0ZGRkUyLzAvODU3OEIzMTA3NEUwQjU3
NDU5QjFDMkE2OTBCODkyNjE4NjBFQTk0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTc4QjMxMDc0RTBCNTc0NTlC
MUMyQTY5MEI4OTI2MTg2MEVBOTRDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDBFQjZEOTU2MTVFMzZEQ0FEMzUxNjRBNjk5MTA5NzkyQzNGQ0QzRjg2
MUI4QzdEMUE2MDEwNkFEMzNGRkZFMi8wLzMyMzAzMDJlMzkzNTJlMzIzMzMyMmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzMzM5MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAchf6DAN
BgkqhkiG9w0BAQsFAAOCAQEANwxmelMuUqVwl2m0mKQrz7/AOyTcbgQRFV+QxRoB
CbSRLHVtfAhgXsfHSo4oIV2f6nz/e4k0hApoqgA3lrRb2FW0iOh1nLQk8warF0Zh
HABtwL+ERC7CxhkOAP8vfJuvPY6jR24smUs09kPMfD77zaEyFAl4AwwkpIWrXmVu
/GWkBS68g1I4x1u4mJrcTNUvaPRXxiZS+xiJiCORIcIQVzi3r/FGcPgA0JQ12kda
ndefUQnkekCAdwvC2fsf/r8lneZrupxV+gwyl5OR2fd0sVLm2edDY0DdIVTlz2iR
Q/uNHbxAWvY/EuVtpUoQTqPh87P+XdGneXtiMbYu2ILLWw==
-----END CERTIFICATE-----
Generated at Tue Aug 13 20:15:44 2024 by rpki-client on console-ams.rpki-client.org