Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/dcbe13199880f42b4e14f302b3a1fe11e630755d.roa
File: dcbe13199880f42b4e14f302b3a1fe11e630755d.roa (raw, json)
Hash identifier: LJe84fCsoa0iOsQT0OakCuztyv69mPx9vjAkYo7aCjY=
Subject key identifier: FD:3E:4B:7D:A7:1F:80:AD:ED:FA:68:3C:88:44:92:48:26:EB:13:B2
Certificate issuer: /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial: 15FE99
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/dcbe13199880f42b4e14f302b3a1fe11e630755d.roa
Signing time: Fri 28 Jan 2022 14:44:24 +0000
ROA not before: Fri 28 Jan 2022 03:00:00 +0000
ROA not after: Sun 28 Jan 2024 03:00:00 +0000
asID: 28075
IP address blocks: 198.12.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1441433 (0x15fe99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Validity
Not Before: Jan 28 03:00:00 2022 GMT
Not After : Jan 28 03:00:00 2024 GMT
Subject: CN=dcbe13199880f42b4e14f302b3a1fe11e630755d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c8:4f:43:f4:ad:c5:6f:2e:89:08:d2:98:4e:
f9:f2:54:b4:00:5a:51:ea:4d:c0:2d:ba:ac:00:3b:
f8:09:b1:10:b0:6b:97:aa:68:77:7e:86:7a:e7:ee:
a1:2a:3b:56:04:f9:4c:19:09:6c:45:6d:e7:38:30:
ec:de:b7:a7:0a:43:f7:47:c5:5b:23:bb:80:ae:ef:
b2:29:a6:64:69:30:eb:1c:a2:e1:cd:43:ee:ca:44:
5f:4d:8e:50:7e:bc:d2:f4:ff:61:90:12:91:f0:85:
79:75:31:bb:ef:9f:53:0e:b9:f7:6a:b4:60:8c:55:
cd:c4:e8:2b:3c:3c:a7:02:24:08:0e:fb:2e:47:19:
28:2a:4f:c2:03:9b:77:81:b7:3d:be:5b:c7:a0:b8:
a9:01:7c:fd:db:79:c4:5b:d9:33:7e:1f:d7:5e:11:
54:b1:6d:7c:1a:f0:56:bc:12:66:50:61:57:27:b4:
61:79:d6:22:13:17:7d:b3:d4:b9:88:5a:5d:30:9f:
8c:45:f1:e6:d1:21:f1:19:98:87:ac:8e:c2:77:09:
ae:15:e4:04:4a:18:9f:2b:5e:18:60:b8:bb:ef:2a:
8b:d7:be:91:ae:a3:b2:75:b9:3b:2e:00:b8:3a:65:
a8:e2:6b:94:60:04:e4:e1:9a:59:bf:96:e9:6f:5d:
d3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3E:4B:7D:A7:1F:80:AD:ED:FA:68:3C:88:44:92:48:26:EB:13:B2
X509v3 Authority Key Identifier:
keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/dcbe13199880f42b4e14f302b3a1fe11e630755d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.12.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:4d:43:3e:3f:57:b6:0e:5e:cc:04:da:27:33:17:5a:da:da:
4b:10:dd:a6:f2:61:4e:ff:0e:6f:67:9b:16:e1:0e:c3:be:da:
24:84:82:be:7e:89:26:e4:c7:2b:fc:b5:26:59:04:75:ef:29:
8a:17:c1:13:fc:e9:e5:df:3c:a4:1d:26:9f:20:74:3a:f0:f6:
f4:33:0b:37:bc:8e:11:37:c4:ea:2e:f9:43:c9:9f:62:87:ac:
66:ca:c2:5d:97:9f:fd:4c:4f:9d:6b:37:e1:6c:d3:2f:17:95:
8b:0f:a1:65:91:ef:b8:9c:b2:bc:91:b1:9f:09:e1:21:3d:a8:
a5:08:49:b5:8e:d9:fa:e6:6f:f2:16:e9:71:6d:24:48:62:0b:
db:06:b6:4e:c4:58:70:83:fa:2d:f6:97:7b:28:b9:0c:33:16:
cd:cd:c9:39:4d:8f:df:dc:b8:bc:88:1d:07:6c:8e:e7:ef:9d:
eb:e3:32:af:2e:c5:a7:8a:ea:11:bd:52:b5:ec:fb:a8:44:b9:
19:a8:22:02:07:56:ea:e1:aa:ed:e5:a6:81:91:c1:ef:a1:09:
1c:20:1d:60:58:19:25:ce:c4:49:11:ce:c7:50:4f:84:be:bc:
ae:f1:ab:15:15:33:ae:e5:f1:8c:b7:31:96:1e:ee:27:1a:1f:
1f:d6:7f:08
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFf6ZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg4
ZDNiMzhmYjliZmNlZDU3YzZhZDVlYjE2MGMxMzBhY2YzMjY0MWMwHhcNMjIwMTI4
MDMwMDAwWhcNMjQwMTI4MDMwMDAwWjAzMTEwLwYDVQQDEyhkY2JlMTMxOTk4ODBm
NDJiNGUxNGYzMDJiM2ExZmUxMWU2MzA3NTVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjshPQ/StxW8uiQjSmE758lS0AFpR6k3ALbqsADv4CbEQsGuX
qmh3foZ65+6hKjtWBPlMGQlsRW3nODDs3renCkP3R8VbI7uAru+yKaZkaTDrHKLh
zUPuykRfTY5QfrzS9P9hkBKR8IV5dTG7759TDrn3arRgjFXNxOgrPDynAiQIDvsu
RxkoKk/CA5t3gbc9vlvHoLipAXz923nEW9kzfh/XXhFUsW18GvBWvBJmUGFXJ7Rh
edYiExd9s9S5iFpdMJ+MRfHm0SHxGZiHrI7CdwmuFeQEShifK14YYLi77yqL176R
rqOydbk7LgC4OmWo4muUYATk4ZpZv5bpb13TyQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFP0+S32nH4Ct7fpoPIhEkkgm6xOyMB8GA1UdIwQYMBaAFPsbKsFJ3WU0RJWG
NPmzt6e3aen4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODhkM2Iz
OGZiOWJmY2VkNTdjNmFkNWViMTYwYzEzMGFjZjMyNjQxYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjAxNWM0NmItMTU0MC00OWViLWI5NjktMGYzYzQw
ZTAwMTQwL2RjYmUxMzE5OTg4MGY0MmI0ZTE0ZjMwMmIzYTFmZTExZTYzMDc1NWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMDE1YzQ2Yi0xNTQwLTQ5ZWItYjk2OS0wZjNj
NDBlMDAxNDAvODhkM2IzOGZiOWJmY2VkNTdjNmFkNWViMTYwYzEzMGFjZjMyNjQx
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMYMPTANBgkqhkiG9w0BAQsFAAOCAQEAGk1DPj9Xtg5ezATa
JzMXWtraSxDdpvJhTv8Ob2ebFuEOw77aJISCvn6JJuTHK/y1JlkEde8pihfBE/zp
5d88pB0mnyB0OvD29DMLN7yOETfE6i75Q8mfYoesZsrCXZef/UxPnWs34WzTLxeV
iw+hZZHvuJyyvJGxnwnhIT2opQhJtY7Z+uZv8hbpcW0kSGIL2wa2TsRYcIP6LfaX
eyi5DDMWzc3JOU2P39y4vIgdB2yO5++d6+Myry7Fp4rqEb1Stez7qES5GagiAgdW
6uGq7eWmgZHB76EJHCAdYFgZJc7ESRHOx1BPhL68rvGrFRUzruXxjLcxlh7uJxof
H9Z/CA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org