Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/e2dd347033fc70d1b045c3fdf2bc39c7025a8b44.roa
File: e2dd347033fc70d1b045c3fdf2bc39c7025a8b44.roa (raw, json)
Hash identifier: Vkq/1e5woj5AzUVO/gw0N4P/i2I2JLGdihln4aPiHAw=
Subject key identifier: F4:C8:4E:C6:7D:50:59:EF:7A:0B:2D:AB:46:3A:91:AA:79:F7:69:64
Certificate issuer: /CN=22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca
Certificate serial: 0D06B1
Authority key identifier: DE:56:3B:D7:B0:E9:E0:F5:75:A3:7D:21:16:ED:95:50:08:AF:46:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/e2dd347033fc70d1b045c3fdf2bc39c7025a8b44.roa
Signing time: Wed 24 Mar 2021 14:48:19 +0000
ROA not before: Wed 24 Mar 2021 14:48:18 +0000
ROA not after: Tue 24 Mar 2026 14:48:18 +0000
asID: 264844
IP address blocks: 191.97.16.0/24 maxlen: 24
191.97.17.0/24 maxlen: 24
191.97.18.0/24 maxlen: 24
191.97.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853681 (0xd06b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca
Validity
Not Before: Mar 24 14:48:18 2021 GMT
Not After : Mar 24 14:48:18 2026 GMT
Subject: CN=e2dd347033fc70d1b045c3fdf2bc39c7025a8b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:3c:b3:b8:ea:96:bf:9e:d1:b8:f9:e7:0d:
c5:bc:c0:e9:e2:03:16:1a:63:fa:da:4e:8f:6e:10:
fa:a4:0f:78:09:4f:33:21:c6:e6:c2:04:ea:84:74:
81:1a:3d:2b:76:89:27:71:f5:60:b1:5a:ba:8d:d3:
63:b3:c9:04:55:cd:57:07:e2:48:89:ae:1a:b7:ef:
ce:12:f4:3b:f3:b3:25:65:55:33:e0:35:91:84:52:
a4:6a:c2:b7:73:32:05:02:3d:30:c0:44:3b:de:33:
11:d9:7c:3e:ee:be:3f:20:46:c3:1b:13:12:80:80:
ed:a1:a6:ee:22:c7:5c:5c:78:c5:3e:b8:d0:1a:c9:
72:57:fa:09:e3:4b:2e:3d:56:61:ed:70:d5:1d:b9:
f1:e7:46:81:62:61:97:e5:7c:f7:f9:5e:13:72:38:
13:ea:b2:0a:15:37:3f:2a:2a:2e:22:28:be:f6:cb:
c5:a3:ab:06:ad:bb:70:55:89:26:04:ed:f3:d3:39:
b0:b8:a4:4f:c1:8f:f1:11:b4:22:c8:7d:e3:21:9b:
2a:b2:65:f6:c1:e8:e3:c5:3a:ea:84:b5:98:52:85:
d1:3f:76:af:23:1d:e9:d6:44:9b:73:2f:71:e3:d8:
d6:d5:d4:d2:b0:7f:0a:7c:d8:21:4a:a7:ed:17:30:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C8:4E:C6:7D:50:59:EF:7A:0B:2D:AB:46:3A:91:AA:79:F7:69:64
X509v3 Authority Key Identifier:
keyid:DE:56:3B:D7:B0:E9:E0:F5:75:A3:7D:21:16:ED:95:50:08:AF:46:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/e2dd347033fc70d1b045c3fdf2bc39c7025a8b44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.16.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:43:a5:80:7f:8d:02:a2:72:ff:b6:5e:f9:8b:dd:b6:25:f7:
cd:d4:a8:32:c0:ff:e6:32:26:43:a8:6c:db:49:0e:12:d5:b8:
f3:5f:2b:84:b6:88:6c:4c:71:c9:4d:fd:43:16:b4:35:15:32:
b7:fc:56:ee:9a:31:45:de:75:39:c1:54:93:3f:4f:11:79:20:
30:38:43:cf:c2:36:33:1d:21:56:77:98:09:76:61:0a:4a:92:
23:cf:45:c1:59:fa:db:89:0f:ff:79:cb:b3:9f:08:5f:ed:09:
25:28:08:45:bd:8e:b8:87:56:0b:f7:ba:a5:44:55:fc:81:ae:
c9:02:33:c8:be:aa:63:a6:2b:df:d3:c1:21:e3:07:c3:c8:0e:
f9:e8:13:f2:c6:22:71:9b:68:cb:f6:22:ce:a6:34:1c:18:97:
99:21:4c:9d:18:bf:9c:b4:e3:54:f9:35:22:f4:5c:80:b1:88:
93:17:48:fe:5d:32:f9:ba:21:0f:1c:38:0a:f5:c5:ed:21:58:
93:c9:30:56:d9:b7:63:11:b7:b6:89:fb:8f:dc:f7:0f:75:95:
ad:3b:de:6a:ab:49:af:bd:d4:0e:d6:fb:f4:ce:90:19:bf:26:
4c:a9:6e:77:b0:fc:ea:2b:49:c7:e2:f1:09:fa:6c:01:5d:74:
c7:18:60:1f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDQaxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIy
MTY3YWZhM2QxYzVjMGFlNjA2Y2M5NjRiYTVlOGMzODZhMmY0Y2EwHhcNMjEwMzI0
MTQ0ODE4WhcNMjYwMzI0MTQ0ODE4WjAzMTEwLwYDVQQDEyhlMmRkMzQ3MDMzZmM3
MGQxYjA0NWMzZmRmMmJjMzljNzAyNWE4YjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArno8s7jqlr+e0bj55w3FvMDp4gMWGmP62k6PbhD6pA94CU8z
IcbmwgTqhHSBGj0rdokncfVgsVq6jdNjs8kEVc1XB+JIia4at+/OEvQ787MlZVUz
4DWRhFKkasK3czIFAj0wwEQ73jMR2Xw+7r4/IEbDGxMSgIDtoabuIsdcXHjFPrjQ
GslyV/oJ40suPVZh7XDVHbnx50aBYmGX5Xz3+V4TcjgT6rIKFTc/KiouIii+9svF
o6sGrbtwVYkmBO3z0zmwuKRPwY/xEbQiyH3jIZsqsmX2wejjxTrqhLWYUoXRP3av
Ix3p1kSbcy9x49jW1dTSsH8KfNghSqftFzDjwQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPTITsZ9UFnvegstq0Y6kap592lkMB8GA1UdIwQYMBaAFN5WO9ew6eD1daN9
IRbtlVAIr0YyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjIxNjdh
ZmEzZDFjNWMwYWU2MDZjYzk2NGJhNWU4YzM4NmEyZjRjYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDcyZTg4NDctNTAyNy00ZGE3LWI5YWEtZWMxYmY2
MDRmNDE1L2UyZGQzNDcwMzNmYzcwZDFiMDQ1YzNmZGYyYmMzOWM3MDI1YThiNDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wNzJlODg0Ny01MDI3LTRkYTctYjlhYS1lYzFi
ZjYwNGY0MTUvMjIxNjdhZmEzZDFjNWMwYWU2MDZjYzk2NGJhNWU4YzM4NmEyZjRj
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr9hEDANBgkqhkiG9w0BAQsFAAOCAQEATUOlgH+NAqJy/7Ze
+YvdtiX3zdSoMsD/5jImQ6hs20kOEtW4818rhLaIbExxyU39Qxa0NRUyt/xW7pox
Rd51OcFUkz9PEXkgMDhDz8I2Mx0hVneYCXZhCkqSI89FwVn624kP/3nLs58IX+0J
JSgIRb2OuIdWC/e6pURV/IGuyQIzyL6qY6Yr39PBIeMHw8gO+egT8sYicZtoy/Yi
zqY0HBiXmSFMnRi/nLTjVPk1IvRcgLGIkxdI/l0y+bohDxw4CvXF7SFYk8kwVtm3
YxG3ton7j9z3D3WVrTveaqtJr73UDtb79M6QGb8mTKlud7D86itJx+LxCfpsAV10
xxhgHw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org