Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/a567e90ca2c3c401d72d5b9dbec500db0598a3d2.roa
File: a567e90ca2c3c401d72d5b9dbec500db0598a3d2.roa (raw, json)
Hash identifier: v5sPmvmDDxZIvgft8mSH09ZaWD6zUDFekFPm801PBqw=
Subject key identifier: 63:09:C9:79:BD:46:8D:23:4C:8A:B7:6C:51:13:79:C0:14:0D:4F:62
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 24D078
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/a567e90ca2c3c401d72d5b9dbec500db0598a3d2.roa
Signing time: Fri 21 Jul 2023 20:55:59 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 267815
IP address blocks: 201.234.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2412664 (0x24d078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=a567e90ca2c3c401d72d5b9dbec500db0598a3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:35:de:68:be:8b:5c:82:58:2c:35:3f:b3:37:
d3:9d:80:15:8e:9c:fc:ee:72:ad:92:c6:f0:f8:dc:
2c:4f:de:63:d2:a7:f0:9d:df:92:9c:29:04:94:ed:
15:4d:11:af:a7:86:32:db:bf:5a:4f:8f:ab:a8:7f:
19:c5:e2:40:10:ff:a6:d7:05:7a:4f:e8:95:08:ae:
95:01:cb:c8:36:33:15:c6:6b:76:31:4a:60:c7:93:
5c:f7:b4:e5:02:63:66:5e:b1:2c:27:80:ae:dd:3d:
9b:52:d4:ae:77:43:25:b0:39:a9:a9:ba:60:44:26:
c6:81:26:e8:0d:3d:f8:a0:65:fd:7a:a5:2e:27:a7:
28:0f:06:c6:58:02:b8:e1:a7:b5:f7:54:d1:47:5a:
fe:78:51:b6:82:95:08:13:ef:1c:fa:b2:f0:1d:be:
b2:ea:9a:e5:00:8e:b8:4d:63:e6:83:4a:54:97:6c:
57:d1:b5:07:cc:ba:0a:00:1c:04:28:cf:5b:5e:1d:
ee:79:34:77:65:1c:93:a3:8f:c5:c8:06:92:23:99:
00:95:20:ea:44:b3:38:46:8c:82:16:d8:63:71:35:
57:9f:67:da:e1:9c:62:cd:ff:2a:de:9a:92:ba:3e:
ad:57:cb:a2:1f:17:63:5e:f0:9b:25:5a:b7:02:77:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:09:C9:79:BD:46:8D:23:4C:8A:B7:6C:51:13:79:C0:14:0D:4F:62
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/a567e90ca2c3c401d72d5b9dbec500db0598a3d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.234.113.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d9:b9:41:c6:fe:f3:00:35:9e:ef:da:8f:c7:5f:77:31:92:
73:21:d0:0f:95:b3:fa:a4:d2:c3:e4:16:af:88:9e:3a:5b:13:
62:48:61:35:7c:f9:0a:e7:25:b6:4b:45:94:30:ff:09:d1:2d:
4b:bf:23:c4:30:b6:58:73:b8:be:44:f0:7b:8b:a3:0f:0d:a6:
e3:72:3d:f9:3c:7d:24:01:fa:92:06:f8:b3:65:b7:16:33:84:
c7:21:cb:36:55:ff:0d:0f:64:77:4d:1a:6d:0a:95:cf:f6:0c:
8c:8e:66:04:be:2b:0e:66:0b:cf:9e:c5:0b:44:ad:f1:8b:9f:
48:4f:a8:0b:f5:a8:de:8d:e7:5a:a1:83:64:38:8c:ec:2a:f2:
5b:58:c0:26:70:83:bd:42:69:57:a0:d9:e6:03:bf:4d:40:74:
5b:1f:c2:f1:bc:c2:3f:c6:c0:71:07:91:cb:08:2d:74:0a:9f:
9e:83:0b:27:86:a1:80:0c:9c:19:84:9f:9f:fa:ea:3c:59:69:
62:94:38:8d:d2:b2:21:8d:d8:b1:c5:cc:b8:c1:a3:a9:20:24:
4d:76:26:a4:94:56:9f:e2:de:1c:08:f2:55:b6:ea:df:9f:db:
40:35:6a:b9:67:b6:aa:07:bd:45:1c:7f:29:6a:e2:1a:10:d9:
3e:5f:45:1c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJNB4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc5
N2ZiYzZjZGRhMmYzNjYxYjJhMzM1MDYwY2I4NGQ4MDg3MDY2NTkwHhcNMjMwNzIw
MjA1NDU3WhcNMjUwNzIxMjA1NDU3WjAzMTEwLwYDVQQDEyhhNTY3ZTkwY2EyYzNj
NDAxZDcyZDViOWRiZWM1MDBkYjA1OThhM2QyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAijXeaL6LXIJYLDU/szfTnYAVjpz87nKtksbw+NwsT95j0qfw
nd+SnCkElO0VTRGvp4Yy279aT4+rqH8ZxeJAEP+m1wV6T+iVCK6VAcvINjMVxmt2
MUpgx5Nc97TlAmNmXrEsJ4Cu3T2bUtSud0MlsDmpqbpgRCbGgSboDT34oGX9eqUu
J6coDwbGWAK44ae191TRR1r+eFG2gpUIE+8c+rLwHb6y6prlAI64TWPmg0pUl2xX
0bUHzLoKABwEKM9bXh3ueTR3ZRyTo4/FyAaSI5kAlSDqRLM4RoyCFthjcTVXn2fa
4Zxizf8q3pqSuj6tV8uiHxdjXvCbJVq3AncqNQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGMJyXm9Ro0jTIq3bFETecAUDU9iMB8GA1UdIwQYMBaAFCtidz8C0hsm2p0G
Y2LQrCl1X2lJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzk3ZmJj
NmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTI3ZTQwOTUtMmY0NS00ZWM5LThmNzUtZTc5OTM4
NWZiYWQwL2E1NjdlOTBjYTJjM2M0MDFkNzJkNWI5ZGJlYzUwMGRiMDU5OGEzZDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMjdlNDA5NS0yZjQ1LTRlYzktOGY3NS1lNzk5
Mzg1ZmJhZDAvNzk3ZmJjNmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnqcTANBgkqhkiG9w0BAQsFAAOCAQEAS9m5Qcb+8wA1nu/a
j8dfdzGScyHQD5Wz+qTSw+QWr4ieOlsTYkhhNXz5CucltktFlDD/CdEtS78jxDC2
WHO4vkTwe4ujDw2m43I9+Tx9JAH6kgb4s2W3FjOExyHLNlX/DQ9kd00abQqVz/YM
jI5mBL4rDmYLz57FC0St8YufSE+oC/Wo3o3nWqGDZDiM7CryW1jAJnCDvUJpV6DZ
5gO/TUB0Wx/C8bzCP8bAcQeRywgtdAqfnoMLJ4ahgAycGYSfn/rqPFlpYpQ4jdKy
IY3YscXMuMGjqSAkTXYmpJRWn+LeHAjyVbbq35/bQDVquWe2qge9RRx/KWriGhDZ
Pl9FHA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org