Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/bfe0a39a8781581488d537f260c5a77cbc255250.roa
File: bfe0a39a8781581488d537f260c5a77cbc255250.roa (raw, json)
Hash identifier: 1lxVa1AhDtEXM5AUzfKffyC+k8GNOt6aTQ2jvOtYnO8=
Subject key identifier: 09:39:07:8A:C7:FF:95:4C:B8:09:94:76:52:B4:5E:5E:62:8B:CD:92
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 24A55D
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/bfe0a39a8781581488d537f260c5a77cbc255250.roa
Signing time: Fri 21 Jul 2023 20:55:41 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 3356
IP address blocks: 201.234.91.0/24 maxlen: 24
200.41.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2401629 (0x24a55d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=bfe0a39a8781581488d537f260c5a77cbc255250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:94:12:24:15:30:39:77:f2:8c:b1:c2:ba:17:
17:7c:44:33:86:ca:f9:81:57:1f:17:97:2e:53:33:
cb:de:68:c8:28:46:aa:77:95:3a:41:92:aa:8e:3b:
24:e4:e7:da:3c:1e:f8:03:80:8b:11:04:cd:76:d6:
da:e9:96:47:f5:ea:ab:37:20:4f:60:00:19:c0:3e:
52:f5:00:1d:3b:84:4c:a8:a1:dc:1d:fd:60:68:16:
17:d3:c4:59:f6:0d:0d:af:e3:e3:c8:63:f6:87:89:
62:ec:54:d0:c1:f2:ce:d9:ee:a7:2a:72:7b:f4:5b:
9f:64:e2:4f:ab:c6:67:2b:22:7c:e1:65:a0:2b:a9:
86:b2:0c:29:e3:b8:31:77:95:8a:96:f3:5e:23:ef:
cc:d2:52:14:a9:3d:24:f3:f5:ca:f0:08:e5:f1:87:
d8:15:5b:d1:98:ce:e1:c6:16:02:9f:51:ff:ea:d4:
f4:91:1d:49:b8:fc:a2:f5:63:f8:37:94:2a:7e:0b:
a8:92:96:1c:19:ad:a1:04:5f:ea:0e:b7:ab:78:9d:
64:34:27:01:7a:c0:11:b8:cd:16:b8:cd:b5:d9:5f:
20:da:13:18:aa:a1:f7:f2:b3:40:64:c9:6d:51:52:
0d:2f:b1:67:89:b2:07:80:a3:58:97:38:e9:00:a8:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:39:07:8A:C7:FF:95:4C:B8:09:94:76:52:B4:5E:5E:62:8B:CD:92
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/bfe0a39a8781581488d537f260c5a77cbc255250.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.41.8.0/24
201.234.91.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:fb:4f:4e:16:5f:e3:62:f3:7c:82:e5:c7:6d:81:0b:bb:53:
7d:0b:6c:d8:22:4f:c7:68:99:ef:8d:d7:75:4b:db:77:cd:bc:
be:1b:de:5e:b6:a3:5b:df:45:b5:44:2b:3f:44:ce:42:e6:c7:
72:30:e3:27:ad:e0:80:74:ef:78:0a:3f:25:70:43:da:2d:f8:
4d:1d:52:be:4a:4b:c0:a0:34:87:cf:ed:6f:45:48:42:e5:ec:
0c:40:0d:e0:a9:e4:32:a4:a9:8b:71:7c:e1:97:ef:b0:71:77:
47:0a:51:73:4d:41:b4:0f:2b:40:b6:00:09:00:2b:c4:39:ae:
f4:eb:f0:61:70:51:38:f3:64:75:de:be:5c:a0:3d:52:d7:82:
a8:52:2f:36:ec:3b:fb:9e:f6:a7:59:88:8f:70:7a:e9:b4:3e:
68:50:9d:b6:2a:ae:8d:43:d1:50:7a:7a:a4:97:a2:c7:f2:65:
56:73:20:ad:d0:a4:cb:44:7d:da:09:7c:7f:7f:e2:f1:b3:42:
e3:66:11:14:84:35:57:ab:ba:ba:ab:3a:86:39:29:7a:fd:a4:
15:63:51:f3:34:8b:46:27:db:d7:78:99:83:d8:d7:28:dc:29:
0a:99:92:ad:dc:60:a0:26:26:81:16:ee:b7:64:b5:be:5e:fb:
78:b4:d7:86
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDJKVdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc5
N2ZiYzZjZGRhMmYzNjYxYjJhMzM1MDYwY2I4NGQ4MDg3MDY2NTkwHhcNMjMwNzIw
MjA1NDU3WhcNMjUwNzIxMjA1NDU3WjAzMTEwLwYDVQQDEyhiZmUwYTM5YTg3ODE1
ODE0ODhkNTM3ZjI2MGM1YTc3Y2JjMjU1MjUwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2pQSJBUwOXfyjLHCuhcXfEQzhsr5gVcfF5cuUzPL3mjIKEaq
d5U6QZKqjjsk5OfaPB74A4CLEQTNdtba6ZZH9eqrNyBPYAAZwD5S9QAdO4RMqKHc
Hf1gaBYX08RZ9g0Nr+PjyGP2h4li7FTQwfLO2e6nKnJ79FufZOJPq8ZnKyJ84WWg
K6mGsgwp47gxd5WKlvNeI+/M0lIUqT0k8/XK8Ajl8YfYFVvRmM7hxhYCn1H/6tT0
kR1JuPyi9WP4N5QqfguokpYcGa2hBF/qDrereJ1kNCcBesARuM0WuM212V8g2hMY
qqH38rNAZMltUVINL7FnibIHgKNYlzjpAKiaswIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFAk5B4rH/5VMuAmUdlK0Xl5ii82SMB8GA1UdIwQYMBaAFCtidz8C0hsm2p0G
Y2LQrCl1X2lJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzk3ZmJj
NmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTI3ZTQwOTUtMmY0NS00ZWM5LThmNzUtZTc5OTM4
NWZiYWQwL2JmZTBhMzlhODc4MTU4MTQ4OGQ1MzdmMjYwYzVhNzdjYmMyNTUyNTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMjdlNDA5NS0yZjQ1LTRlYzktOGY3NS1lNzk5
Mzg1ZmJhZDAvNzk3ZmJjNmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAMgpCAMEAMnqWzANBgkqhkiG9w0BAQsFAAOCAQEAavtPThZf
42LzfILlx22BC7tTfQts2CJPx2iZ743XdUvbd828vhveXrajW99FtUQrP0TOQubH
cjDjJ63ggHTveAo/JXBD2i34TR1SvkpLwKA0h8/tb0VIQuXsDEAN4KnkMqSpi3F8
4ZfvsHF3RwpRc01BtA8rQLYACQArxDmu9OvwYXBROPNkdd6+XKA9UteCqFIvNuw7
+572p1mIj3B66bQ+aFCdtiqujUPRUHp6pJeix/JlVnMgrdCky0R92gl8f3/i8bNC
42YRFIQ1V6u6uqs6hjkpev2kFWNR8zSLRifb13iZg9jXKNwpCpmSrdxgoCYmgRbu
t2S1vl77eLTXhg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org