Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f205b547097d8bf32bc602e564e6d4f70b643586.roa
File: f205b547097d8bf32bc602e564e6d4f70b643586.roa (raw, json)
Hash identifier: gv4wyX3dqUNOzSaevuY3ftSGcne/L99r7IaRNz7//Jc=
Subject key identifier: B3:13:9B:CA:BD:02:BD:D6:69:3D:FF:65:E6:56:B0:E3:73:F8:2D:45
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 251726
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f205b547097d8bf32bc602e564e6d4f70b643586.roa
Signing time: Fri 21 Jul 2023 20:57:00 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 27953
IP address blocks: 201.234.249.0/24 maxlen: 24
201.234.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2430758 (0x251726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=f205b547097d8bf32bc602e564e6d4f70b643586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:5a:5b:25:ad:25:22:4a:41:41:a1:7d:c1:
f1:5f:dd:05:10:85:d8:79:fc:f7:aa:d7:45:76:c4:
b0:92:47:09:08:d0:53:d0:11:4e:9a:c0:cb:f4:f8:
2b:47:c2:ea:da:78:d7:2c:91:d0:1a:00:5d:66:4b:
ce:c6:a8:0f:b1:52:54:6e:da:2a:f3:3d:07:ea:36:
0c:46:49:4b:67:5d:ca:97:64:14:76:9d:56:82:6a:
83:b8:d1:66:cf:9b:4c:8c:b2:ee:1e:82:39:fc:ce:
ad:a6:31:73:f9:74:d0:dd:90:5c:5c:ab:58:48:8a:
3a:c4:28:30:26:0e:3f:85:35:8e:f0:56:bd:a6:93:
12:6b:b3:ff:0f:f9:0b:db:93:c2:56:c0:e4:74:2e:
e6:85:d4:d8:5c:e3:fc:c4:1f:ed:08:39:ff:e0:b2:
8d:3e:92:50:2c:17:2c:a3:28:cd:b6:ab:94:38:0f:
27:d6:17:d4:11:c1:0d:47:01:f3:e0:be:2a:98:82:
df:52:3d:01:5d:03:76:27:17:0d:26:dd:ea:22:28:
00:24:f8:25:87:16:36:db:1f:6e:33:3e:e3:a5:00:
3f:2c:bf:5a:5f:ac:fc:b2:f0:78:ec:8b:e7:a6:0a:
f3:46:35:fa:71:e5:61:33:88:b5:41:3a:3f:ed:02:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:13:9B:CA:BD:02:BD:D6:69:3D:FF:65:E6:56:B0:E3:73:F8:2D:45
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f205b547097d8bf32bc602e564e6d4f70b643586.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.234.249.0/24
201.234.251.0/24
Signature Algorithm: sha256WithRSAEncryption
91:94:d5:d7:11:e5:16:dd:ac:56:13:32:d1:c2:d6:2a:db:ee:
ad:c5:a1:dd:b5:72:d7:01:2a:d1:ef:e8:a3:4e:7a:d4:9d:ca:
ac:be:09:02:81:46:cd:43:cc:fa:13:3e:fc:68:b2:3c:25:10:
c4:84:15:f4:75:5e:e9:10:64:47:08:75:bb:03:61:d1:d5:22:
73:b2:d6:bd:3a:10:c9:c9:79:28:ca:05:91:13:47:93:52:7c:
1a:58:52:a3:50:46:f6:68:c6:98:ba:24:d7:7f:2c:e7:3b:0d:
04:84:39:dd:93:46:8b:03:38:ac:f0:3c:60:84:37:ab:fc:a5:
72:1d:bc:d0:31:91:2e:22:ac:77:3f:7b:11:b0:02:ac:79:67:
53:e6:fd:6c:e4:ae:40:25:21:05:12:43:9b:b6:d1:44:30:c9:
16:3e:9b:e7:e7:50:36:ff:c3:70:e4:9c:2c:4a:c9:df:ce:d0:
de:85:99:68:59:41:66:3a:cc:0f:7b:12:88:bf:b6:9d:6a:bd:
20:1b:42:c5:f9:9d:63:dd:58:20:d5:ca:3a:94:f4:e1:c9:73:
ab:3d:b0:e2:ca:4a:71:fc:7c:1b:89:94:96:f4:cf:54:1a:67:
a0:82:6b:ac:0e:03:f6:93:76:03:cb:7f:c7:e2:84:49:99:35:
d9:fe:11:3c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDJRcmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc5
N2ZiYzZjZGRhMmYzNjYxYjJhMzM1MDYwY2I4NGQ4MDg3MDY2NTkwHhcNMjMwNzIw
MjA1NDU3WhcNMjUwNzIxMjA1NDU3WjAzMTEwLwYDVQQDEyhmMjA1YjU0NzA5N2Q4
YmYzMmJjNjAyZTU2NGU2ZDRmNzBiNjQzNTg2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoKBaWyWtJSJKQUGhfcHxX90FEIXYefz3qtdFdsSwkkcJCNBT
0BFOmsDL9PgrR8Lq2njXLJHQGgBdZkvOxqgPsVJUbtoq8z0H6jYMRklLZ13Kl2QU
dp1WgmqDuNFmz5tMjLLuHoI5/M6tpjFz+XTQ3ZBcXKtYSIo6xCgwJg4/hTWO8Fa9
ppMSa7P/D/kL25PCVsDkdC7mhdTYXOP8xB/tCDn/4LKNPpJQLBcsoyjNtquUOA8n
1hfUEcENRwHz4L4qmILfUj0BXQN2JxcNJt3qIigAJPglhxY22x9uMz7jpQA/LL9a
X6z8svB47IvnpgrzRjX6ceVhM4i1QTo/7QIcJwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFLMTm8q9Ar3WaT3/ZeZWsONz+C1FMB8GA1UdIwQYMBaAFCtidz8C0hsm2p0G
Y2LQrCl1X2lJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzk3ZmJj
NmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTI3ZTQwOTUtMmY0NS00ZWM5LThmNzUtZTc5OTM4
NWZiYWQwL2YyMDViNTQ3MDk3ZDhiZjMyYmM2MDJlNTY0ZTZkNGY3MGI2NDM1ODYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMjdlNDA5NS0yZjQ1LTRlYzktOGY3NS1lNzk5
Mzg1ZmJhZDAvNzk3ZmJjNmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAMnq+QMEAMnq+zANBgkqhkiG9w0BAQsFAAOCAQEAkZTV1xHl
Ft2sVhMy0cLWKtvurcWh3bVy1wEq0e/oo0561J3KrL4JAoFGzUPM+hM+/GiyPCUQ
xIQV9HVe6RBkRwh1uwNh0dUic7LWvToQycl5KMoFkRNHk1J8GlhSo1BG9mjGmLok
138s5zsNBIQ53ZNGiwM4rPA8YIQ3q/ylch280DGRLiKsdz97EbACrHlnU+b9bOSu
QCUhBRJDm7bRRDDJFj6b5+dQNv/DcOScLErJ387Q3oWZaFlBZjrMD3sSiL+2nWq9
IBtCxfmdY91YINXKOpT04clzqz2w4spKcfx8G4mUlvTPVBpnoIJrrA4D9pN2A8t/
x+KESZk12f4RPA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org