Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ee60f62ba5e71966a6f38e5e31dea58241eec6c.roa
File: 4ee60f62ba5e71966a6f38e5e31dea58241eec6c.roa (raw, json)
Hash identifier: 4wQCRKdpOxw1JxbudbnP7TXdT6RgJTOalm5bs0vpM6Q=
Subject key identifier: 9C:D0:BA:22:2F:73:19:B6:0C:3F:DE:46:37:28:5A:E4:2D:B1:44:78
Certificate issuer: /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial: 09EDB4
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ee60f62ba5e71966a6f38e5e31dea58241eec6c.roa
Signing time: Thu 01 Sep 2022 18:58:06 +0000
ROA not before: Thu 13 Jan 2022 03:00:00 +0000
ROA not after: Sat 13 Jan 2024 03:00:00 +0000
asID: 23243
IP address blocks: 200.12.32.0/24 maxlen: 24
200.12.33.0/24 maxlen: 24
200.12.34.0/24 maxlen: 24
200.12.42.0/24 maxlen: 24
200.12.43.0/24 maxlen: 24
200.12.47.0/24 maxlen: 24
200.12.62.0/24 maxlen: 24
200.12.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 650676 (0x9edb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Validity
Not Before: Jan 13 03:00:00 2022 GMT
Not After : Jan 13 03:00:00 2024 GMT
Subject: CN=4ee60f62ba5e71966a6f38e5e31dea58241eec6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:53:06:41:46:7f:ad:4f:9f:b3:67:9d:a5:
97:c0:57:50:2d:e9:51:5a:c9:bc:95:9d:99:6f:30:
be:a0:8f:e7:b0:a6:31:90:1d:2a:ee:32:fb:b9:60:
97:16:ae:31:43:b6:1e:61:ce:80:bd:16:a3:34:b1:
2a:e0:ca:bc:71:01:81:61:bb:46:f1:7c:3f:b0:4c:
20:12:31:d7:df:1b:3a:39:c3:a8:6e:9d:5a:d1:d5:
2e:ff:97:f1:2c:21:15:97:6f:91:55:11:33:7a:8e:
94:4f:51:62:b5:56:6d:e4:c3:92:c6:4d:9c:b7:c9:
7b:36:fb:2f:1f:de:12:da:5d:25:d1:fc:c6:46:c0:
88:cf:f2:93:e1:4c:59:f9:58:5e:b5:35:e2:ae:e5:
c4:92:01:c4:cb:62:2a:0c:c0:04:3d:21:f1:60:b4:
80:64:31:cb:5d:1d:92:9c:5f:e8:1f:b4:45:a1:ee:
a5:c7:15:1e:41:4b:99:6a:c6:51:5c:3f:d9:25:fd:
63:da:48:60:75:f7:7f:87:b9:73:22:70:f3:09:83:
b3:22:35:2e:a2:ac:87:ad:2f:69:23:d5:c7:9f:c5:
68:ac:1f:45:0f:8c:53:4b:d0:1b:3d:5c:30:9b:20:
90:38:35:b1:fd:4a:6f:08:ba:e4:c1:bd:b7:85:b9:
01:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D0:BA:22:2F:73:19:B6:0C:3F:DE:46:37:28:5A:E4:2D:B1:44:78
X509v3 Authority Key Identifier:
keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ee60f62ba5e71966a6f38e5e31dea58241eec6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.12.32.0-200.12.34.255
200.12.42.0/23
200.12.47.0/24
200.12.62.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:95:b0:c3:ed:98:4c:ef:29:bd:02:12:7e:d1:2d:f4:75:8c:
3d:b0:a9:99:3e:68:5d:17:19:dc:aa:f3:af:67:2b:c9:30:ff:
fb:de:47:41:f6:77:1d:22:db:60:7c:fc:55:b2:81:b2:9b:c4:
7e:42:7e:d0:d2:e6:4f:31:5d:8c:bf:9f:03:fa:87:11:8b:ea:
e2:04:11:94:f7:bf:98:2d:ae:aa:d4:cd:29:1a:fa:3c:06:e1:
b1:a1:f1:b6:c8:80:b8:c7:24:23:c8:dd:c4:ce:ea:f9:94:3f:
3f:5b:36:78:cb:f7:58:4b:5c:0f:44:fd:a7:ea:aa:a5:92:bb:
40:38:c5:cf:d0:ed:17:25:68:62:72:bd:ed:b5:1e:70:c0:b0:
12:4d:39:e3:e2:0a:ea:c9:84:dd:a0:f7:80:3a:78:ea:84:03:
a0:46:20:7e:e8:c7:8f:40:5b:9a:60:02:36:5b:38:6a:c4:53:
7c:38:c6:ca:dc:9a:c6:0c:31:f9:31:89:35:a3:88:05:fe:b5:
48:76:ad:aa:a6:d7:d5:f1:6d:50:2e:12:92:4a:8a:c1:cd:32:
37:b3:f6:53:c6:00:43:6a:56:ea:04:09:1a:40:9c:e6:23:aa:
c9:f6:14:59:da:3c:18:8b:b6:8d:d9:4b:47:a2:1d:01:03:0f:
a6:4c:17:3a
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIDCe20MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRh
YzVlYTE2YWQwN2QyOWQyZDI5ZGI4ZmJkNWIzODkzNTcxYmI2MzEwHhcNMjIwMTEz
MDMwMDAwWhcNMjQwMTEzMDMwMDAwWjAzMTEwLwYDVQQDEyg0ZWU2MGY2MmJhNWU3
MTk2NmE2ZjM4ZTVlMzFkZWE1ODI0MWVlYzZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArHhTBkFGf61Pn7NnnaWXwFdQLelRWsm8lZ2ZbzC+oI/nsKYx
kB0q7jL7uWCXFq4xQ7YeYc6AvRajNLEq4Mq8cQGBYbtG8Xw/sEwgEjHX3xs6OcOo
bp1a0dUu/5fxLCEVl2+RVREzeo6UT1FitVZt5MOSxk2ct8l7NvsvH94S2l0l0fzG
RsCIz/KT4UxZ+VhetTXiruXEkgHEy2IqDMAEPSHxYLSAZDHLXR2SnF/oH7RFoe6l
xxUeQUuZasZRXD/ZJf1j2khgdfd/h7lzInDzCYOzIjUuoqyHrS9pI9XHn8VorB9F
D4xTS9AbPVwwmyCQODWx/UpvCLrkwb23hbkBXQIDAQABo4ICdTCCAnEwHQYDVR0O
BBYEFJzQuiIvcxm2DD/eRjcoWuQtsUR4MB8GA1UdIwQYMBaAFDrG5K+IVuzPEeu+
ylyOUFpcGREmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGFjNWVh
MTZhZDA3ZDI5ZDJkMjlkYjhmYmQ1YjM4OTM1NzFiYjYzMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTJjNWE0NGMtZjIzZi00NDg4LTk3NmUtZjNiN2Q3
ODI4ZWJkLzRlZTYwZjYyYmE1ZTcxOTY2YTZmMzhlNWUzMWRlYTU4MjQxZWVjNmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMmM1YTQ0Yy1mMjNmLTQ0ODgtOTc2ZS1mM2I3
ZDc4MjhlYmQvNGFjNWVhMTZhZDA3ZDI5ZDJkMjlkYjhmYmQ1YjM4OTM1NzFiYjYz
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQq
MCgwJgQCAAEwIDAMAwQFyAwgAwQAyAwiAwQByAwqAwQAyAwvAwQByAw+MA0GCSqG
SIb3DQEBCwUAA4IBAQAclbDD7ZhM7ym9AhJ+0S30dYw9sKmZPmhdFxncqvOvZyvJ
MP/73kdB9ncdIttgfPxVsoGym8R+Qn7Q0uZPMV2Mv58D+ocRi+riBBGU97+YLa6q
1M0pGvo8BuGxofG2yIC4xyQjyN3Ezur5lD8/WzZ4y/dYS1wPRP2n6qqlkrtAOMXP
0O0XJWhicr3ttR5wwLASTTnj4grqyYTdoPeAOnjqhAOgRiB+6MePQFuaYAI2Wzhq
xFN8OMbK3JrGDDH5MYk1o4gF/rVIdq2qptfV8W1QLhKSSorBzTI3s/ZTxgBDalbq
BAkaQJzmI6rJ9hRZ2jwYi7aN2UtHoh0BAw+mTBc6
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org