Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a599822-d8af-4376-b9db-aa3e6843c681/0803d414127b744ff14a9c1ff30b58d04fe0994b.roa
File: 0803d414127b744ff14a9c1ff30b58d04fe0994b.roa (raw, json)
Hash identifier: t7xTwYWUhEihr+Vlh8Kl0rAj9QBSg0tIcXB3SK1uFC0=
Subject key identifier: CE:36:52:CB:02:18:51:8E:3E:B4:9B:FB:E7:D0:CA:1F:14:D0:C7:D3
Certificate issuer: /CN=bb249362b2b5e6169b9d9b8b997b473f12a6d82f
Certificate serial: 0F79BA
Authority key identifier: AA:70:71:B4:9A:2B:61:48:2D:EE:A1:33:B3:6D:E5:1D:93:B4:38:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb249362b2b5e6169b9d9b8b997b473f12a6d82f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1a599822-d8af-4376-b9db-aa3e6843c681/0803d414127b744ff14a9c1ff30b58d04fe0994b.roa
Signing time: Wed 21 Jun 2023 19:44:11 +0000
ROA not before: Tue 20 Jun 2023 19:44:11 +0000
ROA not after: Sat 21 Jun 2025 19:44:11 +0000
asID: 52420
IP address blocks: 201.220.144.0/20 maxlen: 24
152.231.48.0/20 maxlen: 24
2803:a900::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1014202 (0xf79ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb249362b2b5e6169b9d9b8b997b473f12a6d82f
Validity
Not Before: Jun 20 19:44:11 2023 GMT
Not After : Jun 21 19:44:11 2025 GMT
Subject: CN=0803d414127b744ff14a9c1ff30b58d04fe0994b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:29:87:13:33:40:f8:68:3d:67:6e:14:39:
2d:dc:93:f6:e0:0f:96:f9:36:8b:1f:2f:fc:23:ca:
7a:7d:e9:8f:80:22:f8:7e:2e:74:1d:8d:b7:0e:52:
46:34:62:08:f1:7d:b9:6e:f9:ff:82:3c:8d:cd:11:
02:a7:a3:75:ae:4e:30:c6:98:fb:b8:ed:51:9a:94:
fd:1c:a8:d7:2c:c9:22:e7:aa:64:b9:49:7b:f6:5c:
3a:7b:30:fd:37:2c:26:06:f8:4f:e7:34:6d:4f:ac:
d1:a5:06:ec:c8:49:bf:cf:b8:04:e5:50:31:8c:27:
70:40:0f:bc:61:70:8b:5f:d7:27:56:b5:c7:5a:6b:
95:4d:38:83:df:28:de:77:f0:aa:fa:9c:76:7e:3f:
f6:cc:58:13:1c:55:09:d6:9a:37:95:ed:f1:91:25:
d5:9a:b9:03:37:6d:eb:d6:d1:37:82:f3:4e:cd:0e:
f7:f1:2e:ff:22:a0:31:9c:9b:7c:74:da:32:5f:fa:
8c:bb:ac:35:9a:13:8c:6f:ee:1f:83:43:59:21:55:
9d:13:e2:95:33:9a:ca:49:b6:69:44:60:e7:53:25:
18:68:e3:fc:4b:c8:be:93:ea:0c:fd:53:1f:46:ee:
a9:ff:ff:c9:4f:bb:75:9e:da:7d:a8:03:62:57:70:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:36:52:CB:02:18:51:8E:3E:B4:9B:FB:E7:D0:CA:1F:14:D0:C7:D3
X509v3 Authority Key Identifier:
keyid:AA:70:71:B4:9A:2B:61:48:2D:EE:A1:33:B3:6D:E5:1D:93:B4:38:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb249362b2b5e6169b9d9b8b997b473f12a6d82f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a599822-d8af-4376-b9db-aa3e6843c681/0803d414127b744ff14a9c1ff30b58d04fe0994b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1a599822-d8af-4376-b9db-aa3e6843c681/bb249362b2b5e6169b9d9b8b997b473f12a6d82f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.231.48.0/20
201.220.144.0/20
IPv6:
2803:a900::/32
Signature Algorithm: sha256WithRSAEncryption
4b:07:43:2c:c9:59:57:b7:83:e4:a6:ce:fa:e7:06:9f:91:21:
af:f6:c6:ce:0e:f6:2c:c6:9d:98:1e:61:5d:59:77:5a:c5:d2:
da:96:68:d3:a9:b0:9b:c9:27:51:58:c3:42:32:54:81:03:4d:
22:e0:25:f6:a9:ff:de:32:8a:53:fd:28:37:23:d5:dd:f6:33:
4a:d8:ba:34:c2:2b:04:55:ed:1e:70:f8:c3:c9:84:a5:2d:b5:
1c:21:4e:51:20:81:c8:40:a5:00:d7:50:bb:34:a6:ee:53:67:
f3:12:ae:20:87:a1:0a:50:74:91:60:48:b8:20:17:1f:36:5e:
0a:85:dc:64:a2:3c:ef:1c:54:12:12:7f:32:7e:12:7b:22:0a:
61:6a:1b:95:46:e4:86:1c:ac:80:fd:36:a8:5f:e2:05:c3:8c:
ec:dc:8b:54:82:60:e1:a4:dc:c4:e7:65:55:a2:91:4b:27:54:
be:67:57:38:ba:e4:b5:fd:3c:f0:84:94:8b:23:6e:f4:21:ea:
57:52:cf:d4:76:98:a0:68:bc:14:62:1b:71:86:1c:24:18:56:
96:e0:51:f8:9d:84:5f:b3:aa:2b:2e:0d:db:64:50:e8:d6:f7:
71:0c:73:a2:be:95:1f:34:62:b8:1c:b2:81:f1:f3:c1:56:6c:
0c:5e:94:6f
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDD3m6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJi
MjQ5MzYyYjJiNWU2MTY5YjlkOWI4Yjk5N2I0NzNmMTJhNmQ4MmYwHhcNMjMwNjIw
MTk0NDExWhcNMjUwNjIxMTk0NDExWjAzMTEwLwYDVQQDEygwODAzZDQxNDEyN2I3
NDRmZjE0YTljMWZmMzBiNThkMDRmZTA5OTRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApa4phxMzQPhoPWduFDkt3JP24A+W+TaLHy/8I8p6femPgCL4
fi50HY23DlJGNGII8X25bvn/gjyNzRECp6N1rk4wxpj7uO1RmpT9HKjXLMki56pk
uUl79lw6ezD9NywmBvhP5zRtT6zRpQbsyEm/z7gE5VAxjCdwQA+8YXCLX9cnVrXH
WmuVTTiD3yjed/Cq+px2fj/2zFgTHFUJ1po3le3xkSXVmrkDN23r1tE3gvNOzQ73
8S7/IqAxnJt8dNoyX/qMu6w1mhOMb+4fg0NZIVWdE+KVM5rKSbZpRGDnUyUYaOP8
S8i+k+oM/VMfRu6p///JT7t1ntp9qANiV3Bm0QIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFM42UssCGFGOPrSb++fQyh8U0MfTMB8GA1UdIwQYMBaAFKpwcbSaK2FILe6h
M7Nt5R2TtDgSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmIyNDkz
NjJiMmI1ZTYxNjliOWQ5YjhiOTk3YjQ3M2YxMmE2ZDgyZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWE1OTk4MjItZDhhZi00Mzc2LWI5ZGItYWEzZTY4
NDNjNjgxLzA4MDNkNDE0MTI3Yjc0NGZmMTRhOWMxZmYzMGI1OGQwNGZlMDk5NGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYTU5OTgyMi1kOGFmLTQzNzYtYjlkYi1hYTNl
Njg0M2M2ODEvYmIyNDkzNjJiMmI1ZTYxNjliOWQ5YjhiOTk3YjQ3M2YxMmE2ZDgy
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEBJjnMAMEBMnckDANBAIAAjAHAwUAKAOpADANBgkqhkiG9w0B
AQsFAAOCAQEASwdDLMlZV7eD5KbO+ucGn5Ehr/bGzg72LMadmB5hXVl3WsXS2pZo
06mwm8knUVjDQjJUgQNNIuAl9qn/3jKKU/0oNyPV3fYzSti6NMIrBFXtHnD4w8mE
pS21HCFOUSCByEClANdQuzSm7lNn8xKuIIehClB0kWBIuCAXHzZeCoXcZKI87xxU
EhJ/Mn4SeyIKYWoblUbkhhysgP02qF/iBcOM7NyLVIJg4aTcxOdlVaKRSydUvmdX
OLrktf088ISUiyNu9CHqV1LP1HaYoGi8FGIbcYYcJBhWluBR+J2EX7OqKy4N22RQ
6Nb3cQxzor6VHzRiuByygfHzwVZsDF6Ubw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org