Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/3ca8f92dce27820c61d70d4841b2507f48f61cb6.roa
File: 3ca8f92dce27820c61d70d4841b2507f48f61cb6.roa (raw, json)
Hash identifier: ul3/gc77NViTY9MCFR0iMBFQh/Cba1ANU9Qytae/SNU=
Subject key identifier: D1:A4:1F:49:89:DD:E5:88:2A:B9:BB:1D:CC:3B:43:F2:D8:23:0F:D6
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 22489A
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/3ca8f92dce27820c61d70d4841b2507f48f61cb6.roa
Signing time: Tue 25 Apr 2023 15:05:40 +0000
ROA not before: Mon 24 Apr 2023 15:04:37 +0000
ROA not after: Fri 25 Apr 2025 15:04:37 +0000
asID: 262198
IP address blocks: 201.218.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2246810 (0x22489a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Apr 24 15:04:37 2023 GMT
Not After : Apr 25 15:04:37 2025 GMT
Subject: CN=3ca8f92dce27820c61d70d4841b2507f48f61cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ab:a1:9c:98:49:4a:91:ca:97:76:1b:ac:ca:
c2:74:16:54:de:3f:3f:19:69:f2:26:e3:89:79:69:
2e:23:ec:0f:c8:5d:03:4b:c7:24:b1:12:e9:f1:a2:
53:9a:9f:3a:c8:d0:f1:10:92:b5:88:6d:f8:44:15:
9e:8f:88:80:37:77:22:b0:32:4f:dd:9d:e2:67:db:
60:62:11:b8:9c:24:10:0f:52:0b:af:eb:16:4b:8e:
b1:f4:1b:a3:ab:58:bb:2e:9a:65:46:dd:b4:dd:5d:
ef:51:79:8e:30:83:96:c2:2e:ae:80:3b:12:78:e5:
d9:1f:8c:b4:ff:9b:e8:cc:57:16:5f:d3:1c:c2:99:
ea:c0:9a:9a:9a:84:5a:18:b4:1f:08:88:86:c0:ec:
c9:2b:a2:90:79:38:b0:a0:39:67:6d:cb:5c:23:9a:
02:c2:82:1c:e3:cf:29:77:70:f3:eb:04:7f:b9:ef:
99:23:c6:20:68:5a:38:ae:cd:f4:4a:04:ad:f8:bb:
4a:2e:da:5e:25:5d:1f:53:ae:75:97:73:ae:16:cf:
06:27:42:2a:29:a2:fd:49:02:4e:e5:e9:a9:f6:f8:
00:1d:d8:15:1a:4a:00:cc:e4:3a:36:dd:67:c8:9d:
9f:83:c3:67:cb:0b:e7:b6:07:11:b0:d1:b3:12:ff:
d1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A4:1F:49:89:DD:E5:88:2A:B9:BB:1D:CC:3B:43:F2:D8:23:0F:D6
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/3ca8f92dce27820c61d70d4841b2507f48f61cb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.218.216.0/24
Signature Algorithm: sha256WithRSAEncryption
27:5f:a8:0d:39:bf:62:13:ae:59:52:6e:85:d8:f1:b1:92:e5:
22:5b:90:a3:69:db:7e:92:0f:08:23:1c:30:d4:28:11:d3:e5:
a5:56:cb:25:87:1d:7c:91:d4:6a:85:73:9c:4a:54:26:08:f7:
5c:1c:3b:b7:85:b5:ea:9e:d1:2f:f6:28:e7:b9:1b:6e:d3:7b:
24:85:70:f8:0f:a8:03:0c:e7:b0:5e:27:35:66:15:1c:14:54:
1b:0e:92:64:c2:6f:29:96:e5:e9:8a:f3:31:d7:ec:2d:58:4b:
ba:ac:af:70:ac:aa:ef:ac:be:9c:08:30:0c:39:74:ac:ec:ce:
f3:d1:a6:f6:e6:f6:9a:22:6b:92:51:d3:4c:84:b5:d6:2b:08:
b6:49:d8:96:50:b4:a0:e4:89:7d:c9:30:8e:c2:c9:03:9b:86:
ad:4e:68:6c:68:f2:56:e6:87:76:c9:95:62:8b:ad:cb:e5:93:
3e:ac:37:74:50:bd:fe:1e:eb:b9:f0:9a:ad:41:12:1b:3b:98:
0f:6e:ad:68:33:13:69:3b:e0:9e:5a:98:08:44:96:35:88:6c:
67:06:eb:0a:2a:a8:06:ea:57:01:a3:67:0b:26:57:f4:89:1e:
76:ec:7e:ed:d2:ee:1a:b8:72:01:3e:bb:a8:4c:c0:0f:7b:a0:
97:03:2f:2b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIkiaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
NWRhMzA0MzM0ZmIzNjIwNGEzNzBlOTUwNDg3Njg5ZTgxMWEyYzgwHhcNMjMwNDI0
MTUwNDM3WhcNMjUwNDI1MTUwNDM3WjAzMTEwLwYDVQQDEygzY2E4ZjkyZGNlMjc4
MjBjNjFkNzBkNDg0MWIyNTA3ZjQ4ZjYxY2I2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlKuhnJhJSpHKl3YbrMrCdBZU3j8/GWnyJuOJeWkuI+wPyF0D
S8cksRLp8aJTmp86yNDxEJK1iG34RBWej4iAN3cisDJP3Z3iZ9tgYhG4nCQQD1IL
r+sWS46x9Bujq1i7LpplRt203V3vUXmOMIOWwi6ugDsSeOXZH4y0/5vozFcWX9Mc
wpnqwJqamoRaGLQfCIiGwOzJK6KQeTiwoDlnbctcI5oCwoIc488pd3Dz6wR/ue+Z
I8YgaFo4rs30SgSt+LtKLtpeJV0fU651l3OuFs8GJ0IqKaL9SQJO5emp9vgAHdgV
GkoAzOQ6Nt1nyJ2fg8NnywvntgcRsNGzEv/R2wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNGkH0mJ3eWIKrm7Hcw7Q/LYIw/WMB8GA1UdIwQYMBaAFJWonEF2ARCODpgC
PQcm9Ep8UQ9LMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDg1ZGEz
MDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWNjNTQ4ZmYtOGYwYy00ZTc1LTgxMjUtNWUwOTVm
YmYyNGMwLzNjYThmOTJkY2UyNzgyMGM2MWQ3MGQ0ODQxYjI1MDdmNDhmNjFjYjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xY2M1NDhmZi04ZjBjLTRlNzUtODEyNS01ZTA5
NWZiZjI0YzAvZDg1ZGEzMDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMna2DANBgkqhkiG9w0BAQsFAAOCAQEAJ1+oDTm/YhOuWVJu
hdjxsZLlIluQo2nbfpIPCCMcMNQoEdPlpVbLJYcdfJHUaoVznEpUJgj3XBw7t4W1
6p7RL/Yo57kbbtN7JIVw+A+oAwznsF4nNWYVHBRUGw6SZMJvKZbl6YrzMdfsLVhL
uqyvcKyq76y+nAgwDDl0rOzO89Gm9ub2miJrklHTTIS11isItknYllC0oOSJfckw
jsLJA5uGrU5obGjyVuaHdsmVYouty+WTPqw3dFC9/h7rufCarUESGzuYD26taDMT
aTvgnlqYCESWNYhsZwbrCiqoBupXAaNnCyZX9Ikedux+7dLuGrhyAT67qEzAD3ug
lwMvKw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org