Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3a39e27fbfae6617074e28414b39e28d169811c5.roa
File: 3a39e27fbfae6617074e28414b39e28d169811c5.roa (raw, json)
Hash identifier: x0vEhv/z9MSvm+ua8towlJV9MSgOH+UwlbiOXxk1mvA=
Subject key identifier: CD:36:47:C8:33:57:DB:D8:C0:83:29:9E:A4:81:37:3D:C6:3A:D1:3E
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 12C225
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3a39e27fbfae6617074e28414b39e28d169811c5.roa
Signing time: Tue 21 Dec 2021 18:46:16 +0000
ROA not before: Tue 21 Dec 2021 03:00:00 +0000
ROA not after: Thu 21 Dec 2023 03:00:00 +0000
asID: 271988
IP address blocks: 191.96.164.0/24 maxlen: 24
191.101.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1229349 (0x12c225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Dec 21 03:00:00 2021 GMT
Not After : Dec 21 03:00:00 2023 GMT
Subject: CN=3a39e27fbfae6617074e28414b39e28d169811c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b5:5c:a6:4b:7d:6e:fb:4b:15:16:c5:89:71:
29:5b:86:f6:f9:50:61:30:ef:10:27:b5:fe:79:ed:
8a:d9:ae:e7:9f:a8:13:2a:84:12:69:c0:de:49:7e:
31:d1:f1:77:6e:4e:05:6f:88:7d:ad:78:9e:3a:43:
d4:40:37:59:3e:68:3e:6c:56:6b:59:f5:c5:e2:c0:
c2:f1:ea:be:a5:8a:7c:fc:47:6d:d9:2a:a2:f3:92:
d8:53:f7:50:00:48:11:81:7c:98:9a:f1:c0:15:03:
49:3e:52:8c:47:cc:c9:bf:f7:4e:62:c8:fb:b9:35:
20:a5:5d:ae:b7:55:6c:d1:b5:86:87:16:38:6f:e1:
da:61:03:6f:a4:00:d5:2f:71:e5:cb:54:51:81:ab:
d9:76:3d:0e:98:77:d1:fd:99:af:57:0e:fd:07:da:
46:b8:07:7e:19:40:b0:d8:9f:77:4d:e0:a4:60:f6:
90:90:dd:2a:16:14:bc:2a:61:8d:28:d0:5a:9f:a9:
32:1d:e8:f2:b8:8f:32:71:ce:7d:c6:73:3e:6b:7b:
f9:0e:7a:fe:c2:cb:e3:07:ec:9e:d8:0e:b0:f1:e2:
36:0b:00:16:0a:48:66:c3:3a:ee:c1:82:94:db:7a:
7f:89:ef:4d:bb:9a:55:98:30:ac:a5:12:23:35:e7:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:36:47:C8:33:57:DB:D8:C0:83:29:9E:A4:81:37:3D:C6:3A:D1:3E
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3a39e27fbfae6617074e28414b39e28d169811c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.164.0/24
191.101.38.0/24
Signature Algorithm: sha256WithRSAEncryption
47:dc:f5:9c:da:b6:f5:3c:db:c2:ad:e3:0e:19:31:c7:3b:18:
0e:1b:54:68:aa:e3:18:8f:73:2b:d3:4a:e6:76:fd:8e:18:a8:
7b:0b:32:42:52:0c:12:fb:12:3a:be:88:b7:f9:29:bc:83:62:
c5:20:2c:cc:e3:d1:b3:f8:90:07:d7:69:dd:d4:8a:b9:51:ec:
10:6a:f8:90:04:46:ed:a4:bf:ef:dc:c7:f3:82:3b:d4:bd:32:
68:cc:bc:34:48:d7:84:d2:b9:b6:61:d5:db:9c:0d:20:9f:64:
f6:b1:5b:c6:6f:79:91:9d:8c:97:00:f2:f1:7b:cf:3e:19:a2:
05:28:a8:ad:b0:dd:ef:35:bb:0c:1c:6d:3d:12:84:0c:19:97:
b5:65:c6:86:b0:57:d4:7b:40:28:02:09:0c:d8:83:b5:2c:4e:
5c:a3:13:f8:73:7a:a3:87:76:a0:fd:2f:cb:38:e4:f8:4c:b2:
b0:92:67:e3:01:45:59:8e:7f:1f:0c:17:c7:5f:c0:35:66:29:
9e:05:45:bb:ca:7d:da:d9:6a:55:62:c1:34:2c:fb:1d:e7:d4:
d9:c8:05:88:70:e0:2e:ba:01:c9:de:b4:e5:9e:cb:76:3c:38:
66:ba:60:8b:0e:de:11:91:ac:3e:03:59:9c:81:36:ce:4b:d5:
b8:c5:b9:87
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDEsIlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjExMjIx
MDMwMDAwWhcNMjMxMjIxMDMwMDAwWjAzMTEwLwYDVQQDEygzYTM5ZTI3ZmJmYWU2
NjE3MDc0ZTI4NDE0YjM5ZTI4ZDE2OTgxMWM1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhrVcpkt9bvtLFRbFiXEpW4b2+VBhMO8QJ7X+ee2K2a7nn6gT
KoQSacDeSX4x0fF3bk4Fb4h9rXieOkPUQDdZPmg+bFZrWfXF4sDC8eq+pYp8/Edt
2Sqi85LYU/dQAEgRgXyYmvHAFQNJPlKMR8zJv/dOYsj7uTUgpV2ut1Vs0bWGhxY4
b+HaYQNvpADVL3Hly1RRgavZdj0OmHfR/ZmvVw79B9pGuAd+GUCw2J93TeCkYPaQ
kN0qFhS8KmGNKNBan6kyHejyuI8ycc59xnM+a3v5Dnr+wsvjB+ye2A6w8eI2CwAW
CkhmwzruwYKU23p/ie9Nu5pVmDCspRIjNedPiQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFM02R8gzV9vYwIMpnqSBNz3GOtE+MB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzNhMzllMjdmYmZhZTY2MTcwNzRlMjg0MTRiMzllMjhkMTY5ODExYzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAL9gpAMEAL9lJjANBgkqhkiG9w0BAQsFAAOCAQEAR9z1nNq2
9Tzbwq3jDhkxxzsYDhtUaKrjGI9zK9NK5nb9jhioewsyQlIMEvsSOr6It/kpvINi
xSAszOPRs/iQB9dp3dSKuVHsEGr4kARG7aS/79zH84I71L0yaMy8NEjXhNK5tmHV
25wNIJ9k9rFbxm95kZ2MlwDy8XvPPhmiBSiorbDd7zW7DBxtPRKEDBmXtWXGhrBX
1HtAKAIJDNiDtSxOXKMT+HN6o4d2oP0vyzjk+EyysJJn4wFFWY5/HwwXx1/ANWYp
ngVFu8p92tlqVWLBNCz7HefU2cgFiHDgLroByd605Z7Ldjw4Zrpgiw7eEZGsPgNZ
nIE2zkvVuMW5hw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org