Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3ae577bf7d305c261210a3da03128153eed709bc.roa
File: 3ae577bf7d305c261210a3da03128153eed709bc.roa (raw, json)
Hash identifier: nHuR/zdLocob0iuk+8SN3LupgnJWCCQh80EbVy9B4oQ=
Subject key identifier: 79:D7:3E:EE:45:AA:51:DD:17:FF:B6:0C:E5:D0:E0:E1:CC:B7:D6:AD
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 0FBE25
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3ae577bf7d305c261210a3da03128153eed709bc.roa
Signing time: Fri 15 Oct 2021 18:03:52 +0000
ROA not before: Fri 15 Oct 2021 03:00:00 +0000
ROA not after: Sun 15 Oct 2023 03:00:00 +0000
asID: 400039
IP address blocks: 191.96.197.0/24 maxlen: 24
191.101.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1031717 (0xfbe25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Oct 15 03:00:00 2021 GMT
Not After : Oct 15 03:00:00 2023 GMT
Subject: CN=3ae577bf7d305c261210a3da03128153eed709bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:b9:da:2e:85:97:d1:bd:f6:da:00:4d:3d:
60:f0:5e:88:8f:9b:b3:40:ac:4c:49:3f:73:81:5c:
51:c4:2f:58:43:82:ab:30:0a:1a:80:ca:94:2a:86:
ae:80:cc:64:5d:90:78:cd:82:6d:60:95:01:d9:32:
c2:31:80:2c:f9:ec:fd:df:0f:6f:2d:da:1f:fb:3b:
96:c4:77:a3:e8:f2:0a:43:f1:6f:13:ff:0e:39:6c:
fa:9a:a0:a4:16:45:47:09:64:0d:c3:bd:96:b0:55:
52:09:d7:b1:46:16:00:b0:06:56:03:27:f3:09:bf:
3d:9d:ec:48:78:fb:9f:dc:0b:50:ad:d1:d2:4f:49:
ce:47:4f:85:12:59:a9:c3:c4:d3:1a:b3:0e:ce:06:
3a:72:f9:eb:06:9e:8e:b7:e8:b9:ff:28:0a:84:29:
aa:20:e2:09:94:a2:d9:1c:e3:8b:1f:44:38:0a:4e:
eb:46:1c:d4:82:b9:8a:0b:d8:fd:9b:f2:de:3d:83:
10:2c:37:b4:3d:13:5b:a3:6f:96:f6:b4:b1:e7:a9:
1b:80:79:36:a6:97:e8:f1:97:a9:19:e3:86:d3:ba:
ce:d0:4b:e7:ac:b4:95:1a:b7:bc:ed:d8:c7:b3:f4:
ca:ee:c8:65:09:8c:05:e0:48:5a:c5:9f:5c:83:51:
aa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D7:3E:EE:45:AA:51:DD:17:FF:B6:0C:E5:D0:E0:E1:CC:B7:D6:AD
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3ae577bf7d305c261210a3da03128153eed709bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.197.0/24
191.101.57.0/24
Signature Algorithm: sha256WithRSAEncryption
36:03:f0:30:21:5f:50:29:5b:fb:bd:f7:e7:0d:b7:14:5a:d1:
dd:11:21:7a:88:e6:1a:af:c8:ce:59:79:82:b4:d0:3d:78:24:
57:a8:79:35:9e:69:dc:e4:ec:13:58:01:0f:b8:2b:f2:84:e1:
b6:59:f3:0e:7b:81:50:8e:8e:22:41:82:96:f3:0a:fd:67:90:
ed:83:d4:5a:ef:41:51:2a:cd:4d:9c:b8:e7:4c:9c:62:f2:2a:
b3:31:a8:5e:01:58:a4:1c:d7:7d:45:b1:e7:2a:19:eb:8c:f7:
08:48:24:b9:64:20:3c:bb:85:eb:f4:15:7c:73:e1:01:d3:65:
6e:2b:db:3a:00:83:a2:ac:86:91:e2:09:a1:33:3e:04:b6:a0:
94:e5:b7:a5:08:83:43:22:57:91:d9:2b:f4:21:d3:7e:72:76:
73:4b:ac:6c:a4:48:15:9d:0d:9e:db:33:c2:d6:b5:65:88:dd:
f5:43:fe:a0:12:ad:9e:5c:b2:70:74:05:f9:2e:db:1b:3b:74:
14:69:f8:49:87:c4:86:53:c0:9a:c7:52:13:f4:e0:c5:18:e8:
1d:d0:f1:8d:f0:1f:7d:41:43:f3:c2:2a:fa:ca:35:72:8c:cd:
bb:40:f5:d6:25:9b:1b:49:28:93:b9:ad:20:73:f8:e6:e7:0a:
58:35:71:76
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDD74lMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjExMDE1
MDMwMDAwWhcNMjMxMDE1MDMwMDAwWjAzMTEwLwYDVQQDEygzYWU1NzdiZjdkMzA1
YzI2MTIxMGEzZGEwMzEyODE1M2VlZDcwOWJjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuAO52i6Fl9G99toATT1g8F6Ij5uzQKxMST9zgVxRxC9YQ4Kr
MAoagMqUKoaugMxkXZB4zYJtYJUB2TLCMYAs+ez93w9vLdof+zuWxHej6PIKQ/Fv
E/8OOWz6mqCkFkVHCWQNw72WsFVSCdexRhYAsAZWAyfzCb89nexIePuf3AtQrdHS
T0nOR0+FElmpw8TTGrMOzgY6cvnrBp6Ot+i5/ygKhCmqIOIJlKLZHOOLH0Q4Ck7r
RhzUgrmKC9j9m/LePYMQLDe0PRNbo2+W9rSx56kbgHk2ppfo8ZepGeOG07rO0Evn
rLSVGre87djHs/TK7shlCYwF4EhaxZ9cg1GqGQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFHnXPu5FqlHdF/+2DOXQ4OHMt9atMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzNhZTU3N2JmN2QzMDVjMjYxMjEwYTNkYTAzMTI4MTUzZWVkNzA5YmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAL9gxQMEAL9lOTANBgkqhkiG9w0BAQsFAAOCAQEANgPwMCFf
UClb+7335w23FFrR3REheojmGq/Izll5grTQPXgkV6h5NZ5p3OTsE1gBD7gr8oTh
tlnzDnuBUI6OIkGClvMK/WeQ7YPUWu9BUSrNTZy450ycYvIqszGoXgFYpBzXfUWx
5yoZ64z3CEgkuWQgPLuF6/QVfHPhAdNlbivbOgCDoqyGkeIJoTM+BLaglOW3pQiD
QyJXkdkr9CHTfnJ2c0usbKRIFZ0Nntszwta1ZYjd9UP+oBKtnlyycHQF+S7bGzt0
FGn4SYfEhlPAmsdSE/TgxRjoHdDxjfAffUFD88Iq+so1cozNu0D11iWbG0kok7mt
IHP45ucKWDVxdg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org