Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3fd3e7616f996c8d95f89de674e02201b4d4ca6c.roa
File: 3fd3e7616f996c8d95f89de674e02201b4d4ca6c.roa (raw, json)
Hash identifier: 1EETAc9bgJedwNSO6IuliljaPoRySIrZmczzhQuOylw=
Subject key identifier: 65:EA:E5:17:7C:42:26:A2:8D:AF:27:B7:98:61:24:53:DB:D1:51:72
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 0617E7
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3fd3e7616f996c8d95f89de674e02201b4d4ca6c.roa
Signing time: Wed 24 Mar 2021 14:33:34 +0000
ROA not before: Wed 24 Mar 2021 14:33:29 +0000
ROA not after: Tue 24 Mar 2026 14:33:29 +0000
asID: 133219
IP address blocks: 191.96.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399335 (0x617e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 14:33:29 2021 GMT
Not After : Mar 24 14:33:29 2026 GMT
Subject: CN=3fd3e7616f996c8d95f89de674e02201b4d4ca6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:ac:60:89:13:53:92:d6:52:f2:1c:6c:7e:
93:20:f0:1e:ae:1d:8a:14:d1:71:72:ea:ec:db:c0:
05:90:98:b1:bc:cc:21:67:27:f6:9f:74:a5:6d:41:
3a:b0:2b:18:f5:a2:47:1d:da:49:0a:66:55:92:72:
ed:bf:76:91:7f:77:52:2d:77:8a:62:87:77:6c:5b:
8e:37:f8:77:bb:81:9c:f4:44:a1:1c:26:03:2c:75:
a0:05:b7:c1:87:a4:f3:48:e1:71:3f:f7:2a:9c:33:
1a:63:bc:27:c5:10:57:1f:af:1b:91:dc:97:fc:b2:
ca:68:ab:9e:b7:33:0e:26:da:07:f8:bb:f8:03:9a:
a8:a2:fb:83:85:f3:2f:94:7c:f9:1e:d3:fd:53:09:
ec:e8:5b:86:a7:aa:7e:52:5e:94:28:9b:63:c8:ac:
f3:db:46:30:6c:1c:ed:99:df:3b:7b:88:e1:63:fc:
2d:5c:b9:a8:25:bd:e6:71:2f:ba:87:29:ec:8e:3f:
30:0f:3a:50:5d:39:c3:51:e1:b7:10:4d:12:08:26:
ff:5b:c5:73:0c:45:76:74:c1:19:df:90:74:c2:c9:
1c:04:3e:51:88:81:d8:5f:1e:42:28:8a:eb:91:c4:
fa:85:96:11:23:e5:59:6c:9b:a5:b3:46:8c:b1:92:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EA:E5:17:7C:42:26:A2:8D:AF:27:B7:98:61:24:53:DB:D1:51:72
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3fd3e7616f996c8d95f89de674e02201b4d4ca6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.130.0/24
Signature Algorithm: sha256WithRSAEncryption
17:30:61:fc:70:1f:14:28:5a:3e:ba:6e:86:d3:ec:07:f7:3b:
4c:62:70:ea:c3:36:41:ba:a4:80:08:2d:f0:22:db:55:7e:e6:
88:4e:3b:32:0e:7f:92:91:d7:d6:f6:9d:a7:d7:cf:d5:54:22:
0e:39:d4:78:af:db:06:89:4e:04:7c:9c:ac:b1:8c:d9:31:f2:
a1:e8:db:bf:63:31:f2:8f:70:6a:1c:af:88:18:e5:b6:fe:cb:
e8:d7:00:51:99:50:06:5f:53:d4:ee:75:dd:10:f3:0a:78:6b:
13:86:c4:1c:10:5a:0d:99:38:e4:d0:ad:5e:36:0e:6f:a1:82:
99:bf:81:ed:77:9b:f7:dd:29:68:0a:11:0b:36:cf:52:b1:10:
c4:82:27:74:d6:96:8f:b4:b5:4a:8d:c6:ad:19:ea:35:17:1f:
de:41:81:8a:c7:13:44:12:3d:ff:74:3b:6a:68:b8:6b:58:e6:
f3:90:60:9e:36:1a:1b:02:07:27:7e:2a:f0:c2:54:33:54:50:
3d:86:ba:08:c3:7c:de:20:e9:a3:d1:15:44:de:23:c5:cb:b9:
4c:21:05:6a:f8:ed:02:ad:cf:fc:d3:f1:34:d3:c5:a4:81:d2:
ae:0c:ad:e6:8b:cb:ea:22:4a:dc:6f:7e:9c:01:2f:c1:c6:40:
af:5e:b1:d1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBhfnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MTQzMzI5WhcNMjYwMzI0MTQzMzI5WjAzMTEwLwYDVQQDEygzZmQzZTc2MTZmOTk2
YzhkOTVmODlkZTY3NGUwMjIwMWI0ZDRjYTZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkc6sYIkTU5LWUvIcbH6TIPAerh2KFNFxcurs28AFkJixvMwh
Zyf2n3SlbUE6sCsY9aJHHdpJCmZVknLtv3aRf3dSLXeKYod3bFuON/h3u4Gc9ESh
HCYDLHWgBbfBh6TzSOFxP/cqnDMaY7wnxRBXH68bkdyX/LLKaKuetzMOJtoH+Lv4
A5qoovuDhfMvlHz5HtP9Uwns6FuGp6p+Ul6UKJtjyKzz20YwbBztmd87e4jhY/wt
XLmoJb3mcS+6hynsjj8wDzpQXTnDUeG3EE0SCCb/W8VzDEV2dMEZ35B0wskcBD5R
iIHYXx5CKIrrkcT6hZYRI+VZbJuls0aMsZLZawIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGXq5Rd8Qiaija8nt5hhJFPb0VFyMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzNmZDNlNzYxNmY5OTZjOGQ5NWY4OWRlNjc0ZTAyMjAxYjRkNGNhNmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL9ggjANBgkqhkiG9w0BAQsFAAOCAQEAFzBh/HAfFChaPrpu
htPsB/c7TGJw6sM2QbqkgAgt8CLbVX7miE47Mg5/kpHX1vadp9fP1VQiDjnUeK/b
BolOBHycrLGM2THyoejbv2Mx8o9wahyviBjltv7L6NcAUZlQBl9T1O513RDzCnhr
E4bEHBBaDZk45NCtXjYOb6GCmb+B7Xeb990paAoRCzbPUrEQxIIndNaWj7S1So3G
rRnqNRcf3kGBiscTRBI9/3Q7ami4a1jm85BgnjYaGwIHJ34q8MJUM1RQPYa6CMN8
3iDpo9EVRN4jxcu5TCEFavjtAq3P/NPxNNPFpIHSrgyt5ovL6iJK3G9+nAEvwcZA
r16x0Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org