Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/218bba34-18f9-4eed-922b-5fc5f6ebcf7e/fa750afaf712378f909608d1a5520c3797a0fed8.roa
File: fa750afaf712378f909608d1a5520c3797a0fed8.roa (raw, json)
Hash identifier: gkTbTjLfe/O36Y+SDPKpC2nq7+N9RYmUS801yWHzpcY=
Subject key identifier: 94:AF:A1:07:99:D8:54:27:24:A0:65:88:CF:04:8B:92:46:6D:A5:BD
Certificate issuer: /CN=6073bb1fe384abff375ad4e17bea5b9cd8716010
Certificate serial: 1CF777
Authority key identifier: 56:71:39:C9:0F:11:51:6C:17:56:B0:90:4C:EE:4F:50:45:6A:A9:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6073bb1fe384abff375ad4e17bea5b9cd8716010.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/218bba34-18f9-4eed-922b-5fc5f6ebcf7e/fa750afaf712378f909608d1a5520c3797a0fed8.roa
Signing time: Fri 29 Sep 2023 08:30:00 +0000
ROA not before: Thu 28 Sep 2023 08:30:00 +0000
ROA not after: Sat 27 Sep 2025 08:30:00 +0000
asID: 28509
IP address blocks: 201.139.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1898359 (0x1cf777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6073bb1fe384abff375ad4e17bea5b9cd8716010
Validity
Not Before: Sep 28 08:30:00 2023 GMT
Not After : Sep 27 08:30:00 2025 GMT
Subject: CN=fa750afaf712378f909608d1a5520c3797a0fed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:1c:1f:c9:14:64:ad:31:5a:a7:f5:51:47:
9b:8a:df:18:c5:7e:00:f5:82:1b:23:b6:fd:d1:a8:
f8:b9:b8:05:22:ed:68:a6:f7:2c:72:10:9c:d5:8c:
a8:b5:cd:8a:87:f7:30:5e:99:29:81:43:8d:fe:45:
d4:b4:12:b8:9f:17:ab:d5:1c:9e:0b:df:a8:93:0f:
65:3c:9f:05:ed:46:68:75:07:f2:d2:c2:8f:9a:b1:
bf:0a:21:b1:85:2d:ba:03:f3:b0:2f:ac:43:cc:90:
84:74:62:8f:bb:e5:4e:a2:83:23:0f:e8:90:06:81:
20:06:bb:99:e0:95:20:02:c1:ef:dc:c2:ab:10:59:
f6:35:07:2a:28:b5:85:db:90:23:92:dd:5d:63:eb:
d0:e7:8a:83:da:6d:8b:7f:7a:50:07:13:94:c3:13:
a3:e9:58:99:50:d1:50:af:61:ee:47:bc:4d:d0:fd:
15:bb:32:ef:19:41:21:33:48:a0:eb:80:36:21:8c:
23:27:4e:4a:26:68:4c:5a:f1:60:eb:d8:d6:76:1c:
ee:38:2e:dd:1a:c7:f1:78:f0:e3:6f:f4:e8:4e:08:
ec:3f:2f:a9:ef:10:a9:7c:a9:1d:4b:ad:75:87:63:
f3:6f:55:93:cb:00:ab:c8:a1:17:89:61:f6:03:66:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AF:A1:07:99:D8:54:27:24:A0:65:88:CF:04:8B:92:46:6D:A5:BD
X509v3 Authority Key Identifier:
keyid:56:71:39:C9:0F:11:51:6C:17:56:B0:90:4C:EE:4F:50:45:6A:A9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6073bb1fe384abff375ad4e17bea5b9cd8716010.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/218bba34-18f9-4eed-922b-5fc5f6ebcf7e/fa750afaf712378f909608d1a5520c3797a0fed8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/218bba34-18f9-4eed-922b-5fc5f6ebcf7e/6073bb1fe384abff375ad4e17bea5b9cd8716010.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.139.144.0/20
Signature Algorithm: sha256WithRSAEncryption
c9:23:4c:61:06:0d:f9:62:7b:a3:fa:87:7f:79:5d:ae:59:63:
ae:39:42:1e:38:2c:02:25:74:78:8d:f3:b7:22:85:ff:57:02:
4b:94:62:79:bc:11:04:33:8f:6b:ad:2b:64:8e:fc:b7:95:4d:
14:2c:ac:b4:d5:d2:f1:87:74:11:6b:cb:f4:10:24:d2:49:71:
f3:05:ca:2d:cd:d9:54:5f:4b:31:1d:ee:9a:1d:70:70:fe:4a:
cd:44:f8:f9:01:93:5d:62:04:e8:24:eb:88:98:1d:23:01:e9:
c6:e5:b1:30:da:6f:1b:5a:ee:b5:cc:c4:9e:1d:d8:c6:08:f6:
bc:2b:00:ef:7c:bb:47:92:1d:8d:06:e9:9b:5b:96:ff:18:74:
b9:30:ba:d7:94:a1:68:78:95:31:79:65:b0:ba:d8:38:92:06:
c4:97:47:ab:8e:7d:9d:b4:ca:cc:fb:10:f8:9b:68:a6:a1:ba:
de:d4:68:98:d1:d1:aa:e5:b6:17:d9:05:ac:77:cc:c9:de:f2:
2b:89:8d:92:45:95:27:81:8a:cb:84:33:a4:2f:b4:ed:c1:e4:
36:2b:41:67:bd:9d:f8:a7:c9:eb:34:36:27:07:94:3e:9a:8c:
2a:fd:f8:5c:97:f4:68:28:aa:2f:6c:37:40:69:02:fc:45:00:
ff:c4:df:a2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHPd3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYw
NzNiYjFmZTM4NGFiZmYzNzVhZDRlMTdiZWE1YjljZDg3MTYwMTAwHhcNMjMwOTI4
MDgzMDAwWhcNMjUwOTI3MDgzMDAwWjAzMTEwLwYDVQQDEyhmYTc1MGFmYWY3MTIz
NzhmOTA5NjA4ZDFhNTUyMGMzNzk3YTBmZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn2QcH8kUZK0xWqf1UUebit8YxX4A9YIbI7b90aj4ubgFIu1o
pvcschCc1Yyotc2Kh/cwXpkpgUON/kXUtBK4nxer1RyeC9+okw9lPJ8F7UZodQfy
0sKPmrG/CiGxhS26A/OwL6xDzJCEdGKPu+VOooMjD+iQBoEgBruZ4JUgAsHv3MKr
EFn2NQcqKLWF25Ajkt1dY+vQ54qD2m2Lf3pQBxOUwxOj6ViZUNFQr2HuR7xN0P0V
uzLvGUEhM0ig64A2IYwjJ05KJmhMWvFg69jWdhzuOC7dGsfxePDjb/ToTgjsPy+p
7xCpfKkdS611h2Pzb1WTywCryKEXiWH2A2ZLbQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJSvoQeZ2FQnJKBliM8Ei5JGbaW9MB8GA1UdIwQYMBaAFFZxOckPEVFsF1aw
kEzuT1BFaqm2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjA3M2Ji
MWZlMzg0YWJmZjM3NWFkNGUxN2JlYTViOWNkODcxNjAxMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjE4YmJhMzQtMThmOS00ZWVkLTkyMmItNWZjNWY2
ZWJjZjdlL2ZhNzUwYWZhZjcxMjM3OGY5MDk2MDhkMWE1NTIwYzM3OTdhMGZlZDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMThiYmEzNC0xOGY5LTRlZWQtOTIyYi01ZmM1
ZjZlYmNmN2UvNjA3M2JiMWZlMzg0YWJmZjM3NWFkNGUxN2JlYTViOWNkODcxNjAx
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBMmLkDANBgkqhkiG9w0BAQsFAAOCAQEAySNMYQYN+WJ7o/qH
f3ldrlljrjlCHjgsAiV0eI3ztyKF/1cCS5RiebwRBDOPa60rZI78t5VNFCystNXS
8Yd0EWvL9BAk0klx8wXKLc3ZVF9LMR3umh1wcP5KzUT4+QGTXWIE6CTriJgdIwHp
xuWxMNpvG1rutczEnh3Yxgj2vCsA73y7R5IdjQbpm1uW/xh0uTC615ShaHiVMXll
sLrYOJIGxJdHq459nbTKzPsQ+JtopqG63tRomNHRquW2F9kFrHfMyd7yK4mNkkWV
J4GKy4QzpC+07cHkNitBZ72d+KfJ6zQ2JweUPpqMKv34XJf0aCiqL2w3QGkC/EUA
/8Tfog==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org