Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22b564bb-be7c-443e-bc51-1f361b5cacad/b16914f6a0d64ad788532895c139c1f1d05263f2.roa
File: b16914f6a0d64ad788532895c139c1f1d05263f2.roa (raw, json)
Hash identifier: TqnCEi8BewMQT/LTtTjnvWpdq+wpeTgXzX3Ox1ZkmdY=
Subject key identifier: 67:5E:5A:D0:E3:5E:13:3E:2E:31:FA:68:2D:92:8B:25:14:90:57:69
Certificate issuer: /CN=0d2f3c34eaa952f81789554aedc8cb1bd83027a1
Certificate serial: 03DF
Authority key identifier: 6F:FF:DC:0B:ED:27:CE:65:F5:0F:D3:5D:74:63:FC:A3:6F:17:CD:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d2f3c34eaa952f81789554aedc8cb1bd83027a1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22b564bb-be7c-443e-bc51-1f361b5cacad/b16914f6a0d64ad788532895c139c1f1d05263f2.roa
Signing time: Wed 13 Dec 2023 20:59:15 +0000
ROA not before: Wed 13 Dec 2023 20:59:15 +0000
ROA not after: Sat 13 Dec 2025 20:59:15 +0000
asID: 265586
IP address blocks: 181.224.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 991 (0x3df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2f3c34eaa952f81789554aedc8cb1bd83027a1
Validity
Not Before: Dec 13 20:59:15 2023 GMT
Not After : Dec 13 20:59:15 2025 GMT
Subject: CN=b16914f6a0d64ad788532895c139c1f1d05263f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:be:c0:49:32:68:be:99:e4:d8:b2:bc:48:
20:24:5f:4f:ea:cd:0f:f8:2c:7c:3d:8d:24:56:8d:
3f:da:f4:86:f8:e5:78:4b:73:c3:90:5d:be:0f:ef:
e5:65:af:8d:80:b3:da:92:e4:21:e4:b1:82:09:37:
a4:de:c5:9d:76:42:65:81:c6:a3:d9:99:d8:8e:37:
73:d4:69:7a:48:62:ea:08:07:b9:12:0d:13:78:19:
15:07:be:03:d7:78:2b:6e:a0:aa:35:df:8a:7f:5c:
1d:4e:15:40:01:4e:e5:96:07:a4:80:6e:75:cd:a1:
8e:01:df:17:a2:3e:1f:01:5c:44:e8:4a:e7:f2:68:
c1:f7:b6:d6:7d:44:04:e3:f4:e1:18:e8:e9:b2:ec:
96:bb:b8:fe:f1:1d:e1:10:0c:5a:92:04:3e:b5:76:
79:ff:ba:17:8f:ea:f3:70:66:7d:3e:06:3a:68:fb:
3f:69:d2:0e:a2:a1:e9:7b:a4:d4:38:30:26:95:a5:
91:7b:b2:2b:cf:94:5a:14:90:30:13:64:08:43:06:
56:4b:a7:5e:6f:51:5e:64:a7:d7:ad:a7:97:c4:bc:
fc:d0:d0:6f:22:88:a0:c5:b9:c3:ac:51:d8:0e:8b:
fd:7a:11:7e:68:f5:7b:3c:34:22:dd:45:98:14:a8:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5E:5A:D0:E3:5E:13:3E:2E:31:FA:68:2D:92:8B:25:14:90:57:69
X509v3 Authority Key Identifier:
keyid:6F:FF:DC:0B:ED:27:CE:65:F5:0F:D3:5D:74:63:FC:A3:6F:17:CD:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d2f3c34eaa952f81789554aedc8cb1bd83027a1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22b564bb-be7c-443e-bc51-1f361b5cacad/b16914f6a0d64ad788532895c139c1f1d05263f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/22b564bb-be7c-443e-bc51-1f361b5cacad/0d2f3c34eaa952f81789554aedc8cb1bd83027a1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.16.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:75:bc:fc:43:00:33:94:95:0d:9f:dc:a7:4c:e0:2c:fb:eb:
c3:a5:d5:2c:cf:4a:9c:10:aa:b8:2f:22:42:82:14:04:bb:b8:
7f:5b:7f:66:ff:ac:0c:78:21:73:f5:ce:49:85:67:a4:fd:0a:
58:07:3b:31:29:3f:bd:f5:7e:25:e0:a1:ac:84:6c:7d:40:75:
52:fe:6e:14:b0:2f:70:a8:a3:7f:51:bc:cc:93:6a:9c:84:28:
48:b4:6b:8d:65:2c:b4:24:d8:18:de:9e:10:92:d9:b9:4a:dd:
56:31:75:0d:65:1b:c4:ec:4f:2f:4f:7e:e4:bb:bb:bf:be:fb:
25:b0:dd:60:ab:f7:20:4a:e6:72:ee:f6:17:ec:61:0f:38:5b:
bf:76:13:cc:6a:7e:73:ee:39:14:6f:26:1e:50:1d:36:6f:5f:
d5:e9:31:4d:87:ad:e2:ea:8b:f9:9f:f2:2d:71:f6:b7:ad:55:
bc:97:12:6c:f6:ee:cf:43:7a:d4:ee:a3:55:4e:ef:ff:60:34:
31:d8:ce:1d:62:05:21:41:92:0b:72:17:49:b8:bc:81:aa:c3:
8b:d4:25:5a:e0:f0:b4:23:57:c9:41:f5:a5:db:68:44:fc:e2:
bf:86:a6:cd:46:c0:94:be:33:e2:d6:58:4e:d4:8c:ba:8c:ab:
33:08:35:5a
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICA98wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMGQy
ZjNjMzRlYWE5NTJmODE3ODk1NTRhZWRjOGNiMWJkODMwMjdhMTAeFw0yMzEyMTMy
MDU5MTVaFw0yNTEyMTMyMDU5MTVaMDMxMTAvBgNVBAMTKGIxNjkxNGY2YTBkNjRh
ZDc4ODUzMjg5NWMxMzljMWYxZDA1MjYzZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfB77ASTJovpnk2LK8SCAkX0/qzQ/4LHw9jSRWjT/a9Ib45XhL
c8OQXb4P7+Vlr42As9qS5CHksYIJN6TexZ12QmWBxqPZmdiON3PUaXpIYuoIB7kS
DRN4GRUHvgPXeCtuoKo134p/XB1OFUABTuWWB6SAbnXNoY4B3xeiPh8BXEToSufy
aMH3ttZ9RATj9OEY6Omy7Ja7uP7xHeEQDFqSBD61dnn/uheP6vNwZn0+Bjpo+z9p
0g6ioel7pNQ4MCaVpZF7sivPlFoUkDATZAhDBlZLp15vUV5kp9etp5fEvPzQ0G8i
iKDFucOsUdgOi/16EX5o9Xs8NCLdRZgUqFyXAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUZ15a0ONeEz4uMfpoLZKLJRSQV2kwHwYDVR0jBBgwFoAUb//cC+0nzmX1D9Nd
dGP8o28XzYAwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8wZDJmM2Mz
NGVhYTk1MmY4MTc4OTU1NGFlZGM4Y2IxYmQ4MzAyN2ExLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8yMmI1NjRiYi1iZTdjLTQ0M2UtYmM1MS0xZjM2MWI1
Y2FjYWQvYjE2OTE0ZjZhMGQ2NGFkNzg4NTMyODk1YzEzOWMxZjFkMDUyNjNmMi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzIyYjU2NGJiLWJlN2MtNDQzZS1iYzUxLTFmMzYx
YjVjYWNhZC8wZDJmM2MzNGVhYTk1MmY4MTc4OTU1NGFlZGM4Y2IxYmQ4MzAyN2Ex
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCteAQMA0GCSqGSIb3DQEBCwUAA4IBAQCcdbz8QwAzlJUNn9yn
TOAs++vDpdUsz0qcEKq4LyJCghQEu7h/W39m/6wMeCFz9c5JhWek/QpYBzsxKT+9
9X4l4KGshGx9QHVS/m4UsC9wqKN/UbzMk2qchChItGuNZSy0JNgY3p4Qktm5St1W
MXUNZRvE7E8vT37ku7u/vvslsN1gq/cgSuZy7vYX7GEPOFu/dhPMan5z7jkUbyYe
UB02b1/V6TFNh63i6ov5n/Itcfa3rVW8lxJs9u7PQ3rU7qNVTu//YDQx2M4dYgUh
QZILchdJuLyBqsOL1CVa4PC0I1fJQfWl22hE/OK/hqbNRsCUvjPi1lhO1Iy6jKsz
CDVa
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org