Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d7329c0-3aaa-4a3f-ada1-9b802129856f/4e0d8b238b0dd8c668691737b19b45963dd72d0a.roa
File: 4e0d8b238b0dd8c668691737b19b45963dd72d0a.roa (raw, json)
Hash identifier: nxDX/ab7WalA77Nsh3ZMrgrbzERZaNeiAvrGq4ZAcOo=
Subject key identifier: 02:32:A8:5F:79:98:E7:97:E7:CF:8C:A2:B9:E2:73:20:74:B7:60:E2
Certificate issuer: /CN=041358da0b12ee28b9288c87d937e0f22e1b65f4
Certificate serial: 147B4B
Authority key identifier: B0:BC:E5:F8:0D:B5:B7:90:6E:48:7A:EF:49:04:84:E1:3C:2A:53:D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/041358da0b12ee28b9288c87d937e0f22e1b65f4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2d7329c0-3aaa-4a3f-ada1-9b802129856f/4e0d8b238b0dd8c668691737b19b45963dd72d0a.roa
Signing time: Thu 21 Mar 2024 14:59:31 +0000
ROA not before: Thu 21 Mar 2024 14:59:31 +0000
ROA not after: Sat 21 Mar 2026 14:59:31 +0000
asID: 265796
IP address blocks: 181.191.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1342283 (0x147b4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041358da0b12ee28b9288c87d937e0f22e1b65f4
Validity
Not Before: Mar 21 14:59:31 2024 GMT
Not After : Mar 21 14:59:31 2026 GMT
Subject: CN=4e0d8b238b0dd8c668691737b19b45963dd72d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:45:6d:81:86:0a:c9:af:85:45:71:b0:10:c0:
c4:35:50:6e:37:eb:80:db:48:65:ce:fb:b8:d4:21:
92:3e:19:41:a6:36:44:ad:6a:3f:0d:ee:ed:30:d1:
b5:4b:78:30:ef:c7:97:8b:9d:d0:b9:81:a7:69:59:
f6:13:e7:7f:2f:3d:ef:57:17:ef:b2:d9:d8:21:8b:
9e:86:57:e5:fc:5a:8a:35:56:9d:44:3c:cb:c9:97:
04:d0:7d:a8:30:3e:e1:e6:f2:09:8f:53:9f:07:b1:
f6:6e:d7:56:1c:0a:ab:95:f6:3f:67:9f:bb:94:82:
23:75:e0:76:db:38:f5:5c:e0:cb:21:3f:d7:c0:4c:
6d:17:5c:d9:ba:18:39:8b:e6:69:1a:34:78:e3:ad:
da:78:b0:cb:c4:fc:41:fd:25:2b:33:5a:70:71:9a:
73:0e:d4:9e:6d:1f:62:08:88:ff:1f:51:c7:55:b1:
6a:7c:a0:86:88:ef:8e:4d:e6:20:37:3d:38:26:c1:
fd:d3:7b:e0:1c:87:1e:b3:47:38:21:a8:06:1b:e3:
d0:2f:e3:a6:43:66:b0:87:27:74:1b:43:e7:fc:47:
d9:1c:e6:7d:a0:fe:7d:fe:d9:e7:12:e9:f8:6b:d5:
cd:db:ad:ff:0f:3e:4f:6b:0d:05:89:69:d1:b9:ad:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:32:A8:5F:79:98:E7:97:E7:CF:8C:A2:B9:E2:73:20:74:B7:60:E2
X509v3 Authority Key Identifier:
keyid:B0:BC:E5:F8:0D:B5:B7:90:6E:48:7A:EF:49:04:84:E1:3C:2A:53:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/041358da0b12ee28b9288c87d937e0f22e1b65f4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d7329c0-3aaa-4a3f-ada1-9b802129856f/4e0d8b238b0dd8c668691737b19b45963dd72d0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2d7329c0-3aaa-4a3f-ada1-9b802129856f/041358da0b12ee28b9288c87d937e0f22e1b65f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.191.124.0/22
Signature Algorithm: sha256WithRSAEncryption
21:c7:1f:4c:74:55:33:71:48:2d:76:e4:3e:ea:a2:bd:90:2f:
78:38:a2:96:e4:60:23:ef:7a:f8:dd:f5:d9:85:1a:34:b3:cd:
74:62:ae:a3:d7:8d:66:22:8e:ce:c3:d7:b9:b4:e0:67:0c:3e:
31:dc:4a:9b:52:92:5c:b0:01:9f:e6:ae:e5:fe:fd:6b:33:22:
aa:4a:1d:4b:83:a6:bc:56:5e:76:a7:e7:75:3b:6d:28:d7:e6:
98:62:a6:98:28:ae:52:e3:dd:f4:0f:c7:43:2d:47:03:2c:c5:
19:16:17:bf:e9:5e:71:d5:c8:f8:6a:b4:4d:77:52:c1:3a:8a:
59:50:e2:88:fe:e1:27:55:53:35:5c:36:13:0a:c9:69:04:89:
6a:98:5c:a4:b7:03:cf:b2:11:71:9b:2f:33:f1:cb:4f:7b:90:
4d:87:96:3f:fe:13:2d:9d:47:d3:56:1b:63:7e:2d:02:cc:df:
d4:e4:d9:e6:f2:50:18:c3:dc:ff:05:c9:21:eb:01:db:d9:13:
d8:1c:8a:30:ec:e7:8e:58:d6:6e:4c:06:46:78:51:d7:5a:bf:
5a:09:86:b4:f7:5d:2b:0b:e6:ab:20:a4:6f:f0:81:f1:30:cb:
6a:ef:8f:77:69:31:06:9d:93:88:bf:41:ac:4a:04:c9:0f:a0:
2e:10:cd:27
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFHtLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA0
MTM1OGRhMGIxMmVlMjhiOTI4OGM4N2Q5MzdlMGYyMmUxYjY1ZjQwHhcNMjQwMzIx
MTQ1OTMxWhcNMjYwMzIxMTQ1OTMxWjAzMTEwLwYDVQQDEyg0ZTBkOGIyMzhiMGRk
OGM2Njg2OTE3MzdiMTliNDU5NjNkZDcyZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3UVtgYYKya+FRXGwEMDENVBuN+uA20hlzvu41CGSPhlBpjZE
rWo/De7tMNG1S3gw78eXi53QuYGnaVn2E+d/Lz3vVxfvstnYIYuehlfl/FqKNVad
RDzLyZcE0H2oMD7h5vIJj1OfB7H2btdWHAqrlfY/Z5+7lIIjdeB22zj1XODLIT/X
wExtF1zZuhg5i+ZpGjR4463aeLDLxPxB/SUrM1pwcZpzDtSebR9iCIj/H1HHVbFq
fKCGiO+OTeYgNz04JsH903vgHIces0c4IagGG+PQL+OmQ2awhyd0G0Pn/EfZHOZ9
oP59/tnnEun4a9XN263/Dz5Paw0FiWnRua2NxwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAIyqF95mOeX58+MornicyB0t2DiMB8GA1UdIwQYMBaAFLC85fgNtbeQbkh6
70kEhOE8KlPYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDQxMzU4
ZGEwYjEyZWUyOGI5Mjg4Yzg3ZDkzN2UwZjIyZTFiNjVmNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmQ3MzI5YzAtM2FhYS00YTNmLWFkYTEtOWI4MDIx
Mjk4NTZmLzRlMGQ4YjIzOGIwZGQ4YzY2ODY5MTczN2IxOWI0NTk2M2RkNzJkMGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZDczMjljMC0zYWFhLTRhM2YtYWRhMS05Yjgw
MjEyOTg1NmYvMDQxMzU4ZGEwYjEyZWUyOGI5Mjg4Yzg3ZDkzN2UwZjIyZTFiNjVm
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArW/fDANBgkqhkiG9w0BAQsFAAOCAQEAIccfTHRVM3FILXbk
PuqivZAveDiiluRgI+96+N312YUaNLPNdGKuo9eNZiKOzsPXubTgZww+MdxKm1KS
XLABn+au5f79azMiqkodS4OmvFZedqfndTttKNfmmGKmmCiuUuPd9A/HQy1HAyzF
GRYXv+lecdXI+Gq0TXdSwTqKWVDiiP7hJ1VTNVw2EwrJaQSJaphcpLcDz7IRcZsv
M/HLT3uQTYeWP/4TLZ1H01YbY34tAszf1OTZ5vJQGMPc/wXJIesB29kT2ByKMOzn
jljWbkwGRnhR11q/WgmGtPddKwvmqyCkb/CB8TDLau+Pd2kxBp2TiL9BrEoEyQ+g
LhDNJw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org