Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/317d4116-6049-4842-bbbd-bfb462604974/1e74123ce9bd2d5fe3665cf07929106636200b14.roa
File: 1e74123ce9bd2d5fe3665cf07929106636200b14.roa (raw, json)
Hash identifier: u3rxNoxEY4/F5yZKvWs5v/aamXpgevaJyRwAlPa0XNs=
Subject key identifier: 18:61:98:1D:5E:00:42:61:F6:5A:B0:1C:50:94:47:BF:46:37:7E:08
Certificate issuer: /CN=b727d53cb2da2681291864865e9056d1ea1c6785
Certificate serial: 05A53D
Authority key identifier: 0B:8A:DC:45:C1:91:4B:F3:83:91:A5:92:88:11:FB:A4:70:53:AB:85
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b727d53cb2da2681291864865e9056d1ea1c6785.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/317d4116-6049-4842-bbbd-bfb462604974/1e74123ce9bd2d5fe3665cf07929106636200b14.roa
Signing time: Tue 21 Nov 2023 12:23:15 +0000
ROA not before: Tue 21 Nov 2023 12:23:15 +0000
ROA not after: Fri 21 Nov 2025 12:23:15 +0000
asID: 13316
IP address blocks: 200.11.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369981 (0x5a53d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b727d53cb2da2681291864865e9056d1ea1c6785
Validity
Not Before: Nov 21 12:23:15 2023 GMT
Not After : Nov 21 12:23:15 2025 GMT
Subject: CN=1e74123ce9bd2d5fe3665cf07929106636200b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:58:b0:40:4c:98:f5:3c:5e:b8:c8:1b:c9:
83:bb:f1:88:14:5a:63:4c:cd:1e:d2:e1:6b:35:cb:
c7:f0:20:54:77:8c:f0:a9:66:38:5a:0a:3e:b7:d8:
38:1c:98:fd:07:ae:9d:fa:ba:01:fa:66:25:15:86:
c4:cd:a1:e0:5c:15:51:c1:36:b6:51:86:e6:97:fa:
28:f4:ee:0d:2e:dc:16:4a:be:36:61:34:63:70:7f:
c5:0d:f8:ff:f9:4d:a6:71:3b:36:e6:25:00:0d:01:
46:e7:07:d6:94:dd:d8:00:67:d9:de:b5:af:a2:4c:
b5:e8:c1:b8:24:0c:6e:8e:16:88:bd:34:15:d1:4c:
7c:2e:20:07:3b:fc:92:93:d9:e2:df:fa:c7:77:85:
c1:b7:50:98:e4:28:f2:3e:1b:6a:7a:b1:23:40:6e:
1d:07:5e:01:f7:c4:d6:de:e4:57:8d:0c:90:e8:4b:
43:12:63:ab:32:a9:df:e4:31:b9:05:fb:59:6b:14:
8c:05:38:b0:dd:7e:d5:fa:66:ef:89:81:76:c0:ca:
b6:f8:f2:42:56:ef:a8:5a:93:7f:be:44:77:4e:b5:
aa:4e:9d:a4:9c:09:e9:01:3c:07:1e:97:48:ab:09:
2f:9d:3b:45:2d:91:e2:82:d7:13:24:16:69:f5:c2:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:61:98:1D:5E:00:42:61:F6:5A:B0:1C:50:94:47:BF:46:37:7E:08
X509v3 Authority Key Identifier:
keyid:0B:8A:DC:45:C1:91:4B:F3:83:91:A5:92:88:11:FB:A4:70:53:AB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b727d53cb2da2681291864865e9056d1ea1c6785.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/317d4116-6049-4842-bbbd-bfb462604974/1e74123ce9bd2d5fe3665cf07929106636200b14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/317d4116-6049-4842-bbbd-bfb462604974/b727d53cb2da2681291864865e9056d1ea1c6785.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.11.112.0/21
Signature Algorithm: sha256WithRSAEncryption
50:a9:99:c1:aa:6d:30:3a:08:31:bb:c2:ab:72:78:ee:a4:40:
0a:97:6c:02:3e:d6:b3:57:bd:d0:df:9c:06:a2:f3:95:c7:ab:
58:6a:f0:d5:15:76:58:56:da:74:36:11:4c:43:83:c9:97:ec:
72:3c:7d:09:d7:10:73:ac:2c:02:46:b3:44:26:fb:50:ac:1a:
5b:80:67:91:d5:1d:1a:07:ee:03:61:4e:ec:26:d3:7c:ea:4a:
a6:be:fb:40:20:90:1a:bf:91:fe:ca:65:6a:f8:9b:82:ec:99:
4b:0c:78:a9:97:9a:c8:90:36:e0:b8:14:e2:32:57:eb:db:86:
1e:74:ab:a1:d6:62:05:c4:fd:03:96:71:e1:89:93:2e:ad:33:
60:f2:7d:b0:9e:c3:e2:2a:50:a5:09:81:89:93:f9:1a:f0:d0:
ca:50:a5:fa:31:cf:ef:fa:ea:33:9c:12:95:23:06:1a:f7:25:
57:e4:a5:9e:b1:64:0d:c0:88:62:36:0d:bb:ed:e8:4a:64:0b:
00:3f:00:4f:f0:3d:55:55:07:46:fe:96:fe:cb:33:e8:0c:a9:
0b:14:55:29:e2:be:1e:ba:08:88:9f:08:c2:6a:8d:55:3f:b6:
6a:05:36:da:1c:c0:b0:b1:95:5a:ea:b5:aa:dc:da:aa:e0:00:
9f:bb:fa:2f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBaU9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI3
MjdkNTNjYjJkYTI2ODEyOTE4NjQ4NjVlOTA1NmQxZWExYzY3ODUwHhcNMjMxMTIx
MTIyMzE1WhcNMjUxMTIxMTIyMzE1WjAzMTEwLwYDVQQDEygxZTc0MTIzY2U5YmQy
ZDVmZTM2NjVjZjA3OTI5MTA2NjM2MjAwYjE0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqANYsEBMmPU8XrjIG8mDu/GIFFpjTM0e0uFrNcvH8CBUd4zw
qWY4Wgo+t9g4HJj9B66d+roB+mYlFYbEzaHgXBVRwTa2UYbml/oo9O4NLtwWSr42
YTRjcH/FDfj/+U2mcTs25iUADQFG5wfWlN3YAGfZ3rWvoky16MG4JAxujhaIvTQV
0Ux8LiAHO/ySk9ni3/rHd4XBt1CY5CjyPhtqerEjQG4dB14B98TW3uRXjQyQ6EtD
EmOrMqnf5DG5BftZaxSMBTiw3X7V+mbviYF2wMq2+PJCVu+oWpN/vkR3TrWqTp2k
nAnpATwHHpdIqwkvnTtFLZHigtcTJBZp9cLjaQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBhhmB1eAEJh9lqwHFCUR79GN34IMB8GA1UdIwQYMBaAFAuK3EXBkUvzg5Gl
kogR+6RwU6uFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjcyN2Q1
M2NiMmRhMjY4MTI5MTg2NDg2NWU5MDU2ZDFlYTFjNjc4NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzE3ZDQxMTYtNjA0OS00ODQyLWJiYmQtYmZiNDYy
NjA0OTc0LzFlNzQxMjNjZTliZDJkNWZlMzY2NWNmMDc5MjkxMDY2MzYyMDBiMTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zMTdkNDExNi02MDQ5LTQ4NDItYmJiZC1iZmI0
NjI2MDQ5NzQvYjcyN2Q1M2NiMmRhMjY4MTI5MTg2NDg2NWU5MDU2ZDFlYTFjNjc4
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA8gLcDANBgkqhkiG9w0BAQsFAAOCAQEAUKmZwaptMDoIMbvC
q3J47qRACpdsAj7Ws1e90N+cBqLzlcerWGrw1RV2WFbadDYRTEODyZfscjx9CdcQ
c6wsAkazRCb7UKwaW4BnkdUdGgfuA2FO7CbTfOpKpr77QCCQGr+R/splavibguyZ
Swx4qZeayJA24LgU4jJX69uGHnSrodZiBcT9A5Zx4YmTLq0zYPJ9sJ7D4ipQpQmB
iZP5GvDQylCl+jHP7/rqM5wSlSMGGvclV+SlnrFkDcCIYjYNu+3oSmQLAD8AT/A9
VVUHRv6W/ssz6AypCxRVKeK+HroIiJ8IwmqNVT+2agU22hzAsLGVWuq1qtzaquAA
n7v6Lw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org