Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/0ecc071e7f2ea49e286eef1ad94a3977679ab622.roa
File: 0ecc071e7f2ea49e286eef1ad94a3977679ab622.roa (raw, json)
Hash identifier: vDMZ6H97DYMzeMC/IRHl5nuTfaDsOAUm7M+78/h6yVs=
Subject key identifier: 16:54:95:EC:67:7E:15:38:E1:DC:38:68:E4:B1:13:9A:BA:1C:CE:4B
Certificate issuer: /CN=e676b8ddc3fa11ce4b5bb1513584be10d9033c41
Certificate serial: 244E61
Authority key identifier: CB:58:61:19:F8:B0:A1:1C:E7:AB:9E:E1:7A:57:B5:2F:CE:5B:3E:8D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e676b8ddc3fa11ce4b5bb1513584be10d9033c41.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/0ecc071e7f2ea49e286eef1ad94a3977679ab622.roa
Signing time: Tue 17 Oct 2023 07:30:00 +0000
ROA not before: Mon 16 Oct 2023 07:30:00 +0000
ROA not after: Wed 15 Oct 2025 07:30:00 +0000
asID: 263688
IP address blocks: 201.131.38.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2379361 (0x244e61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e676b8ddc3fa11ce4b5bb1513584be10d9033c41
Validity
Not Before: Oct 16 07:30:00 2023 GMT
Not After : Oct 15 07:30:00 2025 GMT
Subject: CN=0ecc071e7f2ea49e286eef1ad94a3977679ab622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:b1:90:36:1f:61:40:c1:c4:91:f7:82:f3:
29:e8:9f:eb:a3:d2:da:50:93:04:e6:76:db:25:00:
70:0a:17:13:cb:c0:82:a2:a3:62:c0:da:aa:d1:b7:
6f:59:61:df:9e:ba:54:ae:5d:3b:93:42:75:2d:12:
6f:8d:1d:a8:12:0a:90:4d:22:6d:42:78:a2:17:81:
c4:df:97:c6:84:64:95:c7:96:3a:27:d7:0f:af:00:
42:9f:28:57:d6:28:03:c4:81:51:fc:35:a0:ad:a8:
af:1f:d9:48:f4:c6:88:f7:72:05:24:00:b2:3f:41:
82:d1:a9:59:ed:a4:c1:a9:d8:9d:53:17:9a:37:e6:
dc:a3:7d:94:ff:6e:f7:d8:67:bb:54:03:64:e7:9b:
9c:b1:c7:44:1a:77:ba:9c:cd:b6:d8:e6:83:c3:1f:
de:c1:fb:8d:bd:b9:70:7d:42:09:77:7b:15:11:c0:
5e:fb:8c:ad:c4:09:a5:6e:d9:bd:a3:25:69:08:88:
6f:76:91:23:1e:e3:88:88:d0:d6:7a:6b:58:c5:e4:
32:18:c7:16:79:0d:30:a2:a2:17:75:a1:1f:5b:b6:
35:e7:50:68:57:99:38:81:5a:e3:8f:30:9c:76:9d:
91:cf:f5:8f:92:31:ee:fe:d1:ea:ab:f8:aa:ca:60:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:54:95:EC:67:7E:15:38:E1:DC:38:68:E4:B1:13:9A:BA:1C:CE:4B
X509v3 Authority Key Identifier:
keyid:CB:58:61:19:F8:B0:A1:1C:E7:AB:9E:E1:7A:57:B5:2F:CE:5B:3E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e676b8ddc3fa11ce4b5bb1513584be10d9033c41.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/0ecc071e7f2ea49e286eef1ad94a3977679ab622.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/e676b8ddc3fa11ce4b5bb1513584be10d9033c41.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.38.0/23
Signature Algorithm: sha256WithRSAEncryption
15:e4:a4:ff:9d:f5:7f:65:7d:01:72:0c:eb:dd:84:2a:c4:be:
8e:52:0e:45:56:48:19:4f:4e:0f:99:f5:a5:e4:b0:65:95:93:
a1:a8:6a:b5:97:c6:ce:28:78:f3:fc:d7:48:1b:c3:62:f7:c5:
e5:39:64:e7:9a:29:f6:21:c5:15:80:b0:88:bc:c0:82:43:53:
61:39:b3:0f:e6:43:f4:15:a3:29:87:bf:d4:c0:6a:a5:e5:5e:
e8:92:46:9f:01:e1:3c:3c:68:50:d0:6c:8b:da:a9:73:b7:bb:
f6:0b:7f:7b:f9:46:0f:f4:bd:48:29:8d:b7:e4:e3:95:51:ce:
f1:ff:01:da:3a:f6:37:1b:0d:c8:55:5f:ac:54:b5:3c:22:d4:
3b:36:49:3d:3a:8c:9d:a1:99:7b:74:13:9d:dd:e4:41:5d:83:
7a:cb:74:41:bc:14:6c:1f:b7:90:6b:ad:b0:08:2a:b1:a7:6d:
06:78:67:12:d1:bc:b0:a1:73:ac:c7:09:3b:cd:af:f0:5c:31:
82:ca:17:f0:65:40:93:c5:c2:ff:4d:2e:ed:dd:a2:86:0e:cb:
8e:e2:c4:3c:f5:57:da:04:cf:1c:64:f7:8d:98:ef:76:9f:6a:
7e:52:2f:e3:2f:22:0a:67:01:6d:2f:bd:27:0a:38:50:46:4a:
f2:fc:f9:78
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJE5hMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU2
NzZiOGRkYzNmYTExY2U0YjViYjE1MTM1ODRiZTEwZDkwMzNjNDEwHhcNMjMxMDE2
MDczMDAwWhcNMjUxMDE1MDczMDAwWjAzMTEwLwYDVQQDEygwZWNjMDcxZTdmMmVh
NDllMjg2ZWVmMWFkOTRhMzk3NzY3OWFiNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlmKxkDYfYUDBxJH3gvMp6J/ro9LaUJME5nbbJQBwChcTy8CC
oqNiwNqq0bdvWWHfnrpUrl07k0J1LRJvjR2oEgqQTSJtQniiF4HE35fGhGSVx5Y6
J9cPrwBCnyhX1igDxIFR/DWgraivH9lI9MaI93IFJACyP0GC0alZ7aTBqdidUxea
N+bco32U/2732Ge7VANk55ucscdEGne6nM222OaDwx/ewfuNvblwfUIJd3sVEcBe
+4ytxAmlbtm9oyVpCIhvdpEjHuOIiNDWemtYxeQyGMcWeQ0woqIXdaEfW7Y151Bo
V5k4gVrjjzCcdp2Rz/WPkjHu/tHqq/iqymBrUQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBZUlexnfhU44dw4aOSxE5q6HM5LMB8GA1UdIwQYMBaAFMtYYRn4sKEc56ue
4XpXtS/OWz6NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTY3NmI4
ZGRjM2ZhMTFjZTRiNWJiMTUxMzU4NGJlMTBkOTAzM2M0MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzI1OWVjYzAtZGEzZi00Yjk1LTgxMGEtZDM3NzRl
N2RjYTY0LzBlY2MwNzFlN2YyZWE0OWUyODZlZWYxYWQ5NGEzOTc3Njc5YWI2MjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zMjU5ZWNjMC1kYTNmLTRiOTUtODEwYS1kMzc3
NGU3ZGNhNjQvZTY3NmI4ZGRjM2ZhMTFjZTRiNWJiMTUxMzU4NGJlMTBkOTAzM2M0
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcmDJjANBgkqhkiG9w0BAQsFAAOCAQEAFeSk/531f2V9AXIM
692EKsS+jlIORVZIGU9OD5n1peSwZZWToahqtZfGzih48/zXSBvDYvfF5Tlk55op
9iHFFYCwiLzAgkNTYTmzD+ZD9BWjKYe/1MBqpeVe6JJGnwHhPDxoUNBsi9qpc7e7
9gt/e/lGD/S9SCmNt+TjlVHO8f8B2jr2NxsNyFVfrFS1PCLUOzZJPTqMnaGZe3QT
nd3kQV2Dest0QbwUbB+3kGutsAgqsadtBnhnEtG8sKFzrMcJO82v8FwxgsoX8GVA
k8XC/00u7d2ihg7LjuLEPPVX2gTPHGT3jZjvdp9qflIv4y8iCmcBbS+9Jwo4UEZK
8vz5eA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org