Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/2d962991006d0eef85829d7f6375534cf26a1012.roa
File: 2d962991006d0eef85829d7f6375534cf26a1012.roa (raw, json)
Hash identifier: Xe5qs/9YEuDJMMTN/DC/KHg5F5HUndoOLGZOEfomyo4=
Subject key identifier: 4E:89:60:F3:10:77:06:0F:92:81:B9:22:32:6A:40:FA:CD:B6:FC:2B
Certificate issuer: /CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Certificate serial: 0DBF9B
Authority key identifier: 96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/2d962991006d0eef85829d7f6375534cf26a1012.roa
Signing time: Wed 24 Mar 2021 14:37:02 +0000
ROA not before: Wed 24 Mar 2021 14:37:01 +0000
ROA not after: Tue 24 Mar 2026 14:37:01 +0000
asID: 20299
IP address blocks: 131.108.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901019 (0xdbf9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Validity
Not Before: Mar 24 14:37:01 2021 GMT
Not After : Mar 24 14:37:01 2026 GMT
Subject: CN=2d962991006d0eef85829d7f6375534cf26a1012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c8:c7:98:e0:90:16:8a:53:4e:8d:aa:21:2a:
fe:c4:0e:47:db:e2:8c:50:24:b0:ab:50:13:43:04:
41:5c:b8:b3:ec:61:df:c4:0f:b7:fb:6f:b8:f2:1a:
b9:c2:c1:42:1a:ba:7f:f0:b1:ed:0b:68:e2:4a:b1:
44:c4:89:6b:3f:89:0d:a7:94:c1:d7:be:13:23:86:
aa:0e:34:da:8d:7d:e5:ca:49:85:e0:c3:8c:e7:9e:
91:f7:39:b0:9c:9e:70:4b:4b:2a:81:94:31:89:90:
1f:45:b3:f8:6e:4e:5c:b7:40:e1:0f:8c:49:18:0f:
de:6c:d3:cb:11:ae:a8:f3:5d:3c:6d:01:fd:8a:9c:
93:fc:eb:2b:54:29:77:08:cc:94:eb:66:ae:21:05:
a2:b5:37:17:79:fd:fd:a2:ef:5d:f4:a4:21:90:be:
0e:b5:64:22:69:df:1f:8c:c8:bd:c4:fc:3b:4a:5a:
87:da:98:de:88:16:21:cd:63:2b:bc:b5:b2:b7:25:
70:d2:70:fd:9c:d8:45:6d:59:8b:10:3c:60:47:d2:
bf:f2:f0:eb:e5:37:84:fe:0c:bb:78:c3:fa:44:e8:
15:84:0b:6b:3f:9b:ac:2e:db:26:f0:6d:f3:6e:9d:
94:9c:49:ba:13:7a:0b:8b:38:4a:1f:2c:b2:f7:20:
e3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:89:60:F3:10:77:06:0F:92:81:B9:22:32:6A:40:FA:CD:B6:FC:2B
X509v3 Authority Key Identifier:
keyid:96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/2d962991006d0eef85829d7f6375534cf26a1012.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ca57033023e73c5b1a524aa43f058bd1ed72d47f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.36.0/22
Signature Algorithm: sha256WithRSAEncryption
06:cf:e7:dc:28:68:44:66:6a:76:2e:d0:c1:04:b4:a7:58:f1:
f1:c3:2a:7e:89:0b:cf:36:04:95:fc:61:3c:b8:2b:1a:d5:bd:
e2:74:8b:a2:b0:25:92:f7:49:18:86:e3:37:e9:73:2d:e8:c0:
f0:24:98:31:83:c7:e3:34:6e:09:14:55:c1:12:aa:66:e2:a0:
d9:fb:da:4e:9a:1d:ae:50:f8:8f:e9:ad:8d:8a:55:7e:8c:03:
a9:9c:e7:ee:c1:50:99:89:7f:f0:58:e3:ad:b7:b2:d4:7c:9e:
95:73:dd:20:28:b8:5d:be:3a:47:a2:f3:74:26:2e:3b:c9:33:
d1:25:1d:af:10:20:65:ef:76:19:81:bd:5c:bf:d5:82:86:74:
aa:fa:1c:64:90:0a:c5:f6:82:c8:e3:30:d6:f1:cd:89:b2:9f:
41:60:6f:9c:25:b1:3e:60:dc:55:67:9c:2a:10:93:6b:f3:67:
a4:24:17:8e:70:7b:af:af:a8:17:4a:a9:6e:99:50:a4:b1:69:
39:77:28:ff:df:06:fe:ad:5d:cd:42:aa:9a:0f:01:6c:cb:53:
f5:07:28:7c:1f:e8:74:5a:dc:3a:ed:3b:9e:23:19:a2:a8:a0:
c9:57:4f:fe:d0:e0:99:d0:95:32:b7:b4:2b:f8:04:37:7a:e5:
e1:3b:48:13
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDb+bMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNh
NTcwMzMwMjNlNzNjNWIxYTUyNGFhNDNmMDU4YmQxZWQ3MmQ0N2YwHhcNMjEwMzI0
MTQzNzAxWhcNMjYwMzI0MTQzNzAxWjAzMTEwLwYDVQQDEygyZDk2Mjk5MTAwNmQw
ZWVmODU4MjlkN2Y2Mzc1NTM0Y2YyNmExMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgcjHmOCQFopTTo2qISr+xA5H2+KMUCSwq1ATQwRBXLiz7GHf
xA+3+2+48hq5wsFCGrp/8LHtC2jiSrFExIlrP4kNp5TB174TI4aqDjTajX3lykmF
4MOM556R9zmwnJ5wS0sqgZQxiZAfRbP4bk5ct0DhD4xJGA/ebNPLEa6o8108bQH9
ipyT/OsrVCl3CMyU62auIQWitTcXef39ou9d9KQhkL4OtWQiad8fjMi9xPw7SlqH
2pjeiBYhzWMrvLWytyVw0nD9nNhFbVmLEDxgR9K/8vDr5TeE/gy7eMP6ROgVhAtr
P5usLtsm8G3zbp2UnEm6E3oLizhKHyyy9yDjSwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFE6JYPMQdwYPkoG5IjJqQPrNtvwrMB8GA1UdIwQYMBaAFJZbxfXCJa1jqwN4
3yKvlBlD27nmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2E1NzAz
MzAyM2U3M2M1YjFhNTI0YWE0M2YwNThiZDFlZDcyZDQ3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzUwYjA2YzctNDQ4Zi00MTI1LTgwY2ItZmMwZDg2
OTU0MmQwLzJkOTYyOTkxMDA2ZDBlZWY4NTgyOWQ3ZjYzNzU1MzRjZjI2YTEwMTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNTBiMDZjNy00NDhmLTQxMjUtODBjYi1mYzBk
ODY5NTQyZDAvY2E1NzAzMzAyM2U3M2M1YjFhNTI0YWE0M2YwNThiZDFlZDcyZDQ3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAoNsJDANBgkqhkiG9w0BAQsFAAOCAQEABs/n3ChoRGZqdi7Q
wQS0p1jx8cMqfokLzzYElfxhPLgrGtW94nSLorAlkvdJGIbjN+lzLejA8CSYMYPH
4zRuCRRVwRKqZuKg2fvaTpodrlD4j+mtjYpVfowDqZzn7sFQmYl/8Fjjrbey1Hye
lXPdICi4Xb46R6LzdCYuO8kz0SUdrxAgZe92GYG9XL/VgoZ0qvocZJAKxfaCyOMw
1vHNibKfQWBvnCWxPmDcVWecKhCTa/NnpCQXjnB7r6+oF0qpbplQpLFpOXco/98G
/q1dzUKqmg8BbMtT9QcofB/odFrcOu07niMZoqigyVdP/tDgmdCVMre0K/gEN3rl
4TtIEw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org