Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/364b57d3-10c6-4c86-928f-7eaf3ea08890/1dc5455cefdc855697ac944556aed28d451356a1.roa
File: 1dc5455cefdc855697ac944556aed28d451356a1.roa (raw, json)
Hash identifier: 7pDcXYDhGPdCxPG0m2nXXUooxj9JCC7LSAmd11KMhvw=
Subject key identifier: D5:21:85:48:A2:33:22:A8:AA:DB:3A:2D:42:3E:4A:54:64:E8:CA:42
Certificate issuer: /CN=42d833fb782302730970e820540573000b142c93
Certificate serial: 0CDEED
Authority key identifier: B8:65:B3:C8:E0:2E:2A:62:99:3D:4C:FB:27:B1:FD:2F:6B:D9:BA:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42d833fb782302730970e820540573000b142c93.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/364b57d3-10c6-4c86-928f-7eaf3ea08890/1dc5455cefdc855697ac944556aed28d451356a1.roa
Signing time: Wed 24 Mar 2021 14:33:54 +0000
ROA not before: Wed 24 Mar 2021 14:33:54 +0000
ROA not after: Tue 24 Mar 2026 14:33:54 +0000
asID: 264641
IP address blocks: 143.255.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843501 (0xcdeed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d833fb782302730970e820540573000b142c93
Validity
Not Before: Mar 24 14:33:54 2021 GMT
Not After : Mar 24 14:33:54 2026 GMT
Subject: CN=1dc5455cefdc855697ac944556aed28d451356a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2a:06:89:86:ce:61:2c:56:f9:97:72:87:63:
25:6b:a8:fb:4c:ff:c2:3c:fa:f8:d8:fe:2a:6e:31:
15:14:2d:3e:39:8e:dc:99:0c:8b:c1:9b:58:5f:b1:
c1:ab:7c:82:8a:f3:e5:5a:d9:07:e4:04:a7:85:40:
43:a6:4d:0b:b9:7f:75:e1:ec:23:88:e1:5a:2f:98:
62:2f:82:9f:b5:4b:88:d4:b8:67:1a:cc:b3:0a:d7:
20:e9:d5:e5:05:4f:f2:f1:44:73:50:ca:79:9e:1b:
4d:1e:99:29:d0:23:99:a7:93:57:10:ba:e1:a1:41:
00:1f:a0:86:88:ff:61:5c:87:ed:08:96:ed:ba:53:
49:3d:5e:6a:89:1d:3d:b7:bb:50:64:1c:27:c3:3d:
1e:53:58:24:30:78:50:20:28:10:0c:b3:a2:2b:14:
ef:21:5c:a8:21:50:48:32:76:97:9a:04:3b:a7:1c:
a1:d4:12:a2:f5:f0:be:f3:5b:be:b6:e1:6b:26:c1:
ef:c6:23:7c:d6:47:c2:32:9f:a1:e5:aa:84:f8:81:
5b:14:3d:35:65:bb:46:bb:7a:10:94:ea:7e:65:92:
0a:6a:05:98:46:68:f0:35:fb:17:57:aa:0a:bf:e4:
cd:f9:95:85:57:d3:22:1f:6b:5a:be:f6:fd:63:f7:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:21:85:48:A2:33:22:A8:AA:DB:3A:2D:42:3E:4A:54:64:E8:CA:42
X509v3 Authority Key Identifier:
keyid:B8:65:B3:C8:E0:2E:2A:62:99:3D:4C:FB:27:B1:FD:2F:6B:D9:BA:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42d833fb782302730970e820540573000b142c93.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/364b57d3-10c6-4c86-928f-7eaf3ea08890/1dc5455cefdc855697ac944556aed28d451356a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/364b57d3-10c6-4c86-928f-7eaf3ea08890/42d833fb782302730970e820540573000b142c93.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.176.0/22
Signature Algorithm: sha256WithRSAEncryption
24:79:ac:66:d3:e2:3b:6f:da:8c:08:af:67:bc:74:6c:a8:11:
41:2c:b9:c1:52:1d:97:13:2a:c3:07:5b:f1:00:5b:49:80:41:
e3:6f:2d:dc:01:95:87:b1:c3:e5:54:41:60:6b:0d:ee:c4:fb:
d2:79:14:c7:3a:86:c6:70:6c:bc:d9:fd:b2:6a:2e:4d:9c:03:
82:b7:92:62:4c:99:89:35:5c:d4:c5:19:19:34:ae:8b:55:c7:
57:ad:99:8c:e0:e7:4b:0f:3d:f4:d0:6d:39:e1:0c:e2:3d:96:
5b:a3:08:21:98:b6:21:ac:01:4d:8f:98:e8:4c:44:37:10:bf:
50:4b:5f:1f:18:e1:f3:61:ee:41:e7:81:08:c7:e2:25:3c:f9:
90:24:4d:d8:46:e4:51:8e:06:f2:ab:77:f4:ec:4a:ae:b6:3b:
3d:fa:b2:49:88:db:fb:90:b6:f6:14:d4:8d:67:da:f0:db:cb:
b0:dc:69:c5:07:7e:cf:71:46:f2:d7:b2:72:84:8c:04:85:47:
a0:81:ff:3b:c4:d9:77:ee:aa:df:21:94:d1:35:77:2a:76:c3:
55:d4:b9:dc:e0:69:f6:5b:64:70:aa:e5:b7:93:1c:4d:ca:e4:
09:b3:ad:aa:f6:4c:12:d4:c1:9b:f7:b8:da:1b:1a:e6:12:5a:
78:91:57:30
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDN7tMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQy
ZDgzM2ZiNzgyMzAyNzMwOTcwZTgyMDU0MDU3MzAwMGIxNDJjOTMwHhcNMjEwMzI0
MTQzMzU0WhcNMjYwMzI0MTQzMzU0WjAzMTEwLwYDVQQDEygxZGM1NDU1Y2VmZGM4
NTU2OTdhYzk0NDU1NmFlZDI4ZDQ1MTM1NmExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhCoGiYbOYSxW+Zdyh2Mla6j7TP/CPPr42P4qbjEVFC0+OY7c
mQyLwZtYX7HBq3yCivPlWtkH5ASnhUBDpk0LuX914ewjiOFaL5hiL4KftUuI1Lhn
GsyzCtcg6dXlBU/y8URzUMp5nhtNHpkp0COZp5NXELrhoUEAH6CGiP9hXIftCJbt
ulNJPV5qiR09t7tQZBwnwz0eU1gkMHhQICgQDLOiKxTvIVyoIVBIMnaXmgQ7pxyh
1BKi9fC+81u+tuFrJsHvxiN81kfCMp+h5aqE+IFbFD01ZbtGu3oQlOp+ZZIKagWY
RmjwNfsXV6oKv+TN+ZWFV9MiH2tavvb9Y/fkuQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNUhhUiiMyKoqts6LUI+SlRk6MpCMB8GA1UdIwQYMBaAFLhls8jgLipimT1M
+yex/S9r2bqdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDJkODMz
ZmI3ODIzMDI3MzA5NzBlODIwNTQwNTczMDAwYjE0MmM5My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzY0YjU3ZDMtMTBjNi00Yzg2LTkyOGYtN2VhZjNl
YTA4ODkwLzFkYzU0NTVjZWZkYzg1NTY5N2FjOTQ0NTU2YWVkMjhkNDUxMzU2YTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNjRiNTdkMy0xMGM2LTRjODYtOTI4Zi03ZWFm
M2VhMDg4OTAvNDJkODMzZmI3ODIzMDI3MzA5NzBlODIwNTQwNTczMDAwYjE0MmM5
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAo//sDANBgkqhkiG9w0BAQsFAAOCAQEAJHmsZtPiO2/ajAiv
Z7x0bKgRQSy5wVIdlxMqwwdb8QBbSYBB428t3AGVh7HD5VRBYGsN7sT70nkUxzqG
xnBsvNn9smouTZwDgreSYkyZiTVc1MUZGTSui1XHV62ZjODnSw899NBtOeEM4j2W
W6MIIZi2IawBTY+Y6ExENxC/UEtfHxjh82HuQeeBCMfiJTz5kCRN2EbkUY4G8qt3
9OxKrrY7PfqySYjb+5C29hTUjWfa8NvLsNxpxQd+z3FG8teycoSMBIVHoIH/O8TZ
d+6q3yGU0TV3KnbDVdS53OBp9ltkcKrlt5McTcrkCbOtqvZMEtTBm/e42hsa5hJa
eJFXMA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org