Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/375f7fcf-6aa6-446c-b911-61e9100d6a11/b6e8a621483eed39ac346b47ef5823229f94799d.roa
File: b6e8a621483eed39ac346b47ef5823229f94799d.roa (raw, json)
Hash identifier: 6DMwbAMn3Zew+/R69Zf81YbKMfG86RCEgYiVjhbxBHA=
Subject key identifier: 7E:73:43:53:25:BE:A2:0C:C8:66:2A:AF:AB:D9:2A:42:0D:6E:67:E7
Certificate issuer: /CN=130d23842d6846eb7fb5f20f75cb8b03644fbd30
Certificate serial: 275970
Authority key identifier: 6D:00:5A:8C:7B:EA:09:9B:F0:BC:62:79:6C:17:C5:67:62:50:FD:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/130d23842d6846eb7fb5f20f75cb8b03644fbd30.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/375f7fcf-6aa6-446c-b911-61e9100d6a11/b6e8a621483eed39ac346b47ef5823229f94799d.roa
Signing time: Wed 13 Mar 2024 18:33:39 +0000
ROA not before: Wed 13 Mar 2024 18:33:39 +0000
ROA not after: Tue 13 Mar 2029 18:33:39 +0000
asID: 28021
IP address blocks: 200.90.152.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2578800 (0x275970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130d23842d6846eb7fb5f20f75cb8b03644fbd30
Validity
Not Before: Mar 13 18:33:39 2024 GMT
Not After : Mar 13 18:33:39 2029 GMT
Subject: CN=b6e8a621483eed39ac346b47ef5823229f94799d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:10:bb:54:7e:9d:aa:37:eb:ae:94:87:9b:8e:
3e:87:b4:9e:89:9c:45:84:fa:69:cc:94:8e:fa:f5:
15:39:85:fa:1c:f5:7e:43:13:3d:82:b7:10:6d:7d:
56:3d:14:3b:38:b9:26:58:23:96:11:4f:f8:7b:57:
35:e4:d8:94:7a:73:a0:14:1e:0c:ef:a0:e3:c4:4a:
f8:0a:57:23:a1:60:93:7d:69:e3:66:35:cb:97:97:
05:2b:1a:a8:31:79:8e:ba:e9:61:50:b0:f6:74:65:
65:84:d5:e4:a1:15:a6:ef:6c:6d:8f:c2:68:93:27:
9c:ac:ed:57:09:d3:e6:10:8b:0f:0a:18:42:be:e8:
ce:7a:a4:2b:c4:33:3f:bd:fd:68:7a:a5:76:11:11:
c1:4f:78:c6:13:b0:d3:2d:61:45:e3:19:0d:bc:32:
82:0f:65:e3:23:3d:73:ef:f7:3e:b1:26:ae:d5:c4:
70:16:e8:84:4e:96:ec:96:e5:4e:eb:0f:27:a8:2c:
a3:da:f2:c8:1b:5b:b9:d3:53:df:30:db:3a:ca:60:
01:bd:fa:7a:0f:6b:c5:ed:8e:48:0b:9f:17:fc:ea:
76:05:8a:24:63:bf:e4:fe:af:93:4c:c2:cf:93:5c:
ea:3a:ba:83:5b:6c:b5:fb:0d:e2:ce:87:b6:05:e9:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:73:43:53:25:BE:A2:0C:C8:66:2A:AF:AB:D9:2A:42:0D:6E:67:E7
X509v3 Authority Key Identifier:
keyid:6D:00:5A:8C:7B:EA:09:9B:F0:BC:62:79:6C:17:C5:67:62:50:FD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/130d23842d6846eb7fb5f20f75cb8b03644fbd30.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/375f7fcf-6aa6-446c-b911-61e9100d6a11/b6e8a621483eed39ac346b47ef5823229f94799d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/375f7fcf-6aa6-446c-b911-61e9100d6a11/130d23842d6846eb7fb5f20f75cb8b03644fbd30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.90.152.0/21
Signature Algorithm: sha256WithRSAEncryption
37:b3:11:bb:74:f0:b2:7a:8c:6a:78:f5:90:a5:ec:fa:e9:0e:
f7:9d:12:27:13:f5:77:72:7a:a1:06:f9:fd:8c:2f:c4:d8:e4:
be:78:42:ce:56:a3:4e:6f:e8:6b:af:b5:b4:94:93:26:8f:81:
a9:fe:61:99:6a:dd:c4:f7:8f:da:e0:99:c3:54:38:16:45:db:
c8:75:28:ef:3c:70:48:84:ac:9e:19:3c:0d:a0:48:12:14:3c:
e4:60:60:98:67:b1:96:44:c0:97:dd:fe:cc:1a:ab:b7:94:a9:
38:da:84:d2:48:08:de:d1:f3:10:c2:cc:02:f3:17:af:7f:0b:
bb:37:67:50:eb:0c:e2:a3:93:c0:f7:83:93:c2:2a:e6:d6:55:
bb:fb:20:b5:e4:45:53:21:9c:e5:b6:26:3c:d1:27:6b:bb:d6:
1a:f7:18:62:ee:91:4f:fe:fa:b9:af:11:9c:d7:bc:a1:d6:f5:
2d:c6:a2:90:5b:01:7e:00:ed:29:3a:eb:19:2e:09:77:d0:a8:
78:47:39:2d:fe:2b:ec:1c:f2:12:ea:25:9c:18:4c:25:a5:5c:
46:a6:b1:e9:05:5c:6c:63:a0:8d:53:cb:7c:db:27:ff:44:39:
fa:95:7e:6d:66:69:3d:9e:ac:7a:22:85:58:86:ab:55:e8:48:
15:03:03:06
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ1lwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEz
MGQyMzg0MmQ2ODQ2ZWI3ZmI1ZjIwZjc1Y2I4YjAzNjQ0ZmJkMzAwHhcNMjQwMzEz
MTgzMzM5WhcNMjkwMzEzMTgzMzM5WjAzMTEwLwYDVQQDEyhiNmU4YTYyMTQ4M2Vl
ZDM5YWMzNDZiNDdlZjU4MjMyMjlmOTQ3OTlkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkBC7VH6dqjfrrpSHm44+h7SeiZxFhPppzJSO+vUVOYX6HPV+
QxM9grcQbX1WPRQ7OLkmWCOWEU/4e1c15NiUenOgFB4M76DjxEr4ClcjoWCTfWnj
ZjXLl5cFKxqoMXmOuulhULD2dGVlhNXkoRWm72xtj8JokyecrO1XCdPmEIsPChhC
vujOeqQrxDM/vf1oeqV2ERHBT3jGE7DTLWFF4xkNvDKCD2XjIz1z7/c+sSau1cRw
FuiETpbsluVO6w8nqCyj2vLIG1u501PfMNs6ymABvfp6D2vF7Y5IC58X/Op2BYok
Y7/k/q+TTMLPk1zqOrqDW2y1+w3izoe2BekSiQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFH5zQ1MlvqIMyGYqr6vZKkINbmfnMB8GA1UdIwQYMBaAFG0AWox76gmb8Lxi
eWwXxWdiUP2dMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTMwZDIz
ODQyZDY4NDZlYjdmYjVmMjBmNzVjYjhiMDM2NDRmYmQzMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzc1ZjdmY2YtNmFhNi00NDZjLWI5MTEtNjFlOTEw
MGQ2YTExL2I2ZThhNjIxNDgzZWVkMzlhYzM0NmI0N2VmNTgyMzIyOWY5NDc5OWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNzVmN2ZjZi02YWE2LTQ0NmMtYjkxMS02MWU5
MTAwZDZhMTEvMTMwZDIzODQyZDY4NDZlYjdmYjVmMjBmNzVjYjhiMDM2NDRmYmQz
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA8hamDANBgkqhkiG9w0BAQsFAAOCAQEAN7MRu3TwsnqManj1
kKXs+ukO950SJxP1d3J6oQb5/YwvxNjkvnhCzlajTm/oa6+1tJSTJo+Bqf5hmWrd
xPeP2uCZw1Q4FkXbyHUo7zxwSISsnhk8DaBIEhQ85GBgmGexlkTAl93+zBqrt5Sp
ONqE0kgI3tHzEMLMAvMXr38LuzdnUOsM4qOTwPeDk8Iq5tZVu/sgteRFUyGc5bYm
PNEna7vWGvcYYu6RT/76ua8RnNe8odb1LcaikFsBfgDtKTrrGS4Jd9CoeEc5Lf4r
7BzyEuolnBhMJaVcRqax6QVcbGOgjVPLfNsn/0Q5+pV+bWZpPZ6seiKFWIarVehI
FQMDBg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org