Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/09f1296ace7b60eba01597dfb33c3c9fd9ff0e0d.roa
File: 09f1296ace7b60eba01597dfb33c3c9fd9ff0e0d.roa (raw, json)
Hash identifier: bl8dibMfQz3gHuKt+rA/UlBLg3pQgBmTf3aRLRMierY=
Subject key identifier: DA:8C:8B:14:69:F1:5B:BA:06:EE:9A:AF:FD:1D:E9:34:38:AA:B8:B8
Certificate issuer: /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Certificate serial: 27D579
Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/09f1296ace7b60eba01597dfb33c3c9fd9ff0e0d.roa
Signing time: Wed 08 Nov 2023 15:00:48 +0000
ROA not before: Wed 08 Nov 2023 15:00:37 +0000
ROA not after: Wed 08 Nov 2028 15:00:37 +0000
asID: 52328
IP address blocks: 200.123.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2610553 (0x27d579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Validity
Not Before: Nov 8 15:00:37 2023 GMT
Not After : Nov 8 15:00:37 2028 GMT
Subject: CN=09f1296ace7b60eba01597dfb33c3c9fd9ff0e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:2b:2b:8f:dc:5c:4b:b8:fb:41:9f:5d:a5:
31:56:15:58:5f:3f:40:39:56:6f:00:24:1f:b1:ad:
58:68:47:dd:7b:f0:2a:b7:23:63:73:e0:6c:bd:02:
c5:f4:20:d4:04:6c:55:ca:74:db:1a:ce:b9:fd:09:
5a:3e:29:c5:4e:46:a2:2d:d9:d8:69:af:8b:06:d5:
46:29:41:59:94:a2:31:72:5c:75:22:6a:65:a6:93:
04:9c:26:59:19:af:59:2c:7e:f9:1b:52:00:d2:30:
48:88:9e:24:35:6d:d9:b2:c6:2c:c2:8d:99:c2:89:
d5:22:94:55:62:14:0c:9a:45:2a:cc:b8:2e:8e:f3:
f9:64:be:26:00:19:a5:46:8a:90:8e:e6:a0:82:fc:
a9:05:d3:1f:cb:80:b1:6a:f4:ef:5f:6e:e9:c4:75:
8b:20:6c:df:94:b6:c2:c0:5e:3a:7d:50:a4:9c:46:
d8:8e:24:d7:ea:73:5f:50:a0:72:0a:fb:78:24:46:
b5:4c:77:43:eb:d6:ca:7b:4b:24:40:2c:35:2f:14:
e2:37:af:48:91:69:e2:1e:3b:3d:f9:90:53:c0:50:
1e:42:83:37:bc:45:db:fd:b7:36:42:c6:78:83:b3:
f5:f2:50:75:74:1c:b4:be:5a:40:c2:74:15:ff:2e:
7a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8C:8B:14:69:F1:5B:BA:06:EE:9A:AF:FD:1D:E9:34:38:AA:B8:B8
X509v3 Authority Key Identifier:
keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/09f1296ace7b60eba01597dfb33c3c9fd9ff0e0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.52.0/23
Signature Algorithm: sha256WithRSAEncryption
20:ee:c0:2d:29:ec:9b:96:84:ac:9a:ec:55:23:5f:e0:4c:1a:
75:8a:2f:18:90:a2:14:bb:d3:30:59:5a:5b:b9:fa:bc:2a:11:
d7:e1:c1:9f:7f:11:33:d0:42:3c:2d:39:4f:3e:10:e9:d2:9b:
32:c0:93:5c:14:3d:1f:0f:ff:a4:59:91:18:64:cb:2b:83:3c:
0c:00:bd:09:72:ce:c6:31:09:23:db:95:f7:01:09:7e:fb:47:
ac:13:ea:cb:1f:73:3d:d6:ad:c7:6b:d8:6b:f6:bc:b1:be:f7:
fc:e1:f7:8d:5e:01:97:92:73:18:fb:7a:8a:23:0e:1b:52:86:
0f:a1:96:5f:f7:3a:12:aa:68:5b:16:cb:fb:01:78:cd:bf:df:
19:72:c7:20:ae:0b:9e:e2:64:6b:3d:96:11:e0:6b:b6:2b:5d:
41:3b:fd:d1:32:c4:9b:b5:b9:05:79:21:e9:79:3e:cf:07:b5:
bd:a4:0f:2b:a3:66:d3:f3:5a:7c:11:71:7f:4e:ae:14:6d:00:
49:6a:1f:19:5b:5c:d2:ad:42:7e:44:48:17:1b:35:81:3f:65:
52:a0:c7:61:5f:86:1d:7c:a2:1a:3e:26:de:09:26:d2:f2:09:
c4:d4:36:d4:68:96:7e:5a:31:27:40:89:c4:54:a9:97:5e:ae:
dd:6c:8e:ef
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ9V5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdj
Y2JhYjkyMGI3MDc5YjFiNzRkZDYxZDRlZTE4MGEwNGEzNDg4NmYwHhcNMjMxMTA4
MTUwMDM3WhcNMjgxMTA4MTUwMDM3WjAzMTEwLwYDVQQDEygwOWYxMjk2YWNlN2I2
MGViYTAxNTk3ZGZiMzNjM2M5ZmQ5ZmYwZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwbgrK4/cXEu4+0GfXaUxVhVYXz9AOVZvACQfsa1YaEfde/Aq
tyNjc+BsvQLF9CDUBGxVynTbGs65/QlaPinFTkaiLdnYaa+LBtVGKUFZlKIxclx1
ImplppMEnCZZGa9ZLH75G1IA0jBIiJ4kNW3ZssYswo2ZwonVIpRVYhQMmkUqzLgu
jvP5ZL4mABmlRoqQjuaggvypBdMfy4CxavTvX27pxHWLIGzflLbCwF46fVCknEbY
jiTX6nNfUKByCvt4JEa1THdD69bKe0skQCw1LxTiN69IkWniHjs9+ZBTwFAeQoM3
vEXb/bc2QsZ4g7P18lB1dBy0vlpAwnQV/y56rwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNqMixRp8Vu6Bu6ar/0d6TQ4qri4MB8GA1UdIwQYMBaAFBSAJOx2qcdwVVcE
rHkUlPxwwZ7oMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2NjYmFi
OTIwYjcwNzliMWI3NGRkNjFkNGVlMTgwYTA0YTM0ODg2Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzA5ZjEyOTZhY2U3YjYwZWJhMDE1OTdkZmIzM2MzYzlmZDlmZjBlMGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvN2NjYmFiOTIwYjcwNzliMWI3NGRkNjFkNGVlMTgwYTA0YTM0ODg2
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAch7NDANBgkqhkiG9w0BAQsFAAOCAQEAIO7ALSnsm5aErJrs
VSNf4EwadYovGJCiFLvTMFlaW7n6vCoR1+HBn38RM9BCPC05Tz4Q6dKbMsCTXBQ9
Hw//pFmRGGTLK4M8DAC9CXLOxjEJI9uV9wEJfvtHrBPqyx9zPdatx2vYa/a8sb73
/OH3jV4Bl5JzGPt6iiMOG1KGD6GWX/c6EqpoWxbL+wF4zb/fGXLHIK4LnuJkaz2W
EeBrtitdQTv90TLEm7W5BXkh6Xk+zwe1vaQPK6Nm0/NafBFxf06uFG0ASWofGVtc
0q1CfkRIFxs1gT9lUqDHYV+GHXyiGj4m3gkm0vIJxNQ21GiWfloxJ0CJxFSpl16u
3WyO7w==
-----END CERTIFICATE-----
Generated at Tue Jan 30 19:34:51 2024 by rpki-client on console-fra.rpki-client.org