Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/16c193e8e28ab82e4d67793a6f5c1564165fa3f9.roa
File: 16c193e8e28ab82e4d67793a6f5c1564165fa3f9.roa (raw, json)
Hash identifier: yi/Dv3X5PReKkF/Y22eZpV5V66OyW3u32CXsVZs+4g8=
Subject key identifier: 9C:3F:09:EF:AB:49:79:52:5C:A7:AB:34:FC:59:DF:2C:B3:8A:E8:9B
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 241C82
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/16c193e8e28ab82e4d67793a6f5c1564165fa3f9.roa
Signing time: Mon 17 Jul 2023 16:09:21 +0000
ROA not before: Sun 16 Jul 2023 16:08:49 +0000
ROA not after: Thu 17 Jul 2025 16:08:49 +0000
asID: 272114
IP address blocks: 200.123.32.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2366594 (0x241c82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Jul 16 16:08:49 2023 GMT
Not After : Jul 17 16:08:49 2025 GMT
Subject: CN=16c193e8e28ab82e4d67793a6f5c1564165fa3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:a9:8a:15:21:e2:1e:0c:96:92:b6:0a:6c:
85:da:9d:01:6c:8f:54:5b:0d:a3:7b:83:d5:c2:6f:
04:ed:18:da:ac:8c:6a:08:9f:be:9f:d6:bf:e0:d0:
45:39:53:c2:45:a4:33:c8:f9:7c:52:98:bc:67:b8:
7c:7b:54:ef:b9:7c:97:b4:84:15:60:86:33:40:70:
9c:dd:da:ee:c9:35:a5:51:c7:6e:ee:25:25:d9:e9:
55:62:b1:26:aa:a4:eb:94:41:86:cf:e1:63:15:51:
b8:74:8a:c4:fe:e4:ad:3c:4a:d3:35:e3:2e:d9:9d:
50:70:1f:1a:8e:7e:7c:d1:d9:cf:44:bb:ab:d6:e3:
80:38:8c:1a:a3:d3:da:02:26:77:e6:61:ce:a5:45:
a4:a8:93:93:6d:e9:0c:97:e3:e7:e3:56:2d:2f:82:
88:79:8c:a6:53:5f:2f:ca:e4:fe:24:86:c9:d3:26:
78:ee:3e:3f:64:ad:f2:40:90:9a:aa:12:b2:80:0c:
9c:9c:cd:a3:53:28:33:4c:28:a9:f5:e4:e6:a0:d6:
18:be:86:f4:ff:fd:ba:98:a6:ec:74:80:2b:67:0e:
74:19:50:37:6f:e7:c5:7a:e7:75:82:bb:cb:1e:27:
8f:47:53:0c:38:45:6c:a8:1a:33:a1:32:7a:24:aa:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3F:09:EF:AB:49:79:52:5C:A7:AB:34:FC:59:DF:2C:B3:8A:E8:9B
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/16c193e8e28ab82e4d67793a6f5c1564165fa3f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.32.0/23
Signature Algorithm: sha256WithRSAEncryption
27:d6:c6:30:b8:c2:ba:ec:52:d1:74:d7:10:cb:fe:be:ff:83:
d8:3e:b8:4a:9b:cf:04:fb:d6:25:04:a2:c3:bf:fc:4a:87:b0:
c2:bc:b2:0c:08:c4:79:4a:df:db:b1:a0:55:a3:82:71:d8:80:
fa:86:f4:35:de:4c:ff:76:20:e7:1c:df:4f:56:3a:5b:f1:40:
49:a3:07:69:8c:35:b7:15:4c:b6:7e:66:93:26:8e:06:0a:06:
f1:a3:5c:6f:61:ef:cd:a1:ed:21:35:e5:8e:14:35:e3:75:49:
b6:94:a6:eb:69:05:39:46:7a:6b:b9:b3:5a:2d:e1:d0:f6:da:
31:50:d4:6a:92:9f:fd:b8:c5:c6:57:f4:dd:cf:b1:09:f0:38:
19:38:bd:33:43:f6:cd:e5:e5:07:69:5d:74:b7:e0:6d:b2:5a:
5a:6b:f0:5c:09:0a:8e:fe:2b:90:e3:82:af:4d:58:6f:6c:e6:
65:79:fd:ca:70:73:8b:1e:07:29:33:8a:df:80:24:19:00:cc:
66:ad:76:3d:40:91:b1:3c:3b:af:12:bb:d3:c6:2f:89:84:c0:
9e:bb:a8:a6:a3:ce:e8:43:4b:29:aa:36:10:c3:f6:69:7f:4f:
2c:19:d1:d0:77:af:c8:e3:a6:bd:64:01:c9:91:ad:00:5b:b1:
6d:17:42:5d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJByCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
YjdhNDNmYzMzYmZjN2ZmNWVhNTkyZGVjYWRkZTY0NTI4ODcwNWUwHhcNMjMwNzE2
MTYwODQ5WhcNMjUwNzE3MTYwODQ5WjAzMTEwLwYDVQQDEygxNmMxOTNlOGUyOGFi
ODJlNGQ2Nzc5M2E2ZjVjMTU2NDE2NWZhM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArcGpihUh4h4MlpK2CmyF2p0BbI9UWw2je4PVwm8E7RjarIxq
CJ++n9a/4NBFOVPCRaQzyPl8Upi8Z7h8e1TvuXyXtIQVYIYzQHCc3druyTWlUcdu
7iUl2elVYrEmqqTrlEGGz+FjFVG4dIrE/uStPErTNeMu2Z1QcB8ajn580dnPRLur
1uOAOIwao9PaAiZ35mHOpUWkqJOTbekMl+Pn41YtL4KIeYymU18vyuT+JIbJ0yZ4
7j4/ZK3yQJCaqhKygAycnM2jUygzTCip9eTmoNYYvob0//26mKbsdIArZw50GVA3
b+fFeud1grvLHiePR1MMOEVsqBozoTJ6JKrdOQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJw/Ce+rSXlSXKerNPxZ3yyziuibMB8GA1UdIwQYMBaAFMGk+QbXxWt9XjK0
PK4zar0RfTlWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzNiN2E0
M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzE2YzE5M2U4ZTI4YWI4MmU0ZDY3NzkzYTZmNWMxNTY0MTY1ZmEzZjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvMzNiN2E0M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAch7IDANBgkqhkiG9w0BAQsFAAOCAQEAJ9bGMLjCuuxS0XTX
EMv+vv+D2D64SpvPBPvWJQSiw7/8SoewwryyDAjEeUrf27GgVaOCcdiA+ob0Nd5M
/3Yg5xzfT1Y6W/FASaMHaYw1txVMtn5mkyaOBgoG8aNcb2HvzaHtITXljhQ143VJ
tpSm62kFOUZ6a7mzWi3h0PbaMVDUapKf/bjFxlf03c+xCfA4GTi9M0P2zeXlB2ld
dLfgbbJaWmvwXAkKjv4rkOOCr01Yb2zmZXn9ynBzix4HKTOK34AkGQDMZq12PUCR
sTw7rxK708YviYTAnruopqPO6ENLKao2EMP2aX9PLBnR0HevyOOmvWQByZGtAFux
bRdCXQ==
-----END CERTIFICATE-----
Generated at Thu Aug 10 18:46:42 2023 by rpki-client on console-ams.rpki-client.org