Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7b87d88a7bac93e1b2a33502d61badd0f442003e.roa
File: 7b87d88a7bac93e1b2a33502d61badd0f442003e.roa (raw, json)
Hash identifier: IKo5/QLj2UCiuIFZ+aZ7mxrVCIy92e+6esym7wOn0aw=
Subject key identifier: 93:28:E8:F2:71:11:28:F2:62:25:14:B9:A7:8A:4D:0C:1D:FB:93:1B
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 23F733
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7b87d88a7bac93e1b2a33502d61badd0f442003e.roa
Signing time: Mon 17 Jul 2023 16:08:50 +0000
ROA not before: Sun 16 Jul 2023 16:08:49 +0000
ROA not after: Thu 17 Jul 2025 16:08:49 +0000
asID: 52328
IP address blocks: 200.123.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2357043 (0x23f733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Jul 16 16:08:49 2023 GMT
Not After : Jul 17 16:08:49 2025 GMT
Subject: CN=7b87d88a7bac93e1b2a33502d61badd0f442003e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:82:6c:c0:a8:4e:87:1c:4a:7e:3a:7b:60:
d3:56:87:e0:62:9e:46:57:dd:01:70:86:a3:69:09:
25:e7:c6:50:09:e1:4e:d0:93:2d:e8:ac:19:27:e7:
b3:6f:9c:3b:c5:46:45:79:27:c8:f4:04:f4:bb:5b:
33:0e:85:c8:b8:c7:e8:57:e2:55:52:cc:6c:a2:83:
f9:b5:32:33:36:66:ca:45:fb:88:a7:35:45:19:b2:
d5:f6:dc:f4:4f:5f:89:71:5e:00:51:93:8e:da:ff:
68:c2:b4:9e:45:e9:e4:fc:c5:43:82:10:50:9a:ad:
ba:18:ab:e6:11:34:9b:53:e5:2b:60:22:cc:6f:f9:
01:5e:cb:33:b5:2d:3f:91:15:ca:8b:d2:39:6b:12:
1d:09:a3:4c:11:d8:2f:44:ad:51:a4:f4:f6:6b:77:
14:b2:7e:e0:ae:92:0f:4d:fe:a5:b5:48:b2:e9:24:
3f:c2:45:f6:0b:00:d3:97:68:ce:6e:59:71:01:2e:
c2:8a:e3:0b:a9:7a:8e:e6:6f:70:17:91:cd:4a:8f:
38:ab:9a:4a:27:d2:99:4b:8d:7f:a1:9d:19:b5:aa:
f1:e4:90:ec:54:ac:bc:bf:d2:df:37:4b:76:8d:46:
c2:09:bf:22:20:f2:63:5c:a8:cc:e8:9f:0d:69:a0:
dc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:28:E8:F2:71:11:28:F2:62:25:14:B9:A7:8A:4D:0C:1D:FB:93:1B
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7b87d88a7bac93e1b2a33502d61badd0f442003e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.52.0/23
Signature Algorithm: sha256WithRSAEncryption
17:60:09:96:da:bb:d1:67:07:9e:7c:e0:63:a5:5e:9a:90:9f:
46:aa:95:c6:74:39:24:0b:7a:53:5d:bc:13:97:8b:6a:b6:6c:
92:b6:6f:4a:73:92:c1:ef:d9:d9:84:c1:1a:9a:f3:71:1d:ae:
77:c8:2a:6f:47:4d:25:be:1e:0f:1e:9b:7a:a2:31:a2:a2:62:
c9:54:a5:7c:e5:40:bb:5f:3c:e8:d6:63:45:d3:cd:32:8d:dd:
3a:2e:55:6a:03:fd:16:5d:3a:63:a8:a9:19:3e:90:21:85:04:
ef:fb:e2:a3:cc:d1:cf:0f:d9:af:23:8a:8f:f3:30:4c:62:4c:
e2:d0:08:b4:8b:e5:04:f2:02:c0:c3:a0:f6:ae:0a:80:fd:a2:
0d:6d:62:c1:32:27:cd:d0:8b:94:05:c5:6c:46:e4:fe:81:0b:
9c:86:24:88:c5:d8:71:b8:a9:e0:6b:a0:1a:ac:6d:77:99:8d:
5e:df:d7:23:e3:42:be:35:71:ac:61:aa:ae:b8:5d:58:0e:0d:
d8:91:e2:b9:87:5e:97:80:f4:dd:21:e0:4d:43:f7:ac:be:9b:
b9:b0:56:af:7b:33:88:f7:e2:a6:b2:90:99:23:b8:38:5d:a1:
3f:bb:2a:78:02:c0:04:1f:31:50:93:71:9f:0d:89:09:cb:af:
de:30:bf:ec
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI/czMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
YjdhNDNmYzMzYmZjN2ZmNWVhNTkyZGVjYWRkZTY0NTI4ODcwNWUwHhcNMjMwNzE2
MTYwODQ5WhcNMjUwNzE3MTYwODQ5WjAzMTEwLwYDVQQDEyg3Yjg3ZDg4YTdiYWM5
M2UxYjJhMzM1MDJkNjFiYWRkMGY0NDIwMDNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmeSCbMCoToccSn46e2DTVofgYp5GV90BcIajaQkl58ZQCeFO
0JMt6KwZJ+ezb5w7xUZFeSfI9AT0u1szDoXIuMfoV+JVUsxsooP5tTIzNmbKRfuI
pzVFGbLV9tz0T1+JcV4AUZOO2v9owrSeRenk/MVDghBQmq26GKvmETSbU+UrYCLM
b/kBXssztS0/kRXKi9I5axIdCaNMEdgvRK1RpPT2a3cUsn7grpIPTf6ltUiy6SQ/
wkX2CwDTl2jObllxAS7CiuMLqXqO5m9wF5HNSo84q5pKJ9KZS41/oZ0Ztarx5JDs
VKy8v9LfN0t2jUbCCb8iIPJjXKjM6J8NaaDcewIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJMo6PJxESjyYiUUuaeKTQwd+5MbMB8GA1UdIwQYMBaAFMGk+QbXxWt9XjK0
PK4zar0RfTlWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzNiN2E0
M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzdiODdkODhhN2JhYzkzZTFiMmEzMzUwMmQ2MWJhZGQwZjQ0MjAwM2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvMzNiN2E0M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAch7NDANBgkqhkiG9w0BAQsFAAOCAQEAF2AJltq70WcHnnzg
Y6VempCfRqqVxnQ5JAt6U128E5eLarZskrZvSnOSwe/Z2YTBGprzcR2ud8gqb0dN
Jb4eDx6beqIxoqJiyVSlfOVAu1886NZjRdPNMo3dOi5VagP9Fl06Y6ipGT6QIYUE
7/vio8zRzw/ZryOKj/MwTGJM4tAItIvlBPICwMOg9q4KgP2iDW1iwTInzdCLlAXF
bEbk/oELnIYkiMXYcbip4GugGqxtd5mNXt/XI+NCvjVxrGGqrrhdWA4N2JHiuYde
l4D03SHgTUP3rL6bubBWr3sziPfiprKQmSO4OF2hP7sqeALABB8xUJNxnw2JCcuv
3jC/7A==
-----END CERTIFICATE-----
Generated at Thu Aug 10 18:46:42 2023 by rpki-client on console-ams.rpki-client.org