Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b878895c06350d1f85f06369bcd64c7316d781c1.roa
File: b878895c06350d1f85f06369bcd64c7316d781c1.roa (raw, json)
Hash identifier: fOVyLAoWhK3XbSNx12rIRI2hslNlI1sxYTy+Lto6VSA=
Subject key identifier: D3:66:8C:A4:25:6D:0A:CE:95:18:69:08:F1:DC:9D:F3:20:5E:AF:DA
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 13FC13
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b878895c06350d1f85f06369bcd64c7316d781c1.roa
Signing time: Tue 16 Nov 2021 15:00:19 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 263766
IP address blocks: 200.50.167.0/24 maxlen: 24
200.50.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1309715 (0x13fc13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=b878895c06350d1f85f06369bcd64c7316d781c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:74:5b:49:ec:6b:8d:00:2a:9f:55:32:f7:f6:
31:1d:80:ca:b6:52:5a:b0:51:e2:05:35:a9:a6:b1:
89:0e:00:01:1c:29:32:a0:63:ba:bb:76:a5:f5:46:
c8:56:f5:a5:b6:f3:47:dc:fb:cd:e4:7f:c8:37:49:
8f:c7:29:14:09:99:79:8f:77:0e:80:d7:1a:e7:b4:
74:4f:86:4c:e0:c7:b0:bc:77:b7:d6:84:ec:94:b9:
b9:50:c2:6e:4d:a6:23:5a:95:8c:3c:79:f1:0f:57:
82:ca:88:cc:62:39:73:37:32:bb:d3:d7:25:e5:7d:
c4:a9:fd:41:cf:8f:a3:f8:fb:3e:57:c0:39:a1:ae:
b7:23:62:6e:16:7c:6e:31:b8:0c:17:af:98:c9:1d:
95:b8:b0:f0:e4:70:23:36:a2:3f:2a:79:48:f3:cd:
f5:bc:59:25:ed:4b:4f:43:2c:f4:d5:d3:95:c5:5c:
31:ef:5d:a3:a5:97:6b:be:c2:15:82:27:f3:b2:22:
9a:cc:f9:8a:5e:2d:cf:63:ef:e5:d0:e2:59:5b:b4:
d9:fb:33:37:91:3c:e7:9c:e2:c8:c2:8f:2e:00:65:
60:b9:57:94:8f:63:55:d1:8d:bc:b0:2e:ca:d2:0a:
51:a9:52:31:e8:78:9e:c1:b8:5b:ff:cc:5b:f8:d8:
74:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:66:8C:A4:25:6D:0A:CE:95:18:69:08:F1:DC:9D:F3:20:5E:AF:DA
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b878895c06350d1f85f06369bcd64c7316d781c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.167.0/24
200.50.190.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:7f:77:2a:02:b7:d0:6d:7b:37:fe:3a:ab:35:ea:ee:0f:c2:
dc:3a:ff:0c:bf:13:c8:de:32:ed:d5:c6:0d:d9:61:18:70:15:
13:89:47:8e:b7:7a:58:41:75:01:5a:a3:a8:5d:19:23:d7:6c:
6e:ce:6d:ee:2e:6f:d5:02:3f:8d:77:8f:31:d7:bc:99:2c:f4:
a7:b7:50:c7:83:b8:27:c2:3f:37:6f:9d:ad:7d:09:b3:1f:83:
cc:72:3f:c6:59:7b:17:b0:c3:98:b3:2b:f1:5c:83:32:91:18:
5c:da:3a:63:ed:d4:39:3d:ec:91:4b:a3:b4:c3:f0:a8:52:a6:
c4:28:b8:1e:93:ef:c3:cc:39:3e:d9:29:d0:dc:aa:3f:73:0c:
d6:6a:a0:7b:ff:e9:e9:ee:f0:90:c4:09:99:2c:82:2b:df:bf:
ee:06:14:85:15:34:48:ad:3c:f5:4f:28:34:1a:bd:95:44:b4:
cb:4c:2b:7f:1d:b4:86:06:d0:e0:de:ed:8a:60:99:06:cf:7b:
d2:1d:a0:cd:23:a4:fc:e8:aa:d0:0c:7d:87:f5:70:a4:61:aa:
bb:d3:a9:79:69:2b:ea:0c:18:e3:98:e5:58:ab:3a:51:25:ff:
ec:03:d8:95:08:b5:53:72:94:17:9c:1c:bf:47:c7:00:13:24:
99:75:73:14
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDE/wTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
YjdhNDNmYzMzYmZjN2ZmNWVhNTkyZGVjYWRkZTY0NTI4ODcwNWUwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhiODc4ODk1YzA2MzUw
ZDFmODVmMDYzNjliY2Q2NGM3MzE2ZDc4MWMxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5HRbSexrjQAqn1Uy9/YxHYDKtlJasFHiBTWpprGJDgABHCky
oGO6u3al9UbIVvWltvNH3PvN5H/IN0mPxykUCZl5j3cOgNca57R0T4ZM4MewvHe3
1oTslLm5UMJuTaYjWpWMPHnxD1eCyojMYjlzNzK709cl5X3Eqf1Bz4+j+Ps+V8A5
oa63I2JuFnxuMbgMF6+YyR2VuLDw5HAjNqI/KnlI8831vFkl7UtPQyz01dOVxVwx
712jpZdrvsIVgifzsiKazPmKXi3PY+/l0OJZW7TZ+zM3kTznnOLIwo8uAGVguVeU
j2NV0Y28sC7K0gpRqVIx6Hiewbhb/8xb+Nh0eQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFNNmjKQlbQrOlRhpCPHcnfMgXq/aMB8GA1UdIwQYMBaAFMGk+QbXxWt9XjK0
PK4zar0RfTlWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzNiN2E0
M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlL2I4Nzg4OTVjMDYzNTBkMWY4NWYwNjM2OWJjZDY0YzczMTZkNzgxYzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvMzNiN2E0M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAMgypwMEAMgyvjANBgkqhkiG9w0BAQsFAAOCAQEAXH93KgK3
0G17N/46qzXq7g/C3Dr/DL8TyN4y7dXGDdlhGHAVE4lHjrd6WEF1AVqjqF0ZI9ds
bs5t7i5v1QI/jXePMde8mSz0p7dQx4O4J8I/N2+drX0Jsx+DzHI/xll7F7DDmLMr
8VyDMpEYXNo6Y+3UOT3skUujtMPwqFKmxCi4HpPvw8w5Ptkp0NyqP3MM1mqge//p
6e7wkMQJmSyCK9+/7gYUhRU0SK089U8oNBq9lUS0y0wrfx20hgbQ4N7timCZBs97
0h2gzSOk/Oiq0Ax9h/VwpGGqu9OpeWkr6gwY45jlWKs6USX/7APYlQi1U3KUF5wc
v0fHABMkmXVzFA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org