Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/bf30c69eb9dc7ca3e064d4bc722268f5be71fe61.roa
File: bf30c69eb9dc7ca3e064d4bc722268f5be71fe61.roa (raw, json)
Hash identifier: yLOARWH5a92LozlM7AKWiTYvgxXckjVUIPgRg7U16MU=
Subject key identifier: 5A:21:74:AD:10:23:89:C9:B1:8E:84:6B:54:B4:16:74:4B:54:CC:D9
Certificate issuer: /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial: 277011
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/bf30c69eb9dc7ca3e064d4bc722268f5be71fe61.roa
Signing time: Tue 07 Nov 2023 16:00:44 +0000
ROA not before: Tue 07 Nov 2023 16:00:38 +0000
ROA not after: Tue 07 Nov 2028 16:00:38 +0000
asID: 265689
IP address blocks: 200.123.59.0/24 maxlen: 24
200.123.60.0/23 maxlen: 24
200.50.162.0/23 maxlen: 24
200.50.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2584593 (0x277011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Validity
Not Before: Nov 7 16:00:38 2023 GMT
Not After : Nov 7 16:00:38 2028 GMT
Subject: CN=bf30c69eb9dc7ca3e064d4bc722268f5be71fe61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:03:82:d1:7d:08:bc:75:58:60:88:09:01:1d:
0c:ea:12:88:8b:a0:2e:de:6f:d3:6c:72:fe:e1:5f:
8b:21:82:6a:8d:92:50:85:17:4c:96:dc:54:85:11:
67:92:d3:78:01:ca:21:4f:fc:7e:5c:93:b1:1c:e0:
04:ec:8a:4b:96:cc:fd:6b:40:4a:39:6b:0e:03:32:
2f:80:ea:b6:2e:01:ef:49:cb:bf:b8:49:9a:53:f1:
ea:36:cd:88:e7:e2:3e:8a:85:9a:c0:d9:51:df:4a:
56:d0:88:42:ba:63:5b:07:a5:9e:d5:3c:cf:79:72:
49:4b:84:ac:9d:7c:d9:69:d1:02:7d:3f:6c:4e:11:
e7:80:4b:06:32:13:77:02:61:2a:b2:49:5b:12:c8:
e3:77:56:33:8d:6b:89:21:ba:ff:a7:f7:cf:5d:a6:
08:8d:e2:07:98:03:5d:a4:ff:c0:bd:0c:44:2d:da:
11:aa:11:a0:68:48:3d:22:42:a1:f4:ed:11:51:83:
2a:82:8b:f2:e3:39:f0:34:e6:fd:fb:72:25:71:ac:
83:2b:84:c2:39:b1:e1:4f:c0:b7:18:97:a4:32:cb:
ab:78:10:ac:65:02:87:e4:2a:61:0f:9f:92:92:74:
8b:cf:be:ae:69:55:5b:35:72:4e:1d:9e:0e:22:b2:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:21:74:AD:10:23:89:C9:B1:8E:84:6B:54:B4:16:74:4B:54:CC:D9
X509v3 Authority Key Identifier:
keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/bf30c69eb9dc7ca3e064d4bc722268f5be71fe61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.162.0/23
200.50.165.0/24
200.123.59.0-200.123.61.255
Signature Algorithm: sha256WithRSAEncryption
30:44:7b:54:b1:92:04:34:6c:31:17:0b:d7:fe:29:03:61:c1:
ef:1d:63:05:f5:e5:38:45:d6:af:50:f2:71:35:bf:0b:f3:c1:
bc:86:95:6e:5b:7f:79:a2:d9:b4:49:5c:a6:33:0b:b9:6a:d8:
ff:4a:0b:9f:c8:b3:42:8c:2b:92:58:9b:72:84:9b:da:91:7b:
96:7a:08:88:b7:7c:3a:b2:2d:de:12:e3:4c:81:e5:4e:a1:2c:
85:27:9a:7b:f8:7f:6a:18:45:d6:0e:fc:7e:71:f6:3d:b2:2b:
b2:fe:68:3b:d7:dc:c1:66:47:b3:23:28:31:62:5e:46:a3:6f:
dd:45:0e:25:6d:0a:49:bb:75:8d:b5:06:86:03:7a:f9:e5:4d:
26:01:bd:22:e1:5c:1b:6c:10:82:2c:08:2c:5d:ba:29:37:78:
c2:2e:f6:9a:02:5d:69:31:4d:ec:08:ec:c1:11:3b:90:82:4c:
5d:ec:15:7a:73:ff:23:0d:d1:56:5c:e6:cd:f6:c0:fd:ef:cd:
84:60:e1:e1:6a:31:a1:40:50:56:2c:26:ac:c7:f4:8b:49:0f:
a3:3b:b0:bf:ff:d4:31:0c:d4:5c:a7:88:ef:a8:5f:74:48:71:
f7:bb:6c:2c:51:34:27:0f:6f:03:a6:3b:a3:20:31:76:8f:e6:
62:b3:14:16
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIDJ3ARMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI0
ZTRlMjI1ZThiMTRlMmUxYzc0MjBmYjRjZDJmYWQxYTAwOWUyY2UwHhcNMjMxMTA3
MTYwMDM4WhcNMjgxMTA3MTYwMDM4WjAzMTEwLwYDVQQDEyhiZjMwYzY5ZWI5ZGM3
Y2EzZTA2NGQ0YmM3MjIyNjhmNWJlNzFmZTYxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAggOC0X0IvHVYYIgJAR0M6hKIi6Au3m/TbHL+4V+LIYJqjZJQ
hRdMltxUhRFnktN4AcohT/x+XJOxHOAE7IpLlsz9a0BKOWsOAzIvgOq2LgHvScu/
uEmaU/HqNs2I5+I+ioWawNlR30pW0IhCumNbB6We1TzPeXJJS4SsnXzZadECfT9s
ThHngEsGMhN3AmEqsklbEsjjd1YzjWuJIbr/p/fPXaYIjeIHmANdpP/AvQxELdoR
qhGgaEg9IkKh9O0RUYMqgovy4znwNOb9+3IlcayDK4TCObHhT8C3GJekMsureBCs
ZQKH5CphD5+SknSLz76uaVVbNXJOHZ4OIrKnOwIDAQABo4ICbzCCAmswHQYDVR0O
BBYEFFohdK0QI4nJsY6Ea1S0FnRLVMzZMB8GA1UdIwQYMBaAFIErJnL9fh/G3Qel
w/csCsDI66wdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjRlNGUy
MjVlOGIxNGUyZTFjNzQyMGZiNGNkMmZhZDFhMDA5ZTJjZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlL2JmMzBjNjllYjlkYzdjYTNlMDY0ZDRiYzcyMjI2OGY1YmU3MWZlNjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvYjRlNGUyMjVlOGIxNGUyZTFjNzQyMGZiNGNkMmZhZDFhMDA5ZTJj
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQk
MCIwIAQCAAEwGgMEAcgyogMEAMgypTAMAwQAyHs7AwQByHs8MA0GCSqGSIb3DQEB
CwUAA4IBAQAwRHtUsZIENGwxFwvX/ikDYcHvHWMF9eU4RdavUPJxNb8L88G8hpVu
W395otm0SVymMwu5atj/SgufyLNCjCuSWJtyhJvakXuWegiIt3w6si3eEuNMgeVO
oSyFJ5p7+H9qGEXWDvx+cfY9siuy/mg719zBZkezIygxYl5Go2/dRQ4lbQpJu3WN
tQaGA3r55U0mAb0i4VwbbBCCLAgsXbopN3jCLvaaAl1pMU3sCOzBETuQgkxd7BV6
c/8jDdFWXObN9sD9782EYOHhajGhQFBWLCasx/SLSQ+jO7C//9QxDNRcp4jvqF90
SHH3u2wsUTQnD28DpjujIDF2j+ZisxQW
-----END CERTIFICATE-----
Generated at Wed Nov 8 15:28:33 2023 by rpki-client on console-fra.rpki-client.org