Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/8d6d2d31bd85c77cb181e3e4851053b8147e74c3.roa
File: 8d6d2d31bd85c77cb181e3e4851053b8147e74c3.roa (raw, json)
Hash identifier: Z9fOyHZ4ijP+AQSQFJuKmgUsiCJGIsYKYQaGMTNtarw=
Subject key identifier: 60:D2:23:DC:5C:28:8A:92:19:AE:EA:B5:7F:39:7B:A0:AE:7E:0B:7A
Certificate issuer: /CN=9e6663fb5d62a6c45845d461b066de1127b3e069
Certificate serial: 24CBE7
Authority key identifier: 4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/8d6d2d31bd85c77cb181e3e4851053b8147e74c3.roa
Signing time: Tue 19 Dec 2023 15:17:20 +0000
ROA not before: Tue 19 Dec 2023 15:17:20 +0000
ROA not after: Fri 19 Dec 2025 15:17:20 +0000
asID: 52436
IP address blocks: 132.255.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2411495 (0x24cbe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6663fb5d62a6c45845d461b066de1127b3e069
Validity
Not Before: Dec 19 15:17:20 2023 GMT
Not After : Dec 19 15:17:20 2025 GMT
Subject: CN=8d6d2d31bd85c77cb181e3e4851053b8147e74c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8f:a9:43:4e:76:d4:8f:ba:19:27:30:99:6c:
24:b9:f4:a8:ad:eb:4c:07:2b:68:b9:ab:1e:93:11:
0d:08:b2:c0:38:f2:4c:89:fd:66:30:0b:d4:00:22:
ed:5f:8d:b3:14:e3:fb:cf:46:7b:8f:f7:45:63:cd:
09:ee:fb:13:8c:7c:11:ff:a5:8f:53:6c:8e:db:a9:
0c:6b:19:d3:db:82:4a:38:50:83:39:5d:06:90:7d:
6c:f5:7f:f5:62:2b:f9:cc:e1:c2:59:da:44:a0:2c:
95:ed:13:1d:f1:8d:51:28:54:1e:1f:b5:f2:a2:3b:
95:69:9d:32:42:91:41:58:4f:64:40:24:2f:c6:3f:
c2:9e:c9:81:b3:43:c5:81:d3:91:70:29:01:cf:64:
db:68:f5:73:8e:72:75:62:ab:e5:e7:b5:50:60:af:
fa:95:ea:e5:b2:e4:43:35:f7:e8:f1:20:8f:0c:b9:
eb:44:2e:aa:9b:0c:c7:ab:0a:c8:f1:98:27:5c:42:
74:7a:d7:75:24:f2:fe:82:1f:94:5b:f5:f8:77:47:
f5:c7:16:f3:3c:32:c5:6e:8c:b5:13:ee:a1:05:97:
19:c7:72:be:52:1c:d3:3f:36:60:c4:b1:84:11:f7:
44:f6:04:10:20:03:e1:98:d4:45:23:0b:84:1e:49:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D2:23:DC:5C:28:8A:92:19:AE:EA:B5:7F:39:7B:A0:AE:7E:0B:7A
X509v3 Authority Key Identifier:
keyid:4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/8d6d2d31bd85c77cb181e3e4851053b8147e74c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/9e6663fb5d62a6c45845d461b066de1127b3e069.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.112.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:72:da:5a:22:b2:11:dd:1c:02:9a:d4:41:b1:98:c9:35:f4:
46:46:96:ed:0b:c4:9e:49:7e:8d:ce:f5:19:35:43:f7:d6:2b:
9a:8d:3e:c2:86:e3:68:6e:25:a7:67:fd:2a:68:df:1c:cf:56:
ca:5f:1b:e0:d9:4f:c5:59:6f:3b:85:cf:50:f9:1e:a3:f7:39:
5e:e0:83:4e:8a:b1:a8:40:f8:85:25:5f:43:6f:97:5e:ad:87:
42:bc:15:4e:91:45:75:f7:32:ed:c6:ab:d5:3b:9d:f4:42:fa:
5f:e3:46:b1:e4:9a:f4:e5:ce:7e:4a:23:7d:56:da:a4:c7:75:
eb:0f:b3:5f:66:a2:b5:f4:6e:0f:09:47:fc:fc:63:2c:37:ea:
3a:82:fe:bb:d9:ac:f8:59:01:ee:40:c8:04:06:d9:1c:1f:89:
c0:d3:04:82:fb:b2:14:14:ef:a8:76:a8:aa:a5:71:11:cb:55:
ec:eb:91:f2:f9:54:0e:f5:a5:97:4e:c8:71:ad:23:be:d6:67:
77:3e:46:73:05:40:2e:44:b8:39:76:d6:d5:e4:f8:6a:b3:17:
28:6b:69:05:9e:9f:6b:0c:8b:9b:fa:ec:0a:ef:0f:1c:c9:c9:
2e:32:58:e0:ac:82:1e:14:82:5f:3a:9d:6e:6f:42:18:85:61:
77:1a:31:2c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJMvnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDll
NjY2M2ZiNWQ2MmE2YzQ1ODQ1ZDQ2MWIwNjZkZTExMjdiM2UwNjkwHhcNMjMxMjE5
MTUxNzIwWhcNMjUxMjE5MTUxNzIwWjAzMTEwLwYDVQQDEyg4ZDZkMmQzMWJkODVj
NzdjYjE4MWUzZTQ4NTEwNTNiODE0N2U3NGMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmY+pQ0521I+6GScwmWwkufSoretMBytouasekxENCLLAOPJM
if1mMAvUACLtX42zFOP7z0Z7j/dFY80J7vsTjHwR/6WPU2yO26kMaxnT24JKOFCD
OV0GkH1s9X/1Yiv5zOHCWdpEoCyV7RMd8Y1RKFQeH7XyojuVaZ0yQpFBWE9kQCQv
xj/CnsmBs0PFgdORcCkBz2TbaPVzjnJ1Yqvl57VQYK/6lerlsuRDNffo8SCPDLnr
RC6qmwzHqwrI8ZgnXEJ0etd1JPL+gh+UW/X4d0f1xxbzPDLFboy1E+6hBZcZx3K+
UhzTPzZgxLGEEfdE9gQQIAPhmNRFIwuEHkmdjwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGDSI9xcKIqSGa7qtX85e6Cufgt6MB8GA1UdIwQYMBaAFE762/rMCWR6WNc6
yjRIk1JTzAtSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWU2NjYz
ZmI1ZDYyYTZjNDU4NDVkNDYxYjA2NmRlMTEyN2IzZTA2OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzg1NTIwZTYtMWY5OC00OTZiLThkOWUtMTVkZjll
MDc3MmNlLzhkNmQyZDMxYmQ4NWM3N2NiMTgxZTNlNDg1MTA1M2I4MTQ3ZTc0YzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODU1MjBlNi0xZjk4LTQ5NmItOGQ5ZS0xNWRm
OWUwNzcyY2UvOWU2NjYzZmI1ZDYyYTZjNDU4NDVkNDYxYjA2NmRlMTEyN2IzZTA2
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAoT/cDANBgkqhkiG9w0BAQsFAAOCAQEArHLaWiKyEd0cAprU
QbGYyTX0RkaW7QvEnkl+jc71GTVD99Yrmo0+wobjaG4lp2f9KmjfHM9Wyl8b4NlP
xVlvO4XPUPkeo/c5XuCDToqxqED4hSVfQ2+XXq2HQrwVTpFFdfcy7car1Tud9EL6
X+NGseSa9OXOfkojfVbapMd16w+zX2aitfRuDwlH/PxjLDfqOoL+u9ms+FkB7kDI
BAbZHB+JwNMEgvuyFBTvqHaoqqVxEctV7OuR8vlUDvWll07Ica0jvtZndz5GcwVA
LkS4OXbW1eT4arMXKGtpBZ6fawyLm/rsCu8PHMnJLjJY4KyCHhSCXzqdbm9CGIVh
dxoxLA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org