Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bd8feb67da6310562468cdd75579874bc5e932f9.roa
File: bd8feb67da6310562468cdd75579874bc5e932f9.roa (raw, json)
Hash identifier: tqeKs3lVDaYtBUbEdFMZN/HiFY/XtJ2zGHUfIq8qC+A=
Subject key identifier: B2:03:5F:06:06:AB:A4:8C:9F:6F:95:1A:8B:D9:3B:83:32:DD:E4:5A
Certificate issuer: /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial: 20B383
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bd8feb67da6310562468cdd75579874bc5e932f9.roa
Signing time: Mon 03 Jul 2023 13:26:20 +0000
ROA not before: Sun 02 Jul 2023 13:26:05 +0000
ROA not after: Mon 03 Jul 2028 13:26:05 +0000
asID: 26593
IP address blocks: 200.108.81.0/24 maxlen: 24
200.108.82.0/24 maxlen: 24
200.108.86.0/24 maxlen: 24
200.108.87.0/24 maxlen: 24
200.108.88.0/24 maxlen: 24
200.108.89.0/24 maxlen: 24
200.108.90.0/24 maxlen: 24
200.108.91.0/24 maxlen: 24
200.108.92.0/24 maxlen: 24
200.108.93.0/24 maxlen: 24
200.108.94.0/24 maxlen: 24
200.108.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143107 (0x20b383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Validity
Not Before: Jul 2 13:26:05 2023 GMT
Not After : Jul 3 13:26:05 2028 GMT
Subject: CN=bd8feb67da6310562468cdd75579874bc5e932f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:53:c6:dd:aa:69:f0:23:64:3f:8b:b5:22:
a8:68:99:7e:8c:ac:4b:bf:c4:45:d0:90:9c:04:d1:
72:ff:92:99:e0:60:cf:cb:a0:f3:76:46:74:7e:07:
b4:46:01:16:6c:6d:f7:93:58:dc:66:b0:d7:f3:34:
bf:6d:a8:8c:8b:49:6d:74:e2:7c:38:d4:3e:fd:1f:
67:3a:b3:ae:cb:00:64:20:ae:76:ed:14:a3:e7:5d:
c0:25:65:dd:31:e2:c3:3b:cf:50:f5:26:f2:50:10:
e7:64:62:ca:29:e6:b9:55:71:e4:f8:8a:eb:3d:2b:
cd:72:8e:0e:08:b9:5b:68:f3:03:da:26:4e:cb:00:
8a:5b:4d:2b:77:13:a6:b6:f8:43:5a:f3:f5:c5:84:
6b:1d:d4:96:ec:64:75:06:83:21:39:43:be:bf:a5:
f2:bf:84:cb:44:13:4c:f4:30:69:91:e4:56:4b:0d:
f1:5a:26:e3:11:5d:d5:fb:09:4c:1c:d6:d4:91:f1:
4d:07:eb:02:8a:05:9a:c7:db:30:01:17:26:4f:aa:
3a:59:f8:25:78:42:27:9d:85:b2:77:24:00:0b:9a:
e0:2c:34:43:83:47:44:24:86:37:69:1c:d6:33:17:
8f:93:b1:8e:26:0a:2c:3c:b6:24:60:ac:cb:91:e7:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:03:5F:06:06:AB:A4:8C:9F:6F:95:1A:8B:D9:3B:83:32:DD:E4:5A
X509v3 Authority Key Identifier:
keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bd8feb67da6310562468cdd75579874bc5e932f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.108.81.0-200.108.82.255
200.108.86.0-200.108.95.255
Signature Algorithm: sha256WithRSAEncryption
2a:fa:f7:54:ee:00:cb:3c:22:b0:58:18:2c:f1:bc:de:72:01:
d1:83:55:db:c0:c9:ef:22:c0:c8:08:57:3f:c4:b8:8b:88:65:
db:ae:ee:fe:f2:6d:75:b8:c5:20:2d:c4:5f:2e:d0:0a:de:32:
fa:9c:84:56:4c:f7:49:4d:e6:8b:6a:c8:a6:79:35:2c:bb:a1:
20:a0:db:4c:57:ac:c6:6c:31:ea:89:a5:b4:f1:a6:a6:9e:0b:
9a:3f:a4:89:b1:df:86:78:b5:e2:7e:c5:63:1a:64:ba:73:e0:
9e:35:71:94:e3:3e:d6:c6:1d:ab:19:4b:b4:2f:7e:ee:13:63:
2c:96:f3:28:3d:48:2d:a3:b6:16:46:73:39:16:bf:35:8c:a8:
66:24:84:29:c0:3e:83:d4:28:69:d3:06:4b:3a:36:02:8a:8f:
bd:65:76:ed:6b:c4:ec:9c:ce:f2:df:f6:08:77:d8:54:93:f6:
17:5e:ce:0b:d7:dd:67:50:db:28:80:fb:65:37:c6:02:8e:df:
5e:73:b4:b5:41:d0:b3:ce:00:c5:1b:59:6b:3e:57:b0:20:b6:
c5:c7:ed:8a:83:f0:21:0d:04:7e:e7:a0:6a:26:03:2e:4b:aa:
59:d2:0d:9e:f8:0f:32:e8:7e:89:6b:55:73:6f:08:9a:39:d1:
df:7e:df:7d
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIDILODMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJj
NGRjMDMzZmM3OTU4ODE1NDQ3OTY1MWE4ZGU1ZTBjOTdlYmQ2MDUwHhcNMjMwNzAy
MTMyNjA1WhcNMjgwNzAzMTMyNjA1WjAzMTEwLwYDVQQDEyhiZDhmZWI2N2RhNjMx
MDU2MjQ2OGNkZDc1NTc5ODc0YmM1ZTkzMmY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuVpTxt2qafAjZD+LtSKoaJl+jKxLv8RF0JCcBNFy/5KZ4GDP
y6DzdkZ0fge0RgEWbG33k1jcZrDX8zS/baiMi0ltdOJ8ONQ+/R9nOrOuywBkIK52
7RSj513AJWXdMeLDO89Q9SbyUBDnZGLKKea5VXHk+IrrPSvNco4OCLlbaPMD2iZO
ywCKW00rdxOmtvhDWvP1xYRrHdSW7GR1BoMhOUO+v6Xyv4TLRBNM9DBpkeRWSw3x
WibjEV3V+wlMHNbUkfFNB+sCigWax9swARcmT6o6WfgleEInnYWydyQAC5rgLDRD
g0dEJIY3aRzWMxePk7GOJgosPLYkYKzLkecp8wIDAQABo4ICcTCCAm0wHQYDVR0O
BBYEFLIDXwYGq6SMn2+VGovZO4My3eRaMB8GA1UdIwQYMBaAFE3LSUvvqlmaWZpJ
5iCDWDr5/6plMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmM0ZGMw
MzNmYzc5NTg4MTU0NDc5NjUxYThkZTVlMGM5N2ViZDYwNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzkwZTc1YmUtMDliMS00ZjQ1LTg3OGUtOTRhMjRm
NGJiYjQ2L2JkOGZlYjY3ZGE2MzEwNTYyNDY4Y2RkNzU1Nzk4NzRiYzVlOTMyZjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zOTBlNzViZS0wOWIxLTRmNDUtODc4ZS05NGEy
NGY0YmJiNDYvYmM0ZGMwMzNmYzc5NTg4MTU0NDc5NjUxYThkZTVlMGM5N2ViZDYw
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA1BggrBgEFBQcBBwEB/wQm
MCQwIgQCAAEwHDAMAwQAyGxRAwQAyGxSMAwDBAHIbFYDBAXIbEAwDQYJKoZIhvcN
AQELBQADggEBACr691TuAMs8IrBYGCzxvN5yAdGDVdvAye8iwMgIVz/EuIuIZduu
7v7ybXW4xSAtxF8u0AreMvqchFZM90lN5otqyKZ5NSy7oSCg20xXrMZsMeqJpbTx
pqaeC5o/pImx34Z4teJ+xWMaZLpz4J41cZTjPtbGHasZS7Qvfu4TYyyW8yg9SC2j
thZGczkWvzWMqGYkhCnAPoPUKGnTBks6NgKKj71ldu1rxOyczvLf9gh32FST9hde
zgvX3WdQ2yiA+2U3xgKO315ztLVB0LPOAMUbWWs+V7AgtsXH7YqD8CENBH7noGom
Ay5LqlnSDZ74DzLofolrVXNvCJo50d9+330=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org