Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/a917ec488e1af94dbf8a21f07a3fa8eec216e11e.roa
File: a917ec488e1af94dbf8a21f07a3fa8eec216e11e.roa (raw, json)
Hash identifier: 8v6N3VrjcCQ2LozOPn5l/L8XCRIlgwf+goZwJREl9bk=
Subject key identifier: 36:4E:4D:87:6E:19:BA:4C:6B:42:F0:7A:8E:9D:E6:54:CF:6B:02:4E
Certificate issuer: /CN=70c277a3f87d710be660d9c03e8a104a4ea1e4a5
Certificate serial: 2469D1
Authority key identifier: CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/a917ec488e1af94dbf8a21f07a3fa8eec216e11e.roa
Signing time: Mon 25 Sep 2023 23:37:41 +0000
ROA not before: Sun 24 Sep 2023 03:00:00 +0000
ROA not after: Thu 25 Sep 2025 03:00:00 +0000
asID: 14754
IP address blocks: 201.247.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386385 (0x2469d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c277a3f87d710be660d9c03e8a104a4ea1e4a5
Validity
Not Before: Sep 24 03:00:00 2023 GMT
Not After : Sep 25 03:00:00 2025 GMT
Subject: CN=a917ec488e1af94dbf8a21f07a3fa8eec216e11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:af:60:b3:ce:14:47:be:6e:17:f3:31:9d:
35:7a:bc:fc:3e:b0:9e:bd:c9:25:52:eb:e7:49:4f:
ed:16:5d:13:c6:62:90:b0:0c:6b:f1:3a:58:8f:79:
55:79:e8:fb:80:8d:a3:0c:37:25:8b:9d:04:44:96:
c4:88:66:6b:1c:f9:a4:18:80:f1:e0:24:de:00:c0:
6a:66:d8:cc:20:4a:b6:14:f7:43:87:ad:b6:86:ce:
6f:fa:9b:cd:77:79:2d:09:16:20:27:3a:b0:fa:94:
64:61:5c:7a:80:85:0d:d4:00:cd:f7:9e:af:3c:e6:
4a:e7:ca:b7:99:a7:01:4f:6e:cc:24:fe:be:e8:89:
28:82:df:01:d8:49:4e:62:5d:4e:23:b8:16:77:2e:
87:c0:99:e3:8b:57:88:16:e6:0a:b3:9e:36:a7:32:
d8:66:93:80:5d:28:da:c1:26:a9:34:34:90:87:dc:
41:ad:09:2e:4b:c1:45:94:ca:bd:b7:99:2d:f2:bf:
f1:6c:e1:d3:bd:07:d3:72:a4:ad:e6:b9:ae:72:3d:
9e:bb:94:18:8c:4e:58:0f:44:09:94:48:14:5b:14:
e3:49:79:cd:98:97:a4:37:53:e9:22:81:b9:44:af:
b8:43:00:50:9c:ea:ff:fd:db:98:bd:64:3e:66:00:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4E:4D:87:6E:19:BA:4C:6B:42:F0:7A:8E:9D:E6:54:CF:6B:02:4E
X509v3 Authority Key Identifier:
keyid:CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/a917ec488e1af94dbf8a21f07a3fa8eec216e11e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.247.128.0/18
Signature Algorithm: sha256WithRSAEncryption
b1:44:ef:08:b3:be:e6:e7:eb:b6:ed:a6:d1:91:93:bb:19:54:
83:d1:8d:c5:c3:90:3b:f4:a7:da:f3:b1:99:e5:0e:1c:44:98:
cf:25:ee:6a:c2:fb:95:b5:58:91:4b:72:6a:68:aa:ad:3f:fe:
ba:f0:13:43:92:e0:3e:51:66:03:ba:4d:a5:60:d9:a0:41:71:
2b:5a:75:66:e7:7e:f3:97:43:61:89:c3:cd:30:fb:b4:10:b4:
6c:83:85:37:74:90:8f:31:1e:0b:df:07:44:f0:20:24:dc:82:
a5:e4:df:b0:fb:06:65:3b:57:e2:b2:bb:9b:8c:ea:7c:d9:84:
83:75:9d:cc:07:29:4c:ee:4e:e2:ef:c0:51:a6:cf:4b:48:d1:
20:f4:32:db:98:bc:14:53:a1:b5:b6:90:8b:27:ad:12:be:2b:
19:ed:a4:3a:06:33:81:0a:c8:21:04:5e:75:76:34:61:22:36:
22:f0:72:dc:d2:20:dc:81:fd:a4:2f:e0:19:20:45:40:c8:14:
09:f0:99:65:6f:43:22:0c:6e:e9:1d:6a:06:88:c1:c5:cb:3d:
b3:31:07:27:dd:16:de:6f:14:96:82:c5:9f:16:81:22:29:b8:
6f:15:28:2a:bc:ff:7c:5b:79:de:33:65:bc:48:f6:5e:d3:3c:
c3:c3:34:b2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJGnRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcw
YzI3N2EzZjg3ZDcxMGJlNjYwZDljMDNlOGExMDRhNGVhMWU0YTUwHhcNMjMwOTI0
MDMwMDAwWhcNMjUwOTI1MDMwMDAwWjAzMTEwLwYDVQQDEyhhOTE3ZWM0ODhlMWFm
OTRkYmY4YTIxZjA3YTNmYThlZWMyMTZlMTFlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAozavYLPOFEe+bhfzMZ01erz8PrCevcklUuvnSU/tFl0TxmKQ
sAxr8TpYj3lVeej7gI2jDDcli50ERJbEiGZrHPmkGIDx4CTeAMBqZtjMIEq2FPdD
h622hs5v+pvNd3ktCRYgJzqw+pRkYVx6gIUN1ADN956vPOZK58q3macBT27MJP6+
6Ikogt8B2ElOYl1OI7gWdy6HwJnji1eIFuYKs542pzLYZpOAXSjawSapNDSQh9xB
rQkuS8FFlMq9t5kt8r/xbOHTvQfTcqSt5rmucj2eu5QYjE5YD0QJlEgUWxTjSXnN
mJekN1PpIoG5RK+4QwBQnOr//duYvWQ+ZgBX5wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDZOTYduGbpMa0Lweo6d5lTPawJOMB8GA1UdIwQYMBaAFMxd2uPoOoScbd+H
X2Ky+C9u7n1rMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzBjMjc3
YTNmODdkNzEwYmU2NjBkOWMwM2U4YTEwNGE0ZWExZTRhNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDNlZDg1MjItY2M0OC00YmEwLWFkZmYtMzZhNzk5
YWYzYTQ5L2E5MTdlYzQ4OGUxYWY5NGRiZjhhMjFmMDdhM2ZhOGVlYzIxNmUxMWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80M2VkODUyMi1jYzQ4LTRiYTAtYWRmZi0zNmE3
OTlhZjNhNDkvNzBjMjc3YTNmODdkNzEwYmU2NjBkOWMwM2U4YTEwNGE0ZWExZTRh
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBsn3gDANBgkqhkiG9w0BAQsFAAOCAQEAsUTvCLO+5ufrtu2m
0ZGTuxlUg9GNxcOQO/Sn2vOxmeUOHESYzyXuasL7lbVYkUtyamiqrT/+uvATQ5Lg
PlFmA7pNpWDZoEFxK1p1Zud+85dDYYnDzTD7tBC0bIOFN3SQjzEeC98HRPAgJNyC
peTfsPsGZTtX4rK7m4zqfNmEg3WdzAcpTO5O4u/AUabPS0jRIPQy25i8FFOhtbaQ
iyetEr4rGe2kOgYzgQrIIQRedXY0YSI2IvBy3NIg3IH9pC/gGSBFQMgUCfCZZW9D
Igxu6R1qBojBxcs9szEHJ90W3m8UloLFnxaBIim4bxUoKrz/fFt53jNlvEj2XtM8
w8M0sg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org