Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/88a449bef1576d1fa7aad22dc1b08efc8e571c82.roa
File: 88a449bef1576d1fa7aad22dc1b08efc8e571c82.roa (raw, json)
Hash identifier: XUwU5DoZ7af+5voSLO9PBq/odsoPzdJ2bETI+F7LgCY=
Subject key identifier: D2:B8:43:1B:1D:37:D2:08:29:70:55:39:FB:8C:2D:EB:FB:60:0E:C4
Certificate issuer: /CN=05fbbb173c217aa8030fc6d9379843579229ce31
Certificate serial: 2718A6
Authority key identifier: 6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/88a449bef1576d1fa7aad22dc1b08efc8e571c82.roa
Signing time: Thu 01 Feb 2024 15:49:33 +0000
ROA not before: Thu 01 Feb 2024 15:49:33 +0000
ROA not after: Sun 01 Feb 2026 15:49:33 +0000
asID: 27986
IP address blocks: 152.231.110.0/23 maxlen: 24
2800:300::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2562214 (0x2718a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fbbb173c217aa8030fc6d9379843579229ce31
Validity
Not Before: Feb 1 15:49:33 2024 GMT
Not After : Feb 1 15:49:33 2026 GMT
Subject: CN=88a449bef1576d1fa7aad22dc1b08efc8e571c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0e:b7:5a:92:66:74:4a:9c:7c:cc:90:fb:5b:
f0:f1:7e:50:f7:d2:70:91:91:3e:1a:07:de:3f:e3:
fc:c6:82:64:18:c7:02:c5:9e:a7:23:56:00:b7:28:
b9:bd:10:3f:53:0e:38:be:ca:6a:66:e1:4f:90:8a:
ba:03:82:fd:e2:64:93:6c:c8:1c:8a:b0:43:56:13:
22:68:7a:fc:9b:f4:02:0f:02:f9:2e:d9:3c:89:8f:
c4:32:42:b8:a1:73:f7:16:a8:a4:57:43:84:fb:90:
fd:34:55:19:c7:f2:a8:e1:cd:3a:39:c2:ef:82:4b:
47:a2:1e:fd:1d:14:00:aa:e0:c4:b0:6e:3f:06:5f:
26:c5:21:db:c1:93:cd:19:06:ef:e0:45:45:e8:97:
e7:48:37:8f:bc:91:72:aa:18:cb:c1:0d:fb:cd:f8:
f9:ce:69:72:2d:29:6b:7c:6e:e2:8d:07:01:b9:e4:
ed:d9:2a:4f:64:5e:3c:1d:e8:2c:90:0f:3d:ba:e1:
88:a3:1d:34:eb:89:57:e4:99:ab:53:d6:87:92:b1:
be:36:48:1e:e8:56:f9:92:55:03:86:77:60:a4:91:
92:f6:ee:59:6d:db:88:29:b8:25:b1:f5:f6:05:2e:
27:e4:e1:04:18:f9:a9:19:ad:1b:13:16:c4:b5:c8:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B8:43:1B:1D:37:D2:08:29:70:55:39:FB:8C:2D:EB:FB:60:0E:C4
X509v3 Authority Key Identifier:
keyid:6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/88a449bef1576d1fa7aad22dc1b08efc8e571c82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.231.110.0/23
IPv6:
2800:300::/32
Signature Algorithm: sha256WithRSAEncryption
01:52:57:e5:7b:d0:08:15:e2:be:d4:a8:50:79:ae:b0:5d:65:
e0:dc:e2:b7:6c:4e:98:9e:3a:7c:6f:d7:f9:76:e1:18:8c:2b:
56:4a:62:2a:ba:56:bc:ac:6c:54:63:b3:bc:8c:a1:a4:7f:cc:
ee:62:8c:f1:f4:61:3c:7f:d4:6c:f4:f4:18:8f:ee:5d:d2:ef:
f2:5c:e8:e1:00:cd:10:66:4a:78:d5:30:19:cd:03:45:f5:cb:
90:3b:88:11:8a:c4:54:97:b8:38:80:e4:8e:60:70:fc:44:c7:
c4:66:e2:b4:87:4b:a6:6e:3e:9b:88:49:8e:ac:47:71:89:44:
f6:9f:9c:e2:6e:6b:5f:b4:28:6c:12:09:7c:8b:dd:09:43:fd:
5b:0a:e2:37:11:b0:e7:40:c0:38:84:ee:48:ec:71:00:ba:db:
78:29:a4:f8:09:e5:07:fe:57:35:32:eb:fd:96:f1:6a:6c:0e:
1e:ee:a3:49:3b:c1:91:42:8c:1f:25:54:72:3b:f8:05:a2:86:
0d:a1:df:10:e9:47:ca:5c:2d:93:3a:7c:92:02:8e:6b:ad:13:
37:0a:49:12:f3:cb:73:24:ce:9e:1d:be:6e:81:f9:b1:7f:4e:
a0:ee:35:10:2a:70:9c:52:0f:c9:16:de:b5:de:c3:47:81:e3:
73:61:f4:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDJximMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
ZmJiYjE3M2MyMTdhYTgwMzBmYzZkOTM3OTg0MzU3OTIyOWNlMzEwHhcNMjQwMjAx
MTU0OTMzWhcNMjYwMjAxMTU0OTMzWjAzMTEwLwYDVQQDEyg4OGE0NDliZWYxNTc2
ZDFmYTdhYWQyMmRjMWIwOGVmYzhlNTcxYzgyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgA63WpJmdEqcfMyQ+1vw8X5Q99JwkZE+GgfeP+P8xoJkGMcC
xZ6nI1YAtyi5vRA/Uw44vspqZuFPkIq6A4L94mSTbMgcirBDVhMiaHr8m/QCDwL5
Ltk8iY/EMkK4oXP3FqikV0OE+5D9NFUZx/Ko4c06OcLvgktHoh79HRQAquDEsG4/
Bl8mxSHbwZPNGQbv4EVF6JfnSDePvJFyqhjLwQ37zfj5zmlyLSlrfG7ijQcBueTt
2SpPZF48HegskA89uuGIox0064lX5JmrU9aHkrG+Nkge6Fb5klUDhndgpJGS9u5Z
bduIKbglsfX2BS4n5OEEGPmpGa0bExbEtcivNwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFNK4QxsdN9IIKXBVOfuMLev7YA7EMB8GA1UdIwQYMBaAFG3Yh857qEWbykhx
HffAqeGP1nKBMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDVmYmJi
MTczYzIxN2FhODAzMGZjNmQ5Mzc5ODQzNTc5MjI5Y2UzMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDRhZmQxNzAtMDc1ZS00M2RmLWI0YTEtYzM0Zjc2
YzE4Y2NlLzg4YTQ0OWJlZjE1NzZkMWZhN2FhZDIyZGMxYjA4ZWZjOGU1NzFjODIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NGFmZDE3MC0wNzVlLTQzZGYtYjRhMS1jMzRm
NzZjMThjY2UvMDVmYmJiMTczYzIxN2FhODAzMGZjNmQ5Mzc5ODQzNTc5MjI5Y2Uz
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAZjnbjANBAIAAjAHAwUAKAADADANBgkqhkiG9w0BAQsFAAOC
AQEAAVJX5XvQCBXivtSoUHmusF1l4Nzit2xOmJ46fG/X+XbhGIwrVkpiKrpWvKxs
VGOzvIyhpH/M7mKM8fRhPH/UbPT0GI/uXdLv8lzo4QDNEGZKeNUwGc0DRfXLkDuI
EYrEVJe4OIDkjmBw/ETHxGbitIdLpm4+m4hJjqxHcYlE9p+c4m5rX7QobBIJfIvd
CUP9WwriNxGw50DAOITuSOxxALrbeCmk+AnlB/5XNTLr/ZbxamwOHu6jSTvBkUKM
HyVUcjv4BaKGDaHfEOlHylwtkzp8kgKOa60TNwpJEvPLcyTOnh2+boH5sX9OoO41
ECpwnFIPyRbetd7DR4Hjc2H0vg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org