Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/20edcbfac0dd667fe8de6666ddb357d5fb9a4579.roa
File: 20edcbfac0dd667fe8de6666ddb357d5fb9a4579.roa (raw, json)
Hash identifier: awStBgNf1/q1ww9F6Ok+TxIJBIz9ytMlVs40pg2MhgE=
Subject key identifier: F7:DB:64:19:4A:3A:9A:43:A7:53:BA:0C:70:17:60:64:35:C7:1A:BD
Certificate issuer: /CN=41f7ad2592489a8e238bbf1d55399b9278c418a6
Certificate serial: 0D832B
Authority key identifier: 08:32:2C:C5:41:BF:5F:AD:D4:CC:8F:B3:94:99:13:E4:E6:72:EF:8D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41f7ad2592489a8e238bbf1d55399b9278c418a6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/20edcbfac0dd667fe8de6666ddb357d5fb9a4579.roa
Signing time: Wed 24 Mar 2021 22:51:22 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 16973
IP address blocks: 168.205.64.0/23 maxlen: 24
168.205.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 885547 (0xd832b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f7ad2592489a8e238bbf1d55399b9278c418a6
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=20edcbfac0dd667fe8de6666ddb357d5fb9a4579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:e8:05:1a:96:f3:e6:5c:8e:6b:99:9c:ed:
02:6d:c1:fd:26:56:4c:79:55:c7:53:4b:88:06:82:
35:72:a0:be:78:4d:70:63:9e:cd:22:5f:28:20:f6:
75:7c:54:55:0f:78:66:9d:da:e9:2c:6e:0e:d4:50:
6b:91:69:23:fd:fb:65:f6:c6:52:48:dd:05:75:fd:
69:60:a0:92:2a:a9:37:7d:6e:5a:78:1f:cf:29:19:
a2:a6:ce:32:72:f5:f5:63:17:8b:ef:e5:d8:48:8b:
bd:da:ce:0d:91:e7:08:ac:35:1c:fc:cc:d4:67:05:
27:3e:a4:6f:47:3c:40:7f:0b:21:ce:fc:e0:65:99:
f2:fb:a4:e5:cd:f0:02:fe:c9:bf:8d:96:1d:3e:a7:
d5:f7:2b:34:97:c3:49:82:07:e7:f9:5d:d8:a3:a1:
27:81:b2:ff:cd:e5:b5:9f:1e:1c:05:b7:3d:c2:37:
c7:ab:cb:fa:35:a1:fa:85:4e:18:9a:54:04:06:91:
57:85:f8:81:e1:2f:42:57:34:ab:86:4d:c3:b6:ea:
37:fa:28:5d:2f:af:ce:65:0d:2f:d3:39:d3:ba:5c:
85:56:aa:b5:d7:d8:e4:71:33:86:5f:f0:47:ec:25:
9e:b2:07:34:b7:eb:e2:27:b9:bf:d5:46:a4:87:10:
7a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DB:64:19:4A:3A:9A:43:A7:53:BA:0C:70:17:60:64:35:C7:1A:BD
X509v3 Authority Key Identifier:
keyid:08:32:2C:C5:41:BF:5F:AD:D4:CC:8F:B3:94:99:13:E4:E6:72:EF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41f7ad2592489a8e238bbf1d55399b9278c418a6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/20edcbfac0dd667fe8de6666ddb357d5fb9a4579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/41f7ad2592489a8e238bbf1d55399b9278c418a6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.64.0-168.205.66.255
Signature Algorithm: sha256WithRSAEncryption
65:cb:4c:e6:0e:0c:b6:9d:62:ac:0d:0b:26:94:89:40:98:0a:
5f:a4:82:6b:3d:29:51:12:6b:48:8c:04:ca:b8:f8:d9:d3:ec:
7f:20:ed:6b:c9:bb:0c:f4:f4:ac:46:43:fe:ba:a6:d1:93:4c:
3f:c7:8b:5d:47:0d:85:36:66:ea:ab:c2:13:62:7e:67:8f:cf:
70:94:f7:56:38:8c:8a:2c:02:8a:71:35:75:5a:8d:76:f2:b3:
4b:ab:1f:f6:43:63:38:97:a1:9e:a1:59:8c:5f:a3:35:b4:64:
64:d9:6c:61:28:64:05:d7:8c:f7:01:ef:58:92:41:87:72:d0:
81:d2:cc:1b:0d:3f:37:45:b7:97:e2:f3:95:40:c6:14:c5:b0:
0d:3b:ba:55:0d:89:af:3b:d3:78:76:03:e0:3d:68:e5:f9:32:
fd:12:96:b3:5c:7e:1e:ac:76:1c:71:88:0b:cc:33:9d:8d:92:
66:a6:5f:3a:09:08:38:ba:12:5f:4b:c4:16:a1:be:0c:09:c5:
e8:17:7d:46:ed:93:d0:9f:d7:32:76:15:5a:f0:d0:fa:e3:df:
38:ca:0b:ec:42:b5:19:22:d0:1e:f8:07:e6:ca:7e:21:6b:91:
02:11:84:a0:34:62:63:c3:59:e7:75:18:35:ba:e7:02:72:a5:
89:3f:c2:da
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDDYMrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQx
ZjdhZDI1OTI0ODlhOGUyMzhiYmYxZDU1Mzk5YjkyNzhjNDE4YTYwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEygyMGVkY2JmYWMwZGQ2
NjdmZThkZTY2NjZkZGIzNTdkNWZiOWE0NTc5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwY3oBRqW8+ZcjmuZnO0CbcH9JlZMeVXHU0uIBoI1cqC+eE1w
Y57NIl8oIPZ1fFRVD3hmndrpLG4O1FBrkWkj/ftl9sZSSN0Fdf1pYKCSKqk3fW5a
eB/PKRmips4ycvX1YxeL7+XYSIu92s4NkecIrDUc/MzUZwUnPqRvRzxAfwshzvzg
ZZny+6TlzfAC/sm/jZYdPqfV9ys0l8NJggfn+V3Yo6EngbL/zeW1nx4cBbc9wjfH
q8v6NaH6hU4YmlQEBpFXhfiB4S9CVzSrhk3Dtuo3+ihdL6/OZQ0v0znTulyFVqq1
19jkcTOGX/BH7CWesgc0t+viJ7m/1UakhxB6DwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFPfbZBlKOppDp1O6DHAXYGQ1xxq9MB8GA1UdIwQYMBaAFAgyLMVBv1+t1MyP
s5SZE+Tmcu+NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDFmN2Fk
MjU5MjQ4OWE4ZTIzOGJiZjFkNTUzOTliOTI3OGM0MThhNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDY0YmFhNGQtMTdmNS00MjMyLWFiM2MtNzM2MmM5
ZWFiYTgxLzIwZWRjYmZhYzBkZDY2N2ZlOGRlNjY2NmRkYjM1N2Q1ZmI5YTQ1Nzku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NjRiYWE0ZC0xN2Y1LTQyMzItYWIzYy03MzYy
YzllYWJhODEvNDFmN2FkMjU5MjQ4OWE4ZTIzOGJiZjFkNTUzOTliOTI3OGM0MThh
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQGqM1AAwQAqM1CMA0GCSqGSIb3DQEBCwUAA4IBAQBly0zm
Dgy2nWKsDQsmlIlAmApfpIJrPSlREmtIjATKuPjZ0+x/IO1rybsM9PSsRkP+uqbR
k0w/x4tdRw2FNmbqq8ITYn5nj89wlPdWOIyKLAKKcTV1Wo128rNLqx/2Q2M4l6Ge
oVmMX6M1tGRk2WxhKGQF14z3Ae9YkkGHctCB0swbDT83RbeX4vOVQMYUxbANO7pV
DYmvO9N4dgPgPWjl+TL9EpazXH4erHYccYgLzDOdjZJmpl86CQg4uhJfS8QWob4M
CcXoF31G7ZPQn9cydhVa8ND64984ygvsQrUZItAe+Afmyn4ha5ECEYSgNGJjw1nn
dRg1uucCcqWJP8La
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org