Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/925c333bcfb041e17ddcac4edb5815a52295d20e.roa
File: 925c333bcfb041e17ddcac4edb5815a52295d20e.roa (raw, json)
Hash identifier: BB7axT0sv0vH+Y+eJgKjQQ4XkQRrPTTmPt8sgflecJQ=
Subject key identifier: D2:4B:DE:EF:BA:1F:B9:6A:B7:E4:27:6B:19:45:2D:60:32:3C:08:1B
Certificate issuer: /CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Certificate serial: 14C557
Authority key identifier: FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/925c333bcfb041e17ddcac4edb5815a52295d20e.roa
Signing time: Fri 08 Mar 2024 16:57:28 +0000
ROA not before: Fri 08 Mar 2024 16:57:26 +0000
ROA not after: Sun 08 Mar 2026 17:57:26 +0000
asID: 7004
IP address blocks: 164.77.27.0/24 maxlen: 24
164.77.28.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1361239 (0x14c557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Validity
Not Before: Mar 8 16:57:26 2024 GMT
Not After : Mar 8 17:57:26 2026 GMT
Subject: CN=925c333bcfb041e17ddcac4edb5815a52295d20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f1:6c:ed:45:70:c4:ff:8a:be:55:f3:0e:86:
08:ae:97:f5:89:38:7a:0f:63:66:d4:e7:2c:88:38:
56:d3:c0:96:99:45:4c:d5:88:63:32:da:24:b8:cd:
e2:84:ec:fd:97:11:47:74:0b:fb:15:fa:e1:ac:c0:
fe:5b:f2:d2:58:7a:7b:3f:9d:d3:b7:3c:29:0b:8b:
d5:8d:d4:6c:2c:08:4a:74:42:14:44:44:e9:5c:09:
a7:60:4c:0d:cf:94:f7:49:05:b7:aa:77:fd:cc:66:
b7:a2:98:b5:fd:24:35:52:12:1b:f5:b0:5d:5e:34:
83:9c:13:ca:11:c4:75:bf:a5:7c:79:67:51:28:7d:
ea:d6:ef:cb:34:6b:98:8a:e7:6f:dc:67:0e:c4:10:
43:76:e3:af:bf:e3:7f:b4:6b:56:0a:df:34:d5:48:
16:04:82:46:74:fb:40:ff:50:31:79:98:eb:3f:55:
a5:40:6b:77:32:b9:b0:f4:b0:68:ea:bb:47:43:f8:
1d:92:37:2a:31:0d:9c:ae:8d:99:f2:e0:2d:12:7b:
b8:4a:85:13:bd:db:ab:fb:a0:f1:06:a3:9e:2a:97:
93:9b:ed:b5:88:73:16:59:72:b6:14:94:f8:a9:a1:
79:83:63:fb:5b:6c:24:4b:a4:9f:a9:b1:9a:e1:67:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4B:DE:EF:BA:1F:B9:6A:B7:E4:27:6B:19:45:2D:60:32:3C:08:1B
X509v3 Authority Key Identifier:
keyid:FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/925c333bcfb041e17ddcac4edb5815a52295d20e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/acba41ca66eb0e77192d2d22221e4fb662988a5d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.77.27.0-164.77.29.255
Signature Algorithm: sha256WithRSAEncryption
67:3e:07:80:38:87:12:80:45:dd:55:1c:4c:38:41:cf:0a:4d:
ab:eb:92:c1:a8:a1:94:82:8c:ad:ca:2b:f8:72:53:f9:ef:1a:
0b:b4:f5:e9:6f:88:02:88:90:d7:6b:13:93:40:b3:d3:28:0e:
a9:66:73:07:7c:55:7c:95:52:63:0e:0b:fd:e7:57:60:f8:88:
79:7a:40:07:ab:f9:5f:aa:29:05:93:3d:3a:a9:8e:2b:ab:02:
80:ed:64:c8:82:d4:de:55:ae:4c:25:47:71:79:40:b5:19:6d:
df:01:1a:a7:9a:24:41:ea:14:ec:a0:52:a0:f7:47:2d:4f:14:
1e:1b:de:99:28:a2:9a:4b:de:65:a1:06:f7:c5:c8:c8:c1:13:
f5:9f:c1:2c:10:35:97:dc:2b:0b:6e:3a:46:0f:dc:3a:24:9b:
52:1e:76:b4:cb:d9:ff:3f:a3:97:85:53:f6:d6:af:56:3f:4b:
54:b3:37:92:a2:85:ed:df:b1:0b:e2:94:f1:00:3c:51:ca:9a:
3e:aa:d0:b3:3d:ca:d5:8e:d6:6b:43:76:1e:71:b6:d7:40:4b:
83:ff:cd:a9:5e:a8:6f:52:31:5d:4f:c1:01:93:25:4f:79:d1:
52:da:4e:dd:d9:90:86:9e:6e:58:dd:b8:c3:64:24:55:05:6a:
0c:a4:ba:2e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDFMVXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFj
YmE0MWNhNjZlYjBlNzcxOTJkMmQyMjIyMWU0ZmI2NjI5ODhhNWQwHhcNMjQwMzA4
MTY1NzI2WhcNMjYwMzA4MTc1NzI2WjAzMTEwLwYDVQQDEyg5MjVjMzMzYmNmYjA0
MWUxN2RkY2FjNGVkYjU4MTVhNTIyOTVkMjBlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjvFs7UVwxP+KvlXzDoYIrpf1iTh6D2Nm1OcsiDhW08CWmUVM
1YhjMtokuM3ihOz9lxFHdAv7FfrhrMD+W/LSWHp7P53TtzwpC4vVjdRsLAhKdEIU
RETpXAmnYEwNz5T3SQW3qnf9zGa3opi1/SQ1UhIb9bBdXjSDnBPKEcR1v6V8eWdR
KH3q1u/LNGuYiudv3GcOxBBDduOvv+N/tGtWCt801UgWBIJGdPtA/1AxeZjrP1Wl
QGt3Mrmw9LBo6rtHQ/gdkjcqMQ2cro2Z8uAtEnu4SoUTvdur+6DxBqOeKpeTm+21
iHMWWXK2FJT4qaF5g2P7W2wkS6SfqbGa4Wd/LQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFNJL3u+6H7lqt+QnaxlFLWAyPAgbMB8GA1UdIwQYMBaAFPuOYs7eNW3I9NZd
V2Uaovd80TFgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWNiYTQx
Y2E2NmViMGU3NzE5MmQyZDIyMjIxZTRmYjY2Mjk4OGE1ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDg1NzYyMzEtNDdjYS00YjVlLTg3MDctZjkzYTYy
MjZiMzJmLzkyNWMzMzNiY2ZiMDQxZTE3ZGRjYWM0ZWRiNTgxNWE1MjI5NWQyMGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ODU3NjIzMS00N2NhLTRiNWUtODcwNy1mOTNh
NjIyNmIzMmYvYWNiYTQxY2E2NmViMGU3NzE5MmQyZDIyMjIxZTRmYjY2Mjk4OGE1
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQApE0bAwQBpE0cMA0GCSqGSIb3DQEBCwUAA4IBAQBnPgeA
OIcSgEXdVRxMOEHPCk2r65LBqKGUgoytyiv4clP57xoLtPXpb4gCiJDXaxOTQLPT
KA6pZnMHfFV8lVJjDgv951dg+Ih5ekAHq/lfqikFkz06qY4rqwKA7WTIgtTeVa5M
JUdxeUC1GW3fARqnmiRB6hTsoFKg90ctTxQeG96ZKKKaS95loQb3xcjIwRP1n8Es
EDWX3CsLbjpGD9w6JJtSHna0y9n/P6OXhVP21q9WP0tUszeSooXt37EL4pTxADxR
ypo+qtCzPcrVjtZrQ3YecbbXQEuD/82pXqhvUjFdT8EBkyVPedFS2k7d2ZCGnm5Y
3bjDZCRVBWoMpLou
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:21 2024 by rpki-client on console-ams.rpki-client.org