Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/9fcf168db7c79a8dfd46191c3d5c85e351efaf40.roa
File: 9fcf168db7c79a8dfd46191c3d5c85e351efaf40.roa (raw, json)
Hash identifier: YHcLlZ2lK/7pxs6Rn75wBXApjbcF8lDDs4IhKG/NRt0=
Subject key identifier: 1A:59:91:58:28:C9:75:06:E0:50:E4:3F:D6:61:6D:91:80:39:0B:E4
Certificate issuer: /CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Certificate serial: 14C1A2
Authority key identifier: FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/9fcf168db7c79a8dfd46191c3d5c85e351efaf40.roa
Signing time: Fri 08 Mar 2024 16:57:27 +0000
ROA not before: Fri 08 Mar 2024 16:57:26 +0000
ROA not after: Sun 08 Mar 2026 17:57:26 +0000
asID: 6471
IP address blocks: 164.77.0.0/17 maxlen: 24
164.77.219.0/24 maxlen: 24
164.77.137.0/24 maxlen: 24
164.77.243.0/24 maxlen: 24
164.77.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1360290 (0x14c1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Validity
Not Before: Mar 8 16:57:26 2024 GMT
Not After : Mar 8 17:57:26 2026 GMT
Subject: CN=9fcf168db7c79a8dfd46191c3d5c85e351efaf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:48:f7:1b:7c:b0:20:30:a8:bc:16:16:9f:
d6:6f:f3:0a:a7:ea:9d:c6:c5:d5:88:69:3c:49:0b:
2c:6b:a7:37:f5:1f:60:4a:6e:b5:06:c0:73:c6:f4:
d8:b6:70:32:87:ac:04:ac:97:a7:21:4f:8c:92:59:
58:b0:40:57:a1:1d:c4:91:60:0b:18:54:44:10:c3:
57:c5:d4:9f:c3:d6:a9:2e:15:50:0a:24:52:0a:16:
07:ac:6a:88:f2:63:fc:42:c4:53:90:60:c6:44:f7:
37:21:ba:3d:74:ed:06:bf:a6:3d:5b:cd:81:ed:44:
92:97:d2:5c:ce:3b:f2:89:ec:01:40:c6:87:b3:a1:
f0:9d:0b:a8:69:f2:c8:29:c2:fd:e6:fd:fa:76:a0:
44:f4:bb:9a:4e:5d:03:33:65:ca:e7:b3:15:72:1c:
49:f7:28:ab:71:20:5b:9e:d4:b9:23:e3:23:60:08:
fb:a8:ba:1c:74:25:4b:4d:9b:c5:55:1a:c9:50:55:
b8:9b:92:5f:61:61:8e:8f:1a:59:7f:c9:c2:f5:57:
f1:29:dd:21:7f:76:b6:32:8c:21:64:ee:a1:bc:e6:
d3:95:f8:73:06:90:32:20:8b:f4:43:1c:0d:fc:a1:
15:60:1e:7e:41:3d:5b:16:32:7d:26:0f:d0:77:c7:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:59:91:58:28:C9:75:06:E0:50:E4:3F:D6:61:6D:91:80:39:0B:E4
X509v3 Authority Key Identifier:
keyid:FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/9fcf168db7c79a8dfd46191c3d5c85e351efaf40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/acba41ca66eb0e77192d2d22221e4fb662988a5d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.77.0.0/17
164.77.137.0/24
164.77.157.0/24
164.77.219.0/24
164.77.243.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:15:79:34:53:74:8c:1f:79:be:ce:c6:b9:a5:1b:e8:1b:fa:
0c:a0:95:1a:d3:fe:8b:d6:a5:e9:30:3e:f3:cb:83:cc:4a:79:
46:58:be:b7:61:ce:e6:20:cc:68:ef:41:cb:8d:0d:3b:e9:9a:
e7:3e:07:62:20:21:52:e4:0f:de:46:94:d1:7b:6c:a1:d1:ae:
6d:f0:e9:22:9a:3f:3b:56:d9:51:19:33:22:7d:88:bf:27:34:
75:b1:10:53:5a:a1:fb:10:3b:84:81:6d:d1:3a:2c:67:2c:02:
61:5b:29:f4:bf:ff:53:ee:4b:7d:03:28:89:bb:48:c4:c6:c4:
d8:d6:2d:8e:1b:df:9d:eb:d8:73:cd:b2:6b:cb:7f:97:66:06:
2b:96:f3:6f:25:b7:ef:90:3a:fd:19:ef:db:2d:92:d2:b1:be:
0b:49:80:c5:28:71:1a:88:a3:cb:c3:0e:cc:d9:ef:be:44:96:
3b:ba:ad:38:ea:00:cd:42:23:15:34:ae:ce:d9:84:63:92:16:
38:e0:02:5b:ce:c6:38:8e:e5:ee:0d:98:5f:5b:f4:de:08:d3:
26:16:57:18:9a:31:41:5a:7e:60:15:33:48:69:db:df:c4:9f:
1c:ec:0c:86:37:22:f6:f5:5b:30:2c:9e:35:5d:09:47:eb:20:
b1:17:83:ad
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDFMGiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFj
YmE0MWNhNjZlYjBlNzcxOTJkMmQyMjIyMWU0ZmI2NjI5ODhhNWQwHhcNMjQwMzA4
MTY1NzI2WhcNMjYwMzA4MTc1NzI2WjAzMTEwLwYDVQQDEyg5ZmNmMTY4ZGI3Yzc5
YThkZmQ0NjE5MWMzZDVjODVlMzUxZWZhZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvd9I9xt8sCAwqLwWFp/Wb/MKp+qdxsXViGk8SQssa6c39R9g
Sm61BsBzxvTYtnAyh6wErJenIU+MkllYsEBXoR3EkWALGFREEMNXxdSfw9apLhVQ
CiRSChYHrGqI8mP8QsRTkGDGRPc3Ibo9dO0Gv6Y9W82B7USSl9JczjvyiewBQMaH
s6HwnQuoafLIKcL95v36dqBE9LuaTl0DM2XK57MVchxJ9yircSBbntS5I+MjYAj7
qLocdCVLTZvFVRrJUFW4m5JfYWGOjxpZf8nC9VfxKd0hf3a2MowhZO6hvObTlfhz
BpAyIIv0QxwN/KEVYB5+QT1bFjJ9Jg/Qd8fm+wIDAQABo4ICczCCAm8wHQYDVR0O
BBYEFBpZkVgoyXUG4FDkP9ZhbZGAOQvkMB8GA1UdIwQYMBaAFPuOYs7eNW3I9NZd
V2Uaovd80TFgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWNiYTQx
Y2E2NmViMGU3NzE5MmQyZDIyMjIxZTRmYjY2Mjk4OGE1ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDg1NzYyMzEtNDdjYS00YjVlLTg3MDctZjkzYTYy
MjZiMzJmLzlmY2YxNjhkYjdjNzlhOGRmZDQ2MTkxYzNkNWM4NWUzNTFlZmFmNDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ODU3NjIzMS00N2NhLTRiNWUtODcwNy1mOTNh
NjIyNmIzMmYvYWNiYTQxY2E2NmViMGU3NzE5MmQyZDIyMjIxZTRmYjY2Mjk4OGE1
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQo
MCYwJAQCAAEwHgMEB6RNAAMEAKRNiQMEAKRNnQMEAKRN2wMEAKRN8zANBgkqhkiG
9w0BAQsFAAOCAQEALxV5NFN0jB95vs7GuaUb6Bv6DKCVGtP+i9al6TA+88uDzEp5
Rli+t2HO5iDMaO9By40NO+ma5z4HYiAhUuQP3kaU0XtsodGubfDpIpo/O1bZURkz
In2Ivyc0dbEQU1qh+xA7hIFt0TosZywCYVsp9L//U+5LfQMoibtIxMbE2NYtjhvf
nevYc82ya8t/l2YGK5bzbyW375A6/Rnv2y2S0rG+C0mAxShxGoijy8MOzNnvvkSW
O7qtOOoAzUIjFTSuztmEY5IWOOACW87GOI7l7g2YX1v03gjTJhZXGJoxQVp+YBUz
SGnb38SfHOwMhjci9vVbMCyeNV0JR+sgsReDrQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org