Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/d834f649e26d322fcda2a78563ccdc6f9df4402c.roa
File: d834f649e26d322fcda2a78563ccdc6f9df4402c.roa (raw, json)
Hash identifier: wxzncHmXWcXgmAKIr+JQot9IEggOvk+2XZXOcQwcomE=
Subject key identifier: D6:2A:72:DD:1C:BD:F2:DF:56:23:28:60:9D:3F:B3:03:4C:02:87:77
Certificate issuer: /CN=ec902101fc98565e74f436a72f5cb8e35599e267
Certificate serial: 0429A1
Authority key identifier: 82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/d834f649e26d322fcda2a78563ccdc6f9df4402c.roa
Signing time: Fri 20 Oct 2023 12:16:32 +0000
ROA not before: Fri 20 Oct 2023 12:16:32 +0000
ROA not after: Mon 20 Oct 2025 12:16:32 +0000
asID: 27680
IP address blocks: 200.91.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272801 (0x429a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec902101fc98565e74f436a72f5cb8e35599e267
Validity
Not Before: Oct 20 12:16:32 2023 GMT
Not After : Oct 20 12:16:32 2025 GMT
Subject: CN=d834f649e26d322fcda2a78563ccdc6f9df4402c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b1:e9:13:19:98:09:5f:22:9a:75:0d:db:c9:
a8:a1:49:20:a6:41:32:63:f3:43:d4:4e:41:d0:ec:
68:b5:f8:84:8a:f6:ee:77:8f:60:48:8c:73:53:87:
fa:85:34:43:0f:70:3e:99:4f:0d:3b:aa:e5:0c:23:
76:f7:6a:ee:37:cc:a5:e7:4d:2e:a3:60:ca:da:b6:
ba:1c:c9:d7:7f:83:86:47:c9:20:41:ed:62:69:57:
22:2a:ea:66:73:2a:6a:d8:8a:9a:c0:3b:ef:0b:36:
4d:27:2d:03:69:fe:33:e0:87:eb:e0:3d:69:8e:e9:
68:cb:62:13:ce:1d:32:b8:bf:a6:c0:a6:1a:8f:bd:
7e:e6:67:d7:ee:0d:1f:10:d7:1c:d6:3a:27:22:ac:
37:3d:59:a7:7b:07:e9:c3:8a:f5:71:b6:6a:59:06:
bf:d9:f9:47:e3:c5:3b:41:a9:4e:ed:55:a1:b6:80:
c5:68:ba:ff:95:7a:e9:ad:16:ea:54:f1:59:40:0c:
89:6a:08:bc:28:5c:fd:28:8f:e6:92:27:cb:2e:7d:
17:80:72:d3:72:02:46:07:52:a7:95:41:7a:a5:13:
b8:a3:d5:1a:9a:24:31:e6:90:fc:d6:8e:3e:c2:06:
1d:90:e3:d4:3b:52:82:3f:84:4c:84:ee:a9:d0:40:
8e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2A:72:DD:1C:BD:F2:DF:56:23:28:60:9D:3F:B3:03:4C:02:87:77
X509v3 Authority Key Identifier:
keyid:82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/d834f649e26d322fcda2a78563ccdc6f9df4402c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/ec902101fc98565e74f436a72f5cb8e35599e267.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.91.1.0/24
Signature Algorithm: sha256WithRSAEncryption
32:31:14:89:01:a3:df:cf:f9:3f:f0:9f:29:67:66:10:a3:57:
6d:e0:97:b9:38:4f:e7:28:c6:94:3e:f2:6e:10:c4:a6:37:d7:
21:1b:f0:41:29:26:e6:be:9c:56:23:c8:9c:a2:5b:9c:e3:c1:
0e:52:99:9b:78:61:39:d7:ed:a3:ad:85:3a:e8:97:c6:30:c6:
54:9a:79:2c:3d:6b:b9:82:00:f9:77:b4:cb:78:19:21:54:b3:
ee:87:c6:a0:d9:52:48:b9:1d:88:80:5c:a7:92:82:d8:d2:5e:
b0:51:04:72:93:c8:31:88:0d:93:49:58:87:cf:55:01:0f:21:
0c:cf:0e:0d:ac:d5:0f:8c:46:8e:7d:26:12:3f:60:21:c3:12:
45:6c:81:a7:d0:a6:a2:8c:5b:a3:4e:f2:96:a6:22:a9:ff:4b:
3f:96:a1:3f:26:bd:61:fe:ae:6f:a5:38:15:a3:b0:75:ea:f7:
0f:0b:8a:31:ba:8a:e0:1f:04:1d:af:1f:3f:a7:6b:b0:65:83:
3b:2a:66:85:31:08:8f:7a:b9:02:49:76:79:5f:5c:5a:5f:f4:
a2:11:49:f6:fb:bf:ba:a3:52:dd:7f:08:49:eb:4b:11:82:9d:
6e:5b:fb:71:11:41:50:b7:0d:8f:c0:2b:37:b7:39:c2:15:5b:
ea:b0:d5:2b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBCmhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVj
OTAyMTAxZmM5ODU2NWU3NGY0MzZhNzJmNWNiOGUzNTU5OWUyNjcwHhcNMjMxMDIw
MTIxNjMyWhcNMjUxMDIwMTIxNjMyWjAzMTEwLwYDVQQDEyhkODM0ZjY0OWUyNmQz
MjJmY2RhMmE3ODU2M2NjZGM2ZjlkZjQ0MDJjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjrHpExmYCV8imnUN28mooUkgpkEyY/ND1E5B0OxotfiEivbu
d49gSIxzU4f6hTRDD3A+mU8NO6rlDCN292ruN8yl500uo2DK2ra6HMnXf4OGR8kg
Qe1iaVciKupmcypq2IqawDvvCzZNJy0Daf4z4Ifr4D1pjuloy2ITzh0yuL+mwKYa
j71+5mfX7g0fENcc1jonIqw3PVmnewfpw4r1cbZqWQa/2flH48U7QalO7VWhtoDF
aLr/lXrprRbqVPFZQAyJagi8KFz9KI/mkifLLn0XgHLTcgJGB1KnlUF6pRO4o9Ua
miQx5pD81o4+wgYdkOPUO1KCP4RMhO6p0ECOJQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNYqct0cvfLfViMoYJ0/swNMAod3MB8GA1UdIwQYMBaAFIK+FpGvc69W3+B8
R/42ptdtod8bMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWM5MDIx
MDFmYzk4NTY1ZTc0ZjQzNmE3MmY1Y2I4ZTM1NTk5ZTI2Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGFlNmMyZDktNmE5NC00OWQ5LTlhNDgtNTEzODgz
MWQzMzYyL2Q4MzRmNjQ5ZTI2ZDMyMmZjZGEyYTc4NTYzY2NkYzZmOWRmNDQwMmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80YWU2YzJkOS02YTk0LTQ5ZDktOWE0OC01MTM4
ODMxZDMzNjIvZWM5MDIxMDFmYzk4NTY1ZTc0ZjQzNmE3MmY1Y2I4ZTM1NTk5ZTI2
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhbATANBgkqhkiG9w0BAQsFAAOCAQEAMjEUiQGj38/5P/Cf
KWdmEKNXbeCXuThP5yjGlD7ybhDEpjfXIRvwQSkm5r6cViPInKJbnOPBDlKZm3hh
Odfto62FOuiXxjDGVJp5LD1ruYIA+Xe0y3gZIVSz7ofGoNlSSLkdiIBcp5KC2NJe
sFEEcpPIMYgNk0lYh89VAQ8hDM8ODazVD4xGjn0mEj9gIcMSRWyBp9Cmooxbo07y
lqYiqf9LP5ahPya9Yf6ub6U4FaOwder3DwuKMbqK4B8EHa8fP6drsGWDOypmhTEI
j3q5Akl2eV9cWl/0ohFJ9vu/uqNS3X8ISetLEYKdblv7cRFBULcNj8ArN7c5whVb
6rDVKw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org