Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/3075e583bb468a24b42a1daa7c3975020aa1221f.roa
File: 3075e583bb468a24b42a1daa7c3975020aa1221f.roa (raw, json)
Hash identifier: 37TyFDsDV/4xniwYlJpPWEQsIPNfDbwMOTucC4+UKZ4=
Subject key identifier: F9:8A:05:C5:23:51:87:00:33:04:3C:AB:BE:FD:54:6F:76:A3:77:FC
Certificate issuer: /CN=652b18729db050982b6f745b4c791475c88ba009
Certificate serial: 2417C7
Authority key identifier: 0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/3075e583bb468a24b42a1daa7c3975020aa1221f.roa
Signing time: Tue 31 Oct 2023 00:25:05 +0000
ROA not before: Tue 31 Oct 2023 00:25:05 +0000
ROA not after: Fri 31 Oct 2025 00:25:05 +0000
asID: 267857
IP address blocks: 170.79.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2365383 (0x2417c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=652b18729db050982b6f745b4c791475c88ba009
Validity
Not Before: Oct 31 00:25:05 2023 GMT
Not After : Oct 31 00:25:05 2025 GMT
Subject: CN=3075e583bb468a24b42a1daa7c3975020aa1221f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ed:27:c1:84:e3:eb:c8:8a:90:b3:64:f2:2c:
e2:03:77:6c:9d:cc:5d:e1:07:9b:a5:e0:4f:8b:c5:
c9:8e:c1:52:f1:f4:69:39:8f:4c:ab:e2:31:b7:c8:
4c:1f:13:35:24:66:45:45:a7:75:d3:36:ad:d3:7a:
13:17:45:57:72:7f:01:e2:dd:53:e4:b2:a5:ba:87:
e9:7a:ad:30:37:4e:14:82:35:95:b5:11:7c:4c:5d:
d6:8e:50:0b:82:2b:4a:93:14:20:93:a0:09:ca:36:
0a:95:38:2e:0d:84:81:8c:44:c6:0c:74:3e:a6:f5:
49:eb:77:86:19:16:a8:bb:6a:eb:c2:37:ed:a5:e6:
cb:e4:63:a1:fb:35:16:6f:28:98:9a:ea:68:32:4b:
25:ca:47:59:2b:75:8a:4c:5b:59:3c:24:7d:c3:06:
e2:8f:92:60:20:20:94:03:02:10:bd:25:b7:1a:0a:
f6:18:47:a2:49:33:ae:88:3e:98:38:29:50:82:93:
5d:63:6b:3f:73:43:03:3b:03:fa:95:19:8d:1a:8d:
ff:72:66:8c:1f:76:38:56:7f:6d:19:f0:a6:57:e6:
0a:32:ff:79:2f:ad:1e:ff:c6:65:70:de:51:c4:35:
d3:ba:d8:67:69:63:c0:d1:58:82:66:0d:cf:02:8f:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8A:05:C5:23:51:87:00:33:04:3C:AB:BE:FD:54:6F:76:A3:77:FC
X509v3 Authority Key Identifier:
keyid:0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/3075e583bb468a24b42a1daa7c3975020aa1221f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/652b18729db050982b6f745b4c791475c88ba009.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.88.0/22
Signature Algorithm: sha256WithRSAEncryption
43:c3:f8:d0:04:74:83:c6:e4:9f:44:18:33:e3:91:e2:37:50:
3e:a4:e5:15:82:20:f7:e1:f4:65:e9:6e:2e:c7:33:27:4d:09:
c1:2a:2b:f2:6b:d5:87:a7:48:b8:e5:9e:2e:a0:ad:70:98:0a:
ed:2c:cf:bf:32:4d:c4:b6:a7:db:05:e7:08:48:73:ee:68:06:
5e:9b:95:e8:b8:51:d2:d2:c5:2a:73:ac:b0:04:ee:f5:10:e1:
88:ed:f4:b4:14:1f:c8:15:6c:c2:46:20:b9:5d:a7:5d:3a:de:
80:e2:ed:80:80:98:5f:95:92:7c:b5:5c:85:ef:fc:42:17:26:
72:2e:0c:9f:5b:02:40:17:6f:40:50:21:ca:ac:b8:fb:ea:26:
92:1e:54:41:90:b7:bf:b2:17:da:2c:90:40:71:d4:5e:fa:08:
1c:d1:3b:58:fa:12:da:fc:48:0a:eb:5c:32:4f:1b:31:e8:a7:
e0:f8:dc:46:b2:6f:3f:e4:c8:37:92:ee:4e:44:da:ea:ab:16:
1c:ff:71:34:02:fd:56:90:fc:f9:70:3c:03:72:27:5f:72:1f:
d9:6d:24:30:2a:90:34:2a:89:c0:ef:91:a6:a2:02:fe:d6:c7:
4a:ee:6e:8a:f9:b0:2c:0b:f5:72:01:5d:c7:90:6b:a6:42:30:
1e:f8:f5:4d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJBfHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY1
MmIxODcyOWRiMDUwOTgyYjZmNzQ1YjRjNzkxNDc1Yzg4YmEwMDkwHhcNMjMxMDMx
MDAyNTA1WhcNMjUxMDMxMDAyNTA1WjAzMTEwLwYDVQQDEygzMDc1ZTU4M2JiNDY4
YTI0YjQyYTFkYWE3YzM5NzUwMjBhYTEyMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAge0nwYTj68iKkLNk8iziA3dsncxd4QebpeBPi8XJjsFS8fRp
OY9Mq+Ixt8hMHxM1JGZFRad10zat03oTF0VXcn8B4t1T5LKluofpeq0wN04UgjWV
tRF8TF3WjlALgitKkxQgk6AJyjYKlTguDYSBjETGDHQ+pvVJ63eGGRaou2rrwjft
pebL5GOh+zUWbyiYmupoMkslykdZK3WKTFtZPCR9wwbij5JgICCUAwIQvSW3Ggr2
GEeiSTOuiD6YOClQgpNdY2s/c0MDOwP6lRmNGo3/cmaMH3Y4Vn9tGfCmV+YKMv95
L60e/8ZlcN5RxDXTuthnaWPA0ViCZg3PAo/nXQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPmKBcUjUYcAMwQ8q779VG92o3f8MB8GA1UdIwQYMBaAFA8lbcDHwvmKUQRW
oRM5iAG6Tp1RMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjUyYjE4
NzI5ZGIwNTA5ODJiNmY3NDViNGM3OTE0NzVjODhiYTAwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGM4OThlZmYtNzg4My00YjIzLTkyNDMtYzJkNzJl
NjNiNGVlLzMwNzVlNTgzYmI0NjhhMjRiNDJhMWRhYTdjMzk3NTAyMGFhMTIyMWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80Yzg5OGVmZi03ODgzLTRiMjMtOTI0My1jMmQ3
MmU2M2I0ZWUvNjUyYjE4NzI5ZGIwNTA5ODJiNmY3NDViNGM3OTE0NzVjODhiYTAw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqpPWDANBgkqhkiG9w0BAQsFAAOCAQEAQ8P40AR0g8bkn0QY
M+OR4jdQPqTlFYIg9+H0ZeluLsczJ00JwSor8mvVh6dIuOWeLqCtcJgK7SzPvzJN
xLan2wXnCEhz7mgGXpuV6LhR0tLFKnOssATu9RDhiO30tBQfyBVswkYguV2nXTre
gOLtgICYX5WSfLVche/8Qhcmci4Mn1sCQBdvQFAhyqy4++omkh5UQZC3v7IX2iyQ
QHHUXvoIHNE7WPoS2vxICutcMk8bMein4PjcRrJvP+TIN5LuTkTa6qsWHP9xNAL9
VpD8+XA8A3InX3If2W0kMCqQNCqJwO+RpqIC/tbHSu5uivmwLAv1cgFdx5BrpkIw
Hvj1TQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org