Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/ec17a7c43c5a75433178648f4c43e6d2614571d5.roa
File: ec17a7c43c5a75433178648f4c43e6d2614571d5.roa (raw, json)
Hash identifier: mwOechS9HveiUz75qbOj2Q+OlWalcmv4vPXREvN3gTw=
Subject key identifier: 1D:0F:7C:7C:6B:DA:45:73:19:E0:9B:CF:26:43:67:C0:88:75:AA:F9
Certificate issuer: /CN=652b18729db050982b6f745b4c791475c88ba009
Certificate serial: 1ED705
Authority key identifier: 0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/ec17a7c43c5a75433178648f4c43e6d2614571d5.roa
Signing time: Fri 14 Apr 2023 08:30:02 +0000
ROA not before: Thu 13 Apr 2023 08:30:02 +0000
ROA not after: Sat 12 Apr 2025 08:30:02 +0000
asID: 262186
IP address blocks: 170.79.89.0/24 maxlen: 24
170.79.90.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2021125 (0x1ed705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=652b18729db050982b6f745b4c791475c88ba009
Validity
Not Before: Apr 13 08:30:02 2023 GMT
Not After : Apr 12 08:30:02 2025 GMT
Subject: CN=ec17a7c43c5a75433178648f4c43e6d2614571d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:4f:ea:22:37:82:11:97:a5:27:2d:8b:73:
93:46:88:25:a1:7a:03:da:ad:e5:02:df:d8:5d:fd:
bd:5a:4a:85:c6:5d:ec:04:1c:82:83:2a:7c:b7:d7:
cd:04:c6:8b:bc:c4:86:6b:6a:0c:42:2f:62:c7:5e:
5d:ca:b2:f8:3f:88:b0:64:16:d6:b4:44:f1:c5:cb:
b5:0c:bd:a3:a0:84:4a:87:29:d5:63:96:3f:a3:a4:
d5:85:15:40:5f:bb:c5:c4:c8:66:fe:5c:fc:a4:56:
77:61:0c:9f:ef:12:06:9e:6a:59:d3:1e:12:05:ca:
b2:7e:1a:a4:35:33:92:a1:da:80:44:af:04:37:ab:
dc:68:e7:20:80:86:7e:58:7b:5a:5a:8d:96:e4:24:
ca:d2:14:7a:40:e6:19:ce:83:ec:98:6f:ce:fe:50:
88:1b:22:f7:ee:20:a9:3b:45:b4:2a:47:9d:63:fe:
66:e6:2c:89:ec:52:93:e6:be:67:0b:00:98:70:11:
56:fb:12:2e:06:3e:9e:56:88:4b:3d:13:2c:8a:3b:
f7:0f:f5:b8:02:6e:09:55:f2:b9:21:3b:1d:f3:21:
6d:42:da:67:67:c3:d5:2a:70:8e:a9:ed:82:44:0d:
ee:41:ae:79:86:1d:42:e5:9a:58:4b:19:01:3c:6c:
e7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0F:7C:7C:6B:DA:45:73:19:E0:9B:CF:26:43:67:C0:88:75:AA:F9
X509v3 Authority Key Identifier:
keyid:0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/ec17a7c43c5a75433178648f4c43e6d2614571d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/652b18729db050982b6f745b4c791475c88ba009.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.89.0-170.79.91.255
Signature Algorithm: sha256WithRSAEncryption
36:a4:23:b7:3e:28:94:1b:d4:4d:75:fe:1e:4c:b9:a4:21:00:
8b:49:d3:b1:af:62:a0:e6:fb:54:ea:da:f5:f6:01:82:0d:ee:
6e:56:7a:0b:e2:a1:b7:14:9b:3b:c1:3e:1d:e8:10:5c:e4:6f:
82:89:23:ee:2d:5d:68:48:18:87:fe:72:bd:3d:7d:ee:3b:15:
3c:e2:d1:1c:70:b6:35:02:7e:a3:a7:e7:40:9f:ad:c0:e7:c7:
00:39:f3:f0:58:30:29:b4:07:a7:0f:a5:6c:2c:76:3d:f1:5c:
f6:33:35:2d:8b:81:a3:2a:c0:97:11:28:93:16:9d:4c:ae:c3:
61:3c:3f:10:80:0d:ac:fd:d3:7c:2b:84:c2:84:0a:5c:f2:05:
10:ef:c4:fb:26:21:a3:6a:92:9d:fe:db:10:81:e6:32:e9:c0:
b1:3a:d4:65:b3:f2:30:0d:7d:c6:ba:bd:c2:e5:1b:f9:df:a7:
9c:b6:3c:1b:38:68:20:bb:e5:a3:e1:af:37:51:24:82:46:f2:
2a:99:9f:7d:eb:91:31:10:7e:1b:bc:bd:2c:e9:1e:b2:65:aa:
87:21:d3:63:57:bc:c6:a0:2a:ba:c5:85:2a:b4:6e:65:f7:72:
e8:0f:4f:84:3c:05:e5:81:3c:8f:78:c9:41:d3:a6:a7:d8:ed:
11:ab:8d:c7
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDHtcFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY1
MmIxODcyOWRiMDUwOTgyYjZmNzQ1YjRjNzkxNDc1Yzg4YmEwMDkwHhcNMjMwNDEz
MDgzMDAyWhcNMjUwNDEyMDgzMDAyWjAzMTEwLwYDVQQDEyhlYzE3YTdjNDNjNWE3
NTQzMzE3ODY0OGY0YzQzZTZkMjYxNDU3MWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApRtP6iI3ghGXpScti3OTRogloXoD2q3lAt/YXf29WkqFxl3s
BByCgyp8t9fNBMaLvMSGa2oMQi9ix15dyrL4P4iwZBbWtETxxcu1DL2joIRKhynV
Y5Y/o6TVhRVAX7vFxMhm/lz8pFZ3YQyf7xIGnmpZ0x4SBcqyfhqkNTOSodqARK8E
N6vcaOcggIZ+WHtaWo2W5CTK0hR6QOYZzoPsmG/O/lCIGyL37iCpO0W0KkedY/5m
5iyJ7FKT5r5nCwCYcBFW+xIuBj6eVohLPRMsijv3D/W4Am4JVfK5ITsd8yFtQtpn
Z8PVKnCOqe2CRA3uQa55hh1C5ZpYSxkBPGznIwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFB0PfHxr2kVzGeCbzyZDZ8CIdar5MB8GA1UdIwQYMBaAFA8lbcDHwvmKUQRW
oRM5iAG6Tp1RMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjUyYjE4
NzI5ZGIwNTA5ODJiNmY3NDViNGM3OTE0NzVjODhiYTAwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGM4OThlZmYtNzg4My00YjIzLTkyNDMtYzJkNzJl
NjNiNGVlL2VjMTdhN2M0M2M1YTc1NDMzMTc4NjQ4ZjRjNDNlNmQyNjE0NTcxZDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80Yzg5OGVmZi03ODgzLTRiMjMtOTI0My1jMmQ3
MmU2M2I0ZWUvNjUyYjE4NzI5ZGIwNTA5ODJiNmY3NDViNGM3OTE0NzVjODhiYTAw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAqk9ZAwQCqk9YMA0GCSqGSIb3DQEBCwUAA4IBAQA2pCO3
PiiUG9RNdf4eTLmkIQCLSdOxr2Kg5vtU6tr19gGCDe5uVnoL4qG3FJs7wT4d6BBc
5G+CiSPuLV1oSBiH/nK9PX3uOxU84tEccLY1An6jp+dAn63A58cAOfPwWDAptAen
D6VsLHY98Vz2MzUti4GjKsCXESiTFp1MrsNhPD8QgA2s/dN8K4TChApc8gUQ78T7
JiGjapKd/tsQgeYy6cCxOtRls/IwDX3Gur3C5Rv536ectjwbOGggu+Wj4a83USSC
RvIqmZ9965ExEH4bvL0s6R6yZaqHIdNjV7zGoCq6xYUqtG5l93LoD0+EPAXlgTyP
eMlB06an2O0Rq43H
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org