Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/4970f499bd6b2b2d465d7953ad085bd2bcbed572.roa
File: 4970f499bd6b2b2d465d7953ad085bd2bcbed572.roa (raw, json)
Hash identifier: FAtDIwF3X5HavZGzllaJXaBBdF0xpgCsK2nQk8lhOag=
Subject key identifier: ED:66:8A:A5:11:91:A5:2B:C4:C0:2E:EA:66:16:AB:AE:CF:C8:FA:E3
Certificate issuer: /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial: 1130DC
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/4970f499bd6b2b2d465d7953ad085bd2bcbed572.roa
Signing time: Fri 13 Aug 2021 15:00:29 +0000
ROA not before: Fri 13 Aug 2021 15:00:21 +0000
ROA not after: Thu 13 Aug 2026 15:00:21 +0000
asID: 27947
IP address blocks: 200.125.130.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1126620 (0x1130dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
Validity
Not Before: Aug 13 15:00:21 2021 GMT
Not After : Aug 13 15:00:21 2026 GMT
Subject: CN=4970f499bd6b2b2d465d7953ad085bd2bcbed572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:8c:f5:eb:50:ea:e0:0a:b4:da:22:02:d4:
e3:d8:79:5a:46:2d:ac:9d:58:ca:88:3c:f7:ea:1c:
36:47:d0:6c:34:07:9a:24:74:a1:31:f4:4e:f1:94:
83:af:7d:47:f0:27:8e:ee:29:99:99:6e:ef:89:01:
ae:65:36:5c:18:ad:41:63:87:9c:a8:fa:22:ca:1d:
61:b8:4b:ad:c3:8a:a6:4e:7f:ae:96:a7:0a:87:34:
b6:ef:e5:38:0a:ad:d2:f5:9c:b6:c8:14:3f:e1:bf:
68:83:c7:52:20:35:c9:a4:04:48:1d:0a:04:4e:da:
96:9d:7a:07:29:81:52:1d:63:dc:f4:a4:52:6a:c5:
58:0b:0b:47:61:2e:f8:ab:c0:40:ef:c4:75:43:74:
21:b0:35:8d:55:75:07:d6:3f:22:e2:b3:95:5f:60:
dd:11:cd:a3:dd:57:83:24:7f:10:55:76:11:fa:fd:
00:0e:61:9a:cf:fe:08:25:7f:43:36:19:bb:32:e2:
0d:04:22:2f:66:d0:18:46:b0:8f:65:16:5e:ec:cf:
dd:4d:de:ad:4a:d7:12:61:3a:5d:3f:29:9b:f3:cc:
b0:aa:a0:56:0e:2a:5d:89:b1:eb:d0:e9:b8:13:3f:
eb:77:b3:86:a9:7d:c6:49:22:d8:b4:ec:0b:86:6d:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:66:8A:A5:11:91:A5:2B:C4:C0:2E:EA:66:16:AB:AE:CF:C8:FA:E3
X509v3 Authority Key Identifier:
keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/4970f499bd6b2b2d465d7953ad085bd2bcbed572.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.130.0/23
Signature Algorithm: sha256WithRSAEncryption
41:4d:0c:55:88:04:10:b8:48:dd:32:76:c2:31:f6:d7:6a:95:
43:68:8a:49:2c:d0:59:73:a0:d8:93:b4:0f:f1:13:92:6f:c2:
63:1d:16:4a:74:67:28:32:a3:0c:32:02:c1:76:7b:ab:0a:18:
a3:f0:2d:2f:20:34:b5:4e:11:dd:a3:ae:ce:28:2e:1a:b1:a1:
0b:79:c7:6f:db:12:d7:41:e6:27:1b:d2:78:4d:d9:06:58:d2:
d5:5e:ab:63:05:2f:08:6f:b5:26:da:cf:65:dc:73:5e:10:d1:
9b:40:1d:af:b6:90:fd:86:59:0f:19:d3:ea:2a:68:22:d0:e3:
a2:aa:39:66:43:6d:f9:e3:c3:d8:94:34:89:6c:b9:19:6e:c8:
ae:bb:83:d5:2c:d1:25:77:31:53:d0:76:d0:7e:9c:ae:b1:22:
71:7f:6c:85:5d:47:a3:91:d5:e7:34:ea:3d:da:90:14:b0:15:
7e:dc:fa:77:91:52:af:fc:c7:8c:b9:7c:57:42:33:01:5f:fb:
4e:a5:80:ba:65:ed:1a:c1:5f:36:bb:6d:58:9d:b2:72:00:30:
19:d5:2e:f4:96:d6:73:fd:d5:86:e7:52:8e:b1:08:ed:53:f9:
32:cb:8a:03:5f:95:01:1d:54:07:4e:51:59:ca:ae:0d:bd:ae:
47:70:d3:e0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDETDcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFh
ZThjYmU5OTA0ZjEwMzIzMmMwMDI0ODMyMDRmOWYyYWUwNGQwMjYwHhcNMjEwODEz
MTUwMDIxWhcNMjYwODEzMTUwMDIxWjAzMTEwLwYDVQQDEyg0OTcwZjQ5OWJkNmIy
YjJkNDY1ZDc5NTNhZDA4NWJkMmJjYmVkNTcyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApPOM9etQ6uAKtNoiAtTj2HlaRi2snVjKiDz36hw2R9BsNAea
JHShMfRO8ZSDr31H8CeO7imZmW7viQGuZTZcGK1BY4ecqPoiyh1huEutw4qmTn+u
lqcKhzS27+U4Cq3S9Zy2yBQ/4b9og8dSIDXJpARIHQoETtqWnXoHKYFSHWPc9KRS
asVYCwtHYS74q8BA78R1Q3QhsDWNVXUH1j8i4rOVX2DdEc2j3VeDJH8QVXYR+v0A
DmGaz/4IJX9DNhm7MuINBCIvZtAYRrCPZRZe7M/dTd6tStcSYTpdPymb88ywqqBW
DipdibHr0Om4Ez/rd7OGqX3GSSLYtOwLhm2xlwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFO1miqURkaUrxMAu6mYWq67PyPrjMB8GA1UdIwQYMBaAFJ4h+rhynemGXdTW
X98/sNPNNxk0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWFlOGNi
ZTk5MDRmMTAzMjMyYzAwMjQ4MzIwNGY5ZjJhZTA0ZDAyNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGRjMmMwN2EtOGM3ZS00N2M3LWFlOTAtY2NkNzE0
ODdjZTEwLzQ5NzBmNDk5YmQ2YjJiMmQ0NjVkNzk1M2FkMDg1YmQyYmNiZWQ1NzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZGMyYzA3YS04YzdlLTQ3YzctYWU5MC1jY2Q3
MTQ4N2NlMTAvYWFlOGNiZTk5MDRmMTAzMjMyYzAwMjQ4MzIwNGY5ZjJhZTA0ZDAy
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAch9gjANBgkqhkiG9w0BAQsFAAOCAQEAQU0MVYgEELhI3TJ2
wjH212qVQ2iKSSzQWXOg2JO0D/ETkm/CYx0WSnRnKDKjDDICwXZ7qwoYo/AtLyA0
tU4R3aOuziguGrGhC3nHb9sS10HmJxvSeE3ZBljS1V6rYwUvCG+1JtrPZdxzXhDR
m0Adr7aQ/YZZDxnT6ipoItDjoqo5ZkNt+ePD2JQ0iWy5GW7IrruD1SzRJXcxU9B2
0H6crrEicX9shV1Ho5HV5zTqPdqQFLAVftz6d5FSr/zHjLl8V0IzAV/7TqWAumXt
GsFfNrttWJ2ycgAwGdUu9JbWc/3VhudSjrEI7VP5MsuKA1+VAR1UB05RWcquDb2u
R3DT4A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org