Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/eec8afff80110687e40a20b07cb9c16c0f3cbfc5.roa
File: eec8afff80110687e40a20b07cb9c16c0f3cbfc5.roa (raw, json)
Hash identifier: 4a7DS6RqclW8Dwao4Ou+N/VxPDgY+5i7t8PbLq6GwDc=
Subject key identifier: 18:42:18:BA:49:FA:0E:8E:E4:00:59:D0:98:B1:E1:0A:7D:1A:B5:26
Certificate issuer: /CN=e023bb317eecb014b8f7048b5b30535732897c94
Certificate serial: 07987A
Authority key identifier: B1:C9:7F:24:9A:19:82:C1:DF:CE:77:29:F4:49:30:D6:E1:90:00:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e023bb317eecb014b8f7048b5b30535732897c94.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/eec8afff80110687e40a20b07cb9c16c0f3cbfc5.roa
Signing time: Wed 07 Feb 2024 15:01:54 +0000
ROA not before: Wed 07 Feb 2024 15:01:54 +0000
ROA not after: Sat 07 Feb 2026 15:01:54 +0000
asID: 28545
IP address blocks: 200.33.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497786 (0x7987a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e023bb317eecb014b8f7048b5b30535732897c94
Validity
Not Before: Feb 7 15:01:54 2024 GMT
Not After : Feb 7 15:01:54 2026 GMT
Subject: CN=eec8afff80110687e40a20b07cb9c16c0f3cbfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:11:9a:26:aa:46:6f:ea:7e:b8:32:cd:7d:
b1:34:92:4f:3b:24:dc:15:bd:d3:b5:e1:c4:60:0e:
ae:a0:96:4f:fa:34:08:b9:74:42:fa:23:f2:10:d1:
e5:b9:63:fb:31:b2:70:4d:2b:4b:43:b0:cb:93:73:
a1:7a:0f:bd:e7:da:c8:fc:b8:28:a7:20:d7:f9:43:
4a:a4:11:c4:88:d8:62:eb:e2:f3:67:5d:33:7c:42:
14:24:6f:57:02:06:dd:06:1f:45:92:3c:72:93:08:
f4:b4:1f:75:18:ac:24:1d:0f:ec:d3:3b:68:2d:c4:
5c:ff:ce:e0:70:48:45:c8:69:29:1c:80:6e:6c:bd:
b7:e8:19:21:be:1a:6c:a6:55:12:46:dc:4f:64:42:
c9:33:4b:7d:48:9e:1e:5c:28:cd:dc:52:1a:1e:40:
fc:21:cd:41:80:9e:3a:db:cc:00:ef:9a:15:60:ed:
b9:11:6e:57:9d:b2:ab:3d:51:c5:5b:08:ac:0e:cc:
69:ea:a1:b2:52:41:82:89:85:a6:0d:3b:fc:b7:60:
af:71:8c:2d:a4:54:94:a9:f9:42:01:c5:08:58:18:
73:53:28:b6:3f:e1:2c:66:f4:96:29:f1:55:13:70:
a4:90:dd:00:77:bf:a4:57:29:4c:64:6b:a8:60:4c:
3e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:42:18:BA:49:FA:0E:8E:E4:00:59:D0:98:B1:E1:0A:7D:1A:B5:26
X509v3 Authority Key Identifier:
keyid:B1:C9:7F:24:9A:19:82:C1:DF:CE:77:29:F4:49:30:D6:E1:90:00:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e023bb317eecb014b8f7048b5b30535732897c94.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/eec8afff80110687e40a20b07cb9c16c0f3cbfc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/e023bb317eecb014b8f7048b5b30535732897c94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.192.0/24
Signature Algorithm: sha256WithRSAEncryption
18:59:1e:6a:78:fa:69:fe:3c:53:da:31:14:87:5e:cf:6a:0c:
05:53:4e:f2:9b:8b:ca:df:3a:09:cd:e2:7b:41:40:30:9d:c6:
a3:08:d2:f7:e3:6f:54:c9:d3:c8:0e:6f:fb:3a:fc:e3:69:c0:
2b:dd:86:2d:cc:0b:94:0a:64:9d:96:e8:f4:6d:35:aa:a2:4b:
74:16:5e:78:f8:7b:37:1e:0a:71:e4:67:40:c6:d3:3d:1f:a5:
b8:43:70:cd:59:85:4a:09:17:76:6a:b7:6a:b5:0b:63:8f:d6:
0e:ca:46:45:37:81:3f:e4:72:a9:65:42:a3:af:c5:34:71:9d:
ea:45:4a:04:3a:8c:db:be:22:7c:37:66:ed:ef:90:ad:9c:da:
cc:e2:7d:ac:b8:61:b6:dc:06:37:37:81:c4:5d:ac:2c:93:c4:
14:c3:e9:1b:8d:c1:2f:00:e0:aa:1f:8e:7d:e6:a9:21:9b:aa:
a9:98:de:c0:af:e6:d0:53:ed:a6:01:09:9e:41:83:0d:b0:ee:
af:01:7b:4b:4c:22:4b:5b:8f:26:4d:27:d9:7d:12:14:f5:7f:
3c:70:88:7a:ff:ad:ca:15:e1:03:cf:18:e1:bf:d5:ee:3a:ff:
80:71:54:cc:ab:a1:82:9e:e4:f0:b9:cf:1b:c7:d7:00:ee:78:
30:b1:b3:d7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDB5h6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGUw
MjNiYjMxN2VlY2IwMTRiOGY3MDQ4YjViMzA1MzU3MzI4OTdjOTQwHhcNMjQwMjA3
MTUwMTU0WhcNMjYwMjA3MTUwMTU0WjAzMTEwLwYDVQQDEyhlZWM4YWZmZjgwMTEw
Njg3ZTQwYTIwYjA3Y2I5YzE2YzBmM2NiZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmpURmiaqRm/qfrgyzX2xNJJPOyTcFb3TteHEYA6uoJZP+jQI
uXRC+iPyENHluWP7MbJwTStLQ7DLk3Oheg+959rI/LgopyDX+UNKpBHEiNhi6+Lz
Z10zfEIUJG9XAgbdBh9Fkjxykwj0tB91GKwkHQ/s0ztoLcRc/87gcEhFyGkpHIBu
bL236BkhvhpsplUSRtxPZELJM0t9SJ4eXCjN3FIaHkD8Ic1BgJ4628wA75oVYO25
EW5XnbKrPVHFWwisDsxp6qGyUkGCiYWmDTv8t2CvcYwtpFSUqflCAcUIWBhzUyi2
P+EsZvSWKfFVE3CkkN0Ad7+kVylMZGuoYEw++QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBhCGLpJ+g6O5ABZ0Jix4Qp9GrUmMB8GA1UdIwQYMBaAFLHJfySaGYLB3853
KfRJMNbhkAALMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTAyM2Ji
MzE3ZWVjYjAxNGI4ZjcwNDhiNWIzMDUzNTczMjg5N2M5NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGZlOWJjNjEtMTg2YS00NWRiLTlhN2EtMTFlMTAy
YTkwYmY0L2VlYzhhZmZmODAxMTA2ODdlNDBhMjBiMDdjYjljMTZjMGYzY2JmYzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZmU5YmM2MS0xODZhLTQ1ZGItOWE3YS0xMWUx
MDJhOTBiZjQvZTAyM2JiMzE3ZWVjYjAxNGI4ZjcwNDhiNWIzMDUzNTczMjg5N2M5
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMghwDANBgkqhkiG9w0BAQsFAAOCAQEAGFkeanj6af48U9ox
FIdez2oMBVNO8puLyt86Cc3ie0FAMJ3GowjS9+NvVMnTyA5v+zr842nAK92GLcwL
lApknZbo9G01qqJLdBZeePh7Nx4KceRnQMbTPR+luENwzVmFSgkXdmq3arULY4/W
DspGRTeBP+RyqWVCo6/FNHGd6kVKBDqM274ifDdm7e+QrZzazOJ9rLhhttwGNzeB
xF2sLJPEFMPpG43BLwDgqh+OfeapIZuqqZjewK/m0FPtpgEJnkGDDbDurwF7S0wi
S1uPJk0n2X0SFPV/PHCIev+tyhXhA88Y4b/V7jr/gHFUzKuhgp7k8LnPG8fXAO54
MLGz1w==
-----END CERTIFICATE-----
Generated at Tue Feb 27 04:43:41 2024 by rpki-client on console-fra.rpki-client.org