Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/4d4959a388cbb3e1c6c4ca8ada3212cdcb66abfc.roa
File: 4d4959a388cbb3e1c6c4ca8ada3212cdcb66abfc.roa (raw, json)
Hash identifier: 8xkL9BlJIbpcxckSVV5kEmfZhbSLQnkR7uFBpA3kIHA=
Subject key identifier: 00:8F:ED:5B:AB:EF:80:4F:0F:34:38:22:41:27:77:D4:CA:57:3C:ED
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 27214E
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/4d4959a388cbb3e1c6c4ca8ada3212cdcb66abfc.roa
Signing time: Mon 17 Apr 2023 13:00:32 +0000
ROA not before: Sun 16 Apr 2023 13:00:28 +0000
ROA not after: Thu 17 Apr 2025 13:00:28 +0000
asID: 27787
IP address blocks: 200.43.113.0/24 maxlen: 24
190.227.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2564430 (0x27214e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Apr 16 13:00:28 2023 GMT
Not After : Apr 17 13:00:28 2025 GMT
Subject: CN=4d4959a388cbb3e1c6c4ca8ada3212cdcb66abfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:be:e7:7f:ca:39:3f:8d:eb:80:15:60:b3:
c2:d1:cd:d4:ed:2f:5e:24:77:81:1a:d4:75:db:40:
a3:a9:e2:c4:d4:17:b9:16:ea:58:bf:a9:6d:b9:35:
9c:06:c2:75:1a:d7:39:39:df:9d:4d:09:52:13:82:
44:30:78:e3:b9:b8:3b:4b:62:2e:73:d1:9a:e6:97:
b2:57:82:2d:87:18:d1:25:4d:a4:6a:c5:ff:38:02:
f5:3c:89:0c:7f:bc:02:39:1c:41:73:42:9e:4e:55:
5f:5b:60:56:14:c3:1f:0b:74:af:7c:39:a5:11:82:
c0:3d:85:ae:18:63:47:22:1f:6a:96:5e:18:d1:c1:
d1:73:ba:4d:0a:77:42:ce:b2:33:5c:5c:b8:01:23:
12:0c:c1:b3:e3:d4:39:92:cb:19:e0:fe:91:4a:40:
00:6f:c7:53:30:60:42:2e:c6:40:15:f0:3e:3c:2c:
72:c7:fe:4f:c5:46:c9:37:92:3d:38:b9:49:73:af:
ee:d6:20:b6:65:e2:2d:66:86:9f:9f:d7:97:7b:09:
d4:25:57:d4:31:c7:cb:cf:1a:ad:6c:a2:2d:3b:8f:
bf:8e:ca:ae:c7:e1:a7:f3:d9:dd:c4:99:83:13:42:
7a:6c:d2:5a:68:df:dd:52:25:ce:bd:14:b3:f0:e9:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8F:ED:5B:AB:EF:80:4F:0F:34:38:22:41:27:77:D4:CA:57:3C:ED
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/4d4959a388cbb3e1c6c4ca8ada3212cdcb66abfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.227.12.0/24
200.43.113.0/24
Signature Algorithm: sha256WithRSAEncryption
15:03:d6:32:04:03:83:c5:e2:04:63:c8:1a:64:63:9a:80:d3:
c4:de:9e:ce:97:61:fb:2d:2e:49:13:e2:66:45:91:1c:6c:25:
8a:db:1a:72:c9:7f:8a:09:3f:32:94:4c:ef:35:70:bb:49:41:
0b:0d:35:da:6f:fd:df:c4:5b:d1:3b:f3:f5:e1:8d:c7:ea:c9:
f2:53:69:dd:b8:da:89:3f:b9:78:91:60:05:8f:5a:14:6e:e4:
16:d0:8a:df:ec:28:63:7e:a4:3f:8b:6e:dd:bf:6d:2d:65:55:
0d:35:83:73:96:cb:1e:19:8e:c0:46:9c:a6:63:a5:ce:13:f5:
eb:44:c6:da:f2:b6:84:46:85:25:fd:5b:02:8f:a0:d0:9e:1d:
ce:42:28:d3:36:cd:bb:0f:6d:b1:4b:40:b9:8e:b6:3b:9a:c8:
81:e3:b9:36:4b:dd:18:79:f6:6c:59:f5:25:5e:2b:c2:29:ab:
81:c8:30:d7:9a:07:af:98:86:f4:cc:e7:1c:13:b8:a0:bc:0e:
46:c2:24:3c:0f:e0:08:25:58:4a:6d:6b:d8:fe:95:e2:8c:36:
89:7d:a1:6b:70:d7:ae:64:06:1f:99:0e:aa:50:c8:f1:6b:4b:
4e:6d:ce:33:bc:a6:7f:17:a6:c7:2d:c7:93:89:ce:2d:1c:6b:
c2:3f:a6:58
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDJyFOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
M2E0NDRkMDYxZmM0ZDkxNGRjNTZkODAzMWE5YzQ1NzRjYTU3YWQwHhcNMjMwNDE2
MTMwMDI4WhcNMjUwNDE3MTMwMDI4WjAzMTEwLwYDVQQDEyg0ZDQ5NTlhMzg4Y2Ji
M2UxYzZjNGNhOGFkYTMyMTJjZGNiNjZhYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtx6+53/KOT+N64AVYLPC0c3U7S9eJHeBGtR120CjqeLE1Be5
FupYv6ltuTWcBsJ1Gtc5Od+dTQlSE4JEMHjjubg7S2Iuc9Ga5peyV4IthxjRJU2k
asX/OAL1PIkMf7wCORxBc0KeTlVfW2BWFMMfC3SvfDmlEYLAPYWuGGNHIh9qll4Y
0cHRc7pNCndCzrIzXFy4ASMSDMGz49Q5kssZ4P6RSkAAb8dTMGBCLsZAFfA+PCxy
x/5PxUbJN5I9OLlJc6/u1iC2ZeItZoafn9eXewnUJVfUMcfLzxqtbKItO4+/jsqu
x+Gn89ndxJmDE0J6bNJaaN/dUiXOvRSz8OnBhwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFACP7Vur74BPDzQ4IkEnd9TKVzztMB8GA1UdIwQYMBaAFMmcjKrH/3v04XrK
8I/d1uVu/M2tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkzYTQ0
NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzRkNDk1OWEzODhjYmIzZTFjNmM0Y2E4YWRhMzIxMmNkY2I2NmFiZmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZDkzYTQ0NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAL7jDAMEAMgrcTANBgkqhkiG9w0BAQsFAAOCAQEAFQPWMgQD
g8XiBGPIGmRjmoDTxN6ezpdh+y0uSRPiZkWRHGwlitsacsl/igk/MpRM7zVwu0lB
Cw012m/938Rb0Tvz9eGNx+rJ8lNp3bjaiT+5eJFgBY9aFG7kFtCK3+woY36kP4tu
3b9tLWVVDTWDc5bLHhmOwEacpmOlzhP160TG2vK2hEaFJf1bAo+g0J4dzkIo0zbN
uw9tsUtAuY62O5rIgeO5NkvdGHn2bFn1JV4rwimrgcgw15oHr5iG9MznHBO4oLwO
RsIkPA/gCCVYSm1r2P6V4ow2iX2ha3DXrmQGH5kOqlDI8WtLTm3OM7ymfxemxy3H
k4nOLRxrwj+mWA==
-----END CERTIFICATE-----
Generated at Thu Dec 7 13:04:53 2023 by rpki-client on console-ams.rpki-client.org