Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/72cff0101c6201c15db9dd5e0fc2038fb94b989e.roa
File: 72cff0101c6201c15db9dd5e0fc2038fb94b989e.roa (raw, json)
Hash identifier: GCFiNlrFcYrIB3ydnVkzEpk32Xdxk9s5UIYVDwZjXf0=
Subject key identifier: FA:87:FB:26:50:9A:8D:70:D5:40:77:BB:2C:F6:A3:A0:DC:16:03:89
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2DAE13
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/72cff0101c6201c15db9dd5e0fc2038fb94b989e.roa
Signing time: Thu 07 Dec 2023 12:42:19 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 262231
IP address blocks: 186.124.116.0/24 maxlen: 24
200.43.81.0/24 maxlen: 24
200.45.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2993683 (0x2dae13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=72cff0101c6201c15db9dd5e0fc2038fb94b989e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:6e:73:3c:1c:b2:01:d9:32:72:23:3d:8a:
58:65:9a:89:c6:1b:a9:e7:d1:a3:35:1c:0c:b4:bb:
3e:98:84:00:45:79:e4:d7:b5:19:c0:52:be:f5:42:
6d:67:e7:57:3b:39:4a:d3:ac:03:b9:17:4b:b4:03:
75:66:db:91:88:50:81:0e:54:64:55:46:21:26:62:
5e:6b:2f:a8:9a:45:56:71:05:ea:24:f1:d3:1c:00:
d8:15:99:d3:f4:54:4a:9c:de:69:a9:66:20:98:5e:
3e:54:bd:d6:1f:17:7c:cf:9e:4c:07:b9:0c:09:ae:
de:3b:43:d9:fc:1e:13:fd:3c:e7:db:aa:be:c2:10:
ee:67:71:8c:b4:9a:de:0c:83:b4:9e:3f:2c:c6:52:
5a:dc:c6:76:1f:9b:dc:9b:d4:97:02:8e:33:0b:b0:
3b:5a:2e:81:3c:61:1e:80:b7:9b:15:15:d5:8f:ce:
b7:b1:9d:53:3c:70:38:e7:5c:a6:23:36:b5:c3:6c:
9e:c6:b4:5b:a4:0b:b2:89:ab:b3:87:27:f2:32:58:
37:5e:69:17:68:18:0b:f7:60:7a:1f:4e:b0:56:ea:
c3:46:74:69:e8:ba:9f:fe:f9:fa:63:27:17:9d:16:
de:23:4f:be:3f:d1:7f:f1:e5:d7:13:a0:d3:5d:a6:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:87:FB:26:50:9A:8D:70:D5:40:77:BB:2C:F6:A3:A0:DC:16:03:89
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/72cff0101c6201c15db9dd5e0fc2038fb94b989e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.124.116.0/24
200.43.81.0/24
200.45.8.0/24
Signature Algorithm: sha256WithRSAEncryption
51:19:b5:97:39:a5:65:1e:36:94:c1:e6:c7:d4:5a:fe:86:d1:
0e:c9:3b:98:29:b2:e7:10:07:5b:6f:10:88:a4:0e:10:19:5b:
37:42:44:13:ec:17:32:aa:e0:74:dc:f7:f5:d0:b4:69:0d:49:
17:e3:23:56:ed:12:24:89:2d:5e:85:59:dc:11:1a:84:bd:79:
7c:2a:bf:30:50:a8:78:fd:15:9e:6f:10:ae:15:d9:c2:25:2c:
43:4c:3e:b1:90:d6:08:ea:9f:3e:18:20:69:bb:7e:ec:b1:84:
ae:50:76:a9:66:73:5a:26:6b:f1:78:29:7f:80:8a:fa:f6:5a:
73:f5:bb:9c:a0:3e:95:21:46:e7:1f:2e:16:cb:4a:91:a0:7c:
a6:aa:b3:a5:ec:2b:1a:66:9f:85:7f:29:5c:8f:83:96:ae:85:
19:10:a1:f4:79:be:81:53:36:0c:c6:d6:0c:e1:41:42:07:88:
a7:74:15:72:38:2f:c1:cd:d0:b4:fe:6f:8a:c5:b5:8d:b8:8c:
5a:f1:c7:4a:9f:5f:54:86:60:95:c9:fe:e8:5d:fe:20:63:e2:
f2:c1:33:bf:18:9f:28:cf:06:56:57:af:d2:38:21:be:10:40:
df:c1:d9:6e:1b:b2:02:a7:f4:9f:e7:27:c3:43:64:65:44:8e:
4e:86:d3:c7
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDLa4TMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
MjYzZjBlYTFiNTYzMjg5MjA1YWQwMjY0NTMwZjhlNmMzMGU1NjkwHhcNMjMxMjA3
MTI0MTU3WhcNMjgxMjA3MTI0MTU3WjAzMTEwLwYDVQQDEyg3MmNmZjAxMDFjNjIw
MWMxNWRiOWRkNWUwZmMyMDM4ZmI5NGI5ODllMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyI1uczwcsgHZMnIjPYpYZZqJxhup59GjNRwMtLs+mIQARXnk
17UZwFK+9UJtZ+dXOzlK06wDuRdLtAN1ZtuRiFCBDlRkVUYhJmJeay+omkVWcQXq
JPHTHADYFZnT9FRKnN5pqWYgmF4+VL3WHxd8z55MB7kMCa7eO0PZ/B4T/Tzn26q+
whDuZ3GMtJreDIO0nj8sxlJa3MZ2H5vcm9SXAo4zC7A7Wi6BPGEegLebFRXVj863
sZ1TPHA451ymIza1w2yexrRbpAuyiauzhyfyMlg3XmkXaBgL92B6H06wVurDRnRp
6Lqf/vn6YycXnRbeI0++P9F/8eXXE6DTXaZ3rQIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFPqH+yZQmo1w1UB3uyz2o6DcFgOJMB8GA1UdIwQYMBaAFMD3ES/X9uODqZpb
XBnhTav8A9wtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjgyNjNm
MGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzcyY2ZmMDEwMWM2MjAxYzE1ZGI5ZGQ1ZTBmYzIwMzhmYjk0Yjk4OWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZjgyNjNmMGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEALp8dAMEAMgrUQMEAMgtCDANBgkqhkiG9w0BAQsFAAOCAQEA
URm1lzmlZR42lMHmx9Ra/obRDsk7mCmy5xAHW28QiKQOEBlbN0JEE+wXMqrgdNz3
9dC0aQ1JF+MjVu0SJIktXoVZ3BEahL15fCq/MFCoeP0Vnm8QrhXZwiUsQ0w+sZDW
COqfPhggabt+7LGErlB2qWZzWiZr8Xgpf4CK+vZac/W7nKA+lSFG5x8uFstKkaB8
pqqzpewrGmafhX8pXI+Dlq6FGRCh9Hm+gVM2DMbWDOFBQgeIp3QVcjgvwc3QtP5v
isW1jbiMWvHHSp9fVIZglcn+6F3+IGPi8sEzvxifKM8GVlev0jghvhBA38HZbhuy
Aqf0n+cnw0NkZUSOTobTxw==
-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org