Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a69d92c69b85c36620fb30f868ce4915294956ee.roa
File: a69d92c69b85c36620fb30f868ce4915294956ee.roa (raw, json)
Hash identifier: vszRogQAfajRHTKjk3b8N2iNvSeTcM+dssyXtHRlc0w=
Subject key identifier: D8:A1:01:23:0C:AA:B9:DC:E8:4D:5B:3A:2C:89:D5:23:7C:1D:65:C1
Certificate issuer: /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial: 2E4859
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a69d92c69b85c36620fb30f868ce4915294956ee.roa
Signing time: Thu 07 Dec 2023 13:01:04 +0000
ROA not before: Thu 07 Dec 2023 13:00:46 +0000
ROA not after: Thu 07 Dec 2028 13:00:46 +0000
asID: 265749
IP address blocks: 200.45.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3033177 (0x2e4859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Validity
Not Before: Dec 7 13:00:46 2023 GMT
Not After : Dec 7 13:00:46 2028 GMT
Subject: CN=a69d92c69b85c36620fb30f868ce4915294956ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:10:d9:d4:4f:61:a4:09:df:28:f8:e8:ac:5a:
38:c9:e9:af:45:19:0c:07:68:f0:f6:0e:39:7e:b3:
14:f3:3f:29:08:8e:06:e0:2a:ac:e1:74:cc:25:7b:
bb:93:e2:4f:b8:03:2b:6a:79:6a:9c:d9:a5:3d:04:
2d:7e:f4:21:98:3a:98:97:8f:75:71:cc:90:a5:ac:
96:2a:7a:4d:19:c6:a9:fe:66:af:55:4e:17:91:57:
eb:c7:60:37:c4:b5:9b:eb:3a:de:01:2b:35:97:98:
97:fb:65:43:ae:20:1a:4f:c1:a1:77:3c:6d:71:1f:
d7:29:ac:ce:e0:4a:bc:b6:6f:b3:44:0a:a2:11:d6:
d2:03:cb:eb:e3:c2:33:7c:15:02:36:51:0e:b5:f5:
77:fb:ac:6f:9f:01:51:2a:c1:dc:e4:b3:35:4b:db:
3a:ba:f2:3a:3d:3d:05:87:55:f8:59:3b:49:3a:34:
1d:8c:e9:32:0a:df:a5:6b:ce:e8:d2:33:51:b7:e9:
6a:c5:f9:e1:54:2c:a5:3b:58:f3:ad:ee:e7:49:f5:
9e:d7:04:51:3b:a7:01:5e:0c:07:16:b0:cc:ae:8a:
92:16:30:e6:17:a2:fb:54:7f:2c:77:45:59:59:1c:
93:b9:fe:b2:f8:ac:52:2a:a9:e3:56:12:0d:60:7e:
a1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A1:01:23:0C:AA:B9:DC:E8:4D:5B:3A:2C:89:D5:23:7C:1D:65:C1
X509v3 Authority Key Identifier:
keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a69d92c69b85c36620fb30f868ce4915294956ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.45.223.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:d5:c8:8a:a4:8f:93:b5:bc:61:fc:e4:e3:0a:8c:38:fe:84:
eb:06:87:15:5b:a4:d7:cf:4a:22:85:6c:f5:ff:23:15:6c:c7:
e0:d8:9a:27:73:20:ef:59:d4:7a:5b:d0:31:4f:4a:17:eb:8a:
08:fe:2a:59:02:73:5a:8a:73:cb:14:e1:ef:e0:fb:a4:ac:0d:
fb:5c:54:b3:ce:07:82:b2:14:74:63:2c:e5:7f:2f:53:57:b8:
a6:be:02:a5:19:23:5d:f2:9e:06:8f:68:51:f1:8a:a8:09:5e:
4e:ff:1d:08:ac:bc:b0:cf:99:5c:db:ee:d4:92:c0:4e:f4:fd:
56:78:8b:3e:94:1c:36:a5:07:53:0a:b8:a2:37:06:d2:00:2f:
be:80:c6:fb:63:fd:d1:97:a6:1d:b8:fa:a7:38:8d:c3:23:bb:
70:43:07:c7:09:2d:52:af:89:99:26:2f:1b:9e:5c:29:b2:17:
3d:de:bc:f1:7d:67:30:03:5f:db:6b:1f:ce:3e:51:8f:a0:01:
2f:7c:ad:be:e4:49:54:3d:cd:13:1f:34:87:46:dc:c9:4b:ba:
4b:36:fe:b9:36:9d:27:54:5f:38:26:54:63:c2:39:aa:cf:e1:
55:8a:3f:47:78:df:25:8a:8f:b3:ec:6a:48:a3:b1:6f:38:16:
35:e7:35:97
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDLkhZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM5
NzQ0MDlkMGMyYTcwYzkyMWRkNjg1ZTg2M2U5ZjAwY2IxZTI2MmEwHhcNMjMxMjA3
MTMwMDQ2WhcNMjgxMjA3MTMwMDQ2WjAzMTEwLwYDVQQDEyhhNjlkOTJjNjliODVj
MzY2MjBmYjMwZjg2OGNlNDkxNTI5NDk1NmVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhxDZ1E9hpAnfKPjorFo4yemvRRkMB2jw9g45frMU8z8pCI4G
4Cqs4XTMJXu7k+JPuAMranlqnNmlPQQtfvQhmDqYl491ccyQpayWKnpNGcap/mav
VU4XkVfrx2A3xLWb6zreASs1l5iX+2VDriAaT8GhdzxtcR/XKazO4Eq8tm+zRAqi
EdbSA8vr48IzfBUCNlEOtfV3+6xvnwFRKsHc5LM1S9s6uvI6PT0Fh1X4WTtJOjQd
jOkyCt+la87o0jNRt+lqxfnhVCylO1jzre7nSfWe1wRRO6cBXgwHFrDMroqSFjDm
F6L7VH8sd0VZWRyTuf6y+KxSKqnjVhINYH6hvQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNihASMMqrnc6E1bOiyJ1SN8HWXBMB8GA1UdIwQYMBaAFPuO/GhWAKtj6gJP
ow0fFdW1sMGxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzk3NDQw
OWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3L2E2OWQ5MmM2OWI4NWMzNjYyMGZiMzBmODY4Y2U0OTE1Mjk0OTU2ZWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvYzk3NDQwOWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgt3zANBgkqhkiG9w0BAQsFAAOCAQEAwNXIiqSPk7W8Yfzk
4wqMOP6E6waHFVuk189KIoVs9f8jFWzH4NiaJ3Mg71nUelvQMU9KF+uKCP4qWQJz
WopzyxTh7+D7pKwN+1xUs84HgrIUdGMs5X8vU1e4pr4CpRkjXfKeBo9oUfGKqAle
Tv8dCKy8sM+ZXNvu1JLATvT9VniLPpQcNqUHUwq4ojcG0gAvvoDG+2P90ZemHbj6
pziNwyO7cEMHxwktUq+JmSYvG55cKbIXPd688X1nMANf22sfzj5Rj6ABL3ytvuRJ
VD3NEx80h0bcyUu6Szb+uTadJ1RfOCZUY8I5qs/hVYo/R3jfJYqPs+xqSKOxbzgW
Nec1lw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org