Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/b21e6ee1de055888d4baaa60e7d31c0c934926e3.roa
File: b21e6ee1de055888d4baaa60e7d31c0c934926e3.roa (raw, json)
Hash identifier: 9skIfqvQtbDYm+c+vPhZ5HPfP3zx0zXsVbu09PI2WLg=
Subject key identifier: 2F:D6:58:73:EC:A1:82:FC:ED:3D:32:45:14:0F:EA:F8:AC:C6:C9:27
Certificate issuer: /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial: 2E1B23
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/b21e6ee1de055888d4baaa60e7d31c0c934926e3.roa
Signing time: Thu 07 Dec 2023 13:00:49 +0000
ROA not before: Thu 07 Dec 2023 13:00:46 +0000
ROA not after: Thu 07 Dec 2028 13:00:46 +0000
asID: 27787
IP address blocks: 200.43.113.0/24 maxlen: 24
190.227.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3021603 (0x2e1b23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Validity
Not Before: Dec 7 13:00:46 2023 GMT
Not After : Dec 7 13:00:46 2028 GMT
Subject: CN=b21e6ee1de055888d4baaa60e7d31c0c934926e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:e8:c4:2d:23:15:67:eb:eb:ee:ed:f9:11:
d7:ef:ee:cc:f8:f0:05:db:85:ba:de:a7:49:9d:11:
27:4e:42:15:de:22:7f:0b:6b:c0:c1:ce:3a:47:ae:
56:0c:7a:81:d6:29:ea:00:bc:a8:56:8e:06:95:a5:
6d:36:09:6f:1c:7d:9a:02:05:d8:64:c6:36:e8:79:
4b:44:6a:d9:75:7f:49:bb:f0:b8:fa:09:04:75:95:
51:f4:f3:37:3b:99:0e:1b:47:e7:3b:83:15:17:78:
f9:8e:1e:1c:16:8c:a0:13:82:9e:5d:c6:1b:e8:99:
38:28:25:9a:5b:e9:a6:27:a6:78:b9:71:c8:83:74:
12:1a:3e:ea:bf:7a:d2:a2:ca:a1:33:e6:52:6c:d7:
3a:b0:c5:1f:f0:ca:41:8f:8c:7f:18:b1:89:7e:ef:
7a:65:9f:07:f9:ec:b8:f6:27:19:30:a7:60:23:45:
e3:9e:7b:f5:fc:53:c4:3d:6e:8a:54:63:b9:95:db:
48:f1:db:41:89:c2:ca:e5:06:a7:71:03:26:75:71:
9d:05:9a:99:c9:a8:ce:8d:9f:8c:ec:71:16:b6:d3:
52:3a:fc:41:64:f4:2b:50:d8:df:a1:e7:3b:c8:93:
9b:d3:0e:8c:db:5b:15:72:6f:78:d6:ac:82:b1:89:
98:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D6:58:73:EC:A1:82:FC:ED:3D:32:45:14:0F:EA:F8:AC:C6:C9:27
X509v3 Authority Key Identifier:
keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/b21e6ee1de055888d4baaa60e7d31c0c934926e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.227.12.0/24
200.43.113.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:1d:9d:bf:c4:13:15:1d:60:60:d1:f8:f8:aa:8f:35:e1:f2:
96:84:2d:62:ee:5b:4a:42:dd:5f:08:e7:92:95:92:ea:3b:df:
b4:7e:ab:46:1e:f0:60:ee:6f:de:9a:fd:dc:f1:5d:b2:a0:07:
c9:59:83:6b:3f:c9:d2:41:db:22:68:8a:1f:d4:2e:cf:55:55:
a2:60:c8:d1:9e:f8:2a:e1:07:17:c7:e8:ec:41:f9:f2:a4:68:
29:af:c3:18:a1:75:49:5d:93:06:10:75:e9:15:d7:a9:8f:0c:
cf:d7:6d:d5:90:c4:3d:46:e8:ea:b2:c0:62:f6:bc:74:0f:50:
98:78:03:8c:7e:7a:95:dd:a4:c1:1b:ab:08:80:af:b0:f0:6e:
9c:5d:dd:05:58:60:fb:c8:9a:34:a4:51:2e:57:5e:80:7f:0d:
30:2c:6f:7e:75:6f:ed:75:85:3b:51:bd:a6:f1:47:a3:b6:47:
95:2e:2a:7f:65:8b:25:7b:7a:ab:ca:69:13:65:b4:28:a1:f6:
f6:91:59:45:af:7e:f8:18:76:96:d4:3c:b8:26:6b:59:41:c4:
72:19:ad:2d:29:4c:2d:a9:3e:98:58:af:bb:e6:14:6e:91:4d:
7a:67:51:00:a9:79:54:fc:b0:78:c4:4b:cc:c4:40:dc:a3:c2:
7f:f7:4e:60
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDLhsjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM5
NzQ0MDlkMGMyYTcwYzkyMWRkNjg1ZTg2M2U5ZjAwY2IxZTI2MmEwHhcNMjMxMjA3
MTMwMDQ2WhcNMjgxMjA3MTMwMDQ2WjAzMTEwLwYDVQQDEyhiMjFlNmVlMWRlMDU1
ODg4ZDRiYWFhNjBlN2QzMWMwYzkzNDkyNmUzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmTHoxC0jFWfr6+7t+RHX7+7M+PAF24W63qdJnREnTkIV3iJ/
C2vAwc46R65WDHqB1inqALyoVo4GlaVtNglvHH2aAgXYZMY26HlLRGrZdX9Ju/C4
+gkEdZVR9PM3O5kOG0fnO4MVF3j5jh4cFoygE4KeXcYb6Jk4KCWaW+mmJ6Z4uXHI
g3QSGj7qv3rSosqhM+ZSbNc6sMUf8MpBj4x/GLGJfu96ZZ8H+ey49icZMKdgI0Xj
nnv1/FPEPW6KVGO5ldtI8dtBicLK5QancQMmdXGdBZqZyajOjZ+M7HEWttNSOvxB
ZPQrUNjfoec7yJOb0w6M21sVcm941qyCsYmY/QIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFC/WWHPsoYL87T0yRRQP6visxsknMB8GA1UdIwQYMBaAFPuO/GhWAKtj6gJP
ow0fFdW1sMGxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzk3NDQw
OWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3L2IyMWU2ZWUxZGUwNTU4ODhkNGJhYWE2MGU3ZDMxYzBjOTM0OTI2ZTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvYzk3NDQwOWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAL7jDAMEAMgrcTANBgkqhkiG9w0BAQsFAAOCAQEAfB2dv8QT
FR1gYNH4+KqPNeHyloQtYu5bSkLdXwjnkpWS6jvftH6rRh7wYO5v3pr93PFdsqAH
yVmDaz/J0kHbImiKH9Quz1VVomDI0Z74KuEHF8fo7EH58qRoKa/DGKF1SV2TBhB1
6RXXqY8Mz9dt1ZDEPUbo6rLAYva8dA9QmHgDjH56ld2kwRurCICvsPBunF3dBVhg
+8iaNKRRLldegH8NMCxvfnVv7XWFO1G9pvFHo7ZHlS4qf2WLJXt6q8ppE2W0KKH2
9pFZRa9++Bh2ltQ8uCZrWUHEchmtLSlMLak+mFivu+YUbpFNemdRAKl5VPyweMRL
zMRA3KPCf/dOYA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org