Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/06704e7aff4c53cff705509e22b7b8c0ead0828d.roa
File: 06704e7aff4c53cff705509e22b7b8c0ead0828d.roa (raw, json)
Hash identifier: b3WBZ7gGslAfAAPZSSaE+WgyX2TEH1hdL0kK6fU2uXA=
Subject key identifier: 7C:60:DA:84:0D:35:6C:FC:0F:9F:6E:0B:FC:81:BA:FA:DD:A5:5F:5C
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 109544
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/06704e7aff4c53cff705509e22b7b8c0ead0828d.roa
Signing time: Tue 24 Oct 2023 16:01:04 +0000
ROA not before: Tue 24 Oct 2023 16:00:56 +0000
ROA not after: Tue 24 Oct 2028 16:00:56 +0000
asID: 22927
IP address blocks: 181.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1086788 (0x109544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Oct 24 16:00:56 2023 GMT
Not After : Oct 24 16:00:56 2028 GMT
Subject: CN=06704e7aff4c53cff705509e22b7b8c0ead0828d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:91:08:af:43:f0:ce:af:fe:24:10:7e:63:
54:23:cf:d4:99:f2:04:2c:ae:bc:ff:24:4a:19:8f:
30:c6:fa:f8:73:5a:77:91:a8:fa:9d:27:79:e5:36:
6b:87:3b:26:d4:6d:7a:7d:20:73:76:d9:35:d2:76:
a3:b0:6a:3a:c3:45:68:de:5c:b0:8a:74:84:46:b7:
b8:fc:89:3a:4a:ed:96:a3:17:57:b7:f5:29:af:3b:
f2:52:3e:36:11:df:16:58:cc:b2:1b:2d:05:19:3c:
d5:78:39:dc:52:6a:a4:73:2a:2b:da:d6:ab:e3:d3:
04:1c:da:bf:9c:17:21:2c:de:7b:d7:4a:9b:aa:c3:
3e:97:58:03:2c:6f:44:6d:b2:ba:3c:48:e5:d2:63:
a1:a7:4e:c5:86:f1:cf:5c:29:de:86:ca:07:38:77:
fd:26:bc:89:a5:a6:df:86:60:c4:2c:1b:dc:d4:d8:
39:3c:0c:18:58:81:f7:35:e0:82:e7:50:49:17:d8:
40:35:ee:15:45:ea:b0:7a:f4:f3:8a:fd:d3:23:0c:
9a:5d:fb:fc:90:b4:b6:35:8f:67:6d:24:58:64:26:
12:0a:0e:ce:73:95:11:42:c5:f3:d3:39:f0:30:5d:
ce:43:7a:d8:71:76:8e:3f:e8:fc:49:f9:49:db:a9:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:60:DA:84:0D:35:6C:FC:0F:9F:6E:0B:FC:81:BA:FA:DD:A5:5F:5C
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/06704e7aff4c53cff705509e22b7b8c0ead0828d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.20.0.0/14
Signature Algorithm: sha256WithRSAEncryption
6f:fe:8c:bf:6f:6c:51:8c:5a:4c:32:97:c9:63:78:54:57:e8:
c1:10:cc:ff:43:50:f9:7b:3b:0b:2e:8b:99:4a:30:74:50:96:
c9:16:ce:f5:f2:2a:41:0b:af:b7:16:ce:e6:96:65:90:18:a9:
0b:12:d3:ff:48:3d:ff:f9:b6:da:1e:99:bf:57:4b:5b:f8:d1:
22:fa:2c:f5:f5:7e:1e:2f:75:d6:d0:9b:80:26:20:25:05:d4:
bd:f5:53:62:39:70:cc:32:ea:f5:33:c1:5f:01:58:39:b2:6f:
88:ed:60:8d:23:de:81:f5:6e:77:8f:a9:17:c7:13:b6:1e:d6:
6f:b8:2e:f8:26:3a:b5:29:bc:ce:73:ac:0b:0c:a3:e3:4d:ca:
e1:98:86:ed:a4:1d:35:fb:34:bb:b5:83:c1:76:65:59:c5:1e:
5c:85:5d:e9:a6:83:b6:02:3b:f3:60:7e:87:21:a7:ad:37:a7:
62:89:a0:e1:a1:97:21:85:d7:cb:d3:fb:1c:66:80:02:40:30:
26:ef:e8:d3:da:5a:33:de:23:96:c5:b2:99:a6:3d:4d:3f:60:
3c:51:97:8a:f9:dc:9a:4a:67:c3:75:67:7a:03:90:5c:89:54:
8b:cf:14:1e:fa:63:e2:30:40:ed:50:52:af:fe:fa:9e:e0:ff:
7a:8a:7d:74
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDEJVEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMDI0
MTYwMDU2WhcNMjgxMDI0MTYwMDU2WjAzMTEwLwYDVQQDEygwNjcwNGU3YWZmNGM1
M2NmZjcwNTUwOWUyMmI3YjhjMGVhZDA4MjhkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAndCRCK9D8M6v/iQQfmNUI8/UmfIELK68/yRKGY8wxvr4c1p3
kaj6nSd55TZrhzsm1G16fSBzdtk10najsGo6w0Vo3lywinSERre4/Ik6Su2WoxdX
t/UprzvyUj42Ed8WWMyyGy0FGTzVeDncUmqkcyor2tar49MEHNq/nBchLN5710qb
qsM+l1gDLG9EbbK6PEjl0mOhp07FhvHPXCnehsoHOHf9JryJpabfhmDELBvc1Ng5
PAwYWIH3NeCC51BJF9hANe4VReqwevTziv3TIwyaXfv8kLS2NY9nbSRYZCYSCg7O
c5URQsXz0znwMF3OQ3rYcXaOP+j8SflJ26mqTwIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFHxg2oQNNWz8D59uC/yBuvrdpV9cMB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2LzA2NzA0ZTdhZmY0YzUzY2ZmNzA1NTA5ZTIyYjdiOGMwZWFkMDgyOGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDArUUMA0GCSqGSIb3DQEBCwUAA4IBAQBv/oy/b2xRjFpMMpfJ
Y3hUV+jBEMz/Q1D5ezsLLouZSjB0UJbJFs718ipBC6+3Fs7mlmWQGKkLEtP/SD3/
+bbaHpm/V0tb+NEi+iz19X4eL3XW0JuAJiAlBdS99VNiOXDMMur1M8FfAVg5sm+I
7WCNI96B9W53j6kXxxO2HtZvuC74Jjq1KbzOc6wLDKPjTcrhmIbtpB01+zS7tYPB
dmVZxR5chV3ppoO2AjvzYH6HIaetN6diiaDhoZchhdfL0/scZoACQDAm7+jT2loz
3iOWxbKZpj1NP2A8UZeK+dyaSmfDdWd6A5BciVSLzxQe+mPiMEDtUFKv/vqe4P96
in10
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org