Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/21c9dcad133bc045f55bc946eca4e279f10ed3a0.roa
File: 21c9dcad133bc045f55bc946eca4e279f10ed3a0.roa (raw, json)
Hash identifier: ZZHBHIZPygnIZopqlzlxG25JGJEuKTm5WkOdSRdhQkk=
Subject key identifier: 1B:0E:D8:2F:2B:1A:06:33:9F:02:88:29:A7:2A:88:0B:2C:BC:85:7E
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 124921
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/21c9dcad133bc045f55bc946eca4e279f10ed3a0.roa
Signing time: Wed 29 Nov 2023 15:48:12 +0000
ROA not before: Wed 29 Nov 2023 15:48:12 +0000
ROA not after: Sat 29 Nov 2025 15:48:12 +0000
asID: 28048
IP address blocks: 201.254.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1198369 (0x124921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Nov 29 15:48:12 2023 GMT
Not After : Nov 29 15:48:12 2025 GMT
Subject: CN=21c9dcad133bc045f55bc946eca4e279f10ed3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:df:98:6d:d0:37:52:a2:31:a6:f1:95:e9:
ca:da:fb:d8:6b:5d:34:a1:67:9f:c1:8f:7a:e3:ea:
69:71:b7:a6:9e:60:52:86:2e:76:50:0d:57:bd:77:
c6:68:de:71:07:5d:bf:f1:4a:a4:ae:7e:51:65:2d:
69:8c:e6:93:24:8d:93:2d:6d:3d:7b:60:c3:cb:1f:
e4:82:c2:ff:31:1e:29:a5:38:9d:46:af:95:29:e0:
d7:8f:63:97:eb:c8:18:d3:01:8f:6f:ec:93:02:94:
70:91:35:cf:16:c4:a3:e7:9b:ae:b0:29:56:68:7a:
90:c6:4b:4b:92:3e:15:13:0e:ce:36:b3:8e:e6:67:
8f:7b:32:4b:7c:92:b8:70:d5:b8:2c:dd:08:49:ed:
51:f8:79:ce:f1:22:4e:e7:03:34:d4:c7:7b:02:27:
b7:a2:b6:68:91:6b:24:b1:c8:6b:ff:50:bf:80:8f:
17:14:fe:11:eb:8f:78:ed:a0:53:d1:ca:ff:05:47:
1b:b1:86:1e:db:7f:ee:95:2f:40:6b:de:34:9d:fa:
cd:e6:ef:60:3b:68:dc:b7:f3:d2:6c:22:2b:70:45:
c0:95:d6:e2:59:4a:ce:88:6e:32:3a:1c:e2:28:84:
f4:48:d1:6f:e2:2c:6e:d7:f4:d0:26:32:e6:be:74:
d9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0E:D8:2F:2B:1A:06:33:9F:02:88:29:A7:2A:88:0B:2C:BC:85:7E
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/21c9dcad133bc045f55bc946eca4e279f10ed3a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.254.223.0/24
Signature Algorithm: sha256WithRSAEncryption
82:63:83:2c:8c:03:0f:d5:b6:17:4e:9c:67:45:69:18:ce:63:
c6:97:0d:0d:e6:66:4d:5d:98:1b:fb:b0:05:d9:39:ca:d1:3b:
98:56:87:5c:c7:b7:c4:46:c7:f2:f7:69:81:54:50:1b:51:74:
54:d0:d6:74:02:39:38:7c:22:3e:16:2a:10:1c:2a:f1:de:36:
6e:70:64:c7:e5:02:13:2a:27:b4:d7:92:ba:f0:8c:37:69:81:
68:0f:7d:a3:4e:37:ae:8f:b2:92:1b:e3:66:90:8d:54:f7:01:
3f:58:7b:3b:7c:33:4b:0c:f4:31:c9:ce:81:97:57:c1:db:32:
61:a0:e9:a4:62:48:2b:6e:59:1e:7f:ca:55:b8:c7:9e:23:f6:
8e:ba:b1:22:b2:60:22:b5:e5:d2:31:0f:84:99:8f:46:50:ce:
62:7c:7c:83:ff:c9:18:24:ce:bb:88:c2:dd:67:7a:7e:ad:e3:
82:f0:bf:5e:5c:7b:c3:cb:9a:e2:0e:2f:09:98:ce:a1:18:25:
51:49:5c:c2:1d:7d:e3:b4:ea:58:37:55:65:a4:62:42:e5:97:
fc:24:e9:45:c2:cf:2f:fb:0d:4b:01:a0:f0:9f:9c:78:b6:89:
4d:69:29:10:c8:32:5c:e2:dc:cb:25:23:e7:d8:16:30:21:70:
fb:ef:ee:cb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEkkhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMTI5
MTU0ODEyWhcNMjUxMTI5MTU0ODEyWjAzMTEwLwYDVQQDEygyMWM5ZGNhZDEzM2Jj
MDQ1ZjU1YmM5NDZlY2E0ZTI3OWYxMGVkM2EwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq13fmG3QN1KiMabxlenK2vvYa100oWefwY964+ppcbemnmBS
hi52UA1XvXfGaN5xB12/8Uqkrn5RZS1pjOaTJI2TLW09e2DDyx/kgsL/MR4ppTid
Rq+VKeDXj2OX68gY0wGPb+yTApRwkTXPFsSj55uusClWaHqQxktLkj4VEw7ONrOO
5mePezJLfJK4cNW4LN0ISe1R+HnO8SJO5wM01Md7Aie3orZokWskschr/1C/gI8X
FP4R64947aBT0cr/BUcbsYYe23/ulS9Aa940nfrN5u9gO2jct/PSbCIrcEXAldbi
WUrOiG4yOhziKIT0SNFv4ixu1/TQJjLmvnTZrwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBsO2C8rGgYznwKIKacqiAssvIV+MB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2LzIxYzlkY2FkMTMzYmMwNDVmNTViYzk0NmVjYTRlMjc5ZjEwZWQzYTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMn+3zANBgkqhkiG9w0BAQsFAAOCAQEAgmODLIwDD9W2F06c
Z0VpGM5jxpcNDeZmTV2YG/uwBdk5ytE7mFaHXMe3xEbH8vdpgVRQG1F0VNDWdAI5
OHwiPhYqEBwq8d42bnBkx+UCEyontNeSuvCMN2mBaA99o043ro+ykhvjZpCNVPcB
P1h7O3wzSwz0McnOgZdXwdsyYaDppGJIK25ZHn/KVbjHniP2jrqxIrJgIrXl0jEP
hJmPRlDOYnx8g//JGCTOu4jC3Wd6fq3jgvC/Xlx7w8ua4g4vCZjOoRglUUlcwh19
47TqWDdVZaRiQuWX/CTpRcLPL/sNSwGg8J+ceLaJTWkpEMgyXOLcyyUj59gWMCFw
++/uyw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org