Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/73adf51dcf9f6c533870f14a1c495254fd913f2e.roa
File: 73adf51dcf9f6c533870f14a1c495254fd913f2e.roa (raw, json)
Hash identifier: w/Y6WiOQTg3ngmcPKmC0F2Bku/fYlbK9J600nilEoa4=
Subject key identifier: 84:EB:5C:42:73:AD:CC:88:41:63:65:A9:44:30:34:52:32:B9:4E:21
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 12571F
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/73adf51dcf9f6c533870f14a1c495254fd913f2e.roa
Signing time: Wed 29 Nov 2023 15:50:41 +0000
ROA not before: Wed 29 Nov 2023 15:50:41 +0000
ROA not after: Sat 29 Nov 2025 15:50:41 +0000
asID: 27813
IP address blocks: 201.254.236.0/24 maxlen: 24
201.254.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1201951 (0x12571f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Nov 29 15:50:41 2023 GMT
Not After : Nov 29 15:50:41 2025 GMT
Subject: CN=73adf51dcf9f6c533870f14a1c495254fd913f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:67:a3:b2:23:32:71:fc:94:1c:4a:4c:e7:
87:09:f7:e1:54:cb:c9:fc:a4:96:4a:d5:34:1c:8d:
51:5f:6d:01:b5:b5:4d:bd:29:d5:0b:ed:20:44:a6:
1f:5e:6d:2e:fa:64:c3:ac:96:d5:0e:e2:21:42:2d:
8c:35:cc:be:74:d8:86:46:6d:e3:75:54:da:61:fb:
f8:e8:60:89:24:15:af:88:8a:8c:80:0f:22:d6:e7:
ce:c3:24:6a:f6:7c:e1:bd:2d:dd:38:c9:a8:82:47:
68:1b:6d:b2:9f:71:ce:a3:a8:83:8e:79:bb:17:07:
c2:28:f1:b2:9a:89:44:12:d1:2e:93:82:b7:04:d6:
21:8e:98:72:0d:b0:1d:54:50:d5:9b:6f:ae:d6:cc:
c9:11:f9:f7:7f:6e:dd:59:4c:57:17:d7:7c:b9:f9:
37:fe:81:de:39:ac:7c:90:9e:5e:e9:9d:61:1d:cd:
ca:0c:58:e0:3a:b9:20:59:b9:63:21:33:24:57:8c:
c7:9f:a9:c2:0e:9b:16:33:2a:dd:52:f4:42:e0:c1:
a0:46:8d:11:e0:e3:7f:bb:e8:c7:31:ce:58:37:28:
29:eb:ea:d2:4c:f4:16:53:31:07:e9:bb:d8:d7:6a:
27:45:2f:4e:b3:5b:2c:cd:f6:2f:7b:23:06:af:40:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EB:5C:42:73:AD:CC:88:41:63:65:A9:44:30:34:52:32:B9:4E:21
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/73adf51dcf9f6c533870f14a1c495254fd913f2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.254.236.0/24
201.254.238.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d7:37:cf:5d:4e:e6:c5:0b:88:78:36:df:79:76:2c:ac:38:
d5:6e:e4:91:77:c1:6d:ab:8a:b1:99:bb:d3:86:bf:d2:ed:20:
b4:66:59:0d:10:b2:b6:8e:a8:1d:77:70:76:48:69:97:b2:f7:
9a:7c:df:e4:86:33:44:18:d0:10:fb:03:41:7e:fa:14:ad:13:
ae:f3:62:0d:b4:53:7c:e8:f2:1b:4f:c5:2e:3f:99:d4:e3:9d:
f7:6e:ed:94:22:87:3b:9e:fc:31:14:13:ce:09:0b:3a:c7:0f:
82:d3:81:fa:a0:50:76:35:19:34:83:30:bb:8e:7e:ba:6c:9a:
3d:3a:77:c7:0a:93:c8:40:a2:7e:4b:16:62:77:ff:70:46:57:
5a:cf:a6:54:7f:e2:33:73:2e:4c:ce:ad:13:f1:9a:09:6f:84:
5a:5d:17:84:ed:bd:fc:2c:44:4f:4c:f6:39:5a:83:f9:13:df:
21:ce:1f:66:58:06:8c:e3:e2:b8:08:12:51:ad:e6:25:65:7f:
37:aa:65:ec:45:a0:b4:78:dd:36:25:2b:14:96:6b:5e:60:24:
a8:a9:a9:66:d0:37:49:15:32:e0:01:8a:ef:17:7a:c1:c8:47:
a4:1d:07:66:02:e7:f2:8f:4b:1d:f7:72:97:c8:9c:9d:5a:e9:
52:f8:57:0c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDElcfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMTI5
MTU1MDQxWhcNMjUxMTI5MTU1MDQxWjAzMTEwLwYDVQQDEyg3M2FkZjUxZGNmOWY2
YzUzMzg3MGYxNGExYzQ5NTI1NGZkOTEzZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzVRno7IjMnH8lBxKTOeHCffhVMvJ/KSWStU0HI1RX20BtbVN
vSnVC+0gRKYfXm0u+mTDrJbVDuIhQi2MNcy+dNiGRm3jdVTaYfv46GCJJBWviIqM
gA8i1ufOwyRq9nzhvS3dOMmogkdoG22yn3HOo6iDjnm7FwfCKPGymolEEtEuk4K3
BNYhjphyDbAdVFDVm2+u1szJEfn3f27dWUxXF9d8ufk3/oHeOax8kJ5e6Z1hHc3K
DFjgOrkgWbljITMkV4zHn6nCDpsWMyrdUvRC4MGgRo0R4ON/u+jHMc5YNygp6+rS
TPQWUzEH6bvY12onRS9Os1sszfYveyMGr0DUdQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFITrXEJzrcyIQWNlqUQwNFIyuU4hMB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2LzczYWRmNTFkY2Y5ZjZjNTMzODcwZjE0YTFjNDk1MjU0ZmQ5MTNmMmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAMn+7AMEAMn+7jANBgkqhkiG9w0BAQsFAAOCAQEALdc3z11O
5sULiHg233l2LKw41W7kkXfBbauKsZm704a/0u0gtGZZDRCyto6oHXdwdkhpl7L3
mnzf5IYzRBjQEPsDQX76FK0TrvNiDbRTfOjyG0/FLj+Z1OOd927tlCKHO578MRQT
zgkLOscPgtOB+qBQdjUZNIMwu45+umyaPTp3xwqTyECifksWYnf/cEZXWs+mVH/i
M3MuTM6tE/GaCW+EWl0XhO29/CxET0z2OVqD+RPfIc4fZlgGjOPiuAgSUa3mJWV/
N6pl7EWgtHjdNiUrFJZrXmAkqKmpZtA3SRUy4AGK7xd6wchHpB0HZgLn8o9LHfdy
l8icnVrpUvhXDA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org