Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/90a321e5f33966202ccb4fa008675a68237821ad.roa
File: 90a321e5f33966202ccb4fa008675a68237821ad.roa (raw, json)
Hash identifier: KKz0lS8O4pxo1+lbO4QuJibP9VdTqu6A9nalNOCScmo=
Subject key identifier: 2A:82:5E:43:6A:11:7A:49:BB:3B:BF:1C:D6:0C:3D:B3:A7:F1:F6:3B
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 128C4F
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/90a321e5f33966202ccb4fa008675a68237821ad.roa
Signing time: Wed 29 Nov 2023 21:31:45 +0000
ROA not before: Wed 29 Nov 2023 21:31:45 +0000
ROA not after: Sat 29 Nov 2025 21:31:45 +0000
asID: 263221
IP address blocks: 201.251.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215567 (0x128c4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Nov 29 21:31:45 2023 GMT
Not After : Nov 29 21:31:45 2025 GMT
Subject: CN=90a321e5f33966202ccb4fa008675a68237821ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:85:39:e9:1e:cb:03:d2:f4:61:d3:4e:cc:
82:cf:9b:23:01:b7:b5:d8:49:ad:4c:df:b0:f8:62:
9e:ba:9d:b7:8f:b8:e5:4d:e9:c7:97:68:00:9d:6f:
17:5d:fd:bf:0d:59:3b:d0:fb:b6:07:50:ff:28:1a:
8a:c4:7b:09:dc:44:e7:95:e3:2b:91:e4:76:63:fd:
19:9a:e9:f5:31:31:a9:20:68:f5:d1:7a:4d:1b:88:
59:c2:46:57:33:77:4d:0b:58:98:59:e5:3c:7d:00:
79:39:56:0e:0c:ad:ab:40:b6:eb:7a:e8:76:ca:3f:
43:5b:19:f6:59:5f:ad:0e:03:6d:7b:c1:4d:2b:6f:
24:b4:06:bc:36:29:d4:72:b7:7c:44:20:7c:13:97:
7e:fd:b7:d0:3f:75:18:ca:da:59:9d:24:63:f1:99:
1c:d8:ca:ea:3d:f8:63:bc:8f:7a:4a:30:ab:0b:d4:
3d:dd:76:bf:a9:a2:73:f8:ba:cb:30:7d:c0:e8:d8:
b6:47:cc:80:36:12:c4:8a:b7:5f:10:6f:71:ea:f4:
3c:02:28:0d:f9:a8:00:ef:a2:f6:10:3c:97:d8:b9:
5e:b6:e3:e9:39:a7:a8:25:dd:41:6d:2d:89:71:3c:
47:d1:dc:e2:e0:0c:ab:52:2d:83:83:8b:28:b6:96:
ee:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:82:5E:43:6A:11:7A:49:BB:3B:BF:1C:D6:0C:3D:B3:A7:F1:F6:3B
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/90a321e5f33966202ccb4fa008675a68237821ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.251.40.0/24
Signature Algorithm: sha256WithRSAEncryption
76:b8:29:c1:8d:5d:5d:fd:e3:fc:16:01:2a:d0:19:67:7b:80:
0e:18:9a:d7:72:a0:a5:b6:bf:54:d2:33:b7:ed:2f:54:4e:3a:
11:97:24:ec:f7:3c:b3:16:dc:61:48:d3:17:0a:b5:25:f0:de:
4d:f0:ab:57:c2:f0:b3:48:e6:b1:9d:93:8f:11:fd:1f:57:52:
0a:c9:67:06:e8:c4:de:15:57:dd:b9:37:f6:aa:92:f4:fa:21:
4c:ee:48:48:52:9e:78:2d:ae:5d:aa:67:48:e9:66:1e:68:29:
10:d1:b3:23:93:20:f3:d0:ab:52:6c:f3:21:88:e9:9b:f9:d6:
d6:11:9e:81:5b:bc:c7:50:5d:53:95:4d:84:2a:5b:d4:c2:f4:
3a:6d:84:f2:b5:77:9b:b7:33:ed:22:56:bb:46:37:e2:52:08:
b3:d6:90:0c:94:4f:71:3e:3f:41:b0:a0:40:ff:1a:08:4d:c5:
2d:21:2b:8c:c0:e1:a8:aa:b1:91:61:c4:36:7d:1b:2c:c0:81:
3b:8f:2d:ff:f4:7d:f0:6f:85:e7:17:02:39:5d:11:df:a2:3e:
ce:bf:ce:b9:79:c7:c3:35:12:4d:e4:fe:33:33:32:4f:23:be:
34:b8:d4:ca:a4:a5:9f:e2:6d:27:cb:5a:db:dc:16:2f:98:71:
1f:7c:77:e7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEoxPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMTI5
MjEzMTQ1WhcNMjUxMTI5MjEzMTQ1WjAzMTEwLwYDVQQDEyg5MGEzMjFlNWYzMzk2
NjIwMmNjYjRmYTAwODY3NWE2ODIzNzgyMWFkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqLiFOekeywPS9GHTTsyCz5sjAbe12EmtTN+w+GKeup23j7jl
TenHl2gAnW8XXf2/DVk70Pu2B1D/KBqKxHsJ3ETnleMrkeR2Y/0Zmun1MTGpIGj1
0XpNG4hZwkZXM3dNC1iYWeU8fQB5OVYODK2rQLbreuh2yj9DWxn2WV+tDgNte8FN
K28ktAa8NinUcrd8RCB8E5d+/bfQP3UYytpZnSRj8Zkc2MrqPfhjvI96SjCrC9Q9
3Xa/qaJz+LrLMH3A6Ni2R8yANhLEirdfEG9x6vQ8AigN+agA76L2EDyX2LletuPp
OaeoJd1BbS2JcTxH0dzi4AyrUi2Dg4sotpbuGQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCqCXkNqEXpJuzu/HNYMPbOn8fY7MB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2LzkwYTMyMWU1ZjMzOTY2MjAyY2NiNGZhMDA4Njc1YTY4MjM3ODIxYWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMn7KDANBgkqhkiG9w0BAQsFAAOCAQEAdrgpwY1dXf3j/BYB
KtAZZ3uADhia13Kgpba/VNIzt+0vVE46EZck7Pc8sxbcYUjTFwq1JfDeTfCrV8Lw
s0jmsZ2TjxH9H1dSCslnBujE3hVX3bk39qqS9PohTO5ISFKeeC2uXapnSOlmHmgp
ENGzI5Mg89CrUmzzIYjpm/nW1hGegVu8x1BdU5VNhCpb1ML0Om2E8rV3m7cz7SJW
u0Y34lIIs9aQDJRPcT4/QbCgQP8aCE3FLSErjMDhqKqxkWHENn0bLMCBO48t//R9
8G+F5xcCOV0R36I+zr/OuXnHwzUSTeT+MzMyTyO+NLjUyqSln+JtJ8ta29wWL5hx
H3x35w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org