Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/c0ff1a033d17979057fd96e19d2907be9621a0a1.roa
File: c0ff1a033d17979057fd96e19d2907be9621a0a1.roa (raw, json)
Hash identifier: lHS0N7KV6EPiLFSOdisg5iG8+VKW9XE0M9U2cn12vGg=
Subject key identifier: 9A:FF:50:F6:4A:1E:E0:B4:C1:C1:63:77:94:0A:0D:73:A3:D1:BF:A3
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 14330F
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/c0ff1a033d17979057fd96e19d2907be9621a0a1.roa
Signing time: Tue 30 Jan 2024 19:41:25 +0000
ROA not before: Tue 30 Jan 2024 19:41:25 +0000
ROA not after: Fri 30 Jan 2026 19:41:25 +0000
asID: 20305
IP address blocks: 200.70.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1323791 (0x14330f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Jan 30 19:41:25 2024 GMT
Not After : Jan 30 19:41:25 2026 GMT
Subject: CN=c0ff1a033d17979057fd96e19d2907be9621a0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:29:3e:cf:4d:d8:fd:b4:68:1c:71:d9:45:
2b:ab:c8:b0:b2:10:79:10:4f:ce:b6:05:dd:3c:4a:
20:bd:18:92:42:2b:f1:35:91:40:6f:61:f4:1f:8e:
ef:d1:6e:37:57:7a:fa:ad:58:e4:f0:52:3e:55:cc:
af:09:12:dc:fc:b3:a9:f0:98:53:4d:25:44:ec:ad:
0b:4d:1e:5e:70:3b:d2:04:7f:ec:5d:60:58:21:81:
b7:46:6a:22:88:50:9c:06:e6:4d:75:fe:c5:e3:c9:
26:b9:7b:02:3f:03:48:2e:da:53:9c:d7:4e:89:0e:
dc:36:3a:73:7f:bd:1d:63:33:27:c0:26:69:8a:2f:
69:ac:24:ef:85:1f:4e:0b:e9:05:60:05:9a:71:11:
48:ca:26:b6:cc:a7:5c:94:24:f4:de:5d:da:a8:e0:
82:ef:08:3f:9b:6f:d7:c2:1e:bf:5f:12:4a:17:1d:
ce:4a:90:7f:65:f7:24:8a:7c:77:2c:c5:c5:1b:c0:
a3:f6:b5:41:da:03:3a:56:eb:6f:a8:da:5b:6b:11:
cc:eb:ac:f7:ff:4a:fb:42:c4:8d:1f:9a:76:72:60:
9c:4c:0c:ec:44:00:ab:04:4a:06:6d:26:52:67:da:
e3:a2:1e:40:54:5d:6c:6b:c4:10:c2:7c:49:d1:ba:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FF:50:F6:4A:1E:E0:B4:C1:C1:63:77:94:0A:0D:73:A3:D1:BF:A3
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/c0ff1a033d17979057fd96e19d2907be9621a0a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.70.26.0/24
Signature Algorithm: sha256WithRSAEncryption
17:0d:67:bd:40:74:86:74:0c:0c:9c:65:2d:88:86:46:84:1b:
33:d1:de:8b:08:d1:25:4f:98:ee:a5:19:0b:4e:0d:6c:64:9b:
e2:a0:58:a2:06:b7:ea:8a:1b:1e:ec:4d:62:f4:5d:64:12:47:
c3:c1:ee:0e:f6:f1:eb:1a:e3:f9:c1:a5:28:c8:9a:fa:50:8a:
af:81:83:ba:06:7a:0b:a8:73:e5:1c:4b:80:40:26:67:a6:42:
1a:87:fc:57:60:84:8c:7f:e4:90:14:79:83:6a:a7:63:ae:ee:
12:5f:18:67:d1:c8:55:16:31:6f:98:d0:18:e8:bc:1a:bf:23:
2b:1a:d3:4b:1d:f1:54:ee:3b:83:c9:22:80:ab:df:c0:34:8e:
f5:f3:1b:77:69:bb:21:7f:58:01:35:47:f5:54:f8:a9:fd:98:
2d:5f:8d:d3:dc:6f:f2:cd:7a:02:bb:27:61:9a:7c:bd:59:3d:
bb:62:44:18:56:5e:36:26:20:d1:a8:14:68:bd:8d:53:68:59:
ed:52:6c:81:e9:4c:45:ee:26:ed:f2:7b:ea:14:43:bc:c7:fe:
f3:83:3e:8a:a4:6d:c9:f3:c3:d7:dc:5d:1a:ed:0b:55:3b:92:
9d:e7:ff:31:85:c5:3f:25:42:7d:f0:f4:53:30:40:44:3d:96:
9c:bf:d5:5b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFDMPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjQwMTMw
MTk0MTI1WhcNMjYwMTMwMTk0MTI1WjAzMTEwLwYDVQQDEyhjMGZmMWEwMzNkMTc5
NzkwNTdmZDk2ZTE5ZDI5MDdiZTk2MjFhMGExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjgkpPs9N2P20aBxx2UUrq8iwshB5EE/OtgXdPEogvRiSQivx
NZFAb2H0H47v0W43V3r6rVjk8FI+VcyvCRLc/LOp8JhTTSVE7K0LTR5ecDvSBH/s
XWBYIYG3RmoiiFCcBuZNdf7F48kmuXsCPwNILtpTnNdOiQ7cNjpzf70dYzMnwCZp
ii9prCTvhR9OC+kFYAWacRFIyia2zKdclCT03l3aqOCC7wg/m2/Xwh6/XxJKFx3O
SpB/Zfckinx3LMXFG8Cj9rVB2gM6VutvqNpbaxHM66z3/0r7QsSNH5p2cmCcTAzs
RACrBEoGbSZSZ9rjoh5AVF1sa8QQwnxJ0boUzQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJr/UPZKHuC0wcFjd5QKDXOj0b+jMB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2L2MwZmYxYTAzM2QxNzk3OTA1N2ZkOTZlMTlkMjkwN2JlOTYyMWEwYTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhGGjANBgkqhkiG9w0BAQsFAAOCAQEAFw1nvUB0hnQMDJxl
LYiGRoQbM9HeiwjRJU+Y7qUZC04NbGSb4qBYoga36oobHuxNYvRdZBJHw8HuDvbx
6xrj+cGlKMia+lCKr4GDugZ6C6hz5RxLgEAmZ6ZCGof8V2CEjH/kkBR5g2qnY67u
El8YZ9HIVRYxb5jQGOi8Gr8jKxrTSx3xVO47g8kigKvfwDSO9fMbd2m7IX9YATVH
9VT4qf2YLV+N09xv8s16ArsnYZp8vVk9u2JEGFZeNiYg0agUaL2NU2hZ7VJsgelM
Re4m7fJ76hRDvMf+84M+iqRtyfPD19xdGu0LVTuSnef/MYXFPyVCffD0UzBARD2W
nL/VWw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org