Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/cbe9610538e042f4d1caadb73811db61cfa5d956.roa
File: cbe9610538e042f4d1caadb73811db61cfa5d956.roa (raw, json)
Hash identifier: 5pS6yBkyDCXRbaSCa3++IwFR3dOPd+j0mv7A1+Z8GTE=
Subject key identifier: C4:07:AE:16:E4:55:30:10:25:37:98:D1:F1:42:E5:1B:58:15:73:6A
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 128E38
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/cbe9610538e042f4d1caadb73811db61cfa5d956.roa
Signing time: Wed 29 Nov 2023 21:32:48 +0000
ROA not before: Wed 29 Nov 2023 21:32:48 +0000
ROA not after: Sat 29 Nov 2025 21:32:48 +0000
asID: 262231
IP address blocks: 201.251.48.0/24 maxlen: 24
201.251.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1216056 (0x128e38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Nov 29 21:32:48 2023 GMT
Not After : Nov 29 21:32:48 2025 GMT
Subject: CN=cbe9610538e042f4d1caadb73811db61cfa5d956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:86:af:4a:65:29:ee:68:08:ae:ed:af:da:
22:5d:8b:c0:85:30:42:98:5b:a2:ed:28:a8:af:2c:
05:c5:47:2b:d1:d9:3f:f4:bf:d0:df:28:38:a1:27:
c2:92:73:14:fa:0c:08:18:5b:2f:6f:6e:9c:86:05:
1a:95:19:d7:6e:02:cb:8f:53:bb:1f:82:54:42:15:
db:5a:08:0b:f7:43:8f:b7:fd:4a:3f:dc:90:0e:48:
29:54:c2:dd:48:7a:6d:90:9f:63:f2:50:30:0d:7d:
64:fc:63:3f:fa:f0:f4:a8:78:6e:af:5d:78:c8:03:
72:c5:a3:0e:23:64:86:8a:bd:c4:e8:c6:72:e0:c6:
bf:c4:c8:92:38:fd:fa:3b:ef:47:91:4d:76:6d:6d:
02:46:6a:98:84:03:d4:84:e2:06:97:74:e1:90:8e:
a4:b0:1c:4f:2e:0e:77:ca:b6:15:3a:9c:d3:9f:c8:
ed:0d:50:c7:25:c4:b1:78:8a:9c:d7:bf:21:31:78:
d9:1b:69:c1:4d:f7:b6:ad:a0:53:9a:70:f5:8c:56:
97:b3:5a:7c:8a:22:dd:98:64:6f:70:b7:69:6c:00:
1d:7d:c2:21:18:8e:43:c5:6d:35:e6:24:4f:6e:dc:
a2:7e:be:f7:01:17:88:9d:d8:4b:e9:3a:aa:5c:cc:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:07:AE:16:E4:55:30:10:25:37:98:D1:F1:42:E5:1B:58:15:73:6A
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/cbe9610538e042f4d1caadb73811db61cfa5d956.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.251.48.0/24
201.251.123.0/24
Signature Algorithm: sha256WithRSAEncryption
79:13:35:25:7b:50:ce:6b:56:d1:5f:5f:be:57:a6:73:f1:e3:
f5:d9:f4:e2:9a:39:19:e6:5c:58:cb:ad:5f:d9:5a:32:b7:5e:
c9:c9:a4:ec:2e:df:bc:44:e2:e8:53:de:19:72:03:1c:e3:06:
96:10:22:00:16:9f:36:47:62:85:b1:09:6d:38:01:89:50:3c:
fb:cf:c5:fa:85:07:9d:37:01:19:d9:31:71:4f:19:d0:65:3e:
fd:a4:a3:68:c5:0a:e1:40:83:b3:63:b0:7c:e0:2c:bb:70:2a:
b4:b3:15:0a:08:d9:a6:d1:ed:50:7b:64:e3:d8:e0:07:52:c9:
ab:34:16:87:0a:29:f3:19:16:48:83:53:82:b5:61:a2:cc:fa:
eb:a4:b9:5a:01:d3:fb:3c:49:4e:08:25:67:60:c8:57:a6:28:
3d:ff:50:cb:37:da:ce:ac:e2:da:2c:69:ab:c2:88:db:e7:b6:
1d:a2:8f:79:d7:de:05:70:8d:35:37:f5:b8:dd:b0:fe:dd:86:
02:ca:50:ed:50:c5:02:cf:63:c4:64:4d:42:34:a6:9e:c4:34:
bf:fb:68:87:6c:fb:d1:0c:91:53:33:8a:d1:6c:06:b6:ad:97:
35:9e:43:e8:d1:b9:0e:58:79:bd:32:8b:16:e5:33:62:e1:c5:
e1:8a:4e:32
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDEo44MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMTI5
MjEzMjQ4WhcNMjUxMTI5MjEzMjQ4WjAzMTEwLwYDVQQDEyhjYmU5NjEwNTM4ZTA0
MmY0ZDFjYWFkYjczODExZGI2MWNmYTVkOTU2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAojaGr0plKe5oCK7tr9oiXYvAhTBCmFui7SiorywFxUcr0dk/
9L/Q3yg4oSfCknMU+gwIGFsvb26chgUalRnXbgLLj1O7H4JUQhXbWggL90OPt/1K
P9yQDkgpVMLdSHptkJ9j8lAwDX1k/GM/+vD0qHhur114yANyxaMOI2SGir3E6MZy
4Ma/xMiSOP36O+9HkU12bW0CRmqYhAPUhOIGl3ThkI6ksBxPLg53yrYVOpzTn8jt
DVDHJcSxeIqc178hMXjZG2nBTfe2raBTmnD1jFaXs1p8iiLdmGRvcLdpbAAdfcIh
GI5DxW015iRPbtyifr73AReIndhL6TqqXMy03wIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFMQHrhbkVTAQJTeY0fFC5RtYFXNqMB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2L2NiZTk2MTA1MzhlMDQyZjRkMWNhYWRiNzM4MTFkYjYxY2ZhNWQ5NTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAMn7MAMEAMn7ezANBgkqhkiG9w0BAQsFAAOCAQEAeRM1JXtQ
zmtW0V9fvlemc/Hj9dn04po5GeZcWMutX9laMrdeycmk7C7fvETi6FPeGXIDHOMG
lhAiABafNkdihbEJbTgBiVA8+8/F+oUHnTcBGdkxcU8Z0GU+/aSjaMUK4UCDs2Ow
fOAsu3AqtLMVCgjZptHtUHtk49jgB1LJqzQWhwop8xkWSINTgrVhosz666S5WgHT
+zxJTgglZ2DIV6YoPf9Qyzfazqzi2ixpq8KI2+e2HaKPedfeBXCNNTf1uN2w/t2G
AspQ7VDFAs9jxGRNQjSmnsQ0v/toh2z70QyRUzOK0WwGtq2XNZ5D6NG5Dlh5vTKL
FuUzYuHF4YpOMg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org