Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/736011d19ede9db4792b03dec1f6572de7227a02.roa
File: 736011d19ede9db4792b03dec1f6572de7227a02.roa (raw, json)
Hash identifier: nObMOjZFQSucFq3M27R2NV6I+wW7p0ZooQOtyGwFxPo=
Subject key identifier: 9D:35:33:C2:90:86:D6:A5:43:20:AD:69:A9:9D:48:9A:9A:51:3B:00
Certificate issuer: /CN=4b0ff3b0bb36514a29ceced3a440524fd7f636dc
Certificate serial: 1DB782
Authority key identifier: 33:53:3D:1D:1F:5A:F1:D7:5C:44:A5:38:F4:4F:00:64:DC:F8:DC:5B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b0ff3b0bb36514a29ceced3a440524fd7f636dc.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/736011d19ede9db4792b03dec1f6572de7227a02.roa
Signing time: Wed 04 Oct 2023 08:30:00 +0000
ROA not before: Tue 03 Oct 2023 08:30:00 +0000
ROA not after: Thu 02 Oct 2025 08:30:00 +0000
asID: 3597
IP address blocks: 168.96.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1947522 (0x1db782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b0ff3b0bb36514a29ceced3a440524fd7f636dc
Validity
Not Before: Oct 3 08:30:00 2023 GMT
Not After : Oct 2 08:30:00 2025 GMT
Subject: CN=736011d19ede9db4792b03dec1f6572de7227a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f6:14:d2:5b:0d:d0:dd:38:d9:09:56:77:4e:
89:fb:05:8b:c4:73:e7:f5:eb:5e:ce:99:f9:6f:e4:
1b:0a:8b:07:77:f0:54:f9:12:5f:32:0c:51:6b:ea:
d8:1f:1d:c8:28:c8:11:97:48:08:af:ef:5c:64:bf:
f5:2e:69:fa:2d:6e:f2:07:02:eb:91:b1:10:4f:f6:
c9:fc:ea:f8:10:66:ea:ce:a3:17:9d:63:e5:43:26:
07:a9:bb:01:1f:18:78:f9:2d:99:01:a4:d0:4d:91:
da:b9:2a:24:ca:8e:2d:94:6f:ea:b0:21:a5:36:8e:
58:a3:77:d1:b7:ee:b3:f4:bb:88:a6:cc:3b:ee:13:
19:97:d8:94:27:e5:70:1c:ba:99:57:71:84:98:a3:
21:e9:bd:03:35:15:7e:4b:1a:6d:1f:48:d4:e3:f8:
15:59:36:4a:b9:f7:a6:98:47:96:10:0b:94:64:f3:
84:da:14:9f:86:1f:2d:f3:f9:30:cd:bf:c5:7a:44:
9b:1e:7e:24:bf:69:1e:0e:df:da:df:a4:4f:f2:62:
3a:9e:d0:a5:b5:b6:27:c7:1f:99:83:2b:52:02:fc:
b0:a8:5d:73:de:b1:1b:c9:5b:14:b7:4f:1f:32:dd:
2c:8c:02:04:ed:65:2e:32:2c:25:bd:0e:e8:95:eb:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:35:33:C2:90:86:D6:A5:43:20:AD:69:A9:9D:48:9A:9A:51:3B:00
X509v3 Authority Key Identifier:
keyid:33:53:3D:1D:1F:5A:F1:D7:5C:44:A5:38:F4:4F:00:64:DC:F8:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b0ff3b0bb36514a29ceced3a440524fd7f636dc.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/736011d19ede9db4792b03dec1f6572de7227a02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/4b0ff3b0bb36514a29ceced3a440524fd7f636dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.96.240.0/23
Signature Algorithm: sha256WithRSAEncryption
53:3c:b2:e3:ab:5c:bb:98:76:8e:4d:fc:ce:9a:f0:57:72:8e:
b5:ab:6c:0a:3a:58:9e:c7:b3:af:01:6a:8a:91:43:4c:4d:c8:
d9:6d:7c:46:18:16:9b:48:14:8d:98:dd:cf:32:32:c0:d4:e4:
3d:60:78:f6:8f:13:dd:af:28:86:7b:fa:43:ef:85:61:6d:9f:
dd:35:01:4f:cb:b8:7f:19:46:a0:4f:d1:84:3a:f6:93:aa:ea:
b0:2b:f7:cb:7c:b8:f4:2c:f8:56:e2:99:8f:f5:76:39:f5:e6:
1f:b8:84:95:01:1b:cc:a7:24:10:a5:52:fb:29:df:84:6c:6e:
86:4c:ec:99:0d:d6:4c:b3:62:f3:21:ae:d0:96:54:f6:3a:a8:
0a:b3:06:02:e7:bd:11:71:d4:6f:4a:72:42:b3:58:a5:1b:83:
df:3c:43:15:e3:ce:30:f2:47:5c:d5:f2:ed:e8:4d:5a:06:62:
f5:6d:97:17:1f:9d:02:e1:d2:de:99:86:73:69:6c:ea:32:3b:
29:60:67:55:79:5d:0f:96:37:d5:3c:f8:51:6b:73:18:01:56:
a4:5c:26:df:17:a7:03:a6:0a:d8:f7:dd:95:61:25:d3:0e:67:
83:54:82:48:17:7b:d5:98:5e:ba:f5:6a:a6:c6:52:d5:34:d2:
a7:85:45:f9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHbeCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRi
MGZmM2IwYmIzNjUxNGEyOWNlY2VkM2E0NDA1MjRmZDdmNjM2ZGMwHhcNMjMxMDAz
MDgzMDAwWhcNMjUxMDAyMDgzMDAwWjAzMTEwLwYDVQQDEyg3MzYwMTFkMTllZGU5
ZGI0NzkyYjAzZGVjMWY2NTcyZGU3MjI3YTAyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjvYU0lsN0N042QlWd06J+wWLxHPn9etezpn5b+QbCosHd/BU
+RJfMgxRa+rYHx3IKMgRl0gIr+9cZL/1Lmn6LW7yBwLrkbEQT/bJ/Or4EGbqzqMX
nWPlQyYHqbsBHxh4+S2ZAaTQTZHauSokyo4tlG/qsCGlNo5Yo3fRt+6z9LuIpsw7
7hMZl9iUJ+VwHLqZV3GEmKMh6b0DNRV+SxptH0jU4/gVWTZKufemmEeWEAuUZPOE
2hSfhh8t8/kwzb/FekSbHn4kv2keDt/a36RP8mI6ntCltbYnxx+ZgytSAvywqF1z
3rEbyVsUt08fMt0sjAIE7WUuMiwlvQ7oleu/FQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ01M8KQhtalQyCtaamdSJqaUTsAMB8GA1UdIwQYMBaAFDNTPR0fWvHXXESl
OPRPAGTc+NxbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGIwZmYz
YjBiYjM2NTE0YTI5Y2VjZWQzYTQ0MDUyNGZkN2Y2MzZkYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWJhNDU3NzgtYWY4NC00NWNmLWJjMjktM2U0MGQ3
MmJlOTRkLzczNjAxMWQxOWVkZTlkYjQ3OTJiMDNkZWMxZjY1NzJkZTcyMjdhMDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81YmE0NTc3OC1hZjg0LTQ1Y2YtYmMyOS0zZTQw
ZDcyYmU5NGQvNGIwZmYzYjBiYjM2NTE0YTI5Y2VjZWQzYTQ0MDUyNGZkN2Y2MzZk
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAahg8DANBgkqhkiG9w0BAQsFAAOCAQEAUzyy46tcu5h2jk38
zprwV3KOtatsCjpYnsezrwFqipFDTE3I2W18RhgWm0gUjZjdzzIywNTkPWB49o8T
3a8ohnv6Q++FYW2f3TUBT8u4fxlGoE/RhDr2k6rqsCv3y3y49Cz4VuKZj/V2OfXm
H7iElQEbzKckEKVS+ynfhGxuhkzsmQ3WTLNi8yGu0JZU9jqoCrMGAue9EXHUb0py
QrNYpRuD3zxDFePOMPJHXNXy7ehNWgZi9W2XFx+dAuHS3pmGc2ls6jI7KWBnVXld
D5Y31Tz4UWtzGAFWpFwm3xenA6YK2PfdlWEl0w5ng1SCSBd71ZheuvVqpsZS1TTS
p4VF+Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org