Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/96bd5e3868999f995bea9b8897251ee6e368bb87.roa
File: 96bd5e3868999f995bea9b8897251ee6e368bb87.roa (raw, json)
Hash identifier: +4ATarUfF/AOjwYvB9YDJvBR8OOeXO8hI8YmzFICIFg=
Subject key identifier: DA:B7:E6:2D:E3:DE:CC:21:0A:FA:2E:4A:35:57:2A:A1:0D:78:52:2B
Certificate issuer: /CN=82b667941b9c44cb9ada9b7f66f84f2615467d5d
Certificate serial: 24898F
Authority key identifier: 4A:83:FC:6B:CF:93:2C:05:27:3A:68:A2:CD:F7:F2:46:46:C0:01:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82b667941b9c44cb9ada9b7f66f84f2615467d5d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/96bd5e3868999f995bea9b8897251ee6e368bb87.roa
Signing time: Tue 10 Oct 2023 14:45:38 +0000
ROA not before: Mon 09 Oct 2023 14:45:38 +0000
ROA not after: Fri 10 Oct 2025 14:45:38 +0000
asID: 265804
IP address blocks: 200.63.108.0/22 maxlen: 24
179.60.236.0/22 maxlen: 24
179.60.236.0/23 maxlen: 24
179.60.238.0/24 maxlen: 24
167.250.168.0/22 maxlen: 24
2803:b880::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2394511 (0x24898f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b667941b9c44cb9ada9b7f66f84f2615467d5d
Validity
Not Before: Oct 9 14:45:38 2023 GMT
Not After : Oct 10 14:45:38 2025 GMT
Subject: CN=96bd5e3868999f995bea9b8897251ee6e368bb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:00:b8:9e:5b:d5:3c:2a:aa:6d:df:4f:76:ea:
10:60:0b:d3:24:20:b9:35:71:2e:03:15:1c:3d:af:
30:52:3e:3b:0f:46:94:21:6c:31:78:ab:04:0e:4b:
33:6c:70:aa:e0:90:87:d5:f7:b1:8c:0a:b6:fc:64:
1b:de:cb:f0:51:ed:97:ea:79:e7:0a:68:bd:5c:6d:
67:07:29:4c:1b:16:53:49:2f:51:33:a2:14:39:cd:
a7:05:e7:37:d1:b4:22:92:05:26:b4:14:d5:ae:7e:
50:78:e3:8a:fb:3e:ad:ac:8e:a4:fd:9c:f6:8e:bf:
78:a1:ac:ca:db:a4:3d:f7:93:34:ff:dd:64:9d:41:
b5:6d:2e:2e:0d:ae:84:65:15:6c:e1:2c:43:23:4d:
7a:46:4a:df:89:c1:d0:b5:2d:44:20:9c:30:82:a3:
16:41:1b:a7:a1:b0:9d:fd:df:30:e3:eb:9d:52:7a:
ff:67:af:a6:1e:b7:04:ff:13:a1:62:f0:55:c1:64:
5c:29:c7:40:51:15:a8:fb:7a:b3:8d:0b:23:26:5c:
12:bd:b0:9c:47:9d:a7:8c:a5:f9:5e:c6:ef:c1:48:
48:ed:57:53:b5:d0:ca:fa:cc:f2:7d:c1:45:2e:08:
a1:25:f7:ca:4a:c5:b9:c4:48:57:ec:91:79:92:31:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B7:E6:2D:E3:DE:CC:21:0A:FA:2E:4A:35:57:2A:A1:0D:78:52:2B
X509v3 Authority Key Identifier:
keyid:4A:83:FC:6B:CF:93:2C:05:27:3A:68:A2:CD:F7:F2:46:46:C0:01:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82b667941b9c44cb9ada9b7f66f84f2615467d5d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/96bd5e3868999f995bea9b8897251ee6e368bb87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/82b667941b9c44cb9ada9b7f66f84f2615467d5d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.168.0/22
179.60.236.0/22
200.63.108.0/22
IPv6:
2803:b880::/32
Signature Algorithm: sha256WithRSAEncryption
8f:19:c1:75:ec:61:3b:79:72:2d:10:c5:f4:9b:20:7b:d6:0e:
a8:61:e9:48:f2:f8:17:9b:03:d4:9f:60:b0:34:96:c0:86:3a:
f7:fe:42:19:8b:c3:d8:a8:3a:f2:13:6f:d4:01:4e:33:4f:f4:
f5:41:8c:dc:91:4d:6f:06:e1:85:85:fc:82:78:32:96:77:24:
0e:18:d4:c6:d8:8a:55:89:d8:5d:91:5d:08:17:13:8a:c1:b2:
b7:25:12:f4:04:db:da:56:78:ed:b0:2c:01:f2:5b:98:ea:8d:
ae:99:de:b6:29:63:08:ba:c3:5f:0d:b1:ec:d4:ea:7e:df:12:
aa:fb:ee:09:84:65:14:12:60:63:36:82:e2:a6:2d:1a:5b:a3:
88:a0:ff:3a:1f:04:5b:e3:e3:16:01:f1:86:c9:dd:3f:df:7e:
f1:a1:70:bc:80:60:16:db:76:a8:02:c5:ac:0d:f1:8f:c6:3f:
23:98:fb:2e:d0:d4:4c:16:97:a8:4a:2b:07:d6:37:ea:43:06:
e5:48:67:c8:20:ae:0c:e8:4d:0c:93:71:66:d4:36:e2:98:c6:
e0:9d:0a:f9:27:e2:8e:40:3e:0e:d7:fb:c1:59:f6:9c:76:bb:
53:73:a2:2f:2b:cb:1f:af:9b:54:ef:31:5c:43:5d:07:0a:20:
11:ef:e4:2b
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIDJImPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgy
YjY2Nzk0MWI5YzQ0Y2I5YWRhOWI3ZjY2Zjg0ZjI2MTU0NjdkNWQwHhcNMjMxMDA5
MTQ0NTM4WhcNMjUxMDEwMTQ0NTM4WjAzMTEwLwYDVQQDEyg5NmJkNWUzODY4OTk5
Zjk5NWJlYTliODg5NzI1MWVlNmUzNjhiYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA7QC4nlvVPCqqbd9PduoQYAvTJCC5NXEuAxUcPa8wUj47D0aU
IWwxeKsEDkszbHCq4JCH1fexjAq2/GQb3svwUe2X6nnnCmi9XG1nBylMGxZTSS9R
M6IUOc2nBec30bQikgUmtBTVrn5QeOOK+z6trI6k/Zz2jr94oazK26Q995M0/91k
nUG1bS4uDa6EZRVs4SxDI016RkrficHQtS1EIJwwgqMWQRunobCd/d8w4+udUnr/
Z6+mHrcE/xOhYvBVwWRcKcdAURWo+3qzjQsjJlwSvbCcR52njKX5XsbvwUhI7VdT
tdDK+szyfcFFLgihJffKSsW5xEhX7JF5kjGyIwIDAQABo4ICdjCCAnIwHQYDVR0O
BBYEFNq35i3j3swhCvouSjVXKqENeFIrMB8GA1UdIwQYMBaAFEqD/GvPkywFJzpo
os338kZGwAEKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODJiNjY3
OTQxYjljNDRjYjlhZGE5YjdmNjZmODRmMjYxNTQ2N2Q1ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWQ5ZDBlNjQtZGYwOC00Mjc4LWFkNTYtODVmNjlk
NzgwYmEzLzk2YmQ1ZTM4Njg5OTlmOTk1YmVhOWI4ODk3MjUxZWU2ZTM2OGJiODcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZDlkMGU2NC1kZjA4LTQyNzgtYWQ1Ni04NWY2
OWQ3ODBiYTMvODJiNjY3OTQxYjljNDRjYjlhZGE5YjdmNjZmODRmMjYxNTQ2N2Q1
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQr
MCkwGAQCAAEwEgMEAqf6qAMEArM87AMEAsg/bDANBAIAAjAHAwUAKAO4gDANBgkq
hkiG9w0BAQsFAAOCAQEAjxnBdexhO3lyLRDF9Jsge9YOqGHpSPL4F5sD1J9gsDSW
wIY69/5CGYvD2Kg68hNv1AFOM0/09UGM3JFNbwbhhYX8gngylnckDhjUxtiKVYnY
XZFdCBcTisGytyUS9ATb2lZ47bAsAfJbmOqNrpnetiljCLrDXw2x7NTqft8Sqvvu
CYRlFBJgYzaC4qYtGlujiKD/Oh8EW+PjFgHxhsndP99+8aFwvIBgFtt2qALFrA3x
j8Y/I5j7LtDUTBaXqEorB9Y36kMG5UhnyCCuDOhNDJNxZtQ24pjG4J0K+SfijkA+
Dtf7wVn2nHa7U3OiLyvLH6+bVO8xXENdBwogEe/kKw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-ams.rpki-client.org