Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5daad9a7-232d-4fe9-b4d4-9bfa105b1417/33cb1c298bea424ed8c448e955e5cc41fe75e64c.roa
File: 33cb1c298bea424ed8c448e955e5cc41fe75e64c.roa (raw, json)
Hash identifier: LMxB3kGq/sc8cyHtTzLVbYIrOxbVDQxTjEPCs10zLV8=
Subject key identifier: 6D:E7:77:B5:E4:F7:9B:B8:EC:0E:B6:E9:5F:0E:5E:8D:4F:31:E8:6E
Certificate issuer: /CN=ad1db2aa734e6dcb93a8797a98a422a7f542f512
Certificate serial: 0805FE
Authority key identifier: C8:A9:2F:5E:C3:22:F7:EB:49:1E:AA:0B:B8:6B:31:A8:A3:2C:EE:C4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad1db2aa734e6dcb93a8797a98a422a7f542f512.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5daad9a7-232d-4fe9-b4d4-9bfa105b1417/33cb1c298bea424ed8c448e955e5cc41fe75e64c.roa
Signing time: Wed 24 Mar 2021 14:29:41 +0000
ROA not before: Wed 24 Mar 2021 14:29:40 +0000
ROA not after: Tue 24 Mar 2026 14:29:40 +0000
asID: 28093
IP address blocks: 170.254.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525822 (0x805fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1db2aa734e6dcb93a8797a98a422a7f542f512
Validity
Not Before: Mar 24 14:29:40 2021 GMT
Not After : Mar 24 14:29:40 2026 GMT
Subject: CN=33cb1c298bea424ed8c448e955e5cc41fe75e64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:1a:1f:21:26:cb:19:ec:c3:6c:c5:d4:e2:
25:b4:25:bf:22:ab:f9:6f:19:15:85:c9:b0:59:11:
34:5c:db:ce:72:93:df:1b:17:68:d0:38:1f:03:34:
86:c0:9e:d8:38:be:de:42:a0:00:fc:14:86:fe:41:
08:0f:63:bf:34:5a:64:c1:28:9a:a8:28:de:20:c9:
22:05:25:d8:53:23:ec:95:56:52:75:6d:d5:77:fa:
1f:17:92:34:94:49:df:97:c1:34:6e:72:b8:ae:30:
0d:dc:bb:11:ee:dc:1c:70:92:92:12:f9:31:67:ee:
3e:60:1f:3d:b4:f3:bb:4f:8e:6d:83:d4:6b:c9:13:
80:ca:af:87:51:15:ed:bf:9c:03:50:78:dd:d2:a7:
1f:aa:28:7a:32:87:ff:56:b9:e5:68:2e:5e:40:b6:
2a:bd:c0:d5:09:9d:5c:9f:cd:a7:9c:13:46:f8:9c:
51:f4:0f:6e:d1:1f:71:2b:82:3d:bd:19:28:49:e3:
44:d9:f0:ba:24:d3:08:a9:f3:79:38:79:82:03:da:
50:bb:84:c1:0a:bf:37:2b:49:79:ac:a2:c5:8c:60:
6b:db:27:45:d4:82:f9:7a:51:66:64:98:3f:14:cf:
f8:9d:25:88:71:61:b4:e7:fe:6f:56:f8:a8:ea:e9:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E7:77:B5:E4:F7:9B:B8:EC:0E:B6:E9:5F:0E:5E:8D:4F:31:E8:6E
X509v3 Authority Key Identifier:
keyid:C8:A9:2F:5E:C3:22:F7:EB:49:1E:AA:0B:B8:6B:31:A8:A3:2C:EE:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad1db2aa734e6dcb93a8797a98a422a7f542f512.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5daad9a7-232d-4fe9-b4d4-9bfa105b1417/33cb1c298bea424ed8c448e955e5cc41fe75e64c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5daad9a7-232d-4fe9-b4d4-9bfa105b1417/ad1db2aa734e6dcb93a8797a98a422a7f542f512.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.128.0/22
Signature Algorithm: sha256WithRSAEncryption
08:1b:67:c5:08:ce:34:30:6e:38:bc:ae:22:d2:60:a3:7a:c7:
a7:22:bf:cd:95:99:fc:9e:2e:9a:cc:e1:a6:90:64:7e:26:c6:
e9:98:ea:71:b2:16:87:bf:29:e3:fe:2d:dc:c1:d4:74:af:0c:
70:bc:9a:03:09:0a:c0:2e:ea:88:88:9a:e7:98:0a:73:b1:ac:
39:21:6f:07:aa:4d:6a:93:86:0a:12:6c:9c:69:8c:34:90:cf:
b6:e0:27:68:41:61:95:d8:92:47:3b:be:34:8a:ce:70:d7:a1:
a9:a6:1e:4d:08:61:5e:83:cb:4b:e1:ff:83:bf:87:e5:3a:1b:
fe:b5:ba:75:da:ad:7e:4b:3b:17:6a:e6:17:a6:b8:51:6f:b3:
52:aa:8d:6e:2e:a0:c2:f0:ff:0c:67:36:d5:ff:d3:d8:b8:79:
4d:a4:34:ac:87:e5:da:a3:e2:a9:4f:f5:6c:7b:3f:f8:1e:39:
ad:c5:0e:de:de:e9:2c:3f:30:79:28:06:cf:ed:87:3d:58:10:
d8:77:62:ea:72:a4:97:ae:b8:9b:9d:e5:0a:41:31:70:ac:aa:
cd:c3:7e:34:f4:f9:68:c5:2d:a1:92:86:fe:d0:d6:96:79:db:
b8:31:fc:9e:a9:f8:2f:9d:c8:f8:18:56:96:c0:f1:fe:1b:6a:
99:29:f7:59
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCAX+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFk
MWRiMmFhNzM0ZTZkY2I5M2E4Nzk3YTk4YTQyMmE3ZjU0MmY1MTIwHhcNMjEwMzI0
MTQyOTQwWhcNMjYwMzI0MTQyOTQwWjAzMTEwLwYDVQQDEygzM2NiMWMyOThiZWE0
MjRlZDhjNDQ4ZTk1NWU1Y2M0MWZlNzVlNjRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt28aHyEmyxnsw2zF1OIltCW/Iqv5bxkVhcmwWRE0XNvOcpPf
Gxdo0DgfAzSGwJ7YOL7eQqAA/BSG/kEID2O/NFpkwSiaqCjeIMkiBSXYUyPslVZS
dW3Vd/ofF5I0lEnfl8E0bnK4rjAN3LsR7twccJKSEvkxZ+4+YB89tPO7T45tg9Rr
yROAyq+HURXtv5wDUHjd0qcfqih6Mof/VrnlaC5eQLYqvcDVCZ1cn82nnBNG+JxR
9A9u0R9xK4I9vRkoSeNE2fC6JNMIqfN5OHmCA9pQu4TBCr83K0l5rKLFjGBr2ydF
1IL5elFmZJg/FM/4nSWIcWG05/5vVvio6ukCrQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG3nd7Xk95u47A626V8OXo1PMehuMB8GA1UdIwQYMBaAFMipL17DIvfrSR6q
C7hrMaijLO7EMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWQxZGIy
YWE3MzRlNmRjYjkzYTg3OTdhOThhNDIyYTdmNTQyZjUxMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWRhYWQ5YTctMjMyZC00ZmU5LWI0ZDQtOWJmYTEw
NWIxNDE3LzMzY2IxYzI5OGJlYTQyNGVkOGM0NDhlOTU1ZTVjYzQxZmU3NWU2NGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZGFhZDlhNy0yMzJkLTRmZTktYjRkNC05YmZh
MTA1YjE0MTcvYWQxZGIyYWE3MzRlNmRjYjkzYTg3OTdhOThhNDIyYTdmNTQyZjUx
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqr+gDANBgkqhkiG9w0BAQsFAAOCAQEACBtnxQjONDBuOLyu
ItJgo3rHpyK/zZWZ/J4umszhppBkfibG6ZjqcbIWh78p4/4t3MHUdK8McLyaAwkK
wC7qiIia55gKc7GsOSFvB6pNapOGChJsnGmMNJDPtuAnaEFhldiSRzu+NIrOcNeh
qaYeTQhhXoPLS+H/g7+H5Tob/rW6ddqtfks7F2rmF6a4UW+zUqqNbi6gwvD/DGc2
1f/T2Lh5TaQ0rIfl2qPiqU/1bHs/+B45rcUO3t7pLD8weSgGz+2HPVgQ2Hdi6nKk
l664m53lCkExcKyqzcN+NPT5aMUtoZKG/tDWlnnbuDH8nqn4L53I+BhWlsDx/htq
mSn3WQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org