Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/d47ec6f60100c610f472eac30a9ab3fa4c68764e.roa
File: d47ec6f60100c610f472eac30a9ab3fa4c68764e.roa (raw, json)
Hash identifier: MM/3EobYYNTjb8JsiL1AzwGi4LYPhv8vDeKEohICbPk=
Subject key identifier: A7:2B:2B:14:C6:AC:3E:5A:76:7B:B4:77:96:7E:88:A0:79:66:50:BA
Certificate issuer: /CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
Certificate serial: 0ABCDB
Authority key identifier: B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/d47ec6f60100c610f472eac30a9ab3fa4c68764e.roa
Signing time: Wed 24 Mar 2021 14:35:37 +0000
ROA not before: Wed 24 Mar 2021 14:35:37 +0000
ROA not after: Tue 24 Mar 2026 14:35:37 +0000
asID: 8151
IP address blocks: 201.131.88.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703707 (0xabcdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
Validity
Not Before: Mar 24 14:35:37 2021 GMT
Not After : Mar 24 14:35:37 2026 GMT
Subject: CN=d47ec6f60100c610f472eac30a9ab3fa4c68764e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:b7:00:55:81:6f:f2:91:58:9e:19:ed:b5:
0f:7a:ce:6d:7d:ab:ae:8c:b7:e8:14:3b:3d:fb:af:
b7:7a:c3:e1:d7:5e:a8:d6:ae:39:b3:53:2d:28:4f:
f6:c8:e5:f9:4d:48:ea:bd:23:a8:87:fc:c5:b4:0e:
b1:29:c5:19:af:ce:96:16:d9:78:54:52:9a:b7:d1:
be:13:92:57:3f:b7:10:c7:cb:53:c9:f3:c9:38:b2:
db:b8:4d:44:f5:60:a1:cf:c5:db:d5:15:3f:dc:fb:
ae:a9:93:f8:e4:d7:da:44:66:1a:f3:79:00:b3:04:
a3:56:a3:a1:c4:61:19:c3:c2:c0:f0:0d:03:7d:b2:
86:06:47:f1:45:6c:74:51:80:91:1a:95:5e:ea:fa:
41:36:ca:87:0b:d0:3d:53:3f:b7:f6:7a:c8:c2:3f:
ce:ab:4a:26:2e:71:a9:ab:69:c3:1f:d3:a2:76:7a:
dd:db:f8:e7:20:aa:6d:e5:f4:63:a1:94:93:89:4b:
5c:d6:47:a4:8f:6c:ec:73:ec:b2:32:f2:2a:3e:20:
7f:4f:1c:24:3a:0b:40:c2:a7:85:c3:97:e8:98:2c:
dd:34:6e:2f:71:d9:c9:16:0c:dc:df:aa:c2:46:30:
6e:b9:13:95:da:7c:c9:4d:be:e1:ee:dd:aa:f2:5c:
83:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2B:2B:14:C6:AC:3E:5A:76:7B:B4:77:96:7E:88:A0:79:66:50:BA
X509v3 Authority Key Identifier:
keyid:B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/d47ec6f60100c610f472eac30a9ab3fa4c68764e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/71dea23d89f89e25e8692a6c0b1c413e909da1ca.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.88.0/23
Signature Algorithm: sha256WithRSAEncryption
73:ef:ce:8b:a3:f4:1f:85:96:3e:fa:6d:46:32:05:ff:33:40:
d2:a4:24:b6:9d:b0:2d:7a:9d:e2:bc:bd:5a:73:70:ef:bb:e6:
9c:58:f6:06:e4:56:c1:83:db:51:13:b5:fc:85:c3:49:e3:92:
92:68:37:d1:ff:e4:1b:8f:59:7c:20:b2:69:ed:54:8b:42:a2:
16:19:ad:33:26:c2:c1:14:a8:b9:26:fa:8e:60:24:35:c6:fb:
d6:78:21:e3:78:6d:d0:71:9e:90:37:cd:a9:51:d9:ce:06:d5:
c4:db:26:0b:99:3a:dc:38:6d:39:2e:7a:64:3d:16:c2:93:e3:
2f:22:96:1b:df:94:da:7d:ad:a7:17:f4:49:1b:32:95:70:db:
29:fe:50:8e:be:4a:20:b1:b7:f6:9e:cf:92:cb:03:f7:a0:93:
fa:1a:02:4d:df:fe:c6:ff:3b:50:f9:ab:bf:b0:8b:a1:41:4b:
41:24:d2:ad:c1:79:d1:45:97:60:89:85:e8:72:05:37:c2:5e:
5d:06:3d:1c:21:e7:e4:26:84:2d:e2:9e:9b:40:fc:5d:5c:15:
d5:af:83:7c:dd:82:c4:50:38:8d:db:99:51:39:88:bd:ff:52:
39:fe:38:e1:f4:2a:58:8b:fe:b9:1c:a9:c1:d3:f8:22:71:01:
c6:79:6a:d8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCrzbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx
ZGVhMjNkODlmODllMjVlODY5MmE2YzBiMWM0MTNlOTA5ZGExY2EwHhcNMjEwMzI0
MTQzNTM3WhcNMjYwMzI0MTQzNTM3WjAzMTEwLwYDVQQDEyhkNDdlYzZmNjAxMDBj
NjEwZjQ3MmVhYzMwYTlhYjNmYTRjNjg3NjRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk0S3AFWBb/KRWJ4Z7bUPes5tfauujLfoFDs9+6+3esPh116o
1q45s1MtKE/2yOX5TUjqvSOoh/zFtA6xKcUZr86WFtl4VFKat9G+E5JXP7cQx8tT
yfPJOLLbuE1E9WChz8Xb1RU/3PuuqZP45NfaRGYa83kAswSjVqOhxGEZw8LA8A0D
fbKGBkfxRWx0UYCRGpVe6vpBNsqHC9A9Uz+39nrIwj/Oq0omLnGpq2nDH9Oidnrd
2/jnIKpt5fRjoZSTiUtc1kekj2zsc+yyMvIqPiB/TxwkOgtAwqeFw5fomCzdNG4v
cdnJFgzc36rCRjBuuROV2nzJTb7h7t2q8lyDZwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKcrKxTGrD5adnu0d5Z+iKB5ZlC6MB8GA1UdIwQYMBaAFLmaRc/clgAPAvwG
bM+YWfBSwphfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzFkZWEy
M2Q4OWY4OWUyNWU4NjkyYTZjMGIxYzQxM2U5MDlkYTFjYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVlODc1MmQtM2I5ZC00OTBhLWI4OGYtODE1MTM4
MDZjNGRhL2Q0N2VjNmY2MDEwMGM2MTBmNDcyZWFjMzBhOWFiM2ZhNGM2ODc2NGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWU4NzUyZC0zYjlkLTQ5MGEtYjg4Zi04MTUx
MzgwNmM0ZGEvNzFkZWEyM2Q4OWY4OWUyNWU4NjkyYTZjMGIxYzQxM2U5MDlkYTFj
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcmDWDANBgkqhkiG9w0BAQsFAAOCAQEAc+/Oi6P0H4WWPvpt
RjIF/zNA0qQktp2wLXqd4ry9WnNw77vmnFj2BuRWwYPbURO1/IXDSeOSkmg30f/k
G49ZfCCyae1Ui0KiFhmtMybCwRSouSb6jmAkNcb71ngh43ht0HGekDfNqVHZzgbV
xNsmC5k63DhtOS56ZD0WwpPjLyKWG9+U2n2tpxf0SRsylXDbKf5Qjr5KILG39p7P
kssD96CT+hoCTd/+xv87UPmrv7CLoUFLQSTSrcF50UWXYImF6HIFN8JeXQY9HCHn
5CaELeKem0D8XVwV1a+DfN2CxFA4jduZUTmIvf9SOf444fQqWIv+uRypwdP4InEB
xnlq2A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org