Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/d889d3d75d18f3b986cc173ced50ba880fc2462d.roa
File: d889d3d75d18f3b986cc173ced50ba880fc2462d.roa (raw, json)
Hash identifier: vduijYmOk+4QeEYcudOnMYTcLg/KVgzQVQeuewX6HYU=
Subject key identifier: 0A:5E:9A:B0:A6:7E:DE:0E:F6:54:A3:C8:B3:8B:2D:B8:FE:49:DB:F0
Certificate issuer: /CN=5d3796838d771f93080603caee0f79e836838277
Certificate serial: 079230
Authority key identifier: AF:18:79:CB:2B:35:D8:8E:88:91:A1:CD:54:4C:67:9D:BD:1E:63:A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d3796838d771f93080603caee0f79e836838277.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/d889d3d75d18f3b986cc173ced50ba880fc2462d.roa
Signing time: Wed 24 Mar 2021 14:46:30 +0000
ROA not before: Wed 24 Mar 2021 14:46:30 +0000
ROA not after: Tue 24 Mar 2026 14:46:30 +0000
asID: 269976
IP address blocks: 24.152.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496176 (0x79230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3796838d771f93080603caee0f79e836838277
Validity
Not Before: Mar 24 14:46:30 2021 GMT
Not After : Mar 24 14:46:30 2026 GMT
Subject: CN=d889d3d75d18f3b986cc173ced50ba880fc2462d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:e3:f6:ce:8b:0d:a8:88:3c:74:70:5d:51:
c6:5e:d9:22:56:38:c9:5d:53:44:68:df:08:eb:e0:
f8:db:26:91:9d:dd:65:15:93:89:40:1a:3d:5e:d8:
a7:27:ce:d3:9a:82:aa:99:8c:89:59:8c:d3:4d:ea:
45:2c:d3:20:16:d8:66:84:2d:cb:c2:65:b5:0a:6c:
fb:8f:2e:51:5a:f8:23:d2:8e:c9:74:e1:2d:01:c4:
d0:4f:df:cb:fd:5c:0c:ed:87:a0:c2:81:9d:c9:58:
88:81:c2:1e:b0:7e:85:4b:db:4c:e9:50:40:56:7a:
19:c5:67:7d:6e:75:f5:44:d2:92:d2:f5:c9:69:4a:
4b:8a:2d:f4:ff:13:5c:d1:b7:ca:5b:b6:fe:92:04:
16:ff:35:f3:f3:f8:c6:9f:72:08:e3:cd:7e:cc:83:
85:3d:81:c5:2d:26:83:9d:37:ba:0f:ac:b8:09:0f:
ed:2f:07:e8:60:a6:02:f1:dd:3b:31:d8:0f:ba:2c:
ba:fd:23:e1:7b:96:f9:70:8f:43:5d:0f:3d:ad:0f:
3a:ea:de:9a:81:97:78:6c:77:c0:98:da:b5:5a:d4:
64:aa:f6:62:b5:9c:cc:16:5b:3a:fc:d1:b4:8c:e6:
a8:f9:80:ac:e1:f2:9e:8c:60:57:ae:02:4c:51:c2:
8f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5E:9A:B0:A6:7E:DE:0E:F6:54:A3:C8:B3:8B:2D:B8:FE:49:DB:F0
X509v3 Authority Key Identifier:
keyid:AF:18:79:CB:2B:35:D8:8E:88:91:A1:CD:54:4C:67:9D:BD:1E:63:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d3796838d771f93080603caee0f79e836838277.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/d889d3d75d18f3b986cc173ced50ba880fc2462d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/5d3796838d771f93080603caee0f79e836838277.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.40.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:b3:6b:d6:2f:da:98:1a:84:20:a4:d8:e8:9a:8b:78:48:b9:
37:ca:46:0d:e0:9c:ea:4e:be:80:cd:17:4a:a0:a8:1b:c6:70:
05:2b:ac:fa:70:06:b0:a6:9c:4d:0f:ec:57:f3:da:9b:4a:e9:
4d:c7:42:30:38:bb:75:b0:6c:0b:e2:56:66:14:be:4f:95:93:
ee:57:73:86:6b:56:ed:7f:fa:80:2e:b9:ae:c0:98:b5:f9:e7:
fb:f6:97:66:f4:51:d2:3b:fb:06:a5:f5:fe:f0:e8:ff:2e:16:
75:bb:38:6c:e5:ce:76:c4:6c:4b:38:d3:c5:45:ec:f0:89:a7:
13:f9:1e:82:ab:8e:91:74:b4:59:11:c3:de:05:a6:4e:4d:a2:
f3:e1:7a:ec:2b:9a:d6:0d:9f:0e:00:24:50:74:5b:c0:9d:c3:
17:4f:cd:45:c3:54:6d:d3:5a:c7:f7:31:5d:dd:04:07:69:b5:
87:b3:c4:3b:a6:84:9f:8b:52:cc:65:35:ff:7c:7b:36:4c:26:
a7:00:04:30:64:3d:ef:b0:eb:a4:50:05:b8:c2:ca:2b:19:11:
b3:aa:69:98:00:1d:29:1e:c7:77:fd:70:38:10:13:72:bc:19:
a6:52:91:f0:ef:85:c2:70:53:64:3e:37:8b:30:51:88:57:fb:
cd:a4:5c:00
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDB5IwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
Mzc5NjgzOGQ3NzFmOTMwODA2MDNjYWVlMGY3OWU4MzY4MzgyNzcwHhcNMjEwMzI0
MTQ0NjMwWhcNMjYwMzI0MTQ0NjMwWjAzMTEwLwYDVQQDEyhkODg5ZDNkNzVkMThm
M2I5ODZjYzE3M2NlZDUwYmE4ODBmYzI0NjJkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoGrj9s6LDaiIPHRwXVHGXtkiVjjJXVNEaN8I6+D42yaRnd1l
FZOJQBo9XtinJ87TmoKqmYyJWYzTTepFLNMgFthmhC3LwmW1Cmz7jy5RWvgj0o7J
dOEtAcTQT9/L/VwM7YegwoGdyViIgcIesH6FS9tM6VBAVnoZxWd9bnX1RNKS0vXJ
aUpLii30/xNc0bfKW7b+kgQW/zXz8/jGn3II481+zIOFPYHFLSaDnTe6D6y4CQ/t
LwfoYKYC8d07MdgPuiy6/SPhe5b5cI9DXQ89rQ866t6agZd4bHfAmNq1WtRkqvZi
tZzMFls6/NG0jOao+YCs4fKejGBXrgJMUcKPaQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFApemrCmft4O9lSjyLOLLbj+SdvwMB8GA1UdIwQYMBaAFK8YecsrNdiOiJGh
zVRMZ529HmOjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWQzNzk2
ODM4ZDc3MWY5MzA4MDYwM2NhZWUwZjc5ZTgzNjgzODI3Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjEyMmIwOTItODA3ZS00ZjI2LWEyZDgtODQ4N2Y3
OGY4MzMxL2Q4ODlkM2Q3NWQxOGYzYjk4NmNjMTczY2VkNTBiYTg4MGZjMjQ2MmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MTIyYjA5Mi04MDdlLTRmMjYtYTJkOC04NDg3
Zjc4ZjgzMzEvNWQzNzk2ODM4ZDc3MWY5MzA4MDYwM2NhZWUwZjc5ZTgzNjgzODI3
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAhiYKDANBgkqhkiG9w0BAQsFAAOCAQEAH7Nr1i/amBqEIKTY
6JqLeEi5N8pGDeCc6k6+gM0XSqCoG8ZwBSus+nAGsKacTQ/sV/Pam0rpTcdCMDi7
dbBsC+JWZhS+T5WT7ldzhmtW7X/6gC65rsCYtfnn+/aXZvRR0jv7BqX1/vDo/y4W
dbs4bOXOdsRsSzjTxUXs8ImnE/kegquOkXS0WRHD3gWmTk2i8+F67Cua1g2fDgAk
UHRbwJ3DF0/NRcNUbdNax/cxXd0EB2m1h7PEO6aEn4tSzGU1/3x7NkwmpwAEMGQ9
77DrpFAFuMLKKxkRs6ppmAAdKR7Hd/1wOBATcrwZplKR8O+FwnBTZD43izBRiFf7
zaRcAA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org