Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/4aae4f5466304eafd937cc1c509996aee912d293.roa
File: 4aae4f5466304eafd937cc1c509996aee912d293.roa (raw, json)
Hash identifier: Llf5CwCBLWY7bfbS83Si7Vgq7+HgqO7K9VLxc+v/Ws0=
Subject key identifier: CC:8C:E1:04:ED:12:82:96:36:BB:E9:07:8A:4A:BC:73:99:CD:B0:C4
Certificate issuer: /CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
Certificate serial: 11E551
Authority key identifier: B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/4aae4f5466304eafd937cc1c509996aee912d293.roa
Signing time: Tue 07 Nov 2023 07:30:04 +0000
ROA not before: Tue 07 Nov 2023 07:30:04 +0000
ROA not after: Thu 06 Nov 2025 07:30:04 +0000
asID: 265504
IP address blocks: 168.0.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1172817 (0x11e551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
Validity
Not Before: Nov 7 07:30:04 2023 GMT
Not After : Nov 6 07:30:04 2025 GMT
Subject: CN=4aae4f5466304eafd937cc1c509996aee912d293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:c7:a7:ee:0d:43:8b:1f:0a:fc:af:56:b4:
9f:8c:33:ea:85:ba:01:ec:f8:d0:cf:b3:d3:be:3f:
f6:c3:b7:a0:51:f0:87:f4:9d:95:77:ca:44:4d:a6:
48:68:4e:79:85:19:6e:18:df:10:4f:f8:4c:4f:21:
5d:61:43:88:69:f9:9d:d7:c6:7d:b3:f6:88:a7:18:
d2:a7:57:4a:91:d5:5f:5f:90:ff:ba:20:99:5a:c7:
5b:f5:a4:80:07:4d:ad:32:9b:19:9e:43:dd:2d:94:
03:92:96:79:b5:a4:d3:64:29:12:81:d4:52:1a:fd:
86:bb:0f:1b:3a:86:d7:fb:4a:8b:c5:99:73:10:76:
20:96:42:3f:f7:88:8d:6b:96:97:52:ab:c8:91:e4:
04:ba:03:2c:f0:f6:d1:ff:ee:e1:24:06:c3:8a:0b:
39:fa:66:4a:a7:7f:d0:f4:e9:44:f6:d0:87:92:c8:
ef:c2:04:e5:e0:80:af:a2:27:6a:a4:09:8a:55:5e:
aa:f3:80:e6:ad:90:40:87:cf:b6:0c:a7:34:37:d5:
24:7c:f0:df:86:74:14:d8:97:8d:80:d8:ca:30:35:
2c:b6:30:06:5a:6b:91:f9:e3:30:13:a1:4e:b7:88:
14:82:1c:4e:94:0a:2a:30:ef:c4:59:14:cf:96:6e:
5e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8C:E1:04:ED:12:82:96:36:BB:E9:07:8A:4A:BC:73:99:CD:B0:C4
X509v3 Authority Key Identifier:
keyid:B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/4aae4f5466304eafd937cc1c509996aee912d293.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:bd:68:fd:6f:21:7e:f8:94:f1:c3:90:31:5c:29:38:52:90:
e3:d6:21:5b:b9:63:a2:ee:d2:bc:51:ea:ba:cf:1a:f8:de:79:
8e:3f:23:c0:36:ce:7b:77:7e:88:8a:45:a7:93:cc:b7:0b:f3:
4f:8e:13:2b:f2:bf:c7:97:51:b6:79:e5:48:5d:34:8d:73:9e:
ea:81:84:b2:2b:31:39:95:98:0f:38:b0:dc:28:7e:d4:45:2f:
eb:b4:53:a4:3a:82:d7:09:db:99:00:7a:99:be:f4:2f:74:12:
c1:f8:fe:ea:30:74:2c:03:5a:9e:c5:0c:84:f3:9e:e0:a0:cb:
ae:29:73:51:4e:f4:05:6d:05:cd:c3:39:f3:25:90:3e:49:00:
5c:8a:6a:ea:b4:ab:82:f4:88:98:74:cc:7e:f2:90:a0:ff:40:
80:2a:40:cf:dd:6d:18:3c:3c:3e:12:0f:88:67:1d:95:ec:0f:
a4:fe:04:fc:a0:ca:b4:40:02:60:3e:ec:74:aa:d2:99:3b:69:
82:f2:13:be:ae:a9:06:8a:4a:0a:a0:c5:9a:9e:8c:0b:b2:a2:
f1:65:40:83:7b:c3:98:cb:cd:c6:99:cd:a5:db:7c:26:fa:87:
dd:6d:67:e7:a1:af:e1:5e:9e:a2:3b:b1:8d:4f:4c:70:35:bc:
0e:58:1d:c7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEeVRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVj
Mzg3M2FiZmU4MWMyOWNiNWEyMWUxNWEwNTk5YjZlODE3MmQ4NWEwHhcNMjMxMTA3
MDczMDA0WhcNMjUxMTA2MDczMDA0WjAzMTEwLwYDVQQDEyg0YWFlNGY1NDY2MzA0
ZWFmZDkzN2NjMWM1MDk5OTZhZWU5MTJkMjkzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm33Hp+4NQ4sfCvyvVrSfjDPqhboB7PjQz7PTvj/2w7egUfCH
9J2Vd8pETaZIaE55hRluGN8QT/hMTyFdYUOIafmd18Z9s/aIpxjSp1dKkdVfX5D/
uiCZWsdb9aSAB02tMpsZnkPdLZQDkpZ5taTTZCkSgdRSGv2Guw8bOobX+0qLxZlz
EHYglkI/94iNa5aXUqvIkeQEugMs8PbR/+7hJAbDigs5+mZKp3/Q9OlE9tCHksjv
wgTl4ICvoidqpAmKVV6q84DmrZBAh8+2DKc0N9UkfPDfhnQU2JeNgNjKMDUstjAG
WmuR+eMwE6FOt4gUghxOlAoqMO/EWRTPlm5eawIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMyM4QTtEoKWNrvpB4pKvHOZzbDEMB8GA1UdIwQYMBaAFLie0qKbxJmf6XkL
5QdO5scj4XgAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWMzODcz
YWJmZTgxYzI5Y2I1YTIxZTE1YTA1OTliNmU4MTcyZDg1YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIzZTA4NjktMDg0My00ZmFmLThjYTEtMDYyMDg3
YzBkMzJlLzRhYWU0ZjU0NjYzMDRlYWZkOTM3Y2MxYzUwOTk5NmFlZTkxMmQyOTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjNlMDg2OS0wODQzLTRmYWYtOGNhMS0wNjIw
ODdjMGQzMmUvZWMzODczYWJmZTgxYzI5Y2I1YTIxZTE1YTA1OTliNmU4MTcyZDg1
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKgA3jANBgkqhkiG9w0BAQsFAAOCAQEALb1o/W8hfviU8cOQ
MVwpOFKQ49YhW7ljou7SvFHqus8a+N55jj8jwDbOe3d+iIpFp5PMtwvzT44TK/K/
x5dRtnnlSF00jXOe6oGEsisxOZWYDziw3Ch+1EUv67RTpDqC1wnbmQB6mb70L3QS
wfj+6jB0LANansUMhPOe4KDLrilzUU70BW0FzcM58yWQPkkAXIpq6rSrgvSImHTM
fvKQoP9AgCpAz91tGDw8PhIPiGcdlewPpP4E/KDKtEACYD7sdKrSmTtpgvITvq6p
BopKCqDFmp6MC7Ki8WVAg3vDmMvNxpnNpdt8JvqH3W1n56Gv4V6eojuxjU9McDW8
Dlgdxw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org