Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/0a629ea1c05308facd3bbca27f68e724580bbd4d.roa
File: 0a629ea1c05308facd3bbca27f68e724580bbd4d.roa (raw, json)
Hash identifier: mUU/RUWzhya9mZhBokPqPChOnPQ16iFmcZir6whu5zE=
Subject key identifier: 7E:A7:A6:FF:68:D1:CA:D7:CE:63:F8:25:6F:F8:2D:EC:53:68:16:69
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 1F2318
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/0a629ea1c05308facd3bbca27f68e724580bbd4d.roa
Signing time: Mon 03 Apr 2023 17:30:13 +0000
ROA not before: Sun 02 Apr 2023 17:21:48 +0000
ROA not after: Thu 03 Apr 2025 17:21:48 +0000
asID: 64106
IP address blocks: 201.182.132.0/24 maxlen: 24
201.182.133.0/24 maxlen: 24
2801:168:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2040600 (0x1f2318)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Apr 2 17:21:48 2023 GMT
Not After : Apr 3 17:21:48 2025 GMT
Subject: CN=0a629ea1c05308facd3bbca27f68e724580bbd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:70:c4:ff:7e:19:48:f1:94:ed:7b:44:c0:
8d:c9:c5:cf:98:fe:14:ad:15:df:9e:f4:4a:84:0c:
f6:ad:de:5d:3c:6e:54:8f:49:fd:37:03:06:bf:b3:
a0:3f:b1:74:c6:df:bb:04:ea:ab:38:8c:4f:eb:77:
8e:18:77:01:08:39:9d:e2:c9:32:09:9a:dd:b0:a6:
00:94:48:d7:73:4b:bb:ad:0c:d0:26:c9:40:a4:0e:
de:c7:80:91:b4:89:c9:61:40:b4:29:73:a7:dd:6f:
97:49:da:af:58:8b:da:da:6e:73:d6:14:11:e6:fd:
8f:9c:9d:52:45:d2:8d:08:f3:27:94:b8:95:cc:46:
b8:c6:c1:e1:f2:11:5a:8a:bd:fb:90:9e:08:87:b7:
a5:59:27:19:81:9c:25:8c:1a:31:f8:63:56:39:23:
16:57:61:2e:63:ea:26:6e:f9:51:28:9c:6c:f8:b5:
e1:15:f6:f7:05:f6:5c:3d:bf:60:a0:f3:b2:c8:41:
80:19:37:78:9f:f5:64:ef:a3:06:b4:f5:a5:a2:00:
16:4a:9f:26:79:cb:f2:f3:96:fe:9c:6b:b4:85:7c:
69:59:ca:c1:28:67:89:e6:8d:a2:07:d7:a1:31:2f:
d7:ba:1d:b9:54:8d:6e:a1:5b:77:12:01:55:e3:8d:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A7:A6:FF:68:D1:CA:D7:CE:63:F8:25:6F:F8:2D:EC:53:68:16:69
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/0a629ea1c05308facd3bbca27f68e724580bbd4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.182.132.0/23
IPv6:
2801:168:3::/48
Signature Algorithm: sha256WithRSAEncryption
75:be:00:c0:e9:71:8a:f0:bb:b7:32:c2:d7:71:c4:d1:a0:42:
b9:a8:fe:b4:51:d7:6a:85:65:ba:6d:35:bb:d1:11:01:40:55:
f2:fd:9e:84:b7:29:40:a8:3a:f7:c0:9f:13:24:f7:30:b0:77:
59:83:00:b6:a0:e4:7c:3d:b6:9f:38:95:26:94:3d:88:2b:c5:
b0:74:9f:e5:3f:22:6f:e6:1d:01:af:63:e0:63:4a:af:b6:a1:
d0:31:db:2a:bc:0d:a8:69:fe:71:2a:7c:1b:67:ed:52:76:af:
dd:8d:3b:22:81:a8:8b:58:52:0d:78:54:ac:16:c0:85:03:68:
a6:09:64:2d:93:ef:6d:af:fd:c6:9b:18:0c:3e:b3:ab:96:4f:
bb:4f:b7:ed:fd:3a:f3:24:78:27:cc:47:4d:53:1b:bb:18:b3:
6e:6c:85:c7:77:e8:42:55:f6:53:4a:02:11:94:40:dd:05:11:
6e:63:95:9e:9a:fa:ae:8a:9e:db:8e:f3:45:19:f0:8a:82:8d:
f1:24:a0:4a:be:b0:39:0b:02:7e:73:1b:14:3a:8b:47:45:89:
c3:85:11:c5:70:d0:fa:28:af:2d:91:f6:f9:1e:66:58:d9:27:
b5:a8:04:36:9c:fc:e7:2b:50:2d:9b:e3:ad:f4:32:5b:69:3a:
46:1c:d8:bb
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDHyMYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0ODljZWY4YmQyMGFlNzMwHhcNMjMwNDAy
MTcyMTQ4WhcNMjUwNDAzMTcyMTQ4WjAzMTEwLwYDVQQDEygwYTYyOWVhMWMwNTMw
OGZhY2QzYmJjYTI3ZjY4ZTcyNDU4MGJiZDRkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmKlwxP9+GUjxlO17RMCNycXPmP4UrRXfnvRKhAz2rd5dPG5U
j0n9NwMGv7OgP7F0xt+7BOqrOIxP63eOGHcBCDmd4skyCZrdsKYAlEjXc0u7rQzQ
JslApA7ex4CRtInJYUC0KXOn3W+XSdqvWIva2m5z1hQR5v2PnJ1SRdKNCPMnlLiV
zEa4xsHh8hFair37kJ4Ih7elWScZgZwljBox+GNWOSMWV2EuY+ombvlRKJxs+LXh
Ffb3BfZcPb9goPOyyEGAGTd4n/Vk76MGtPWlogAWSp8mecvy85b+nGu0hXxpWcrB
KGeJ5o2iB9ehMS/Xuh25VI1uoVt3EgFV4412nwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFH6npv9o0crXzmP4JW/4LexTaBZpMB8GA1UdIwQYMBaAFPj+c0dce8gUSBxs
/73xGXd+C9leMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExMjRl
ZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00Nzc5LTllMjctODNiMWJk
MzAyNmUxLzBhNjI5ZWExYzA1MzA4ZmFjZDNiYmNhMjdmNjhlNzI0NTgwYmJkNGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04ZjhkLTQ3NzktOWUyNy04M2Ix
YmQzMDI2ZTEvMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAcm2hDAPBAIAAjAJAwcAKAEBaAADMA0GCSqGSIb3DQEBCwUA
A4IBAQB1vgDA6XGK8Lu3MsLXccTRoEK5qP60UddqhWW6bTW70REBQFXy/Z6EtylA
qDr3wJ8TJPcwsHdZgwC2oOR8PbafOJUmlD2IK8WwdJ/lPyJv5h0Br2PgY0qvtqHQ
MdsqvA2oaf5xKnwbZ+1Sdq/djTsigaiLWFINeFSsFsCFA2imCWQtk+9tr/3GmxgM
PrOrlk+7T7ft/TrzJHgnzEdNUxu7GLNubIXHd+hCVfZTSgIRlEDdBRFuY5Wemvqu
ip7bjvNFGfCKgo3xJKBKvrA5CwJ+cxsUOotHRYnDhRHFcND6KK8tkfb5HmZY2Se1
qAQ2nPznK1Atm+Ot9DJbaTpGHNi7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org