Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9bf48553bea9c3b595f3668ca385aea2803cd19c.roa
File: 9bf48553bea9c3b595f3668ca385aea2803cd19c.roa (raw, json)
Hash identifier: bs91mlkoKUwvbgITXnl/glaNufcc7+dFs2wmEWS+UyU=
Subject key identifier: 04:21:81:FE:F2:D9:CD:01:32:5E:E6:4A:3E:41:1E:BB:83:33:43:BB
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 2489A7
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9bf48553bea9c3b595f3668ca385aea2803cd19c.roa
Signing time: Mon 30 Oct 2023 12:06:40 +0000
ROA not before: Mon 30 Oct 2023 12:06:35 +0000
ROA not after: Thu 30 Oct 2025 12:06:35 +0000
asID: 52360
IP address blocks: 200.14.38.0/24 maxlen: 24
200.115.88.0/24 maxlen: 24
2001:13c7:600b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2394535 (0x2489a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Oct 30 12:06:35 2023 GMT
Not After : Oct 30 12:06:35 2025 GMT
Subject: CN=9bf48553bea9c3b595f3668ca385aea2803cd19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:a1:ec:fc:05:3a:ad:42:e9:12:98:50:44:
51:4c:99:68:11:21:cb:f0:9d:ac:df:eb:24:fd:f2:
fb:7d:e8:a2:01:1f:d2:42:4f:b5:98:5e:17:c2:2a:
5a:58:10:3f:21:bd:50:f0:59:fd:00:6b:d2:44:bd:
46:90:eb:d4:9b:d9:65:7e:77:67:25:53:c7:59:9b:
51:1b:12:fa:3a:12:72:60:54:53:61:30:a2:27:a2:
d4:a0:a8:76:23:aa:bf:74:1d:35:2c:d8:a8:72:ee:
e9:e2:b8:eb:52:06:76:a1:bd:b0:8b:ad:16:cf:c4:
e5:cc:d4:89:f9:3b:d0:d8:f0:05:f9:18:4d:22:b2:
d4:22:39:0d:5a:12:5d:08:43:40:fc:00:cf:ab:c5:
60:62:6b:97:73:ab:bd:89:26:51:6c:8c:bc:10:a5:
85:b6:5a:4a:1a:7d:e4:01:e9:2f:66:97:c7:93:71:
37:2a:f8:f7:72:c0:8f:14:77:5e:60:12:ca:34:6c:
1d:ee:ec:a0:2a:d0:ab:9a:4e:2b:60:60:cf:ef:0a:
48:43:87:f9:1d:cf:a1:14:b6:86:fa:b3:72:10:8c:
b1:85:56:f2:8a:e7:85:2d:25:93:56:a7:58:38:13:
f7:a6:af:10:b1:d7:c4:0f:47:95:44:db:fd:8a:7f:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:21:81:FE:F2:D9:CD:01:32:5E:E6:4A:3E:41:1E:BB:83:33:43:BB
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9bf48553bea9c3b595f3668ca385aea2803cd19c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.38.0/24
200.115.88.0/24
IPv6:
2001:13c7:600b::/48
Signature Algorithm: sha256WithRSAEncryption
83:f0:b1:74:91:75:e3:0c:77:8b:9b:a8:7c:55:3c:c6:21:d6:
98:f2:16:17:f2:40:5f:c0:38:d9:98:7f:b6:4d:95:87:3f:08:
3b:9a:71:68:ef:7d:1a:61:0c:aa:c3:bc:f5:3a:8f:dd:64:43:
07:d0:58:50:d6:83:2e:d1:50:4f:fa:ae:af:ed:86:48:26:2e:
55:e3:81:28:8c:2a:ad:67:bb:0e:88:d2:aa:e2:2a:f6:4d:52:
b8:dc:83:8a:11:62:c3:9a:08:26:d9:8b:d2:77:83:57:5c:36:
b0:39:31:54:f2:a1:65:e0:d2:94:50:29:e5:f5:a2:1f:be:9c:
89:f3:49:95:9c:66:67:b7:e1:e7:89:38:0c:e8:e5:af:95:0f:
32:28:57:8f:dc:05:a0:15:0f:be:45:66:ad:dc:61:44:25:f6:
07:68:67:4b:6e:1d:24:c3:c0:6b:62:79:57:66:5e:2f:74:15:
9b:6d:13:02:63:6d:ff:91:3f:4d:d3:39:c1:16:7c:0c:93:a6:
ee:82:b6:50:95:07:ec:d7:9b:5e:75:06:3a:0d:fb:de:8f:e4:
5c:b3:f5:1c:74:a1:5a:48:71:fd:e3:e3:9d:1e:bc:2a:ac:82:
6e:3b:f3:72:8e:6f:37:d5:98:de:53:09:84:31:2e:e8:c2:aa:
e0:37:9d:d9
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDJImnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0ODljZWY4YmQyMGFlNzMwHhcNMjMxMDMw
MTIwNjM1WhcNMjUxMDMwMTIwNjM1WjAzMTEwLwYDVQQDEyg5YmY0ODU1M2JlYTlj
M2I1OTVmMzY2OGNhMzg1YWVhMjgwM2NkMTljMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsfah7PwFOq1C6RKYUERRTJloESHL8J2s3+sk/fL7feiiAR/S
Qk+1mF4XwipaWBA/Ib1Q8Fn9AGvSRL1GkOvUm9llfndnJVPHWZtRGxL6OhJyYFRT
YTCiJ6LUoKh2I6q/dB01LNiocu7p4rjrUgZ2ob2wi60Wz8TlzNSJ+TvQ2PAF+RhN
IrLUIjkNWhJdCENA/ADPq8VgYmuXc6u9iSZRbIy8EKWFtlpKGn3kAekvZpfHk3E3
Kvj3csCPFHdeYBLKNGwd7uygKtCrmk4rYGDP7wpIQ4f5Hc+hFLaG+rNyEIyxhVby
iueFLSWTVqdYOBP3pq8QsdfED0eVRNv9in+pkwIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFAQhgf7y2c0BMl7mSj5BHruDM0O7MB8GA1UdIwQYMBaAFPj+c0dce8gUSBxs
/73xGXd+C9leMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExMjRl
ZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00Nzc5LTllMjctODNiMWJk
MzAyNmUxLzliZjQ4NTUzYmVhOWMzYjU5NWYzNjY4Y2EzODVhZWEyODAzY2QxOWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04ZjhkLTQ3NzktOWUyNy04M2Ix
YmQzMDI2ZTEvMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwEgQCAAEwDAMEAMgOJgMEAMhzWDAPBAIAAjAJAwcAIAETx2ALMA0GCSqGSIb3
DQEBCwUAA4IBAQCD8LF0kXXjDHeLm6h8VTzGIdaY8hYX8kBfwDjZmH+2TZWHPwg7
mnFo730aYQyqw7z1Oo/dZEMH0FhQ1oMu0VBP+q6v7YZIJi5V44EojCqtZ7sOiNKq
4ir2TVK43IOKEWLDmggm2YvSd4NXXDawOTFU8qFl4NKUUCnl9aIfvpyJ80mVnGZn
t+HniTgM6OWvlQ8yKFeP3AWgFQ++RWat3GFEJfYHaGdLbh0kw8BrYnlXZl4vdBWb
bRMCY23/kT9N0znBFnwMk6bugrZQlQfs15tedQY6Dfvej+Rcs/UcdKFaSHH94+Od
HrwqrIJuO/Nyjm831ZjeUwmEMS7owqrgN53Z
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:49 2024 by rpki-client on console-ams.rpki-client.org