Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/a8c281b25fe0eae81074f42214ca565aa59586b3.roa
File: a8c281b25fe0eae81074f42214ca565aa59586b3.roa (raw, json)
Hash identifier: jC0VypC37s+rsttuwx9z629KlH2GLkTQItrxTafE8Dc=
Subject key identifier: CE:E2:E9:20:FB:33:17:3E:74:B8:3F:2A:9F:FB:86:A5:3F:11:45:B5
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 0CFC34
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/a8c281b25fe0eae81074f42214ca565aa59586b3.roa
Signing time: Wed 24 Mar 2021 14:29:19 +0000
ROA not before: Wed 24 Mar 2021 14:29:18 +0000
ROA not after: Tue 24 Mar 2026 14:29:18 +0000
asID: 52332
IP address blocks: 200.14.37.0/24 maxlen: 24
201.182.141.0/24 maxlen: 24
2001:13c7:6009::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850996 (0xcfc34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Mar 24 14:29:18 2021 GMT
Not After : Mar 24 14:29:18 2026 GMT
Subject: CN=a8c281b25fe0eae81074f42214ca565aa59586b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:e9:b2:c2:6f:45:07:ab:b4:fb:9e:9f:2d:
6f:d0:67:c9:10:c2:10:03:6b:0e:4c:60:28:9a:f3:
ba:6c:9a:18:b5:5b:69:66:2a:0c:8d:b2:b7:26:5f:
63:93:3d:0d:ec:d4:43:b6:02:2e:bd:3b:a5:5f:e8:
0b:63:48:05:58:4d:4d:f9:7a:de:16:17:ce:4b:9a:
ae:d3:d9:9b:58:fe:6a:d4:44:3e:4d:71:c6:71:be:
6b:22:b9:1e:e7:d9:02:24:48:e0:dd:05:9d:07:01:
7e:fa:c7:9d:b5:e9:c4:9f:a3:c9:bd:ca:bd:cf:fd:
9a:a3:13:30:1f:b8:c5:e0:f6:c9:46:92:b9:59:a3:
f6:cb:bb:1e:e5:ad:6e:06:69:81:08:af:7d:9c:80:
44:f4:ec:76:b1:be:15:02:c7:03:26:66:1c:4e:99:
4b:08:9f:42:70:fd:d3:c6:b0:87:ba:ca:3d:54:52:
71:1c:62:0c:a8:ea:02:c2:be:17:43:05:32:c4:5c:
52:d1:a9:56:b0:8d:53:c9:5c:fa:1f:7b:9c:30:56:
53:89:b0:c2:8f:dd:9b:24:4e:27:25:13:17:e9:75:
00:e4:d6:a2:f1:86:04:0d:e7:0a:01:c5:32:2a:37:
de:4e:d3:d6:16:f1:49:4e:b2:30:22:fa:ab:31:77:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E2:E9:20:FB:33:17:3E:74:B8:3F:2A:9F:FB:86:A5:3F:11:45:B5
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/a8c281b25fe0eae81074f42214ca565aa59586b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.37.0/24
201.182.141.0/24
IPv6:
2001:13c7:6009::/48
Signature Algorithm: sha256WithRSAEncryption
53:ae:1a:ec:d2:eb:c7:5b:ec:39:14:5b:a3:27:9d:36:17:26:
23:93:06:b4:e5:6a:2b:d0:db:f2:5b:e1:3d:b6:7a:bb:fe:d3:
ab:02:c9:0b:f5:e7:0c:ef:22:a0:e8:4a:96:04:13:8f:ef:b4:
f2:c9:df:03:e0:85:e8:ae:26:18:ab:17:2e:54:3a:86:7d:0d:
99:89:4b:3a:66:4d:43:92:f4:03:01:10:49:53:ab:38:4a:b7:
95:e1:e1:ce:be:f3:5c:e2:89:35:5e:1b:b2:23:76:8d:4a:b0:
37:72:fc:dd:80:2e:a2:f6:4e:2f:bb:d8:4f:ac:28:0d:8a:83:
71:7f:23:10:c2:e3:ed:fd:3b:5a:16:75:b6:fa:48:6d:88:6a:
68:5e:64:59:d4:84:0b:42:6e:d7:e0:fb:66:18:4b:9d:14:b4:
06:44:6c:92:b1:ed:01:19:c4:ce:21:01:d3:46:0f:06:38:3f:
43:7c:89:33:48:f8:c5:a8:de:58:2e:4f:ed:99:0c:2e:9d:dc:
d9:2a:16:53:b4:89:01:d8:d7:5e:15:6e:36:bb:b2:1b:b2:ec:
87:35:89:16:64:20:67:61:33:cd:20:4f:b1:88:ca:94:dc:44:
77:ce:ea:b2:95:67:ba:29:35:9a:57:46:ae:e0:23:04:4b:14:
49:02:96:3b
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDDPw0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0ODljZWY4YmQyMGFlNzMwHhcNMjEwMzI0
MTQyOTE4WhcNMjYwMzI0MTQyOTE4WjAzMTEwLwYDVQQDEyhhOGMyODFiMjVmZTBl
YWU4MTA3NGY0MjIxNGNhNTY1YWE1OTU4NmIzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAik3pssJvRQertPueny1v0GfJEMIQA2sOTGAomvO6bJoYtVtp
ZioMjbK3Jl9jkz0N7NRDtgIuvTulX+gLY0gFWE1N+XreFhfOS5qu09mbWP5q1EQ+
TXHGcb5rIrke59kCJEjg3QWdBwF++sedtenEn6PJvcq9z/2aoxMwH7jF4PbJRpK5
WaP2y7se5a1uBmmBCK99nIBE9Ox2sb4VAscDJmYcTplLCJ9CcP3TxrCHuso9VFJx
HGIMqOoCwr4XQwUyxFxS0alWsI1TyVz6H3ucMFZTibDCj92bJE4nJRMX6XUA5Nai
8YYEDecKAcUyKjfeTtPWFvFJTrIwIvqrMXdY4QIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFM7i6SD7Mxc+dLg/Kp/7hqU/EUW1MB8GA1UdIwQYMBaAFPj+c0dce8gUSBxs
/73xGXd+C9leMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExMjRl
ZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00Nzc5LTllMjctODNiMWJk
MzAyNmUxL2E4YzI4MWIyNWZlMGVhZTgxMDc0ZjQyMjE0Y2E1NjVhYTU5NTg2YjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04ZjhkLTQ3NzktOWUyNy04M2Ix
YmQzMDI2ZTEvMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwEgQCAAEwDAMEAMgOJQMEAMm2jTAPBAIAAjAJAwcAIAETx2AJMA0GCSqGSIb3
DQEBCwUAA4IBAQBTrhrs0uvHW+w5FFujJ502FyYjkwa05Wor0NvyW+E9tnq7/tOr
AskL9ecM7yKg6EqWBBOP77Tyyd8D4IXoriYYqxcuVDqGfQ2ZiUs6Zk1DkvQDARBJ
U6s4SreV4eHOvvNc4ok1XhuyI3aNSrA3cvzdgC6i9k4vu9hPrCgNioNxfyMQwuPt
/TtaFnW2+khtiGpoXmRZ1IQLQm7X4PtmGEudFLQGRGySse0BGcTOIQHTRg8GOD9D
fIkzSPjFqN5YLk/tmQwundzZKhZTtIkB2NdeFW42u7IbsuyHNYkWZCBnYTPNIE+x
iMqU3ER3zuqylWe6KTWaV0au4CMESxRJApY7
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org