Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/f52cd0703c57a033c40ed7e8396a0e8458238ce2.roa
File: f52cd0703c57a033c40ed7e8396a0e8458238ce2.roa (raw, json)
Hash identifier: OQqaTDR97MwJvOuNtVLX13kelbYr1NUZ8UGTZBoKxI0=
Subject key identifier: B4:30:19:D1:0E:C4:75:D7:DB:5D:8E:4C:BA:A1:1B:30:87:1B:E4:3F
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 1F2926
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/f52cd0703c57a033c40ed7e8396a0e8458238ce2.roa
Signing time: Tue 04 Apr 2023 14:21:28 +0000
ROA not before: Mon 03 Apr 2023 14:18:48 +0000
ROA not after: Fri 04 Apr 2025 14:18:48 +0000
asID: 52376
IP address blocks: 201.182.140.0/24 maxlen: 24
2801:168:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2042150 (0x1f2926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Apr 3 14:18:48 2023 GMT
Not After : Apr 4 14:18:48 2025 GMT
Subject: CN=f52cd0703c57a033c40ed7e8396a0e8458238ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6e:d4:86:54:46:02:d0:88:7a:30:13:16:84:
c9:1f:f1:dd:39:5e:3a:3b:24:cc:9b:a2:e8:45:b1:
44:15:f4:b6:bd:c1:86:79:0f:9c:a7:12:c1:5f:cc:
60:9b:33:19:62:51:c4:87:52:ed:1c:ce:86:4b:f0:
2a:9a:29:c8:b0:35:0d:89:4d:a4:c0:d6:c9:bd:65:
e6:f3:50:a3:96:69:b2:18:31:28:b5:ed:99:45:1a:
67:f6:82:75:0e:9d:2c:30:25:da:8c:5c:8f:d1:92:
cf:99:a2:10:3b:a4:6a:d0:e7:bb:20:ac:ec:af:b7:
01:32:bb:7a:29:f0:c3:3b:b8:bf:4a:1c:3c:d4:4b:
2f:dd:0f:22:d2:ea:67:b9:ec:46:bd:11:d8:cd:82:
12:bb:2c:46:f1:04:06:80:26:fb:b1:7c:77:3d:e7:
58:e1:8c:ef:e4:0c:8c:59:ac:34:8f:3d:db:2f:c4:
29:94:db:db:b8:89:2d:78:e8:f2:38:fc:a2:ab:a0:
76:ba:81:a9:07:76:af:fa:95:cf:fb:8d:e7:2d:a2:
49:5c:d7:ed:98:5e:00:b2:c5:6b:84:1f:e0:d4:70:
e9:98:c3:d4:2f:04:38:3b:16:da:c0:8c:44:71:97:
9d:21:91:14:dc:b0:1c:b4:ae:45:04:2e:c9:2b:44:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:30:19:D1:0E:C4:75:D7:DB:5D:8E:4C:BA:A1:1B:30:87:1B:E4:3F
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/f52cd0703c57a033c40ed7e8396a0e8458238ce2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.182.140.0/24
IPv6:
2801:168:5::/48
Signature Algorithm: sha256WithRSAEncryption
0b:6b:86:1d:7c:ce:42:e3:56:63:b2:d0:4d:43:ad:bc:2e:2e:
c4:f1:e0:f3:c4:49:dc:61:56:c3:87:6a:28:71:52:ed:76:a6:
b3:f2:7c:40:f7:d0:28:02:21:81:50:68:06:a6:d4:ec:d2:fe:
a1:c5:5f:2f:aa:a9:63:aa:84:7d:f0:cc:08:c1:82:d0:f8:98:
53:26:0d:b1:40:99:f9:49:43:19:98:56:33:7c:23:9f:50:c5:
dc:87:9c:99:3e:62:6b:22:e6:66:67:32:d9:c7:b8:39:bf:df:
38:0d:8f:54:ee:3f:d4:da:fb:58:6b:c6:ed:97:dc:6e:8c:e4:
3c:29:51:85:72:e5:7c:6f:61:1c:60:2e:b3:f4:9d:a5:61:39:
c9:0c:12:5b:0a:53:31:1a:17:9f:b5:fd:81:68:ad:bd:f8:ea:
01:3e:85:dd:6f:ef:1d:8a:21:61:c5:63:8a:b8:f5:c2:dc:55:
39:36:b5:f0:81:4e:e0:c5:56:df:1b:58:45:0c:11:82:4e:a1:
ef:fa:43:e0:49:d3:ce:62:6c:a0:06:76:51:1d:2a:bf:6a:6c:
08:83:8d:87:7a:53:32:b7:67:e5:b1:6c:65:e1:0d:4d:8d:5b:
23:6c:a4:7c:96:21:89:01:da:a8:ac:5d:8a:53:c4:f4:92:7f:
bd:d1:e0:5f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDHykmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0ODljZWY4YmQyMGFlNzMwHhcNMjMwNDAz
MTQxODQ4WhcNMjUwNDA0MTQxODQ4WjAzMTEwLwYDVQQDEyhmNTJjZDA3MDNjNTdh
MDMzYzQwZWQ3ZTgzOTZhMGU4NDU4MjM4Y2UyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiW7UhlRGAtCIejATFoTJH/HdOV46OyTMm6LoRbFEFfS2vcGG
eQ+cpxLBX8xgmzMZYlHEh1LtHM6GS/AqminIsDUNiU2kwNbJvWXm81CjlmmyGDEo
te2ZRRpn9oJ1Dp0sMCXajFyP0ZLPmaIQO6Rq0Oe7IKzsr7cBMrt6KfDDO7i/Shw8
1Esv3Q8i0upnuexGvRHYzYISuyxG8QQGgCb7sXx3PedY4Yzv5AyMWaw0jz3bL8Qp
lNvbuIkteOjyOPyiq6B2uoGpB3av+pXP+43nLaJJXNftmF4AssVrhB/g1HDpmMPU
LwQ4OxbawIxEcZedIZEU3LActK5FBC7JK0QjMwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFLQwGdEOxHXX212OTLqhGzCHG+Q/MB8GA1UdIwQYMBaAFPj+c0dce8gUSBxs
/73xGXd+C9leMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExMjRl
ZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00Nzc5LTllMjctODNiMWJk
MzAyNmUxL2Y1MmNkMDcwM2M1N2EwMzNjNDBlZDdlODM5NmEwZTg0NTgyMzhjZTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04ZjhkLTQ3NzktOWUyNy04M2Ix
YmQzMDI2ZTEvMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAMm2jDAPBAIAAjAJAwcAKAEBaAAFMA0GCSqGSIb3DQEBCwUA
A4IBAQALa4YdfM5C41ZjstBNQ628Li7E8eDzxEncYVbDh2oocVLtdqaz8nxA99Ao
AiGBUGgGptTs0v6hxV8vqqljqoR98MwIwYLQ+JhTJg2xQJn5SUMZmFYzfCOfUMXc
h5yZPmJrIuZmZzLZx7g5v984DY9U7j/U2vtYa8btl9xujOQ8KVGFcuV8b2EcYC6z
9J2lYTnJDBJbClMxGheftf2BaK29+OoBPoXdb+8diiFhxWOKuPXC3FU5NrXwgU7g
xVbfG1hFDBGCTqHv+kPgSdPOYmygBnZRHSq/amwIg42HelMyt2flsWxl4Q1NjVsj
bKR8liGJAdqorF2KU8T0kn+90eBf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:49 2024 by rpki-client on console-ams.rpki-client.org