Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/2c25f4f771dd9da8a3918f3158906c8cc01f25b1.roa
File: 2c25f4f771dd9da8a3918f3158906c8cc01f25b1.roa (raw, json)
Hash identifier: o3ZAl4m+nk17K0dmvlWpZZGla/zdyrOptFJSNtYKvEk=
Subject key identifier: 21:EA:C9:D5:45:F6:8E:D8:82:C2:9D:5A:7F:B2:49:F2:F4:28:A9:70
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 03D881
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/2c25f4f771dd9da8a3918f3158906c8cc01f25b1.roa
Signing time: Tue 11 Jul 2023 13:28:57 +0000
ROA not before: Mon 10 Jul 2023 13:28:57 +0000
ROA not after: Fri 11 Jul 2025 13:28:57 +0000
asID: 7418
IP address blocks: 200.29.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252033 (0x3d881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 13:28:57 2023 GMT
Not After : Jul 11 13:28:57 2025 GMT
Subject: CN=2c25f4f771dd9da8a3918f3158906c8cc01f25b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:9c:e4:db:bc:f8:8a:38:a5:8a:25:a7:1f:
46:17:d0:32:a4:31:4f:5c:28:8a:20:0f:d0:7d:fa:
ea:b1:e7:ff:9c:1e:d4:73:bd:84:b0:51:d8:e8:b2:
63:55:c9:82:6b:e1:d6:62:bc:47:28:ab:3c:cb:3e:
33:86:12:2e:ab:13:18:a5:3e:3f:77:ba:d2:b1:03:
66:b9:43:04:81:76:74:9e:02:d6:2f:3b:bf:63:e8:
d1:f0:38:7a:24:cb:2f:72:80:bf:3d:b1:5e:db:aa:
5b:2f:67:28:33:85:e8:c7:42:34:51:e6:56:7c:8f:
2b:a3:e7:f8:11:12:59:25:1f:e2:90:25:c9:ee:08:
e3:3c:31:1a:f8:98:af:b3:c1:aa:26:43:72:0b:c7:
e8:e2:49:ba:73:58:3c:8b:bc:f6:42:64:5d:d7:da:
6b:6d:03:44:69:83:8b:77:dc:3e:0f:fe:57:fe:4b:
47:4a:d9:4b:8e:fc:5a:aa:ad:58:38:0e:8b:90:ed:
7e:a9:d7:00:77:08:63:30:e1:4e:93:0e:dc:0f:ed:
cf:ae:19:8f:1d:d7:c8:f0:ef:8f:56:ad:26:b7:34:
6f:4f:6a:2b:c1:b7:64:31:7b:9f:8a:4c:f3:1b:76:
6d:8b:0c:e4:2d:ee:03:3a:60:fa:e2:66:fb:47:8e:
6a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EA:C9:D5:45:F6:8E:D8:82:C2:9D:5A:7F:B2:49:F2:F4:28:A9:70
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/2c25f4f771dd9da8a3918f3158906c8cc01f25b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.29.46.0/24
Signature Algorithm: sha256WithRSAEncryption
71:86:b5:7e:5d:59:32:a3:0f:99:60:29:b0:ff:41:69:bc:67:
4a:16:32:48:2a:b8:f3:4b:83:f8:8d:32:12:2f:eb:e8:37:76:
9b:95:70:2c:9a:96:83:ad:ea:6a:6b:11:ee:cd:48:72:a8:1f:
b4:29:29:20:2a:6b:e7:90:2a:fd:8f:48:39:8d:bf:d8:d0:92:
4d:d0:a2:41:ce:5b:eb:be:a9:6b:e1:9a:b3:7a:00:5a:e3:0e:
ba:14:12:07:09:22:02:7d:23:a6:e2:b3:0b:df:87:11:38:dc:
fd:25:c1:ac:06:84:b0:c8:15:88:fb:61:69:0b:95:48:5d:3b:
8f:13:1d:e0:dd:a1:2d:49:b4:e8:0d:a8:12:5b:49:e5:72:1e:
4e:5c:d7:47:da:d8:40:d5:8f:62:4d:d7:76:d5:9d:65:02:ab:
80:19:a5:29:5d:d4:d9:c6:82:3c:1e:10:aa:b5:eb:f8:d1:53:
cf:8f:e4:c7:26:f9:f1:4e:2f:44:71:18:e1:10:a3:64:cf:09:
99:9f:c3:9f:59:2f:19:f5:d4:c9:7f:3d:d7:d4:5f:00:fe:44:
6e:93:d7:d7:16:58:e8:df:e7:ba:94:cc:bb:e2:e7:4a:64:67:
64:68:94:0f:d7:db:1a:60:90:f6:02:c4:d6:78:99:97:f2:db:
ca:1e:6b:31
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA9iBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MjZkNmY0MmZmY2E2MjkxYzZjNWM2MTYwMWY5MTZkN2U1OWEyZDMwHhcNMjMwNzEw
MTMyODU3WhcNMjUwNzExMTMyODU3WjAzMTEwLwYDVQQDEygyYzI1ZjRmNzcxZGQ5
ZGE4YTM5MThmMzE1ODkwNmM4Y2MwMWYyNWIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlwmc5Nu8+Io4pYolpx9GF9AypDFPXCiKIA/Qffrqsef/nB7U
c72EsFHY6LJjVcmCa+HWYrxHKKs8yz4zhhIuqxMYpT4/d7rSsQNmuUMEgXZ0ngLW
Lzu/Y+jR8Dh6JMsvcoC/PbFe26pbL2coM4Xox0I0UeZWfI8ro+f4ERJZJR/ikCXJ
7gjjPDEa+Jivs8GqJkNyC8fo4km6c1g8i7z2QmRd19prbQNEaYOLd9w+D/5X/ktH
StlLjvxaqq1YOA6LkO1+qdcAdwhjMOFOkw7cD+3PrhmPHdfI8O+PVq0mtzRvT2or
wbdkMXufikzzG3ZtiwzkLe4DOmD64mb7R45qlwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCHqydVF9o7YgsKdWn+ySfL0KKlwMB8GA1UdIwQYMBaAFM2qHwCJ05renW3b
eH+AQ9p8hu5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyNmQ2
ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVkYjQxNWItYjNkZC00ZjQxLWJlZTMtMjg0ZWRh
MWQ3ZTU5LzJjMjVmNGY3NzFkZDlkYThhMzkxOGYzMTU4OTA2YzhjYzAxZjI1YjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWRiNDE1Yi1iM2RkLTRmNDEtYmVlMy0yODRl
ZGExZDdlNTkvZGYyNmQ2ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgdLjANBgkqhkiG9w0BAQsFAAOCAQEAcYa1fl1ZMqMPmWAp
sP9BabxnShYySCq480uD+I0yEi/r6Dd2m5VwLJqWg63qamsR7s1IcqgftCkpICpr
55Aq/Y9IOY2/2NCSTdCiQc5b676pa+Gas3oAWuMOuhQSBwkiAn0jpuKzC9+HETjc
/SXBrAaEsMgViPthaQuVSF07jxMd4N2hLUm06A2oEltJ5XIeTlzXR9rYQNWPYk3X
dtWdZQKrgBmlKV3U2caCPB4QqrXr+NFTz4/kxyb58U4vRHEY4RCjZM8JmZ/Dn1kv
GfXUyX8919RfAP5EbpPX1xZY6N/nupTMu+LnSmRnZGiUD9fbGmCQ9gLE1niZl/Lb
yh5rMQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org