Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/65f61ab83551c4b761aae8d7aa9d213f86f72cad.roa
File: 65f61ab83551c4b761aae8d7aa9d213f86f72cad.roa (raw, json)
Hash identifier: be2N+2uEWm+U4dAC6xUKqN9nSd+ItJgmtwse3hRpD8E=
Subject key identifier: C2:22:44:E8:9F:1D:85:9E:EF:58:BF:03:69:46:AF:8B:F3:5B:37:D0
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 03C5DF
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/65f61ab83551c4b761aae8d7aa9d213f86f72cad.roa
Signing time: Tue 11 Jul 2023 13:25:38 +0000
ROA not before: Mon 10 Jul 2023 13:25:38 +0000
ROA not after: Fri 11 Jul 2025 13:25:38 +0000
asID: 7418
IP address blocks: 200.29.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247263 (0x3c5df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 13:25:38 2023 GMT
Not After : Jul 11 13:25:38 2025 GMT
Subject: CN=65f61ab83551c4b761aae8d7aa9d213f86f72cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:57:d3:c6:f6:ff:4f:40:c5:1c:91:8a:dc:
f4:a6:64:6d:14:ef:81:86:d6:b3:2a:2b:af:67:71:
49:6c:0c:2e:a4:36:36:09:37:78:de:ad:56:2e:2d:
c7:dc:e2:50:22:97:6e:b8:fa:b5:21:87:60:df:48:
6f:17:65:cc:fe:37:2b:aa:9a:0b:8d:a5:fd:74:74:
f2:f2:0f:39:2b:f4:86:5b:71:37:36:2a:68:0e:dc:
49:c3:c2:00:20:80:3e:52:bd:7f:04:cf:bf:8e:fb:
1e:8f:95:a4:a5:7d:b7:77:d1:c5:0d:fe:08:3b:ed:
fa:83:33:03:2c:ae:b4:a3:e3:f9:bb:12:4b:5d:a5:
f1:d0:bc:ce:37:99:cb:84:29:d4:76:90:9b:b7:51:
51:18:73:f7:01:fd:91:92:26:a0:5e:e1:16:7b:51:
4d:13:bd:dd:88:f9:bc:b4:6c:c1:b4:e1:3c:65:52:
a2:43:b0:1d:f2:65:b9:7d:fd:97:13:12:9a:28:5d:
75:57:46:50:73:40:21:0b:50:d1:d1:09:4c:0c:ce:
7e:80:ca:03:37:3f:1b:76:da:50:25:36:b2:cc:7e:
97:e8:b6:0a:27:a9:9e:f0:64:2e:26:23:bf:aa:8e:
46:f2:65:ea:c3:df:57:66:ac:65:be:06:be:e9:55:
6f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:22:44:E8:9F:1D:85:9E:EF:58:BF:03:69:46:AF:8B:F3:5B:37:D0
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/65f61ab83551c4b761aae8d7aa9d213f86f72cad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.29.35.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:78:36:14:e3:08:a6:bf:39:44:35:58:03:4e:4f:c0:ff:bd:
24:53:d7:47:06:0f:aa:3c:8f:f9:85:ae:ee:9b:18:50:0f:6c:
eb:1b:15:fa:cb:3a:dd:b9:65:81:2a:8e:5f:06:69:c2:c6:55:
23:0a:a3:43:0b:12:5b:67:74:84:f6:c8:9d:cf:5e:bf:95:fb:
ef:68:17:a8:13:16:48:d9:72:1d:4c:35:11:b5:9c:35:88:2c:
95:29:5f:da:23:51:4a:cd:91:c3:e6:f6:27:13:c4:59:1c:14:
92:70:24:6c:0e:3a:40:0c:4d:cd:58:59:fb:18:27:c2:62:da:
dc:fc:47:12:4e:57:05:7c:22:f4:ad:fb:49:6d:8d:fb:45:d1:
be:b5:29:dd:3c:bf:d1:b7:d7:76:bc:6f:72:93:c4:f5:73:1b:
42:14:10:1e:ca:f3:2d:ed:bf:b4:76:05:02:91:4f:21:87:7c:
80:5a:77:88:9d:1a:61:e4:59:72:61:82:a2:32:a9:2e:41:4e:
47:4b:88:b3:3b:66:1f:be:ce:fd:08:c9:7e:c2:8c:15:1e:17:
ba:c0:22:6b:b3:1e:0a:b0:38:ce:43:f5:6f:03:3c:46:29:71:
83:03:c3:4c:b0:b2:82:1e:a4:ba:a6:4e:e0:fd:92:4e:fb:f7:
bf:d3:17:94
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA8XfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MjZkNmY0MmZmY2E2MjkxYzZjNWM2MTYwMWY5MTZkN2U1OWEyZDMwHhcNMjMwNzEw
MTMyNTM4WhcNMjUwNzExMTMyNTM4WjAzMTEwLwYDVQQDEyg2NWY2MWFiODM1NTFj
NGI3NjFhYWU4ZDdhYTlkMjEzZjg2ZjcyY2FkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk7FX08b2/09AxRyRitz0pmRtFO+BhtazKiuvZ3FJbAwupDY2
CTd43q1WLi3H3OJQIpduuPq1IYdg30hvF2XM/jcrqpoLjaX9dHTy8g85K/SGW3E3
NipoDtxJw8IAIIA+Ur1/BM+/jvsej5WkpX23d9HFDf4IO+36gzMDLK60o+P5uxJL
XaXx0LzON5nLhCnUdpCbt1FRGHP3Af2RkiagXuEWe1FNE73diPm8tGzBtOE8ZVKi
Q7Ad8mW5ff2XExKaKF11V0ZQc0AhC1DR0QlMDM5+gMoDNz8bdtpQJTayzH6X6LYK
J6me8GQuJiO/qo5G8mXqw99XZqxlvga+6VVv9QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMIiROifHYWe71i/A2lGr4vzWzfQMB8GA1UdIwQYMBaAFM2qHwCJ05renW3b
eH+AQ9p8hu5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyNmQ2
ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVkYjQxNWItYjNkZC00ZjQxLWJlZTMtMjg0ZWRh
MWQ3ZTU5LzY1ZjYxYWI4MzU1MWM0Yjc2MWFhZThkN2FhOWQyMTNmODZmNzJjYWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWRiNDE1Yi1iM2RkLTRmNDEtYmVlMy0yODRl
ZGExZDdlNTkvZGYyNmQ2ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgdIzANBgkqhkiG9w0BAQsFAAOCAQEAoXg2FOMIpr85RDVY
A05PwP+9JFPXRwYPqjyP+YWu7psYUA9s6xsV+ss63bllgSqOXwZpwsZVIwqjQwsS
W2d0hPbInc9ev5X772gXqBMWSNlyHUw1EbWcNYgslSlf2iNRSs2Rw+b2JxPEWRwU
knAkbA46QAxNzVhZ+xgnwmLa3PxHEk5XBXwi9K37SW2N+0XRvrUp3Ty/0bfXdrxv
cpPE9XMbQhQQHsrzLe2/tHYFApFPIYd8gFp3iJ0aYeRZcmGCojKpLkFOR0uIsztm
H77O/QjJfsKMFR4XusAia7MeCrA4zkP1bwM8RilxgwPDTLCygh6kuqZO4P2STvv3
v9MXlA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org