Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/aedac4174df04c69d5da0f90fc841a0e83214fcd.roa
File: aedac4174df04c69d5da0f90fc841a0e83214fcd.roa (raw, json)
Hash identifier: Socdfrls2EvqbTB3NTJKPRnB44dK2YgNH4e+9aBD2OA=
Subject key identifier: 59:03:EE:C3:77:D6:D0:1D:E9:27:DD:E9:08:DD:7B:D8:69:0E:F0:AC
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 03C035
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/aedac4174df04c69d5da0f90fc841a0e83214fcd.roa
Signing time: Tue 11 Jul 2023 13:22:33 +0000
ROA not before: Mon 10 Jul 2023 13:22:33 +0000
ROA not after: Fri 11 Jul 2025 13:22:33 +0000
asID: 16629
IP address blocks: 200.28.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245813 (0x3c035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 13:22:33 2023 GMT
Not After : Jul 11 13:22:33 2025 GMT
Subject: CN=aedac4174df04c69d5da0f90fc841a0e83214fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:e5:b6:73:ac:da:b8:1e:93:52:da:c9:b6:
4e:40:77:75:5e:52:6e:7a:93:bc:9e:f7:f5:dd:7e:
a0:c3:ad:5b:f9:6e:c6:08:c5:1b:05:69:c1:ea:7a:
0f:c3:73:d1:4d:d9:e4:26:b7:e0:bf:97:13:73:5e:
23:31:28:c9:33:4a:05:86:85:47:42:ca:c4:9d:94:
98:0f:4f:01:f9:5a:b6:6f:c0:5d:20:9c:35:68:e9:
8a:d5:3b:18:a4:8b:c9:a9:ef:f4:2b:f9:cf:47:7c:
44:c8:e8:ef:77:e7:17:35:d7:88:d9:01:86:11:28:
18:92:c3:ac:a5:3c:0d:92:f5:91:f4:f8:77:1c:bc:
97:79:d0:40:f0:70:01:02:53:5c:e5:3a:f5:28:d2:
6d:57:8f:67:e9:e7:4b:18:2b:27:58:d8:a5:d9:fd:
a2:9f:dd:de:26:ee:17:c3:e7:5b:56:d9:3b:ed:7e:
55:6c:ea:6f:bf:5f:9b:e0:bf:f5:e0:f0:07:3c:c5:
5c:04:fd:f1:1b:77:ad:0f:d2:71:c6:11:12:6f:62:
55:58:d4:eb:36:dd:82:bb:02:b2:7f:4d:f1:80:cc:
e5:10:ea:3e:ee:6d:00:8d:58:f7:09:17:fb:42:e3:
58:93:03:aa:3d:0d:66:82:c0:5e:b2:f6:8d:16:f8:
2c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:03:EE:C3:77:D6:D0:1D:E9:27:DD:E9:08:DD:7B:D8:69:0E:F0:AC
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/aedac4174df04c69d5da0f90fc841a0e83214fcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.28.186.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:2e:ce:e8:14:38:ca:59:94:39:6d:d3:d2:b7:e9:4a:78:5a:
39:ba:45:35:72:d0:24:ae:d7:28:ef:68:ce:53:44:9e:a7:63:
2a:4c:15:ea:63:3d:52:01:b3:87:df:ce:c4:1d:62:18:8e:47:
43:b0:a7:98:f1:83:fb:9e:61:7b:00:df:69:09:c6:a2:0b:bf:
89:7b:53:d5:c7:bc:9a:80:e9:5a:4a:29:c2:1f:3d:06:e1:e0:
90:39:cc:be:0f:82:fa:70:43:9e:a1:a2:38:d5:3d:d6:a7:d5:
2c:4f:49:10:e7:e3:59:c4:23:ff:f8:d0:a0:9a:7e:e1:92:f4:
6e:ea:de:47:a9:b1:ae:52:f2:13:1a:02:44:d0:e8:8c:13:92:
94:5f:8b:e8:9e:6d:d8:8a:5c:dd:50:7c:18:f5:80:20:d4:8a:
83:6b:e9:fd:ce:a6:9d:d9:1c:26:e5:13:b8:00:15:70:00:6e:
63:88:5c:96:75:3d:1a:44:bd:7b:99:26:d1:ec:6b:80:7f:17:
84:24:60:fa:30:88:43:25:ac:73:f4:30:f7:25:91:7b:34:9b:
16:a7:13:fe:9e:7e:b4:53:2a:46:94:5c:87:fb:53:1e:ed:93:
ab:45:c3:66:38:a1:ce:3f:a0:57:98:ab:37:ad:4e:bf:6a:8a:
e3:70:aa:7c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA8A1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MjZkNmY0MmZmY2E2MjkxYzZjNWM2MTYwMWY5MTZkN2U1OWEyZDMwHhcNMjMwNzEw
MTMyMjMzWhcNMjUwNzExMTMyMjMzWjAzMTEwLwYDVQQDEyhhZWRhYzQxNzRkZjA0
YzY5ZDVkYTBmOTBmYzg0MWEwZTgzMjE0ZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq/vltnOs2rgek1LaybZOQHd1XlJuepO8nvf13X6gw61b+W7G
CMUbBWnB6noPw3PRTdnkJrfgv5cTc14jMSjJM0oFhoVHQsrEnZSYD08B+Vq2b8Bd
IJw1aOmK1TsYpIvJqe/0K/nPR3xEyOjvd+cXNdeI2QGGESgYksOspTwNkvWR9Ph3
HLyXedBA8HABAlNc5Tr1KNJtV49n6edLGCsnWNil2f2in93eJu4Xw+dbVtk77X5V
bOpvv1+b4L/14PAHPMVcBP3xG3etD9JxxhESb2JVWNTrNt2CuwKyf03xgMzlEOo+
7m0AjVj3CRf7QuNYkwOqPQ1mgsBesvaNFvgsGwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFkD7sN31tAd6Sfd6Qjde9hpDvCsMB8GA1UdIwQYMBaAFM2qHwCJ05renW3b
eH+AQ9p8hu5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyNmQ2
ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVkYjQxNWItYjNkZC00ZjQxLWJlZTMtMjg0ZWRh
MWQ3ZTU5L2FlZGFjNDE3NGRmMDRjNjlkNWRhMGY5MGZjODQxYTBlODMyMTRmY2Qu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWRiNDE1Yi1iM2RkLTRmNDEtYmVlMy0yODRl
ZGExZDdlNTkvZGYyNmQ2ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgcujANBgkqhkiG9w0BAQsFAAOCAQEACi7O6BQ4ylmUOW3T
0rfpSnhaObpFNXLQJK7XKO9ozlNEnqdjKkwV6mM9UgGzh9/OxB1iGI5HQ7CnmPGD
+55hewDfaQnGogu/iXtT1ce8moDpWkopwh89BuHgkDnMvg+C+nBDnqGiONU91qfV
LE9JEOfjWcQj//jQoJp+4ZL0bureR6mxrlLyExoCRNDojBOSlF+L6J5t2Ipc3VB8
GPWAINSKg2vp/c6mndkcJuUTuAAVcABuY4hclnU9GkS9e5km0exrgH8XhCRg+jCI
QyWsc/Qw9yWRezSbFqcT/p5+tFMqRpRch/tTHu2Tq0XDZjihzj+gV5irN61Ov2qK
43CqfA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org