Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/bc52485c62335bff3e04fcf34a362f6a9ec2278e.roa
File: bc52485c62335bff3e04fcf34a362f6a9ec2278e.roa (raw, json)
Hash identifier: /UFXQYKf1axmqUhbKHHmO96KT9CA0nLqjYe+9Yq8A7I=
Subject key identifier: 81:DC:C1:A9:2F:94:CA:51:AA:20:2B:64:AE:BC:8B:B3:E2:55:84:6C
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 03B8AF
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/bc52485c62335bff3e04fcf34a362f6a9ec2278e.roa
Signing time: Tue 11 Jul 2023 13:21:16 +0000
ROA not before: Mon 10 Jul 2023 13:21:16 +0000
ROA not after: Fri 11 Jul 2025 13:21:16 +0000
asID: 7418
IP address blocks: 200.28.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243887 (0x3b8af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 13:21:16 2023 GMT
Not After : Jul 11 13:21:16 2025 GMT
Subject: CN=bc52485c62335bff3e04fcf34a362f6a9ec2278e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:41:95:36:1b:d0:c5:5e:97:31:53:e4:9c:77:
04:66:fc:d1:1d:99:35:b4:7d:79:f9:8b:ca:9b:9a:
72:74:cb:ca:8e:76:3d:4e:20:fe:58:a1:95:ff:91:
12:43:5e:87:c7:17:a1:5c:bd:99:12:b4:c6:ac:d0:
ee:1f:bf:a0:17:02:5e:59:79:0b:ba:15:b6:c8:38:
75:21:4a:4a:d8:70:11:c5:ac:ee:8c:b3:54:7b:ee:
ce:2c:55:0a:89:d9:5f:68:67:7d:71:de:0f:7f:57:
1e:b1:88:3d:a3:f4:bc:6c:5e:ce:e1:3b:88:36:9f:
09:fb:70:b8:47:e0:fb:bd:c9:21:3e:7c:35:eb:c4:
6e:61:1e:8a:0f:c8:7c:90:0c:57:ae:b6:b2:05:22:
14:09:32:0a:29:45:14:63:b7:da:d1:36:1a:db:98:
ef:87:bb:05:93:24:17:73:f4:e2:b9:94:b8:3d:18:
17:be:0a:5d:dc:91:54:19:fe:60:e8:bf:47:ca:59:
c2:53:c2:1e:89:ec:17:b5:ef:83:2a:1d:05:2c:52:
aa:85:88:ba:d4:8d:b5:ad:b0:31:66:14:d1:c0:e3:
d4:aa:75:1b:25:97:2e:a1:45:6c:98:ed:f0:c4:e3:
36:8e:8c:42:c9:bb:54:04:24:32:5e:99:a9:6e:d7:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DC:C1:A9:2F:94:CA:51:AA:20:2B:64:AE:BC:8B:B3:E2:55:84:6C
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/bc52485c62335bff3e04fcf34a362f6a9ec2278e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.28.4.0/24
Signature Algorithm: sha256WithRSAEncryption
23:51:6c:c4:14:36:de:dc:83:19:7f:7f:84:74:66:5a:15:ac:
bd:2d:1b:cf:97:e4:4b:1a:05:14:7f:36:cc:7e:32:6a:b8:e6:
8b:45:ca:52:5d:02:6f:09:2b:f1:44:d7:07:c1:89:27:67:2d:
cf:e3:17:35:b2:e2:fe:f9:6a:e6:97:a9:2f:55:7b:d7:bd:46:
6f:38:1a:3a:ff:11:18:64:44:ec:75:f6:ab:54:31:72:b1:2b:
20:0c:ee:ef:4f:ec:6a:41:7f:1c:c4:00:9e:0c:c2:3d:ef:bb:
c3:95:de:f0:9c:83:5a:5c:bb:d5:8b:58:e7:72:64:1c:56:eb:
72:4e:9b:83:e2:1f:a7:05:d3:28:1b:f0:e4:64:83:91:a9:7f:
56:8d:a4:34:c4:6f:29:e7:47:03:5f:b3:ef:81:fe:4f:34:30:
11:07:95:a4:d7:76:9c:51:5e:9f:73:b0:9b:fd:d6:84:4f:01:
a8:99:79:84:bf:21:af:a1:9d:8c:bf:d1:f9:fb:c6:a7:90:2f:
36:3b:58:bb:73:b1:ce:21:47:3d:87:ff:33:fa:d7:e8:9f:d1:
06:7f:b8:bd:06:3d:bf:8e:aa:f7:07:41:db:21:92:fe:ab:10:
b9:08:98:c4:f3:ac:a9:24:d6:d4:23:b0:70:7f:7f:13:e4:f5:
44:63:07:0f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA7ivMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MjZkNmY0MmZmY2E2MjkxYzZjNWM2MTYwMWY5MTZkN2U1OWEyZDMwHhcNMjMwNzEw
MTMyMTE2WhcNMjUwNzExMTMyMTE2WjAzMTEwLwYDVQQDEyhiYzUyNDg1YzYyMzM1
YmZmM2UwNGZjZjM0YTM2MmY2YTllYzIyNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoEGVNhvQxV6XMVPknHcEZvzRHZk1tH15+YvKm5pydMvKjnY9
TiD+WKGV/5ESQ16HxxehXL2ZErTGrNDuH7+gFwJeWXkLuhW2yDh1IUpK2HARxazu
jLNUe+7OLFUKidlfaGd9cd4Pf1cesYg9o/S8bF7O4TuINp8J+3C4R+D7vckhPnw1
68RuYR6KD8h8kAxXrrayBSIUCTIKKUUUY7fa0TYa25jvh7sFkyQXc/TiuZS4PRgX
vgpd3JFUGf5g6L9HylnCU8IeiewXte+DKh0FLFKqhYi61I21rbAxZhTRwOPUqnUb
JZcuoUVsmO3wxOM2joxCybtUBCQyXpmpbtcAlwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIHcwakvlMpRqiArZK68i7PiVYRsMB8GA1UdIwQYMBaAFM2qHwCJ05renW3b
eH+AQ9p8hu5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyNmQ2
ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVkYjQxNWItYjNkZC00ZjQxLWJlZTMtMjg0ZWRh
MWQ3ZTU5L2JjNTI0ODVjNjIzMzViZmYzZTA0ZmNmMzRhMzYyZjZhOWVjMjI3OGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWRiNDE1Yi1iM2RkLTRmNDEtYmVlMy0yODRl
ZGExZDdlNTkvZGYyNmQ2ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgcBDANBgkqhkiG9w0BAQsFAAOCAQEAI1FsxBQ23tyDGX9/
hHRmWhWsvS0bz5fkSxoFFH82zH4yarjmi0XKUl0Cbwkr8UTXB8GJJ2ctz+MXNbLi
/vlq5pepL1V7171GbzgaOv8RGGRE7HX2q1QxcrErIAzu70/sakF/HMQAngzCPe+7
w5Xe8JyDWly71YtY53JkHFbrck6bg+IfpwXTKBvw5GSDkal/Vo2kNMRvKedHA1+z
74H+TzQwEQeVpNd2nFFen3Owm/3WhE8BqJl5hL8hr6GdjL/R+fvGp5AvNjtYu3Ox
ziFHPYf/M/rX6J/RBn+4vQY9v46q9wdB2yGS/qsQuQiYxPOsqSTW1COwcH9/E+T1
RGMHDw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org