Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/cc342a67256a5cef55d616848c2f5759bd658e2f.roa
File: cc342a67256a5cef55d616848c2f5759bd658e2f.roa (raw, json)
Hash identifier: qjVK+/xdlNSNKSkVSNUYqUYibHllSfHPg34us7BZSSU=
Subject key identifier: 34:EB:C0:31:9D:FA:84:E2:83:0A:14:64:38:EE:06:F1:81:47:EA:3F
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 04842A
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/cc342a67256a5cef55d616848c2f5759bd658e2f.roa
Signing time: Tue 18 Jul 2023 18:52:49 +0000
ROA not before: Mon 17 Jul 2023 18:52:49 +0000
ROA not after: Fri 18 Jul 2025 18:52:49 +0000
asID: 7418
IP address blocks: 200.89.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295978 (0x4842a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 17 18:52:49 2023 GMT
Not After : Jul 18 18:52:49 2025 GMT
Subject: CN=cc342a67256a5cef55d616848c2f5759bd658e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:82:d2:15:f0:90:ff:4e:7b:53:c8:fd:9c:
f6:a7:3d:67:88:d5:fc:ed:c7:51:29:67:ff:89:fb:
fb:a7:fb:e3:53:27:8a:6b:a1:ff:0a:86:63:50:50:
b3:50:f1:47:14:5e:95:13:29:25:a2:b6:5e:e4:59:
2c:46:eb:e3:7d:28:f0:cb:4d:b2:76:06:75:b3:bd:
09:a8:c7:f9:58:e8:fb:74:71:3a:4a:f1:8a:ae:b1:
61:71:45:07:71:81:f3:9e:62:7f:2d:b0:ad:73:58:
b2:52:f4:c9:4d:8e:b7:6a:8a:bf:23:0b:8c:e9:d8:
3e:50:08:ba:9c:3d:a7:3e:3a:62:29:74:49:4f:32:
ff:f8:8c:64:38:1f:e1:0d:14:bf:15:ad:ef:81:14:
92:90:8f:fe:fa:b5:63:3e:12:55:b7:21:26:0f:c3:
b2:6c:3f:24:5e:e5:d4:b2:f3:82:a2:0b:ac:c0:81:
2b:c6:e2:3a:c9:01:7c:ca:71:d6:e2:7a:00:14:ec:
04:4d:89:38:90:a6:7c:de:3a:23:ae:65:69:3a:d8:
22:c0:2c:1e:ed:96:51:98:e4:82:32:5a:a1:91:4e:
f3:1b:70:6f:d3:10:d2:8b:9a:78:04:b8:09:63:d0:
83:f2:d8:44:3b:3c:bd:78:02:44:64:95:d3:f7:aa:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EB:C0:31:9D:FA:84:E2:83:0A:14:64:38:EE:06:F1:81:47:EA:3F
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/cc342a67256a5cef55d616848c2f5759bd658e2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.89.32.0/19
Signature Algorithm: sha256WithRSAEncryption
57:7c:2b:bb:41:31:6f:d9:2b:79:6d:7c:94:fd:28:05:1a:66:
f9:1d:3b:da:ce:52:ee:83:ac:20:37:c8:61:52:6d:ce:70:95:
a7:34:ae:df:ce:42:a5:80:1c:11:ac:73:6c:21:77:50:13:44:
04:1f:23:12:38:e8:0a:e3:10:44:7f:b7:e9:b4:0c:b1:bf:db:
73:79:ff:dc:b0:31:80:0a:c9:80:c6:a2:d5:da:aa:29:50:19:
a2:5b:34:d3:98:aa:c9:5e:44:a1:36:26:29:8a:0d:38:35:bc:
32:a3:0b:7c:f6:a9:4b:cf:d7:58:5b:be:04:30:b4:fc:72:27:
d3:7a:58:26:7f:ab:50:c5:71:51:1b:c6:46:fb:db:ab:af:a9:
fe:c6:1d:9f:01:c9:45:cf:1c:e6:d1:84:16:a8:23:8b:54:bd:
0c:54:ad:8a:98:19:04:40:3f:f1:96:71:4d:91:46:49:0c:4d:
b8:83:b0:a7:b2:d1:85:d3:a1:b3:6b:39:10:14:09:a4:d2:d1:
f6:13:b1:61:a4:e4:11:b1:ac:7b:2d:ab:a8:ac:7f:cc:dc:8b:
74:31:66:8c:fc:29:e7:73:63:ce:7d:07:8e:6f:2c:0e:50:e1:
ac:c0:ce:7d:61:e6:6d:f7:1f:f3:3b:48:38:68:7a:94:a5:9e:
e1:9b:f4:ad
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBIQqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MjZkNmY0MmZmY2E2MjkxYzZjNWM2MTYwMWY5MTZkN2U1OWEyZDMwHhcNMjMwNzE3
MTg1MjQ5WhcNMjUwNzE4MTg1MjQ5WjAzMTEwLwYDVQQDEyhjYzM0MmE2NzI1NmE1
Y2VmNTVkNjE2ODQ4YzJmNTc1OWJkNjU4ZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoWWC0hXwkP9Oe1PI/Zz2pz1niNX87cdRKWf/ifv7p/vjUyeK
a6H/CoZjUFCzUPFHFF6VEyklorZe5FksRuvjfSjwy02ydgZ1s70JqMf5WOj7dHE6
SvGKrrFhcUUHcYHznmJ/LbCtc1iyUvTJTY63aoq/IwuM6dg+UAi6nD2nPjpiKXRJ
TzL/+IxkOB/hDRS/Fa3vgRSSkI/++rVjPhJVtyEmD8OybD8kXuXUsvOCoguswIEr
xuI6yQF8ynHW4noAFOwETYk4kKZ83jojrmVpOtgiwCwe7ZZRmOSCMlqhkU7zG3Bv
0xDSi5p4BLgJY9CD8thEOzy9eAJEZJXT96rPEwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDTrwDGd+oTigwoUZDjuBvGBR+o/MB8GA1UdIwQYMBaAFM2qHwCJ05renW3b
eH+AQ9p8hu5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyNmQ2
ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVkYjQxNWItYjNkZC00ZjQxLWJlZTMtMjg0ZWRh
MWQ3ZTU5L2NjMzQyYTY3MjU2YTVjZWY1NWQ2MTY4NDhjMmY1NzU5YmQ2NThlMmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWRiNDE1Yi1iM2RkLTRmNDEtYmVlMy0yODRl
ZGExZDdlNTkvZGYyNmQ2ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBchZIDANBgkqhkiG9w0BAQsFAAOCAQEAV3wru0Exb9kreW18
lP0oBRpm+R072s5S7oOsIDfIYVJtznCVpzSu385CpYAcEaxzbCF3UBNEBB8jEjjo
CuMQRH+36bQMsb/bc3n/3LAxgArJgMai1dqqKVAZols005iqyV5EoTYmKYoNODW8
MqMLfPapS8/XWFu+BDC0/HIn03pYJn+rUMVxURvGRvvbq6+p/sYdnwHJRc8c5tGE
Fqgji1S9DFStipgZBEA/8ZZxTZFGSQxNuIOwp7LRhdOhs2s5EBQJpNLR9hOxYaTk
EbGsey2rqKx/zNyLdDFmjPwp53Njzn0Hjm8sDlDhrMDOfWHmbfcf8ztIOGh6lKWe
4Zv0rQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org