Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/dd9d64df9e21e4fdefbedeea391c995f110e80d1.roa
File: dd9d64df9e21e4fdefbedeea391c995f110e80d1.roa (raw, json)
Hash identifier: NSKOvbVLwdLDRtZMAUSOFj8Fpe4rLw3nxERoqLTC1+s=
Subject key identifier: E3:A9:C1:12:39:AB:7E:D1:AF:2D:3C:2A:0C:D7:17:ED:BE:25:DE:EE
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 048802
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/dd9d64df9e21e4fdefbedeea391c995f110e80d1.roa
Signing time: Tue 18 Jul 2023 18:53:40 +0000
ROA not before: Mon 17 Jul 2023 18:53:40 +0000
ROA not after: Fri 18 Jul 2025 18:53:40 +0000
asID: 16629
IP address blocks: 200.89.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296962 (0x48802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 17 18:53:40 2023 GMT
Not After : Jul 18 18:53:40 2025 GMT
Subject: CN=dd9d64df9e21e4fdefbedeea391c995f110e80d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e0:16:ff:1e:a7:e0:f0:c8:5d:f8:8c:a3:31:
fc:df:ac:d0:81:26:a1:cc:2c:b2:70:f7:90:90:c2:
1d:c0:ae:e0:53:bd:2a:3e:93:5e:df:13:5a:8a:f7:
56:fc:90:a2:98:62:2d:33:c9:87:c6:02:d9:1c:72:
7f:91:34:3d:45:93:33:b3:13:98:36:40:2c:cb:ec:
2b:a4:b2:e9:31:51:54:c9:63:53:ef:00:39:29:2f:
fe:af:00:96:93:40:54:8a:7c:ad:33:07:50:ce:56:
a5:74:b9:9f:15:7a:7b:e7:49:57:aa:69:88:af:19:
3b:f6:c0:29:22:78:37:d1:a0:b1:a4:3f:1a:4e:9b:
bd:19:96:94:33:0f:2d:34:9c:de:d4:01:a2:8f:0b:
16:0d:e2:db:63:f7:78:fc:4b:11:05:54:ae:7a:00:
c4:d2:d0:2b:22:e5:6a:2a:ad:ac:50:09:39:82:d8:
7a:72:1a:5c:37:e1:b7:33:03:c2:3a:3f:b8:91:97:
59:29:24:fd:3c:64:12:cd:5a:6a:57:63:35:ef:a6:
02:82:ae:7f:9e:b1:7f:6d:aa:99:aa:14:80:59:c5:
7a:41:97:e1:f7:09:b8:19:1e:d8:ea:d0:04:13:af:
34:5c:ea:e4:95:c1:12:3e:f9:f9:94:d7:55:15:ee:
b7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A9:C1:12:39:AB:7E:D1:AF:2D:3C:2A:0C:D7:17:ED:BE:25:DE:EE
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/dd9d64df9e21e4fdefbedeea391c995f110e80d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.89.32.0/19
Signature Algorithm: sha256WithRSAEncryption
35:a4:61:1c:ea:12:93:77:19:83:2d:e8:d5:c2:5e:34:4a:d8:
a1:0d:01:74:62:df:97:66:b6:81:c6:82:4c:69:ae:d1:b9:33:
9b:f3:67:b2:14:9a:c8:ae:d7:83:84:dd:a2:28:c3:8a:c1:c7:
91:2d:d3:35:d6:da:a8:63:21:a0:20:d6:6c:f0:3f:e0:8b:fb:
01:ef:eb:02:4b:27:78:63:de:3b:cd:65:9f:de:e5:4a:45:25:
de:5a:b0:f8:ed:bf:c3:d4:17:4e:e7:4a:9f:76:26:d4:89:b7:
bf:34:b5:5a:bd:28:55:a2:01:5a:2a:f4:1f:81:e1:e0:f4:0c:
f5:83:2c:d2:d8:3a:fb:f9:b7:53:c6:e7:a9:77:a9:7c:49:49:
34:b6:64:d9:56:92:1a:f8:5f:7f:63:69:0b:f5:dc:1c:d3:af:
44:28:0e:18:53:f1:f9:e1:eb:59:0d:d2:47:66:68:95:b3:c4:
f0:31:75:73:6f:d8:fd:f3:94:8f:9f:9d:00:9b:3d:bb:3e:00:
08:96:2d:d7:1b:2e:86:ae:44:0e:b8:56:06:03:85:4e:f1:9f:
9f:bf:91:3e:d8:7a:6b:64:de:91:fc:58:d0:fd:5c:4e:28:43:
47:d5:62:73:a6:12:11:10:4b:2e:ba:3d:a1:45:f2:c9:56:f0:
f1:d1:cf:20
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBIgCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MjZkNmY0MmZmY2E2MjkxYzZjNWM2MTYwMWY5MTZkN2U1OWEyZDMwHhcNMjMwNzE3
MTg1MzQwWhcNMjUwNzE4MTg1MzQwWjAzMTEwLwYDVQQDEyhkZDlkNjRkZjllMjFl
NGZkZWZiZWRlZWEzOTFjOTk1ZjExMGU4MGQxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjOAW/x6n4PDIXfiMozH836zQgSahzCyycPeQkMIdwK7gU70q
PpNe3xNaivdW/JCimGItM8mHxgLZHHJ/kTQ9RZMzsxOYNkAsy+wrpLLpMVFUyWNT
7wA5KS/+rwCWk0BUinytMwdQzlaldLmfFXp750lXqmmIrxk79sApIng30aCxpD8a
Tpu9GZaUMw8tNJze1AGijwsWDeLbY/d4/EsRBVSuegDE0tArIuVqKq2sUAk5gth6
chpcN+G3MwPCOj+4kZdZKST9PGQSzVpqV2M176YCgq5/nrF/baqZqhSAWcV6QZfh
9wm4GR7Y6tAEE680XOrklcESPvn5lNdVFe63iQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOOpwRI5q37Rry08KgzXF+2+Jd7uMB8GA1UdIwQYMBaAFM2qHwCJ05renW3b
eH+AQ9p8hu5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyNmQ2
ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVkYjQxNWItYjNkZC00ZjQxLWJlZTMtMjg0ZWRh
MWQ3ZTU5L2RkOWQ2NGRmOWUyMWU0ZmRlZmJlZGVlYTM5MWM5OTVmMTEwZTgwZDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWRiNDE1Yi1iM2RkLTRmNDEtYmVlMy0yODRl
ZGExZDdlNTkvZGYyNmQ2ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBchZIDANBgkqhkiG9w0BAQsFAAOCAQEANaRhHOoSk3cZgy3o
1cJeNErYoQ0BdGLfl2a2gcaCTGmu0bkzm/NnshSayK7Xg4TdoijDisHHkS3TNdba
qGMhoCDWbPA/4Iv7Ae/rAksneGPeO81ln97lSkUl3lqw+O2/w9QXTudKn3Ym1Im3
vzS1Wr0oVaIBWir0H4Hh4PQM9YMs0tg6+/m3U8bnqXepfElJNLZk2VaSGvhff2Np
C/XcHNOvRCgOGFPx+eHrWQ3SR2ZolbPE8DF1c2/Y/fOUj5+dAJs9uz4ACJYt1xsu
hq5EDrhWBgOFTvGfn7+RPth6a2TekfxY0P1cTihDR9Vic6YSERBLLro9oUXyyVbw
8dHPIA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org