Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/e8d76bc70698a3c7b74b01ead6e1674fc990b456.roa
File: e8d76bc70698a3c7b74b01ead6e1674fc990b456.roa (raw, json)
Hash identifier: Sj1b+LH/Xbc4R3FHaGAGziemp3cFZhmdOwgQhByb12U=
Subject key identifier: 83:DB:3D:02:ED:8E:B4:E4:D8:BE:23:2E:37:C6:AB:62:07:63:4F:F1
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 03DE4D
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/e8d76bc70698a3c7b74b01ead6e1674fc990b456.roa
Signing time: Tue 11 Jul 2023 13:30:37 +0000
ROA not before: Mon 10 Jul 2023 13:30:37 +0000
ROA not after: Fri 11 Jul 2025 13:30:37 +0000
asID: 7418
IP address blocks: 200.29.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253517 (0x3de4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 13:30:37 2023 GMT
Not After : Jul 11 13:30:37 2025 GMT
Subject: CN=e8d76bc70698a3c7b74b01ead6e1674fc990b456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:5c:fa:fa:ec:1d:2b:9d:ac:fe:2e:4b:7f:
2d:29:8b:23:8f:8f:27:76:15:0a:d5:09:59:ca:e8:
c2:1e:95:48:21:b8:e3:39:e9:67:a4:85:78:68:94:
69:f1:c5:39:d1:7f:c8:41:55:e9:1f:aa:d8:ac:c2:
d7:1f:d7:18:40:98:89:13:5d:7d:eb:f2:2a:cf:5d:
13:19:87:c8:02:c8:76:b6:0b:a7:81:1b:1a:e8:42:
1c:2c:ff:04:d2:b8:e7:3d:b8:ba:b3:c2:42:3e:31:
5e:4d:99:61:d5:f4:37:f7:49:f2:70:39:fd:04:d3:
c5:94:29:a7:aa:9f:ff:e0:2b:0d:30:17:26:35:fc:
2a:30:19:d4:b9:a6:07:37:74:7c:69:95:66:82:14:
18:95:3d:93:67:b0:f0:d0:bd:59:3e:66:8d:69:8b:
1d:98:e2:21:94:8a:2c:7c:aa:b2:23:24:52:e4:4b:
d4:b8:f7:7d:17:cd:96:72:0a:60:a1:6a:47:f0:2c:
36:d1:05:59:6d:07:17:66:d4:b6:1f:5f:86:24:4c:
38:e1:86:d4:61:56:63:21:77:c9:d8:77:7c:64:71:
23:bb:da:fb:ac:95:18:07:81:ad:8b:0c:59:5f:6a:
23:91:24:b0:d0:70:d1:b6:db:15:94:5b:5f:de:f5:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DB:3D:02:ED:8E:B4:E4:D8:BE:23:2E:37:C6:AB:62:07:63:4F:F1
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/e8d76bc70698a3c7b74b01ead6e1674fc990b456.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.29.48.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:67:d3:36:7c:52:ca:af:7d:f9:cd:1b:54:5d:60:5f:e3:da:
a3:70:89:10:21:95:40:d6:02:79:c4:c8:05:98:52:a8:0c:98:
1c:ad:ba:15:5b:61:fa:c8:b1:2a:d0:65:9c:31:84:59:2a:26:
29:b0:a9:f2:22:ee:da:0c:d5:97:6d:e3:12:72:e9:a1:f3:f9:
e6:5f:d9:43:67:4d:23:76:e4:04:b5:8b:cf:72:17:09:76:eb:
b5:e5:ce:6d:01:70:62:eb:ab:11:35:49:db:dd:d4:b4:38:10:
a8:de:78:d7:36:9a:e8:2f:33:33:6b:07:71:fa:bb:e6:39:cb:
b1:1e:1a:09:70:81:f4:46:a6:11:3c:4b:db:a0:29:78:e7:48:
52:1b:35:75:2c:25:d6:c0:b1:fb:a4:46:db:95:ab:b8:ef:62:
b1:23:ea:4f:0d:79:17:67:54:60:75:a0:83:71:e3:58:a3:3a:
1c:cc:05:df:17:5b:92:46:a1:ef:d7:ae:ce:d6:ff:b0:e7:6b:
c3:2b:04:b0:66:94:dd:84:73:12:09:93:f7:a1:e6:37:e8:70:
1b:f3:9d:cb:c4:39:5e:50:8d:d9:f7:11:ac:6d:66:4b:49:26:
ce:06:2a:a3:3e:66:08:59:4d:53:fa:6e:6a:47:ea:34:6d:9d:
6d:50:8c:e7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA95NMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MjZkNmY0MmZmY2E2MjkxYzZjNWM2MTYwMWY5MTZkN2U1OWEyZDMwHhcNMjMwNzEw
MTMzMDM3WhcNMjUwNzExMTMzMDM3WjAzMTEwLwYDVQQDEyhlOGQ3NmJjNzA2OThh
M2M3Yjc0YjAxZWFkNmUxNjc0ZmM5OTBiNDU2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAovVc+vrsHSudrP4uS38tKYsjj48ndhUK1QlZyujCHpVIIbjj
OelnpIV4aJRp8cU50X/IQVXpH6rYrMLXH9cYQJiJE1196/Iqz10TGYfIAsh2tgun
gRsa6EIcLP8E0rjnPbi6s8JCPjFeTZlh1fQ390nycDn9BNPFlCmnqp//4CsNMBcm
NfwqMBnUuaYHN3R8aZVmghQYlT2TZ7Dw0L1ZPmaNaYsdmOIhlIosfKqyIyRS5EvU
uPd9F82WcgpgoWpH8Cw20QVZbQcXZtS2H1+GJEw44YbUYVZjIXfJ2Hd8ZHEju9r7
rJUYB4GtiwxZX2ojkSSw0HDRttsVlFtf3vVjdQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIPbPQLtjrTk2L4jLjfGq2IHY0/xMB8GA1UdIwQYMBaAFM2qHwCJ05renW3b
eH+AQ9p8hu5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyNmQ2
ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVkYjQxNWItYjNkZC00ZjQxLWJlZTMtMjg0ZWRh
MWQ3ZTU5L2U4ZDc2YmM3MDY5OGEzYzdiNzRiMDFlYWQ2ZTE2NzRmYzk5MGI0NTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWRiNDE1Yi1iM2RkLTRmNDEtYmVlMy0yODRl
ZGExZDdlNTkvZGYyNmQ2ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgdMDANBgkqhkiG9w0BAQsFAAOCAQEAfmfTNnxSyq99+c0b
VF1gX+Pao3CJECGVQNYCecTIBZhSqAyYHK26FVth+sixKtBlnDGEWSomKbCp8iLu
2gzVl23jEnLpofP55l/ZQ2dNI3bkBLWLz3IXCXbrteXObQFwYuurETVJ293UtDgQ
qN541zaa6C8zM2sHcfq75jnLsR4aCXCB9EamETxL26ApeOdIUhs1dSwl1sCx+6RG
25WruO9isSPqTw15F2dUYHWgg3HjWKM6HMwF3xdbkkah79euztb/sOdrwysEsGaU
3YRzEgmT96HmN+hwG/Ody8Q5XlCN2fcRrG1mS0kmzgYqoz5mCFlNU/puakfqNG2d
bVCM5w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org