Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a8328fa-7639-42a5-af2b-42bd3b4ef5fa/61cbf8e170875b41f94836957ca67ba8af416ace.roa
File: 61cbf8e170875b41f94836957ca67ba8af416ace.roa (raw, json)
Hash identifier: dtbux1H9GjxP9KT5ybOV7gOPtMpD1MRfUU4L2Zs3zNQ=
Subject key identifier: B7:77:D3:40:D6:5C:1E:C1:EA:31:BA:B7:97:85:B6:18:D6:2F:F3:4A
Certificate issuer: /CN=f1e750e661607322fb98ea988d7624f49cbc68cb
Certificate serial: 20B9CE
Authority key identifier: F8:B0:D5:31:73:34:5B:2F:37:5D:D4:B4:27:59:C7:B4:BD:4E:BC:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1e750e661607322fb98ea988d7624f49cbc68cb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6a8328fa-7639-42a5-af2b-42bd3b4ef5fa/61cbf8e170875b41f94836957ca67ba8af416ace.roa
Signing time: Tue 06 Jun 2023 09:58:07 +0000
ROA not before: Mon 05 Jun 2023 09:58:07 +0000
ROA not after: Fri 06 Jun 2025 09:58:07 +0000
asID: 21351
IP address blocks: 161.22.64.0/18 maxlen: 24
2803:1680:3000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2144718 (0x20b9ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e750e661607322fb98ea988d7624f49cbc68cb
Validity
Not Before: Jun 5 09:58:07 2023 GMT
Not After : Jun 6 09:58:07 2025 GMT
Subject: CN=61cbf8e170875b41f94836957ca67ba8af416ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:4d:28:76:06:21:4d:9d:71:42:5e:a2:fb:
35:7e:7d:da:bc:84:46:0a:79:08:81:45:e1:cb:c5:
1b:87:ce:c9:a9:62:61:bb:b7:58:57:12:72:da:13:
7f:86:c2:66:ef:14:51:73:f6:d9:b4:5a:0b:b1:56:
e2:10:6e:6e:40:0c:5f:6f:4b:5f:b6:79:dc:09:0e:
c8:36:62:f4:4b:d4:41:d8:d7:93:67:43:d2:a3:9b:
19:d3:87:d0:d7:ce:43:8b:9d:ae:8e:68:b9:d1:2d:
06:3e:43:f3:15:10:b4:ae:f8:7e:91:80:71:a3:7a:
78:78:7a:f6:0a:4d:b7:c6:ab:c2:22:94:5e:8f:08:
77:a2:db:26:c4:73:82:17:84:34:39:0e:fa:e9:71:
9f:ad:68:56:62:b4:a0:40:04:cc:b6:ab:10:41:23:
4c:f1:fd:45:a1:63:63:57:e0:fa:34:e4:01:ca:19:
62:67:07:c5:75:a5:5d:7d:02:27:9e:a7:10:c7:02:
d9:29:f6:9f:f5:c5:be:3d:0c:65:da:36:38:85:4e:
51:47:a7:4f:72:41:fb:2d:1f:31:19:73:46:8f:86:
d6:b4:b6:20:bd:3a:26:1d:d6:b3:7d:99:c8:ad:f9:
6b:f9:fd:37:92:26:27:ab:05:4a:1d:16:44:d1:2c:
bd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:77:D3:40:D6:5C:1E:C1:EA:31:BA:B7:97:85:B6:18:D6:2F:F3:4A
X509v3 Authority Key Identifier:
keyid:F8:B0:D5:31:73:34:5B:2F:37:5D:D4:B4:27:59:C7:B4:BD:4E:BC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1e750e661607322fb98ea988d7624f49cbc68cb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a8328fa-7639-42a5-af2b-42bd3b4ef5fa/61cbf8e170875b41f94836957ca67ba8af416ace.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6a8328fa-7639-42a5-af2b-42bd3b4ef5fa/f1e750e661607322fb98ea988d7624f49cbc68cb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.64.0/18
IPv6:
2803:1680:3000::/36
Signature Algorithm: sha256WithRSAEncryption
45:07:41:58:23:92:e0:86:fe:bc:bc:6e:59:d8:bf:db:f0:a3:
50:36:89:f9:bc:93:68:36:14:64:e1:49:57:af:cc:b0:8a:c5:
cd:8e:5d:78:c7:08:0e:5d:6c:00:4d:4e:cc:e1:ff:fb:eb:03:
35:55:df:29:27:aa:4f:ab:40:55:b6:bd:e7:df:4c:a7:db:2a:
e3:96:ae:8e:7e:6c:eb:9a:29:e2:f7:4b:11:30:23:4e:07:db:
24:e8:1b:a4:27:cf:49:c2:1d:ff:41:00:e1:5a:4f:80:cd:ac:
fa:1f:dd:65:00:28:ca:72:e0:4e:9b:d6:ea:9c:15:a5:ad:3f:
0f:94:ef:19:bd:bc:9c:c0:25:10:48:8a:37:09:08:78:35:3e:
e3:78:ed:09:79:fd:09:65:f7:64:bf:fa:ed:8b:3a:6d:0a:b3:
1e:7a:64:61:e0:1c:ef:05:0c:7c:0b:db:8a:0c:c7:5e:fd:b9:
4b:d0:75:cf:df:83:da:1e:68:96:3c:60:be:52:ec:92:2f:72:
36:b2:f9:65:07:7e:6b:88:93:ce:c3:57:26:c1:24:de:91:73:
8b:3e:92:b9:66:c9:49:04:23:00:5a:ed:6e:f1:5b:da:c6:e3:
fe:b3:d9:3b:d3:a8:e3:16:41:ea:23:b2:a9:4e:d7:81:a7:b8:
e0:96:47:56
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIDILnOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYx
ZTc1MGU2NjE2MDczMjJmYjk4ZWE5ODhkNzYyNGY0OWNiYzY4Y2IwHhcNMjMwNjA1
MDk1ODA3WhcNMjUwNjA2MDk1ODA3WjAzMTEwLwYDVQQDEyg2MWNiZjhlMTcwODc1
YjQxZjk0ODM2OTU3Y2E2N2JhOGFmNDE2YWNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqzlNKHYGIU2dcUJeovs1fn3avIRGCnkIgUXhy8Ubh87JqWJh
u7dYVxJy2hN/hsJm7xRRc/bZtFoLsVbiEG5uQAxfb0tftnncCQ7INmL0S9RB2NeT
Z0PSo5sZ04fQ185Di52ujmi50S0GPkPzFRC0rvh+kYBxo3p4eHr2Ck23xqvCIpRe
jwh3otsmxHOCF4Q0OQ766XGfrWhWYrSgQATMtqsQQSNM8f1FoWNjV+D6NOQByhli
ZwfFdaVdfQInnqcQxwLZKfaf9cW+PQxl2jY4hU5RR6dPckH7LR8xGXNGj4bWtLYg
vTomHdazfZnIrflr+f03kiYnqwVKHRZE0Sy9+QIDAQABo4ICazCCAmcwHQYDVR0O
BBYEFLd300DWXB7B6jG6t5eFthjWL/NKMB8GA1UdIwQYMBaAFPiw1TFzNFsvN13U
tCdZx7S9TrwwMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjFlNzUw
ZTY2MTYwNzMyMmZiOThlYTk4OGQ3NjI0ZjQ5Y2JjNjhjYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE4MzI4ZmEtNzYzOS00MmE1LWFmMmItNDJiZDNi
NGVmNWZhLzYxY2JmOGUxNzA4NzViNDFmOTQ4MzY5NTdjYTY3YmE4YWY0MTZhY2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTgzMjhmYS03NjM5LTQyYTUtYWYyYi00MmJk
M2I0ZWY1ZmEvZjFlNzUwZTY2MTYwNzMyMmZiOThlYTk4OGQ3NjI0ZjQ5Y2JjNjhj
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAvBggrBgEFBQcBBwEB/wQg
MB4wDAQCAAEwBgMEBqEWQDAOBAIAAjAIAwYEKAMWgDAwDQYJKoZIhvcNAQELBQAD
ggEBAEUHQVgjkuCG/ry8blnYv9vwo1A2ifm8k2g2FGThSVevzLCKxc2OXXjHCA5d
bABNTszh//vrAzVV3yknqk+rQFW2veffTKfbKuOWro5+bOuaKeL3SxEwI04H2yTo
G6Qnz0nCHf9BAOFaT4DNrPof3WUAKMpy4E6b1uqcFaWtPw+U7xm9vJzAJRBIijcJ
CHg1PuN47Ql5/Qll92S/+u2LOm0Ksx56ZGHgHO8FDHwL24oMx179uUvQdc/fg9oe
aJY8YL5S7JIvcjay+WUHfmuIk87DVybBJN6Rc4s+krlmyUkEIwBa7W7xW9rG4/6z
2TvTqOMWQeojsqlO14GnuOCWR1Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org