Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6aa87700-3d14-4fea-af95-207bd7f22fd7/8972b4037aa32eadbdad589013568fcc69bdf586.roa
File: 8972b4037aa32eadbdad589013568fcc69bdf586.roa (raw, json)
Hash identifier: B4VYyPe1JCRdxZXmmVAbdmYS5jlUhT4kIABNonNfqak=
Subject key identifier: E6:91:E7:30:1E:E9:8F:9A:77:FA:B3:65:6A:83:9E:EC:48:45:34:C8
Certificate issuer: /CN=9db4a8f94f3e562910df373cae6e7f8c71e3feb0
Certificate serial: 0D8B70
Authority key identifier: 94:89:68:CD:7F:23:13:1F:D0:8C:73:E7:2E:D4:9B:F9:F0:EF:80:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9db4a8f94f3e562910df373cae6e7f8c71e3feb0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6aa87700-3d14-4fea-af95-207bd7f22fd7/8972b4037aa32eadbdad589013568fcc69bdf586.roa
Signing time: Wed 24 Mar 2021 14:39:24 +0000
ROA not before: Wed 24 Mar 2021 14:39:24 +0000
ROA not after: Tue 24 Mar 2026 14:39:24 +0000
asID: 3549
IP address blocks: 192.188.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887664 (0xd8b70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9db4a8f94f3e562910df373cae6e7f8c71e3feb0
Validity
Not Before: Mar 24 14:39:24 2021 GMT
Not After : Mar 24 14:39:24 2026 GMT
Subject: CN=8972b4037aa32eadbdad589013568fcc69bdf586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:66:5d:4e:4d:af:f2:8c:ad:58:49:6d:04:
6b:46:bd:62:5a:d9:47:92:24:d6:bb:6a:39:52:6e:
12:83:f7:31:f5:a0:a1:9e:92:d6:f5:bf:2f:e2:af:
da:ea:8a:20:e1:15:59:a7:b8:87:4b:17:b7:9f:29:
a8:4b:fe:42:4b:5d:0f:ee:ed:a3:50:a1:fe:af:1c:
ab:73:65:fb:ed:e2:80:18:fb:04:30:8a:e0:ff:bb:
9d:d1:30:a0:8d:be:35:22:6f:f9:82:cd:92:86:e4:
c9:0d:9e:30:b7:96:e5:d0:18:05:a7:35:dd:1e:7e:
b0:05:d7:a4:78:58:34:52:68:e1:8f:1e:51:fc:fb:
9f:55:c5:c5:2c:67:38:c3:b4:45:e3:d9:41:a2:63:
82:31:05:23:e0:ff:c2:84:5b:3d:45:f5:8d:b0:ac:
62:dd:a8:1b:39:8f:76:cf:f7:cf:9b:a3:80:90:50:
20:af:ee:df:5e:d2:24:e9:d9:15:4e:f8:ef:f1:31:
5d:3f:68:6e:dd:47:65:75:c5:17:e7:24:02:c3:3a:
33:1f:1b:58:ee:b0:e3:33:60:3b:04:71:c7:ec:ab:
6a:6d:6f:66:b1:f2:85:c6:86:61:26:44:c8:19:ef:
e1:6f:37:d5:d9:7d:6c:b8:1a:a2:af:51:d5:99:06:
f5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:91:E7:30:1E:E9:8F:9A:77:FA:B3:65:6A:83:9E:EC:48:45:34:C8
X509v3 Authority Key Identifier:
keyid:94:89:68:CD:7F:23:13:1F:D0:8C:73:E7:2E:D4:9B:F9:F0:EF:80:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9db4a8f94f3e562910df373cae6e7f8c71e3feb0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6aa87700-3d14-4fea-af95-207bd7f22fd7/8972b4037aa32eadbdad589013568fcc69bdf586.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6aa87700-3d14-4fea-af95-207bd7f22fd7/9db4a8f94f3e562910df373cae6e7f8c71e3feb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.58.0/24
Signature Algorithm: sha256WithRSAEncryption
36:85:d4:7f:df:b3:71:0f:8c:66:42:f9:d8:f5:87:02:9c:61:
1e:1c:0c:67:97:57:e1:8b:ab:7b:4d:76:7e:d1:6c:bc:fd:ba:
7e:a8:8a:9e:c9:2f:31:b1:c9:c4:ef:85:7d:f3:d8:f3:93:c3:
d5:b4:ef:ad:92:24:d7:fe:78:1a:f8:99:fa:74:6b:65:c4:44:
70:92:86:57:11:ba:01:49:48:c2:fd:be:a0:56:25:87:37:0f:
cb:da:26:1f:08:68:8b:d6:16:a6:ea:27:19:2c:e2:a9:3c:35:
c3:c2:57:9c:85:fb:cc:55:39:e5:78:fc:56:ed:a0:f0:44:8a:
32:f6:d0:48:fc:31:1f:00:fc:b0:b8:a4:68:41:54:8c:38:28:
77:af:77:22:4d:13:80:e4:0f:ff:de:f8:c4:bc:50:d9:40:d1:
b9:53:71:36:eb:f0:df:45:e2:bc:9c:2a:33:f0:3c:10:12:31:
2b:6d:1a:b7:7a:28:10:a3:2e:4f:93:d6:f6:6e:cd:a2:5b:06:
9e:a8:40:5c:ef:c8:39:84:b3:bd:e3:1a:2b:f8:b4:56:35:4a:
14:c8:5b:21:fd:53:ad:45:3b:1a:41:1d:dc:be:4b:af:81:95:
36:bb:3f:73:b5:03:59:f4:74:fe:c3:69:62:91:76:90:3d:0c:
1a:37:72:29
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDYtwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlk
YjRhOGY5NGYzZTU2MjkxMGRmMzczY2FlNmU3ZjhjNzFlM2ZlYjAwHhcNMjEwMzI0
MTQzOTI0WhcNMjYwMzI0MTQzOTI0WjAzMTEwLwYDVQQDEyg4OTcyYjQwMzdhYTMy
ZWFkYmRhZDU4OTAxMzU2OGZjYzY5YmRmNTg2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAy5tmXU5Nr/KMrVhJbQRrRr1iWtlHkiTWu2o5Um4Sg/cx9aCh
npLW9b8v4q/a6oog4RVZp7iHSxe3nymoS/5CS10P7u2jUKH+rxyrc2X77eKAGPsE
MIrg/7ud0TCgjb41Im/5gs2ShuTJDZ4wt5bl0BgFpzXdHn6wBdekeFg0Umjhjx5R
/PufVcXFLGc4w7RF49lBomOCMQUj4P/ChFs9RfWNsKxi3agbOY92z/fPm6OAkFAg
r+7fXtIk6dkVTvjv8TFdP2hu3UdldcUX5yQCwzozHxtY7rDjM2A7BHHH7KtqbW9m
sfKFxoZhJkTIGe/hbzfV2X1suBqir1HVmQb1DwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOaR5zAe6Y+ad/qzZWqDnuxIRTTIMB8GA1UdIwQYMBaAFJSJaM1/IxMf0Ixz
5y7Um/nw74BgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWRiNGE4
Zjk0ZjNlNTYyOTEwZGYzNzNjYWU2ZTdmOGM3MWUzZmViMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmFhODc3MDAtM2QxNC00ZmVhLWFmOTUtMjA3YmQ3
ZjIyZmQ3Lzg5NzJiNDAzN2FhMzJlYWRiZGFkNTg5MDEzNTY4ZmNjNjliZGY1ODYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YWE4NzcwMC0zZDE0LTRmZWEtYWY5NS0yMDdi
ZDdmMjJmZDcvOWRiNGE4Zjk0ZjNlNTYyOTEwZGYzNzNjYWU2ZTdmOGM3MWUzZmVi
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMC8OjANBgkqhkiG9w0BAQsFAAOCAQEANoXUf9+zcQ+MZkL5
2PWHApxhHhwMZ5dX4Yure012ftFsvP26fqiKnskvMbHJxO+FffPY85PD1bTvrZIk
1/54GviZ+nRrZcREcJKGVxG6AUlIwv2+oFYlhzcPy9omHwhoi9YWpuonGSziqTw1
w8JXnIX7zFU55Xj8Vu2g8ESKMvbQSPwxHwD8sLikaEFUjDgod693Ik0TgOQP/974
xLxQ2UDRuVNxNuvw30XivJwqM/A8EBIxK20at3ooEKMuT5PW9m7NolsGnqhAXO/I
OYSzveMaK/i0VjVKFMhbIf1TrUU7GkEd3L5Lr4GVNrs/c7UDWfR0/sNpYpF2kD0M
GjdyKQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:00 2024 by rpki-client on console-ams.rpki-client.org