Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/1075cef9a32c6359f2c4b4e75712733dbd14f727.roa
File: 1075cef9a32c6359f2c4b4e75712733dbd14f727.roa (raw, json)
Hash identifier: 2u64sy+8CdwMPoqzgLitoXSWauPQiSttF88SXpwCDG8=
Subject key identifier: E1:EB:8B:51:ED:8D:B6:05:77:F3:81:B7:F1:3A:F3:AB:40:40:9A:CA
Certificate issuer: /CN=c1b10fed8d73bc6fca227c206b112f9a09361b3e
Certificate serial: 0DD748
Authority key identifier: DA:3C:C7:79:11:12:49:F0:4D:43:52:CB:60:BC:23:A4:4B:9F:76:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1b10fed8d73bc6fca227c206b112f9a09361b3e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/1075cef9a32c6359f2c4b4e75712733dbd14f727.roa
Signing time: Wed 24 Mar 2021 14:39:00 +0000
ROA not before: Wed 24 Mar 2021 14:39:00 +0000
ROA not after: Tue 24 Mar 2026 14:39:00 +0000
asID: 27784
IP address blocks: 179.0.204.0/24 maxlen: 24
200.0.63.0/24 maxlen: 24
200.10.209.0/24 maxlen: 24
2801:0:4d0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 907080 (0xdd748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b10fed8d73bc6fca227c206b112f9a09361b3e
Validity
Not Before: Mar 24 14:39:00 2021 GMT
Not After : Mar 24 14:39:00 2026 GMT
Subject: CN=1075cef9a32c6359f2c4b4e75712733dbd14f727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:11:8a:73:72:33:a6:4a:2a:52:ba:90:7c:60:
7c:7d:9e:9b:13:f1:44:77:fe:60:60:68:52:17:c3:
f0:51:c0:51:70:8a:86:69:2e:c2:25:28:c3:d1:fd:
8d:f2:88:8f:27:96:96:bb:1e:91:8b:b1:71:13:46:
4d:2d:b3:81:5f:47:a2:cf:38:e9:ce:fa:9d:d1:54:
3b:75:e2:54:ba:b1:1b:cd:ff:e1:4d:75:03:79:86:
7e:30:a8:09:43:74:52:39:e5:14:c8:99:10:73:40:
8e:ab:d5:71:50:a1:bf:a5:41:ee:87:d7:bf:67:c8:
fa:fa:cc:a4:d3:18:e2:10:14:94:22:98:01:86:a4:
ab:f5:ff:43:38:57:bf:89:7c:54:98:85:12:18:f8:
2c:91:9f:24:07:2c:aa:31:19:a5:9e:5d:4e:6f:25:
a9:5c:89:7b:b6:33:e9:56:32:93:d9:ab:68:22:ea:
75:35:e1:56:8a:3e:8b:d9:43:75:f5:68:2f:30:46:
00:00:e2:da:09:a8:2a:28:21:bf:34:bd:b8:f2:76:
11:46:7e:84:64:4d:36:82:21:87:74:d0:97:25:a9:
2f:2d:17:8f:c2:30:49:98:58:25:8a:91:bb:8f:4e:
2a:80:fe:44:d8:f8:7a:bf:74:f4:64:4e:e2:32:37:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EB:8B:51:ED:8D:B6:05:77:F3:81:B7:F1:3A:F3:AB:40:40:9A:CA
X509v3 Authority Key Identifier:
keyid:DA:3C:C7:79:11:12:49:F0:4D:43:52:CB:60:BC:23:A4:4B:9F:76:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1b10fed8d73bc6fca227c206b112f9a09361b3e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/1075cef9a32c6359f2c4b4e75712733dbd14f727.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/c1b10fed8d73bc6fca227c206b112f9a09361b3e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.204.0/24
200.0.63.0/24
200.10.209.0/24
IPv6:
2801:0:4d0::/48
Signature Algorithm: sha256WithRSAEncryption
2a:d4:20:9e:6c:63:3d:b3:2d:7e:f6:0c:b1:f8:c8:18:8f:a8:
c3:f9:1f:68:39:ec:75:02:2e:20:66:1d:f5:85:db:c9:fd:cc:
79:d5:9e:5f:d1:ca:9c:0d:cc:0a:15:3c:43:c1:85:10:3e:e5:
d4:20:8a:26:39:81:57:19:a9:e0:61:f1:65:38:0a:0a:8b:8f:
f4:db:5d:d6:84:64:fd:98:7c:92:e0:30:2f:c8:42:42:c0:bd:
e5:ed:28:87:e7:30:05:8f:e2:b9:25:f8:79:46:6c:12:11:8e:
8e:52:94:23:62:4a:25:47:d1:da:b6:56:b2:23:d5:63:0c:63:
2e:c9:5d:b9:34:64:9a:60:20:e6:e2:01:65:79:35:a6:41:85:
22:36:a8:8a:bd:0a:f5:8f:9a:98:7e:22:99:2b:04:6c:e1:33:
db:88:f7:66:77:52:a3:50:2d:66:92:9f:37:1f:fe:d2:7a:89:
3d:57:b4:82:38:1e:db:2a:2d:44:1b:9e:8b:28:5a:67:00:ec:
0a:26:3e:26:4f:0a:09:9c:b1:da:a3:21:c1:c7:df:6d:b6:7a:
fe:78:9c:24:ab:b3:21:2d:db:fd:cb:c5:b6:26:63:c6:0f:36:
5a:17:b5:9b:4f:0f:c6:d2:4b:81:5c:d7:09:5f:08:0e:bd:d8:
47:0f:28:8f
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIDDddIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
YjEwZmVkOGQ3M2JjNmZjYTIyN2MyMDZiMTEyZjlhMDkzNjFiM2UwHhcNMjEwMzI0
MTQzOTAwWhcNMjYwMzI0MTQzOTAwWjAzMTEwLwYDVQQDEygxMDc1Y2VmOWEzMmM2
MzU5ZjJjNGI0ZTc1NzEyNzMzZGJkMTRmNzI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiRGKc3IzpkoqUrqQfGB8fZ6bE/FEd/5gYGhSF8PwUcBRcIqG
aS7CJSjD0f2N8oiPJ5aWux6Ri7FxE0ZNLbOBX0eizzjpzvqd0VQ7deJUurEbzf/h
TXUDeYZ+MKgJQ3RSOeUUyJkQc0COq9VxUKG/pUHuh9e/Z8j6+syk0xjiEBSUIpgB
hqSr9f9DOFe/iXxUmIUSGPgskZ8kByyqMRmlnl1ObyWpXIl7tjPpVjKT2atoIup1
NeFWij6L2UN19WgvMEYAAOLaCagqKCG/NL248nYRRn6EZE02giGHdNCXJakvLReP
wjBJmFglipG7j04qgP5E2Ph6v3T0ZE7iMjcoPQIDAQABo4ICeDCCAnQwHQYDVR0O
BBYEFOHri1HtjbYFd/OBt/E686tAQJrKMB8GA1UdIwQYMBaAFNo8x3kREknwTUNS
y2C8I6RLn3a5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFiMTBm
ZWQ4ZDczYmM2ZmNhMjI3YzIwNmIxMTJmOWEwOTM2MWIzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmM4ZWE3YWUtNmIyMy00Yjc5LWFkNzgtYjYxOTI0
NzUwNjZmLzEwNzVjZWY5YTMyYzYzNTlmMmM0YjRlNzU3MTI3MzNkYmQxNGY3Mjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YzhlYTdhZS02YjIzLTRiNzktYWQ3OC1iNjE5
MjQ3NTA2NmYvYzFiMTBmZWQ4ZDczYmM2ZmNhMjI3YzIwNmIxMTJmOWEwOTM2MWIz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8BggrBgEFBQcBBwEB/wQt
MCswGAQCAAEwEgMEALMAzAMEAMgAPwMEAMgK0TAPBAIAAjAJAwcAKAEAAATQMA0G
CSqGSIb3DQEBCwUAA4IBAQAq1CCebGM9sy1+9gyx+MgYj6jD+R9oOex1Ai4gZh31
hdvJ/cx51Z5f0cqcDcwKFTxDwYUQPuXUIIomOYFXGangYfFlOAoKi4/0213WhGT9
mHyS4DAvyEJCwL3l7SiH5zAFj+K5Jfh5RmwSEY6OUpQjYkolR9HatlayI9VjDGMu
yV25NGSaYCDm4gFleTWmQYUiNqiKvQr1j5qYfiKZKwRs4TPbiPdmd1KjUC1mkp83
H/7Seok9V7SCOB7bKi1EG56LKFpnAOwKJj4mTwoJnLHaoyHBx99ttnr+eJwkq7Mh
Ldv9y8W2JmPGDzZaF7WbTw/G0kuBXNcJXwgOvdhHDyiP
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org