Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7aadbaa9-b09a-4e7e-b76d-22821c747363/d7e47bfffdd3a04bb00e484b786a797c8d255fed.roa
File: d7e47bfffdd3a04bb00e484b786a797c8d255fed.roa (raw, json)
Hash identifier: jGOgARfQpqzkRCn/KD8dAHQk2LxaeQOPPgyF7kArOJg=
Subject key identifier: E6:24:31:E0:91:7C:F3:D3:B5:89:8B:C7:0B:85:5E:91:4A:26:FC:A0
Certificate issuer: /CN=bc05f3e5965615da271682162ecc883c90349479
Certificate serial: 28674E
Authority key identifier: FD:0A:D3:7E:79:7E:E9:D9:D7:5A:1A:78:EB:83:95:1B:82:DD:47:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc05f3e5965615da271682162ecc883c90349479.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7aadbaa9-b09a-4e7e-b76d-22821c747363/d7e47bfffdd3a04bb00e484b786a797c8d255fed.roa
Signing time: Fri 15 Mar 2024 23:54:23 +0000
ROA not before: Fri 15 Mar 2024 23:54:23 +0000
ROA not after: Sun 15 Mar 2026 23:54:23 +0000
asID: 265741
IP address blocks: 128.201.80.0/22 maxlen: 22
128.201.80.0/24 maxlen: 24
128.201.81.0/24 maxlen: 24
128.201.82.0/24 maxlen: 24
128.201.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2647886 (0x28674e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc05f3e5965615da271682162ecc883c90349479
Validity
Not Before: Mar 15 23:54:23 2024 GMT
Not After : Mar 15 23:54:23 2026 GMT
Subject: CN=d7e47bfffdd3a04bb00e484b786a797c8d255fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:26:a0:52:6a:04:eb:6b:3b:b3:a4:ab:59:
06:d6:f2:fb:2f:15:31:ae:ac:1c:43:e0:65:fb:61:
db:0e:a9:b0:05:c1:ac:81:59:89:7e:9a:cc:41:fa:
67:da:b0:a3:15:c9:b3:c9:c0:a5:35:16:ca:28:56:
de:82:d3:90:b6:ad:2b:89:0f:25:47:78:18:72:11:
9c:60:2d:ee:d8:6a:cb:a7:ef:86:4a:17:1a:38:66:
9e:55:61:a1:50:d8:13:8c:52:62:18:50:a1:3b:48:
9f:4f:1c:07:04:a9:94:87:67:34:fc:aa:89:03:53:
04:b3:3a:79:bc:0e:ac:8a:bf:df:d4:2f:4b:27:73:
3a:b2:ec:c0:67:41:a6:89:56:13:d3:59:88:b0:c3:
dd:36:f9:41:a4:96:9a:0e:1b:72:a2:90:29:91:c9:
bc:4a:2d:8e:b3:ea:7c:e2:6f:f1:19:40:58:e9:71:
79:5a:96:a1:82:48:52:50:24:df:ef:d1:79:b0:7e:
96:22:3f:9d:04:02:a3:cb:cd:8e:05:1d:2d:b2:c8:
9e:b9:a9:8b:34:a1:b9:90:95:85:3e:e1:e4:28:a4:
f0:5b:de:c8:e6:e3:23:33:2b:c4:1e:62:d9:66:58:
6f:03:c6:4a:e6:f7:da:d8:4d:98:e2:45:df:21:06:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:24:31:E0:91:7C:F3:D3:B5:89:8B:C7:0B:85:5E:91:4A:26:FC:A0
X509v3 Authority Key Identifier:
keyid:FD:0A:D3:7E:79:7E:E9:D9:D7:5A:1A:78:EB:83:95:1B:82:DD:47:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc05f3e5965615da271682162ecc883c90349479.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7aadbaa9-b09a-4e7e-b76d-22821c747363/d7e47bfffdd3a04bb00e484b786a797c8d255fed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7aadbaa9-b09a-4e7e-b76d-22821c747363/bc05f3e5965615da271682162ecc883c90349479.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.80.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:f7:8d:d5:b7:b1:01:c9:4b:cd:41:d6:ab:3d:20:25:e3:f0:
12:8a:67:ac:c9:2b:21:3f:2a:32:f2:4d:ef:04:94:d1:e7:1d:
2a:1b:22:b0:f3:a8:05:ac:40:1e:81:a5:6f:9c:3b:2b:1b:5d:
ff:b0:b5:5d:e6:45:66:0f:18:c0:82:a0:27:c4:db:cb:82:47:
a8:fc:c7:11:55:05:00:06:17:fb:1f:4a:c4:5b:f2:7d:23:ed:
a4:dd:8f:37:2f:c7:da:72:8b:19:04:ec:ae:98:88:e8:6d:75:
e2:e8:22:1d:f3:6d:05:6c:40:9b:99:8b:bb:4b:fa:3d:7a:3b:
18:86:c5:b9:73:be:7a:b7:21:26:6c:43:c0:e1:ba:d4:3a:e5:
ff:c6:6c:d8:5d:39:ae:1a:50:37:ce:c6:6d:17:9d:f7:38:dc:
0c:9a:93:a6:58:f3:d4:49:4a:1c:e5:af:b1:29:af:ab:3b:35:
2a:53:88:6a:5c:40:55:c8:cb:33:dc:9f:f0:47:70:ed:f3:e3:
df:8d:2f:b0:92:3a:49:7d:d5:cd:01:14:46:5e:95:42:54:d8:
b2:fb:86:ef:12:09:c9:67:04:c6:9d:ed:12:8a:0d:34:88:22:
bb:b8:cf:93:53:51:8a:d2:05:c0:d0:7d:7c:ea:50:07:0e:76:
f6:4a:14:18
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKGdOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJj
MDVmM2U1OTY1NjE1ZGEyNzE2ODIxNjJlY2M4ODNjOTAzNDk0NzkwHhcNMjQwMzE1
MjM1NDIzWhcNMjYwMzE1MjM1NDIzWjAzMTEwLwYDVQQDEyhkN2U0N2JmZmZkZDNh
MDRiYjAwZTQ4NGI3ODZhNzk3YzhkMjU1ZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAy2MmoFJqBOtrO7Okq1kG1vL7LxUxrqwcQ+Bl+2HbDqmwBcGs
gVmJfprMQfpn2rCjFcmzycClNRbKKFbegtOQtq0riQ8lR3gYchGcYC3u2GrLp++G
ShcaOGaeVWGhUNgTjFJiGFChO0ifTxwHBKmUh2c0/KqJA1MEszp5vA6sir/f1C9L
J3M6suzAZ0GmiVYT01mIsMPdNvlBpJaaDhtyopApkcm8Si2Os+p84m/xGUBY6XF5
WpahgkhSUCTf79F5sH6WIj+dBAKjy82OBR0tssieuamLNKG5kJWFPuHkKKTwW97I
5uMjMyvEHmLZZlhvA8ZK5vfa2E2Y4kXfIQYNuQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOYkMeCRfPPTtYmLxwuFXpFKJvygMB8GA1UdIwQYMBaAFP0K0355funZ11oa
eOuDlRuC3Ue5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmMwNWYz
ZTU5NjU2MTVkYTI3MTY4MjE2MmVjYzg4M2M5MDM0OTQ3OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2FhZGJhYTktYjA5YS00ZTdlLWI3NmQtMjI4MjFj
NzQ3MzYzL2Q3ZTQ3YmZmZmRkM2EwNGJiMDBlNDg0Yjc4NmE3OTdjOGQyNTVmZWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83YWFkYmFhOS1iMDlhLTRlN2UtYjc2ZC0yMjgy
MWM3NDczNjMvYmMwNWYzZTU5NjU2MTVkYTI3MTY4MjE2MmVjYzg4M2M5MDM0OTQ3
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAoDJUDANBgkqhkiG9w0BAQsFAAOCAQEAGveN1bexAclLzUHW
qz0gJePwEopnrMkrIT8qMvJN7wSU0ecdKhsisPOoBaxAHoGlb5w7Kxtd/7C1XeZF
Zg8YwIKgJ8Tby4JHqPzHEVUFAAYX+x9KxFvyfSPtpN2PNy/H2nKLGQTsrpiI6G11
4ugiHfNtBWxAm5mLu0v6PXo7GIbFuXO+erchJmxDwOG61Drl/8Zs2F05rhpQN87G
bRed9zjcDJqTpljz1ElKHOWvsSmvqzs1KlOIalxAVcjLM9yf8Edw7fPj340vsJI6
SX3VzQEURl6VQlTYsvuG7xIJyWcExp3tEooNNIgiu7jPk1NRitIFwNB9fOpQBw52
9koUGA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org