Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/671e10e82398f68d4d369f5575cb74c5f0b11dff.roa
File: 671e10e82398f68d4d369f5575cb74c5f0b11dff.roa (raw, json)
Hash identifier: Bpuq8OcCmGxCbyn+o2aon8Wg5cOvVx1Mbx/vfjZg6PE=
Subject key identifier: 63:FA:EC:19:23:6F:D4:09:63:27:2E:38:75:69:AC:B6:4B:CE:93:31
Certificate issuer: /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial: 05D459
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/671e10e82398f68d4d369f5575cb74c5f0b11dff.roa
Signing time: Tue 11 Jul 2023 12:42:33 +0000
ROA not before: Mon 10 Jul 2023 12:42:33 +0000
ROA not after: Fri 11 Jul 2025 12:42:33 +0000
asID: 16629
IP address blocks: 152.175.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382041 (0x5d459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Validity
Not Before: Jul 10 12:42:33 2023 GMT
Not After : Jul 11 12:42:33 2025 GMT
Subject: CN=671e10e82398f68d4d369f5575cb74c5f0b11dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c0:c5:5a:ec:3e:70:7d:eb:d5:f1:d5:c5:64:
47:dd:dd:d6:f4:9f:43:6d:bb:28:7d:61:eb:87:8d:
da:22:6e:27:9b:d1:26:bb:07:da:61:fc:66:ef:ab:
bf:0a:b4:be:14:86:44:64:e0:83:5d:8a:9f:32:87:
9b:c1:93:42:d0:35:65:d0:1c:63:b1:5a:de:dc:cc:
97:61:17:95:95:c2:28:03:b3:c8:0d:82:50:00:e2:
e5:91:20:7f:c4:fb:9c:f0:d8:0b:f5:04:df:49:68:
08:6f:e0:e7:1f:15:0f:45:f5:d3:5e:09:37:6d:3e:
ff:4d:02:fc:99:3f:fe:c0:c0:16:0f:15:ad:09:b8:
3c:9b:81:68:e4:a8:ac:87:43:4f:a8:7e:4c:20:91:
9a:9d:a2:1a:ad:43:b1:26:ff:bd:0b:2d:c1:be:22:
03:52:ea:39:3a:2d:15:6e:b2:89:98:8c:39:f1:5c:
cc:08:b6:77:fa:75:7d:26:f9:16:4f:4a:b8:1b:77:
38:2c:85:47:22:e3:3a:ad:80:b0:4f:cd:3e:7f:8f:
d3:2f:22:19:71:ea:57:f4:50:9b:a8:f5:5c:4e:1b:
d7:29:88:d7:64:06:15:98:7f:f0:6b:fa:75:97:20:
a3:c9:a6:c6:e7:b0:65:f1:3d:d1:70:e3:dc:83:a6:
f4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FA:EC:19:23:6F:D4:09:63:27:2E:38:75:69:AC:B6:4B:CE:93:31
X509v3 Authority Key Identifier:
keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/671e10e82398f68d4d369f5575cb74c5f0b11dff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:7c:e4:30:e5:fe:72:70:c1:10:f6:e2:3a:4f:3e:7d:61:4d:
d4:b0:25:90:f5:76:68:94:a0:d8:fd:59:bc:c1:fc:85:b2:f1:
ad:f8:c2:ea:88:ae:ef:ee:24:85:ea:66:b6:e6:91:fd:31:cb:
7f:f4:74:5a:d0:9b:f1:03:50:8a:ad:83:cb:ac:b4:fc:4c:9b:
14:a6:62:72:fa:54:a2:b7:4f:d5:f1:32:09:45:b2:7a:89:4f:
25:20:38:f2:06:29:fc:9d:47:09:60:ea:b9:c4:c2:f8:30:4b:
f0:c8:e7:27:71:71:d8:41:a1:89:69:1d:04:fb:89:e7:40:f4:
02:b5:f1:fb:2b:65:7c:cc:1f:9c:d2:0c:99:3d:34:bb:0a:5e:
66:32:af:76:69:61:7c:91:c2:fe:51:5e:cc:21:65:e7:01:f0:
be:74:25:41:81:f4:36:c3:82:58:37:ef:0b:7f:67:1b:f0:7b:
80:e4:24:de:b0:7e:bd:eb:d5:70:ad:17:b5:ea:62:bf:24:05:
dd:d2:c3:71:e0:ad:25:71:8f:a0:eb:94:17:a2:82:bb:f0:70:
ce:07:f1:26:50:6e:76:b4:36:d3:bb:f6:0f:2a:01:af:e0:d6:
99:b0:16:f4:61:02:58:07:b9:19:95:dc:d5:7a:3d:aa:3b:0e:
cc:84:b4:70
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDBdRZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJj
YTI0MWE4NGMyN2JmZTM1ZTg0ZGVhNjVmNGE3ZGIwMGZhYjU1M2MwHhcNMjMwNzEw
MTI0MjMzWhcNMjUwNzExMTI0MjMzWjAzMTEwLwYDVQQDEyg2NzFlMTBlODIzOThm
NjhkNGQzNjlmNTU3NWNiNzRjNWYwYjExZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgMDFWuw+cH3r1fHVxWRH3d3W9J9DbbsofWHrh43aIm4nm9Em
uwfaYfxm76u/CrS+FIZEZOCDXYqfMoebwZNC0DVl0BxjsVre3MyXYReVlcIoA7PI
DYJQAOLlkSB/xPuc8NgL9QTfSWgIb+DnHxUPRfXTXgk3bT7/TQL8mT/+wMAWDxWt
Cbg8m4Fo5Kish0NPqH5MIJGanaIarUOxJv+9Cy3BviIDUuo5Oi0VbrKJmIw58VzM
CLZ3+nV9JvkWT0q4G3c4LIVHIuM6rYCwT80+f4/TLyIZcepX9FCbqPVcThvXKYjX
ZAYVmH/wa/p1lyCjyabG57Bl8T3RcOPcg6b0cQIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFGP67Bkjb9QJYycuOHVprLZLzpMxMB8GA1UdIwQYMBaAFPRYYPyM8OxmjBJA
t3XD4k5sNgOAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmNhMjQx
YTg0YzI3YmZlMzVlODRkZWE2NWY0YTdkYjAwZmFiNTUzYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2Q3ZGEwYzMtYzBhMC00ZGJiLWEzNTYtNTA0NDhk
NzQ5MzE3LzY3MWUxMGU4MjM5OGY2OGQ0ZDM2OWY1NTc1Y2I3NGM1ZjBiMTFkZmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZDdkYTBjMy1jMGEwLTRkYmItYTM1Ni01MDQ0
OGQ3NDkzMTcvYmNhMjQxYTg0YzI3YmZlMzVlODRkZWE2NWY0YTdkYjAwZmFiNTUz
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAJivMA0GCSqGSIb3DQEBCwUAA4IBAQB2fOQw5f5ycMEQ9uI6
Tz59YU3UsCWQ9XZolKDY/Vm8wfyFsvGt+MLqiK7v7iSF6ma25pH9Mct/9HRa0Jvx
A1CKrYPLrLT8TJsUpmJy+lSit0/V8TIJRbJ6iU8lIDjyBin8nUcJYOq5xML4MEvw
yOcncXHYQaGJaR0E+4nnQPQCtfH7K2V8zB+c0gyZPTS7Cl5mMq92aWF8kcL+UV7M
IWXnAfC+dCVBgfQ2w4JYN+8Lf2cb8HuA5CTesH6969VwrRe16mK/JAXd0sNx4K0l
cY+g65QXooK78HDOB/EmUG52tDbTu/YPKgGv4NaZsBb0YQJYB7kZldzVej2qOw7M
hLRw
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org