Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/a367252befcf88da0e045101baaa889524d305f1.roa
File: a367252befcf88da0e045101baaa889524d305f1.roa (raw, json)
Hash identifier: jLsPCxALancILE+fne/pUX37QCnIKNdRxKUXuCMbhDc=
Subject key identifier: 94:58:63:8A:2C:18:01:C7:D5:F8:01:44:FF:9C:BB:3A:A9:71:FF:A1
Certificate issuer: /CN=363d27b2e0e1ef390647383d7ba029d58848034b
Certificate serial: 257F8B
Authority key identifier: C3:6E:4D:A2:77:1D:D4:FE:C0:0B:E6:E9:78:C2:1D:B4:0C:6B:97:BA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/363d27b2e0e1ef390647383d7ba029d58848034b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/a367252befcf88da0e045101baaa889524d305f1.roa
Signing time: Wed 27 Dec 2023 22:08:25 +0000
ROA not before: Wed 27 Dec 2023 22:08:25 +0000
ROA not after: Sat 27 Dec 2025 22:08:25 +0000
asID: 264825
IP address blocks: 27.50.12.0/22 maxlen: 24
59.153.44.0/22 maxlen: 24
210.211.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2457483 (0x257f8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363d27b2e0e1ef390647383d7ba029d58848034b
Validity
Not Before: Dec 27 22:08:25 2023 GMT
Not After : Dec 27 22:08:25 2025 GMT
Subject: CN=a367252befcf88da0e045101baaa889524d305f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:13:ff:c9:66:aa:45:9c:4b:90:3c:34:e1:88:
7f:09:bd:dd:a0:c0:07:42:b6:a9:89:34:5d:6b:5a:
d3:79:8b:3f:aa:48:44:b5:ef:c4:2d:19:cf:4d:82:
0d:12:b7:62:dd:bf:96:21:9b:ff:9f:0d:d6:42:3c:
3e:21:00:b8:cf:ef:90:8c:e9:33:61:b1:8f:b1:c5:
3a:10:e6:e2:9a:79:e9:3e:ea:6c:ec:f0:f1:07:c9:
38:b8:70:34:3b:f4:d0:a0:80:d7:30:3e:b3:7f:85:
0f:90:91:ff:c7:16:d1:6e:de:8b:c7:c9:06:bb:3a:
4f:ee:9f:ec:59:99:6f:75:5b:b8:67:8c:98:ba:0a:
a7:07:6f:53:3f:fd:38:51:23:78:8e:2b:ef:0f:6e:
77:cf:4f:44:6c:08:c0:29:e7:cf:fa:23:d9:c4:de:
9e:60:eb:fc:22:34:b5:2c:62:a9:e0:65:af:2b:fa:
ef:0f:89:c5:23:18:c6:a8:70:4f:f2:67:d0:f6:f3:
5c:b3:62:99:4d:f0:2a:71:57:6a:23:0e:00:af:e3:
95:74:d3:46:01:44:66:4e:3c:c4:1f:a1:3d:18:76:
97:fe:cf:42:42:5d:c3:8b:da:d3:f7:33:db:46:9b:
c5:8b:37:c0:ec:39:22:0a:16:8b:db:57:55:9a:af:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:58:63:8A:2C:18:01:C7:D5:F8:01:44:FF:9C:BB:3A:A9:71:FF:A1
X509v3 Authority Key Identifier:
keyid:C3:6E:4D:A2:77:1D:D4:FE:C0:0B:E6:E9:78:C2:1D:B4:0C:6B:97:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/363d27b2e0e1ef390647383d7ba029d58848034b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/a367252befcf88da0e045101baaa889524d305f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/363d27b2e0e1ef390647383d7ba029d58848034b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.50.12.0/22
59.153.44.0/22
210.211.56.0/21
Signature Algorithm: sha256WithRSAEncryption
56:1b:c7:71:2a:0f:b5:cb:ac:71:40:a2:d0:58:6b:bf:2a:a2:
32:cf:36:bf:5b:6c:a0:0a:ae:9f:3a:09:0b:00:74:55:4a:8a:
87:a2:03:40:b6:e0:17:b7:14:f0:12:d7:24:04:b8:ca:90:f2:
e4:f2:e0:1e:1a:b7:1f:2c:a7:ef:dc:b1:90:02:71:fd:e3:92:
fb:d2:8e:00:ce:b8:25:ec:d6:18:67:cb:fa:47:0e:7b:31:c0:
94:f2:77:2e:96:d4:2d:fc:8c:00:68:f9:df:56:70:65:bb:40:
3b:06:86:b2:dc:cd:81:78:1a:9f:aa:b7:b8:30:e7:6d:a8:d3:
2b:a3:22:ae:24:56:13:ea:e6:24:40:71:ba:47:c6:b2:67:da:
85:b3:85:fc:7e:51:d2:f0:6e:49:8f:f5:8b:74:44:21:f9:ce:
c1:0b:6c:1c:da:f9:3e:70:87:22:d8:a2:28:f4:d1:c6:f1:db:
d2:35:1d:1c:44:ac:24:53:c5:50:88:ff:bf:dd:3d:07:45:f2:
0a:8a:03:1e:06:a2:85:a8:ec:d9:a9:c6:69:e1:36:89:cb:37:
d1:ae:70:57:25:96:84:dc:3e:e5:38:43:34:d3:09:49:c9:2f:
d9:4d:7f:56:e3:1d:22:64:0b:b5:e1:20:4e:7f:93:85:f7:1c:
25:5e:54:a6
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDJX+LMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM2
M2QyN2IyZTBlMWVmMzkwNjQ3MzgzZDdiYTAyOWQ1ODg0ODAzNGIwHhcNMjMxMjI3
MjIwODI1WhcNMjUxMjI3MjIwODI1WjAzMTEwLwYDVQQDEyhhMzY3MjUyYmVmY2Y4
OGRhMGUwNDUxMDFiYWFhODg5NTI0ZDMwNWYxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjRP/yWaqRZxLkDw04Yh/Cb3doMAHQrapiTRda1rTeYs/qkhE
te/ELRnPTYINErdi3b+WIZv/nw3WQjw+IQC4z++QjOkzYbGPscU6EObimnnpPups
7PDxB8k4uHA0O/TQoIDXMD6zf4UPkJH/xxbRbt6Lx8kGuzpP7p/sWZlvdVu4Z4yY
ugqnB29TP/04USN4jivvD253z09EbAjAKefP+iPZxN6eYOv8IjS1LGKp4GWvK/rv
D4nFIxjGqHBP8mfQ9vNcs2KZTfAqcVdqIw4Ar+OVdNNGAURmTjzEH6E9GHaX/s9C
Ql3Di9rT9zPbRpvFizfA7DkiChaL21dVmq8EdQIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFJRYY4osGAHH1fgBRP+cuzqpcf+hMB8GA1UdIwQYMBaAFMNuTaJ3HdT+wAvm
6XjCHbQMa5e6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzYzZDI3
YjJlMGUxZWYzOTA2NDczODNkN2JhMDI5ZDU4ODQ4MDM0Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2RkNWFlNjItMjRhZC00Mjc2LWJlNWMtZTU0MTBi
MWQ0MmQyL2EzNjcyNTJiZWZjZjg4ZGEwZTA0NTEwMWJhYWE4ODk1MjRkMzA1ZjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZGQ1YWU2Mi0yNGFkLTQyNzYtYmU1Yy1lNTQx
MGIxZDQyZDIvMzYzZDI3YjJlMGUxZWYzOTA2NDczODNkN2JhMDI5ZDU4ODQ4MDM0
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAhsyDAMEAjuZLAMEA9LTODANBgkqhkiG9w0BAQsFAAOCAQEA
VhvHcSoPtcuscUCi0FhrvyqiMs82v1tsoAqunzoJCwB0VUqKh6IDQLbgF7cU8BLX
JAS4ypDy5PLgHhq3Hyyn79yxkAJx/eOS+9KOAM64JezWGGfL+kcOezHAlPJ3LpbU
LfyMAGj531ZwZbtAOwaGstzNgXgan6q3uDDnbajTK6MiriRWE+rmJEBxukfGsmfa
hbOF/H5R0vBuSY/1i3REIfnOwQtsHNr5PnCHItiiKPTRxvHb0jUdHESsJFPFUIj/
v909B0XyCooDHgaihajs2anGaeE2ics30a5wVyWWhNw+5ThDNNMJSckv2U1/VuMd
ImQLteEgTn+ThfccJV5Upg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org