Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/803bafefd5522fe041376f428b88dc9b340062eb.roa
File: 803bafefd5522fe041376f428b88dc9b340062eb.roa (raw, json)
Hash identifier: YIe87+vWOud+fBzpqUlLNL+4HqXvt1ceBtr1v6+yIlc=
Subject key identifier: B1:90:FB:17:50:2B:88:22:0D:EE:70:0A:26:05:CA:1E:90:8F:69:99
Certificate issuer: /CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
Certificate serial: 05A2B6
Authority key identifier: 5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/803bafefd5522fe041376f428b88dc9b340062eb.roa
Signing time: Fri 23 Feb 2024 09:59:02 +0000
ROA not before: Fri 23 Feb 2024 09:59:02 +0000
ROA not after: Mon 23 Feb 2026 09:59:02 +0000
asID: 13999
IP address blocks: 201.159.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369334 (0x5a2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
Validity
Not Before: Feb 23 09:59:02 2024 GMT
Not After : Feb 23 09:59:02 2026 GMT
Subject: CN=803bafefd5522fe041376f428b88dc9b340062eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1c:13:e9:98:ef:fb:b9:ad:f8:28:35:db:6c:
c6:bb:10:07:e3:76:77:04:62:b6:da:1e:73:e7:24:
d2:77:00:3b:4a:d4:9c:a0:01:9d:8d:88:45:6f:64:
75:ad:f8:b3:51:ff:c6:dc:4a:0e:d4:6f:25:d9:87:
e2:86:46:8b:d2:4b:66:a7:4d:c1:f8:6e:7a:5e:47:
9a:0c:27:ee:b4:b8:8e:dc:f9:8a:6a:f5:02:5a:0a:
48:71:7b:c6:da:c7:09:3a:d9:f0:4f:60:c4:b5:0a:
e1:f2:16:52:40:34:a5:55:17:fd:83:6d:80:82:d9:
bd:23:e1:06:83:aa:b0:36:c5:67:4c:3a:e8:f5:43:
a3:36:2b:cb:08:61:40:d4:fa:b3:6c:d9:2e:bb:eb:
c8:d5:f7:b7:85:69:c9:88:1c:99:a8:9c:55:d6:24:
f3:3b:05:43:81:e4:49:0e:7d:c1:05:35:54:eb:35:
fc:0d:48:6b:35:f8:a4:ea:90:90:6c:c9:5d:00:0c:
70:7f:18:cb:72:de:78:88:cf:4a:5f:4e:a4:57:83:
df:16:c0:11:60:b7:e3:88:94:2e:24:f3:d7:c2:d7:
15:9f:cb:28:df:85:7c:9a:9c:59:8a:f9:e1:d1:d4:
9c:1e:ba:85:9d:34:57:da:a2:59:62:d1:e8:29:81:
81:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:90:FB:17:50:2B:88:22:0D:EE:70:0A:26:05:CA:1E:90:8F:69:99
X509v3 Authority Key Identifier:
keyid:5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/803bafefd5522fe041376f428b88dc9b340062eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.200.0/21
Signature Algorithm: sha256WithRSAEncryption
12:16:a1:16:1e:e7:46:b8:e8:ae:36:ed:a2:2d:84:e8:da:0b:
36:6a:65:70:09:5b:96:a5:8c:52:c7:7a:f0:6f:8e:bf:9d:c3:
87:23:44:93:ab:31:21:f2:2b:05:c7:10:99:e5:fe:a5:ad:c4:
76:d1:8e:31:6c:56:97:a8:bc:89:04:23:65:2c:14:fe:44:46:
08:36:93:27:9f:ad:e4:70:45:9b:29:c0:ac:c0:14:9a:16:91:
cc:e7:03:50:84:32:94:0b:e7:57:1c:d1:2f:18:bf:a6:f9:ef:
8a:e0:ef:07:55:08:d2:92:7b:df:38:cd:e4:50:8b:a8:e4:48:
a5:f4:f8:ca:c8:93:5e:02:ff:8a:5a:31:90:43:81:14:d1:ca:
2f:22:a1:77:a7:4b:9c:8a:67:f1:d8:d8:45:26:42:77:42:02:
fc:24:aa:48:11:ca:c7:c6:e7:32:a4:0c:d5:74:82:c8:57:c1:
ea:d6:7c:6a:1d:d5:42:50:38:91:f1:95:9d:99:cc:da:19:0b:
32:ec:2f:e6:3e:ae:37:20:4d:8f:1a:8b:0a:86:fe:6e:48:93:
c1:54:cc:44:24:db:46:11:c9:23:64:e2:16:32:7b:58:fa:17:
a4:80:53:23:e6:23:1c:95:6a:f3:96:d1:03:7e:b9:ca:1b:29:
ad:1d:8b:3b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBaK2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRi
YTVmOGJmNGI5ZTljZTk4NzFmMWQwNDkwNWYyOTY3NmYxYWNhZjcwHhcNMjQwMjIz
MDk1OTAyWhcNMjYwMjIzMDk1OTAyWjAzMTEwLwYDVQQDEyg4MDNiYWZlZmQ1NTIy
ZmUwNDEzNzZmNDI4Yjg4ZGM5YjM0MDA2MmViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjhwT6Zjv+7mt+Cg122zGuxAH43Z3BGK22h5z5yTSdwA7StSc
oAGdjYhFb2R1rfizUf/G3EoO1G8l2YfihkaL0ktmp03B+G56XkeaDCfutLiO3PmK
avUCWgpIcXvG2scJOtnwT2DEtQrh8hZSQDSlVRf9g22Agtm9I+EGg6qwNsVnTDro
9UOjNivLCGFA1PqzbNkuu+vI1fe3hWnJiByZqJxV1iTzOwVDgeRJDn3BBTVU6zX8
DUhrNfik6pCQbMldAAxwfxjLct54iM9KX06kV4PfFsARYLfjiJQuJPPXwtcVn8so
34V8mpxZivnh0dScHrqFnTRX2qJZYtHoKYGB6QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLGQ+xdQK4giDe5wCiYFyh6Qj2mZMB8GA1UdIwQYMBaAFFsK6yPWxcEFCAVo
JsQnjdmR6jvYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGJhNWY4
YmY0YjllOWNlOTg3MWYxZDA0OTA1ZjI5Njc2ZjFhY2FmNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQwMDQzMmQtOTA0MC00ZGQ2LWE2YTItZDA2OTY2
YWY1ZjJiLzgwM2JhZmVmZDU1MjJmZTA0MTM3NmY0MjhiODhkYzliMzQwMDYyZWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDAwNDMyZC05MDQwLTRkZDYtYTZhMi1kMDY5
NjZhZjVmMmIvNGJhNWY4YmY0YjllOWNlOTg3MWYxZDA0OTA1ZjI5Njc2ZjFhY2Fm
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA8mfyDANBgkqhkiG9w0BAQsFAAOCAQEAEhahFh7nRrjorjbt
oi2E6NoLNmplcAlblqWMUsd68G+Ov53DhyNEk6sxIfIrBccQmeX+pa3EdtGOMWxW
l6i8iQQjZSwU/kRGCDaTJ5+t5HBFmynArMAUmhaRzOcDUIQylAvnVxzRLxi/pvnv
iuDvB1UI0pJ73zjN5FCLqORIpfT4ysiTXgL/iloxkEOBFNHKLyKhd6dLnIpn8djY
RSZCd0IC/CSqSBHKx8bnMqQM1XSCyFfB6tZ8ah3VQlA4kfGVnZnM2hkLMuwv5j6u
NyBNjxqLCob+bkiTwVTMRCTbRhHJI2TiFjJ7WPoXpIBTI+YjHJVq85bRA365yhsp
rR2LOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org