Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/25e288e6e4d201a777e6f0320f3b0eec87569ed4.roa
File: 25e288e6e4d201a777e6f0320f3b0eec87569ed4.roa (raw, json)
Hash identifier: /aazan1dpjE5FjqcXmFUyTZTYuIFgLaLWR3Y7l2/DXU=
Subject key identifier: CE:CE:C6:31:A4:06:FE:CC:92:BE:B1:83:A3:43:9F:E5:9C:31:E7:4B
Certificate issuer: /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial: 232898
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/25e288e6e4d201a777e6f0320f3b0eec87569ed4.roa
Signing time: Fri 28 Apr 2023 17:52:22 +0000
ROA not before: Thu 27 Apr 2023 17:52:22 +0000
ROA not after: Mon 28 Apr 2025 17:52:22 +0000
asID: 52323
IP address blocks: 181.16.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2304152 (0x232898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Validity
Not Before: Apr 27 17:52:22 2023 GMT
Not After : Apr 28 17:52:22 2025 GMT
Subject: CN=25e288e6e4d201a777e6f0320f3b0eec87569ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:9e:d8:22:77:52:15:e7:b0:a9:47:14:c6:
80:54:79:cb:9a:79:e1:da:c7:5c:28:01:c7:e5:59:
f6:2a:78:ed:6c:98:df:6f:8c:39:9d:96:15:7c:31:
5f:e7:9f:6f:67:b5:ba:02:2f:87:d2:3f:78:e0:a5:
3c:ab:59:57:c9:fc:c1:ae:50:58:00:c2:b3:52:a5:
ae:6b:84:29:38:46:89:5a:d6:e4:49:ac:43:86:92:
dc:82:c7:56:1d:0c:c3:d4:5d:94:73:b6:9c:98:fe:
a9:4c:92:df:b5:cf:db:77:17:9a:a0:76:59:0a:63:
ce:12:16:9e:24:3c:4b:23:09:78:6e:00:c8:ed:92:
ac:b3:c8:4a:f2:05:67:29:5f:59:db:08:54:20:01:
81:50:80:79:ff:53:2f:44:31:7a:46:bd:0e:2e:c5:
b2:06:98:02:86:54:e7:af:a8:78:69:c8:d5:7a:fd:
43:a9:63:6a:b5:68:8d:ac:28:09:58:de:fb:eb:39:
4a:cd:51:e4:92:cb:64:bb:eb:ef:07:aa:71:d5:4a:
60:8f:8b:8f:e7:7b:98:f7:27:2f:2e:f1:c7:7a:f0:
51:a4:d6:19:c0:64:f3:25:a4:3e:b1:dc:da:5a:3f:
eb:88:7a:ef:2e:68:f1:36:d3:ea:df:24:38:d6:a7:
f4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CE:C6:31:A4:06:FE:CC:92:BE:B1:83:A3:43:9F:E5:9C:31:E7:4B
X509v3 Authority Key Identifier:
keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/25e288e6e4d201a777e6f0320f3b0eec87569ed4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.16.171.0/24
Signature Algorithm: sha256WithRSAEncryption
77:36:81:72:58:e2:32:5c:b3:6e:a7:25:ea:f3:62:8d:71:2a:
e0:f2:23:df:19:ca:7a:50:47:cd:57:f8:fe:1f:e7:80:72:a2:
c8:59:85:1b:6c:e7:95:63:f1:67:35:7a:fb:8b:aa:4b:03:4a:
af:3c:2d:3e:c7:19:45:49:a2:53:de:58:a2:fd:16:6d:f7:04:
d7:9d:44:d2:5f:40:12:22:87:22:0e:67:a8:aa:38:e3:55:15:
61:e1:2a:4c:9d:88:d0:f7:2b:16:8c:57:29:16:26:f5:91:69:
77:55:24:c2:24:d8:c0:0e:be:a9:b5:b3:a5:45:63:22:ce:3b:
c6:fb:c1:0e:99:51:25:af:4e:c2:3d:a0:1f:9c:47:e4:14:97:
28:3a:25:99:a3:d8:72:f9:d2:9c:2d:ae:42:12:dc:cc:0a:ac:
5c:be:7d:ca:0f:77:1d:84:ac:b4:cd:27:e1:8b:12:bf:fa:53:
6d:07:f7:15:44:1a:ab:e9:9d:8a:d1:80:61:e7:26:1e:80:f8:
f8:d0:a9:42:9a:d5:f6:f6:5a:9b:69:c0:98:39:63:98:ca:55:
52:fc:3f:77:9b:15:ab:74:a3:95:c8:bc:79:b6:48:4b:e1:de:
84:0f:e5:2d:36:7c:d3:0f:6f:36:34:ed:16:c6:1a:f6:bb:11:
1d:0c:c9:90
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIyiYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjMwNDI3
MTc1MjIyWhcNMjUwNDI4MTc1MjIyWjAzMTEwLwYDVQQDEygyNWUyODhlNmU0ZDIw
MWE3NzdlNmYwMzIwZjNiMGVlYzg3NTY5ZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsVGe2CJ3UhXnsKlHFMaAVHnLmnnh2sdcKAHH5Vn2KnjtbJjf
b4w5nZYVfDFf559vZ7W6Ai+H0j944KU8q1lXyfzBrlBYAMKzUqWua4QpOEaJWtbk
SaxDhpLcgsdWHQzD1F2Uc7acmP6pTJLftc/bdxeaoHZZCmPOEhaeJDxLIwl4bgDI
7ZKss8hK8gVnKV9Z2whUIAGBUIB5/1MvRDF6Rr0OLsWyBpgChlTnr6h4acjVev1D
qWNqtWiNrCgJWN776zlKzVHkkstku+vvB6px1Upgj4uP53uY9ycvLvHHevBRpNYZ
wGTzJaQ+sdzaWj/riHrvLmjxNtPq3yQ41qf0/QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFM7OxjGkBv7Mkr6xg6NDn+WcMedLMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3LzI1ZTI4OGU2ZTRkMjAxYTc3N2U2ZjAzMjBmM2IwZWVjODc1NjllZDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQqzANBgkqhkiG9w0BAQsFAAOCAQEAdzaBcljiMlyzbqcl
6vNijXEq4PIj3xnKelBHzVf4/h/ngHKiyFmFG2znlWPxZzV6+4uqSwNKrzwtPscZ
RUmiU95Yov0WbfcE151E0l9AEiKHIg5nqKo441UVYeEqTJ2I0PcrFoxXKRYm9ZFp
d1UkwiTYwA6+qbWzpUVjIs47xvvBDplRJa9Owj2gH5xH5BSXKDolmaPYcvnSnC2u
QhLczAqsXL59yg93HYSstM0n4YsSv/pTbQf3FUQaq+mditGAYecmHoD4+NCpQprV
9vZam2nAmDljmMpVUvw/d5sVq3Sjlci8ebZIS+HehA/lLTZ80w9vNjTtFsYa9rsR
HQzJkA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org