Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/2633f242d779b23a4816ab41b3dde4efe32863c9.roa
File: 2633f242d779b23a4816ab41b3dde4efe32863c9.roa (raw, json)
Hash identifier: uqeaFR5PoSOZdi2tafFlKrjNXJxP52tmEnZLLG0DPM0=
Subject key identifier: 17:8B:DD:AB:C7:7C:C8:D9:5A:15:2C:0B:9E:0B:87:68:88:C8:1A:36
Certificate issuer: /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial: 22B10F
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/2633f242d779b23a4816ab41b3dde4efe32863c9.roa
Signing time: Fri 28 Apr 2023 17:34:47 +0000
ROA not before: Thu 27 Apr 2023 17:34:45 +0000
ROA not after: Mon 28 Apr 2025 17:34:45 +0000
asID: 28023
IP address blocks: 181.16.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2273551 (0x22b10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Validity
Not Before: Apr 27 17:34:45 2023 GMT
Not After : Apr 28 17:34:45 2025 GMT
Subject: CN=2633f242d779b23a4816ab41b3dde4efe32863c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:1e:cf:0a:3d:ce:72:bd:60:d8:c2:33:6e:
83:6f:09:74:09:64:c1:dd:6d:42:33:9d:d2:88:ac:
2d:ec:a8:c9:18:8a:51:b8:a4:62:75:9f:0e:a8:22:
a2:d6:c5:b6:c4:03:3b:4f:d5:cb:a5:60:38:76:36:
e3:70:7d:28:c4:18:eb:1f:7c:a1:f4:30:ff:9f:36:
30:15:56:50:cc:94:5b:70:63:97:1f:e9:44:dd:f6:
70:a8:12:dd:80:65:ca:6d:90:9f:65:66:9f:3b:e0:
4e:e4:44:23:99:30:19:aa:0c:46:4f:1e:bb:b2:3d:
15:d8:db:31:cf:51:69:8d:a3:ac:2d:b0:30:81:19:
27:0d:74:9a:4e:21:c4:45:88:86:3b:b4:26:fa:28:
79:7d:85:44:ec:11:38:07:56:03:dd:d2:eb:33:80:
00:33:76:1b:0e:8e:da:09:09:50:4c:ce:e1:bf:68:
d6:30:18:3f:5a:07:78:d2:cb:cf:38:8a:d8:60:15:
da:58:1b:36:d0:50:cc:05:3f:51:54:02:2d:84:2f:
24:1e:45:76:f7:b5:c3:ca:a2:5b:57:ad:8e:dc:08:
58:1d:e8:67:57:a9:dc:72:90:6f:4e:f0:d3:9d:ed:
f9:01:e2:b0:0f:bf:30:84:30:8a:07:b1:48:83:de:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8B:DD:AB:C7:7C:C8:D9:5A:15:2C:0B:9E:0B:87:68:88:C8:1A:36
X509v3 Authority Key Identifier:
keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/2633f242d779b23a4816ab41b3dde4efe32863c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.16.147.0/24
Signature Algorithm: sha256WithRSAEncryption
94:08:f0:25:7c:d1:c3:46:45:8b:7c:fb:7c:31:89:47:58:27:
49:f7:04:38:02:af:01:20:1a:fb:3f:30:ab:f5:ca:b5:45:e8:
52:cc:bc:a0:e8:5d:63:96:d7:9d:28:58:70:38:33:45:55:77:
7c:ee:63:63:7e:24:95:38:07:31:9a:12:96:25:53:92:64:db:
a9:b5:d8:44:0b:f5:5a:2a:c8:af:25:08:8d:7b:ca:b7:ef:7f:
c1:d7:6e:5e:79:d3:55:4f:81:b5:42:e8:bd:f7:ca:9d:a8:a1:
ee:26:a0:54:c4:30:c3:95:4e:ee:29:7a:57:8e:9e:cf:12:cf:
c4:01:89:9f:0b:b5:70:6c:83:dc:6b:04:22:bb:d1:d2:ba:65:
ef:38:1d:2b:1a:9e:1f:fd:e6:a8:87:51:87:cf:9d:22:c7:7c:
5f:67:40:8c:84:76:e5:45:75:8d:aa:52:41:7d:4d:cd:dc:6b:
16:07:0f:54:a1:20:28:85:5e:84:02:4c:2c:de:4f:93:03:53:
a3:67:7e:0d:47:2e:81:cb:e4:8c:48:b4:ac:85:0a:ae:f1:61:
8a:04:5b:32:0e:9a:79:2a:90:59:09:ea:41:1a:c1:2e:71:25:
7e:af:2d:22:07:ae:a4:7b:1f:8b:69:f3:7b:1f:fc:96:4b:92:
69:2e:ee:9c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIrEPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjMwNDI3
MTczNDQ1WhcNMjUwNDI4MTczNDQ1WjAzMTEwLwYDVQQDEygyNjMzZjI0MmQ3Nzli
MjNhNDgxNmFiNDFiM2RkZTRlZmUzMjg2M2M5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApg8ezwo9znK9YNjCM26Dbwl0CWTB3W1CM53SiKwt7KjJGIpR
uKRidZ8OqCKi1sW2xAM7T9XLpWA4djbjcH0oxBjrH3yh9DD/nzYwFVZQzJRbcGOX
H+lE3fZwqBLdgGXKbZCfZWafO+BO5EQjmTAZqgxGTx67sj0V2Nsxz1FpjaOsLbAw
gRknDXSaTiHERYiGO7Qm+ih5fYVE7BE4B1YD3dLrM4AAM3YbDo7aCQlQTM7hv2jW
MBg/Wgd40svPOIrYYBXaWBs20FDMBT9RVAIthC8kHkV297XDyqJbV62O3AhYHehn
V6nccpBvTvDTne35AeKwD78whDCKB7FIg96nUwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBeL3avHfMjZWhUsC54Lh2iIyBo2MB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3LzI2MzNmMjQyZDc3OWIyM2E0ODE2YWI0MWIzZGRlNGVmZTMyODYzYzku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQkzANBgkqhkiG9w0BAQsFAAOCAQEAlAjwJXzRw0ZFi3z7
fDGJR1gnSfcEOAKvASAa+z8wq/XKtUXoUsy8oOhdY5bXnShYcDgzRVV3fO5jY34k
lTgHMZoSliVTkmTbqbXYRAv1WirIryUIjXvKt+9/wdduXnnTVU+BtULovffKnaih
7iagVMQww5VO7il6V46ezxLPxAGJnwu1cGyD3GsEIrvR0rpl7zgdKxqeH/3mqIdR
h8+dIsd8X2dAjIR25UV1japSQX1NzdxrFgcPVKEgKIVehAJMLN5PkwNTo2d+DUcu
gcvkjEi0rIUKrvFhigRbMg6aeSqQWQnqQRrBLnElfq8tIgeupHsfi2nzex/8lkuS
aS7unA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:37:40 2025 by rpki-client