Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/2969f1e8fed991b4166d177f983a0817d13f50b5.roa
File: 2969f1e8fed991b4166d177f983a0817d13f50b5.roa (raw, json)
Hash identifier: 92sb7RkJef8UWyB6nWCRAuz+ej8O21ipuRNnyADsTrU=
Subject key identifier: 17:5A:B2:F3:8D:FA:87:1E:34:01:8C:F4:54:51:97:C0:78:79:89:FA
Certificate issuer: /CN=1b429c72865e191f13438ce54026b95b47e06113
Certificate serial: 083803
Authority key identifier: 62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/2969f1e8fed991b4166d177f983a0817d13f50b5.roa
Signing time: Tue 05 Sep 2023 22:31:50 +0000
ROA not before: Mon 04 Sep 2023 22:31:50 +0000
ROA not after: Fri 05 Sep 2025 22:31:50 +0000
asID: 28415
IP address blocks: 189.201.224.0/24 maxlen: 24
189.201.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538627 (0x83803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b429c72865e191f13438ce54026b95b47e06113
Validity
Not Before: Sep 4 22:31:50 2023 GMT
Not After : Sep 5 22:31:50 2025 GMT
Subject: CN=2969f1e8fed991b4166d177f983a0817d13f50b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:16:40:97:c2:24:88:1a:52:54:cd:c9:30:
ad:90:f2:2e:79:86:73:37:23:b8:c9:09:91:2c:04:
9f:65:dd:0c:be:63:cc:dd:78:fc:ce:42:a9:f6:b8:
3f:7e:c3:f8:f5:6d:ea:cd:33:78:a2:60:b7:92:d3:
3a:1c:11:2f:89:2d:93:09:44:42:e7:ba:86:c6:6b:
9a:f2:f0:6d:ab:45:11:70:48:31:8b:a3:fb:b9:8c:
50:d6:70:8e:67:ad:85:6d:d9:d2:f8:ad:67:1f:de:
2b:f2:26:4f:ff:d9:bd:cd:c5:cc:4e:dd:1b:76:3c:
0a:af:43:33:e1:8c:d1:6f:2c:37:b9:a6:46:7a:74:
2a:9f:18:09:7b:da:93:71:76:9c:7d:84:88:a9:d4:
b7:8a:75:86:d3:c3:54:4c:26:54:0a:7b:e7:0d:a7:
86:75:26:c9:8c:5d:2b:2a:ce:5d:de:29:c3:81:a2:
93:c1:c1:cb:f8:b1:1d:ab:4d:9e:30:a1:84:b9:00:
2a:76:a6:c6:51:93:3c:ea:d0:3a:6b:75:d8:2e:fc:
ac:7e:73:51:af:77:60:3b:5b:48:a1:29:52:72:d3:
3b:21:a3:dd:3a:34:dc:35:f9:58:be:66:56:35:ae:
94:f7:6e:44:66:1f:4f:2d:b1:e6:d3:ce:fe:77:b9:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5A:B2:F3:8D:FA:87:1E:34:01:8C:F4:54:51:97:C0:78:79:89:FA
X509v3 Authority Key Identifier:
keyid:62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/2969f1e8fed991b4166d177f983a0817d13f50b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/1b429c72865e191f13438ce54026b95b47e06113.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.201.224.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:4e:03:3e:a4:8f:12:af:97:0a:3a:1e:5c:57:af:c8:d9:5d:
1d:eb:83:8e:ef:9d:5d:d1:1a:fc:99:88:1d:b8:39:d8:e0:b0:
60:b8:87:39:13:06:c4:f5:70:b4:c5:52:c9:02:02:e0:7f:e2:
ab:5a:0b:d9:fc:d8:ba:d2:1e:54:60:36:89:97:82:e8:96:da:
54:2d:9d:9a:82:84:ac:31:cd:0e:02:32:77:14:17:1d:94:55:
f7:b1:a2:0c:e9:b5:3d:11:b4:58:68:7d:d1:21:5d:f1:d1:4b:
ad:67:7d:d8:93:f7:e9:da:60:5e:91:49:81:66:28:33:85:51:
0c:91:b7:14:57:dc:38:e5:c3:66:70:05:1b:f3:ee:c1:8b:db:
43:8f:92:4a:ab:ff:d4:68:40:54:92:50:46:48:9c:29:54:57:
cc:dd:77:ae:8e:b0:87:63:c6:1f:01:55:61:b1:17:cc:57:ef:
01:7c:ea:e4:66:d6:9d:62:26:81:e7:d8:b6:49:af:0c:96:07:
0b:2e:8f:d6:ac:87:69:00:8b:7e:0c:44:c6:57:89:81:45:11:
3d:6c:3d:92:ec:e3:64:ae:ec:a6:59:3c:26:2d:36:89:a5:8f:
d4:50:1b:d0:fc:9c:6f:25:71:14:7e:70:1f:38:f6:b8:81:eb:
56:ed:cd:7c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCDgDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFi
NDI5YzcyODY1ZTE5MWYxMzQzOGNlNTQwMjZiOTViNDdlMDYxMTMwHhcNMjMwOTA0
MjIzMTUwWhcNMjUwOTA1MjIzMTUwWjAzMTEwLwYDVQQDEygyOTY5ZjFlOGZlZDk5
MWI0MTY2ZDE3N2Y5ODNhMDgxN2QxM2Y1MGI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl14WQJfCJIgaUlTNyTCtkPIueYZzNyO4yQmRLASfZd0MvmPM
3Xj8zkKp9rg/fsP49W3qzTN4omC3ktM6HBEviS2TCURC57qGxmua8vBtq0URcEgx
i6P7uYxQ1nCOZ62FbdnS+K1nH94r8iZP/9m9zcXMTt0bdjwKr0Mz4YzRbyw3uaZG
enQqnxgJe9qTcXacfYSIqdS3inWG08NUTCZUCnvnDaeGdSbJjF0rKs5d3inDgaKT
wcHL+LEdq02eMKGEuQAqdqbGUZM86tA6a3XYLvysfnNRr3dgO1tIoSlSctM7IaPd
OjTcNflYvmZWNa6U925EZh9PLbHm087+d7nXgwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBdasvON+oceNAGM9FRRl8B4eYn6MB8GA1UdIwQYMBaAFGJYm8+XuBSafNRs
fZpkZycbWe+CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWI0Mjlj
NzI4NjVlMTkxZjEzNDM4Y2U1NDAyNmI5NWI0N2UwNjExMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWE4MmVlM2QtYzc1Ni00YTVjLWEzNjctOTNlMjA1
ZTMzNjQ5LzI5NjlmMWU4ZmVkOTkxYjQxNjZkMTc3Zjk4M2EwODE3ZDEzZjUwYjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YTgyZWUzZC1jNzU2LTRhNWMtYTM2Ny05M2Uy
MDVlMzM2NDkvMWI0MjljNzI4NjVlMTkxZjEzNDM4Y2U1NDAyNmI5NWI0N2UwNjEx
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAb3J4DANBgkqhkiG9w0BAQsFAAOCAQEAX04DPqSPEq+XCjoe
XFevyNldHeuDju+dXdEa/JmIHbg52OCwYLiHORMGxPVwtMVSyQIC4H/iq1oL2fzY
utIeVGA2iZeC6JbaVC2dmoKErDHNDgIydxQXHZRV97GiDOm1PRG0WGh90SFd8dFL
rWd92JP36dpgXpFJgWYoM4VRDJG3FFfcOOXDZnAFG/PuwYvbQ4+SSqv/1GhAVJJQ
RkicKVRXzN13ro6wh2PGHwFVYbEXzFfvAXzq5GbWnWImgefYtkmvDJYHCy6P1qyH
aQCLfgxExleJgUURPWw9kuzjZK7splk8Ji02iaWP1FAb0PycbyVxFH5wHzj2uIHr
Vu3NfA==
-----END CERTIFICATE-----
Generated at Sat Nov 25 17:41:05 2023 by rpki-client on console-ams.rpki-client.org