Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/88460c104efe8d67e22e3cced42dbfd4ec085ab3.roa
File: 88460c104efe8d67e22e3cced42dbfd4ec085ab3.roa (raw, json)
Hash identifier: W8DJUeeGUiUiWyycun3n6p92Ut34k4rdC8IF7PFtdnA=
Subject key identifier: 16:77:4A:9B:7C:E7:92:3D:8E:62:F9:68:0A:12:3E:FE:CD:CB:E9:51
Certificate issuer: /CN=bfbdd559af6aac3348d7a10caf850960a448f10d
Certificate serial: 212C67
Authority key identifier: 1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/88460c104efe8d67e22e3cced42dbfd4ec085ab3.roa
Signing time: Mon 29 May 2023 14:19:46 +0000
ROA not before: Sun 28 May 2023 14:19:46 +0000
ROA not after: Thu 29 May 2025 14:19:46 +0000
asID: 52314
IP address blocks: 200.124.176.0/21 maxlen: 24
200.14.116.0/24 maxlen: 24
2801:0:140::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174055 (0x212c67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbdd559af6aac3348d7a10caf850960a448f10d
Validity
Not Before: May 28 14:19:46 2023 GMT
Not After : May 29 14:19:46 2025 GMT
Subject: CN=88460c104efe8d67e22e3cced42dbfd4ec085ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:e4:f8:16:2a:4a:00:eb:e0:a1:46:f8:45:
4d:4c:65:2e:00:26:35:c0:18:69:b2:b4:6f:89:fe:
32:39:fb:02:2d:9d:88:fb:6f:82:e3:b5:63:bf:b9:
0d:56:97:ef:6d:d4:dc:6f:2a:02:d6:d3:20:4d:bc:
d5:68:cb:50:4e:e0:0c:bf:13:1a:8e:02:fd:3d:33:
44:80:a3:90:32:5d:2a:e3:8e:34:71:89:31:69:b9:
e7:ce:04:8b:6b:37:a3:12:ce:92:22:3c:ee:70:ce:
98:59:c9:93:6a:6b:99:bc:58:ff:3a:14:74:fb:03:
e2:da:15:b5:2f:69:3b:37:96:e9:4f:42:21:cc:95:
9c:f5:b5:26:06:57:65:88:64:82:c7:25:4a:80:9a:
9e:15:13:2f:da:d9:e3:56:3f:70:5b:a0:1e:f6:57:
6f:ce:64:46:98:3f:96:13:02:4e:60:eb:80:07:74:
4d:ab:04:d3:d1:6b:63:54:02:8c:67:61:f4:c8:dd:
28:87:7d:c9:6b:89:5f:99:f4:ac:e4:41:09:2b:90:
4c:d4:8f:ec:f3:25:e1:28:70:4f:92:b5:ad:12:bf:
f6:dc:de:25:34:d3:59:41:78:49:b4:99:b2:c1:08:
d5:78:44:77:4f:ef:3b:c2:8c:a8:47:dd:1c:d0:0f:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:77:4A:9B:7C:E7:92:3D:8E:62:F9:68:0A:12:3E:FE:CD:CB:E9:51
X509v3 Authority Key Identifier:
keyid:1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/88460c104efe8d67e22e3cced42dbfd4ec085ab3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/bfbdd559af6aac3348d7a10caf850960a448f10d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.116.0/24
200.124.176.0/21
IPv6:
2801:0:140::/48
Signature Algorithm: sha256WithRSAEncryption
44:61:cc:b5:e8:f6:e7:79:81:86:20:4d:e2:5c:98:c0:b2:e0:
6b:b5:e1:a6:9e:39:44:b2:10:5a:24:cc:b9:b1:59:04:69:8b:
38:0a:40:75:46:34:bb:50:a1:8d:b8:7e:7e:9a:a3:f3:9a:cb:
50:05:e1:7d:37:3f:a8:0e:6f:75:dc:24:20:a4:7a:0a:de:99:
78:4a:6e:49:f3:c3:b1:b7:1f:73:61:62:4e:ac:7e:ce:16:0a:
86:c8:5c:74:e6:fd:d5:51:25:f6:22:9b:b7:0e:63:94:d8:9c:
32:0d:c6:be:e5:d6:0d:49:5c:13:78:b2:56:f4:4b:a9:ff:16:
83:0c:d8:55:c8:12:bb:ba:15:68:96:1d:db:b6:47:f7:5f:f0:
14:1a:37:d6:59:b9:18:c3:ba:63:c7:91:bc:27:fc:d9:a5:60:
f4:d8:90:47:90:0c:68:bf:85:51:94:de:9f:4c:10:b3:b0:03:
19:09:ad:78:c9:93:68:fb:63:3e:3d:6e:e1:c1:7d:d1:58:3a:
af:d4:42:fd:6c:05:e0:fe:0c:82:dc:e8:92:e6:fe:14:8b:ef:
b4:ae:8a:69:58:17:b7:19:50:7b:5c:5e:22:74:bd:20:47:4c:
4e:9c:1a:d2:d9:8a:71:25:63:67:85:10:a0:0a:ea:1b:03:95:
a2:7a:b5:91
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDISxnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmRkNTU5YWY2YWFjMzM0OGQ3YTEwY2FmODUwOTYwYTQ0OGYxMGQwHhcNMjMwNTI4
MTQxOTQ2WhcNMjUwNTI5MTQxOTQ2WjAzMTEwLwYDVQQDEyg4ODQ2MGMxMDRlZmU4
ZDY3ZTIyZTNjY2VkNDJkYmZkNGVjMDg1YWIzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAktXk+BYqSgDr4KFG+EVNTGUuACY1wBhpsrRvif4yOfsCLZ2I
+2+C47Vjv7kNVpfvbdTcbyoC1tMgTbzVaMtQTuAMvxMajgL9PTNEgKOQMl0q4440
cYkxabnnzgSLazejEs6SIjzucM6YWcmTamuZvFj/OhR0+wPi2hW1L2k7N5bpT0Ih
zJWc9bUmBldliGSCxyVKgJqeFRMv2tnjVj9wW6Ae9ldvzmRGmD+WEwJOYOuAB3RN
qwTT0WtjVAKMZ2H0yN0oh33Ja4lfmfSs5EEJK5BM1I/s8yXhKHBPkrWtEr/23N4l
NNNZQXhJtJmywQjVeER3T+87woyoR90c0A/BSwIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFBZ3Spt855I9jmL5aAoSPv7Ny+lRMB8GA1UdIwQYMBaAFB0G69sZpzK7R7gp
S5aVAAtfSbLCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiZGQ1
NTlhZjZhYWMzMzQ4ZDdhMTBjYWY4NTA5NjBhNDQ4ZjEwZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWIyYzcwNjYtOTVjYS00NGNkLWI5YzgtYmQ5N2Q2
ZDcxOGFiLzg4NDYwYzEwNGVmZThkNjdlMjJlM2NjZWQ0MmRiZmQ0ZWMwODVhYjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YjJjNzA2Ni05NWNhLTQ0Y2QtYjljOC1iZDk3
ZDZkNzE4YWIvYmZiZGQ1NTlhZjZhYWMzMzQ4ZDdhMTBjYWY4NTA5NjBhNDQ4ZjEw
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwEgQCAAEwDAMEAMgOdAMEA8h8sDAPBAIAAjAJAwcAKAEAAAFAMA0GCSqGSIb3
DQEBCwUAA4IBAQBEYcy16PbneYGGIE3iXJjAsuBrteGmnjlEshBaJMy5sVkEaYs4
CkB1RjS7UKGNuH5+mqPzmstQBeF9Nz+oDm913CQgpHoK3pl4Sm5J88Oxtx9zYWJO
rH7OFgqGyFx05v3VUSX2Ipu3DmOU2JwyDca+5dYNSVwTeLJW9Eup/xaDDNhVyBK7
uhVolh3btkf3X/AUGjfWWbkYw7pjx5G8J/zZpWD02JBHkAxov4VRlN6fTBCzsAMZ
Ca14yZNo+2M+PW7hwX3RWDqv1EL9bAXg/gyC3OiS5v4Ui++0roppWBe3GVB7XF4i
dL0gR0xOnBrS2YpxJWNnhRCgCuobA5WierWR
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org