Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/d55140efa7a298949d639ff67df92777b4e28a1e.roa
File: d55140efa7a298949d639ff67df92777b4e28a1e.roa (raw, json)
Hash identifier: LEKGez1imgh3b5wqnYRHetGHX3kenkjCO4YE6Ocw52U=
Subject key identifier: 40:BC:CE:D6:AF:E2:48:08:7D:D5:8E:F7:FE:A2:D1:1A:6F:0A:43:6B
Certificate issuer: /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial: 17F96A
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/d55140efa7a298949d639ff67df92777b4e28a1e.roa
Signing time: Sat 29 Apr 2023 08:30:00 +0000
ROA not before: Fri 28 Apr 2023 08:30:00 +0000
ROA not after: Sun 27 Apr 2025 08:30:00 +0000
asID: 271809
IP address blocks: 2803:5ce0:500::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1571178 (0x17f96a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Validity
Not Before: Apr 28 08:30:00 2023 GMT
Not After : Apr 27 08:30:00 2025 GMT
Subject: CN=d55140efa7a298949d639ff67df92777b4e28a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:be:3c:84:ab:a9:5d:9f:d3:e4:0e:cf:91:
94:a1:90:d7:ed:98:03:a4:20:fe:ec:bf:85:f6:6e:
ca:14:5b:a0:cf:da:b0:70:9f:30:ed:db:2b:ea:a4:
4c:87:ed:05:10:9d:61:24:e1:36:83:9d:7d:90:98:
b8:f1:8c:cb:cd:64:67:4d:2f:32:56:11:c5:7c:e7:
44:bc:a7:72:49:b4:c6:79:a7:4d:18:94:40:cd:16:
48:d1:ca:1b:9c:4c:49:1e:73:0f:0c:bb:3d:17:70:
ff:15:aa:7d:a3:b3:b0:fb:06:97:d5:82:87:e9:51:
67:be:c7:f6:bf:f8:21:19:4d:04:08:67:b2:33:95:
53:3d:6c:15:c2:14:07:eb:5b:3e:5d:94:0d:96:a3:
1d:09:79:31:b0:53:8d:06:3b:f8:3d:57:af:d6:bc:
23:1c:82:a1:37:70:27:d4:0d:28:f9:11:cb:4b:7b:
52:cf:b2:f0:a6:8f:fc:1e:d5:69:d2:23:0b:91:03:
6b:5f:be:6e:04:ee:25:32:f2:92:51:e6:48:e0:af:
dc:9d:d3:a7:cc:71:9b:50:99:81:03:cc:eb:31:bb:
39:ba:ba:4e:d9:36:bf:9c:af:0f:b8:6f:85:f4:db:
47:1c:c5:b4:94:6b:3c:2d:28:3e:85:41:00:43:89:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BC:CE:D6:AF:E2:48:08:7D:D5:8E:F7:FE:A2:D1:1A:6F:0A:43:6B
X509v3 Authority Key Identifier:
keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/d55140efa7a298949d639ff67df92777b4e28a1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5ce0:500::/40
Signature Algorithm: sha256WithRSAEncryption
15:31:56:ce:b6:ce:d2:37:1a:6a:44:2e:ac:fe:be:39:12:48:
2f:92:7a:0d:8a:ed:f5:94:ce:83:c4:f1:08:02:c8:e2:32:31:
20:8b:21:41:9b:52:6e:29:cd:91:1e:ee:a5:81:57:b1:6b:8e:
75:3c:01:18:2c:10:5b:cb:c6:c6:04:d9:bf:8e:be:8a:37:fb:
90:c1:1f:a3:ec:11:8d:e4:c7:b0:12:fb:d2:30:ff:2c:52:f4:
ce:0f:bf:c2:56:bb:e6:3a:80:24:9b:2b:35:1d:c1:ee:ed:23:
ed:87:b2:ae:c1:b4:48:ce:c5:1f:df:7c:42:a1:2c:37:45:d7:
fe:49:74:9f:1f:a3:81:90:c2:36:ca:70:4d:33:f3:b9:46:a8:
13:ba:5b:cb:9e:d5:0f:a7:39:5d:6b:c3:ea:47:84:8e:be:f3:
ae:3b:de:ed:37:8a:86:91:de:0e:f6:ed:f6:be:b7:28:05:ca:
cd:be:44:37:be:14:d6:0b:39:69:b6:39:3b:25:15:b4:a7:81:
33:8c:89:f2:d0:65:93:48:a4:5f:25:57:c0:94:a0:87:52:39:
16:6f:0f:cf:bc:09:08:7b:d0:ed:65:28:a3:1a:0d:d3:55:20:
18:57:a4:e6:ae:b0:e5:b3:b7:2d:03:36:28:b5:8e:02:85:4d:
67:4a:18:55
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDF/lqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
YzRhOWRlOTJmMWE4ZDBkYzc3OTJkYzBiNjcxODc0MDdjY2NiMTAwHhcNMjMwNDI4
MDgzMDAwWhcNMjUwNDI3MDgzMDAwWjAzMTEwLwYDVQQDEyhkNTUxNDBlZmE3YTI5
ODk0OWQ2MzlmZjY3ZGY5Mjc3N2I0ZTI4YTFlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoFi+PISrqV2f0+QOz5GUoZDX7ZgDpCD+7L+F9m7KFFugz9qw
cJ8w7dsr6qRMh+0FEJ1hJOE2g519kJi48YzLzWRnTS8yVhHFfOdEvKdySbTGeadN
GJRAzRZI0cobnExJHnMPDLs9F3D/Fap9o7Ow+waX1YKH6VFnvsf2v/ghGU0ECGey
M5VTPWwVwhQH61s+XZQNlqMdCXkxsFONBjv4PVev1rwjHIKhN3An1A0o+RHLS3tS
z7Lwpo/8HtVp0iMLkQNrX75uBO4lMvKSUeZI4K/cndOnzHGbUJmBA8zrMbs5urpO
2Ta/nK8PuG+F9NtHHMW0lGs8LSg+hUEAQ4keNQIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFEC8ztav4kgIfdWO9/6i0RpvCkNrMB8GA1UdIwQYMBaAFDNdBm1BwI8aTT0g
dOJoaBWpacetMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmFjNGE5
ZGU5MmYxYThkMGRjNzc5MmRjMGI2NzE4NzQwN2NjY2IxMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWJiODkzOTYtOTFiYi00YmMxLTk0MTgtNGI4ZGZk
ODFiMGJlL2Q1NTE0MGVmYTdhMjk4OTQ5ZDYzOWZmNjdkZjkyNzc3YjRlMjhhMWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YmI4OTM5Ni05MWJiLTRiYzEtOTQxOC00Yjhk
ZmQ4MWIwYmUvMmFjNGE5ZGU5MmYxYThkMGRjNzc5MmRjMGI2NzE4NzQwN2NjY2Ix
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGACgDXOAFMA0GCSqGSIb3DQEBCwUAA4IBAQAVMVbOts7SNxpq
RC6s/r45EkgvknoNiu31lM6DxPEIAsjiMjEgiyFBm1JuKc2RHu6lgVexa451PAEY
LBBby8bGBNm/jr6KN/uQwR+j7BGN5MewEvvSMP8sUvTOD7/CVrvmOoAkmys1HcHu
7SPth7KuwbRIzsUf33xCoSw3Rdf+SXSfH6OBkMI2ynBNM/O5RqgTulvLntUPpzld
a8PqR4SOvvOuO97tN4qGkd4O9u32vrcoBcrNvkQ3vhTWCzlptjk7JRW0p4EzjIny
0GWTSKRfJVfAlKCHUjkWbw/PvAkIe9DtZSijGg3TVSAYV6TmrrDls7ctAzYotY4C
hU1nShhV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org