Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d1f8421-d319-4f80-8974-b17d805953c2/97a29b1e8920947701c37565fccce55fa847c387.roa
File: 97a29b1e8920947701c37565fccce55fa847c387.roa (raw, json)
Hash identifier: SL+UZJoDJWYrRdtyVqYhg/t4f0NRIeaYW0fWy9p/KVw=
Subject key identifier: DF:A2:10:39:52:71:92:B1:57:0E:AB:32:11:EB:71:32:AA:C7:79:F1
Certificate issuer: /CN=b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce
Certificate serial: 1260F6
Authority key identifier: E1:56:1B:D6:05:23:EB:2E:18:F3:E4:2E:55:E0:0E:03:0C:79:0F:33
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9d1f8421-d319-4f80-8974-b17d805953c2/97a29b1e8920947701c37565fccce55fa847c387.roa
Signing time: Wed 03 May 2023 01:38:13 +0000
ROA not before: Tue 02 May 2023 01:38:13 +0000
ROA not after: Sat 03 May 2025 01:38:13 +0000
asID: 271779
IP address blocks: 200.106.184.0/22 maxlen: 24
2803:6fe0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1204470 (0x1260f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce
Validity
Not Before: May 2 01:38:13 2023 GMT
Not After : May 3 01:38:13 2025 GMT
Subject: CN=97a29b1e8920947701c37565fccce55fa847c387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:64:33:d8:d8:e5:1b:4d:2a:b2:ed:f8:5d:e3:
dd:46:67:ba:66:65:8a:82:24:b2:e3:e2:46:de:14:
9e:3f:d7:f0:c3:02:c1:f6:f9:0f:df:6d:5d:10:e7:
c3:fb:93:4d:dd:a2:70:17:eb:cd:7b:ea:91:db:54:
d5:63:24:fd:6d:c4:7e:54:10:02:5a:58:13:95:36:
38:38:64:dc:a0:c9:7a:e3:7c:d4:23:3a:7d:03:49:
f7:ed:e2:f6:ee:ff:0a:d2:52:76:e7:37:d2:ea:d7:
05:15:f5:3c:c7:40:28:a1:94:ab:00:a0:0f:a3:c5:
b0:fd:f5:9a:ef:98:14:18:fe:37:75:10:42:ca:f2:
ef:67:a5:cc:98:4a:34:4c:ac:eb:44:16:62:83:90:
e5:33:6d:76:f6:a1:30:d8:9a:1a:fa:7e:21:09:1e:
db:ae:78:96:19:ae:6b:1a:1e:cf:99:61:ea:c8:78:
53:e5:32:91:c7:43:9d:b8:ed:70:85:7e:11:58:65:
93:64:0f:ca:9f:46:c3:5e:e7:6e:72:a2:38:da:01:
d1:f1:c0:b9:1e:29:a3:9a:7d:92:9a:a9:99:61:9d:
2a:3e:85:fa:e3:26:3c:72:5e:46:a3:67:ca:df:24:
2b:d1:49:bd:5f:17:b7:7c:74:fc:1a:c5:a0:18:c3:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A2:10:39:52:71:92:B1:57:0E:AB:32:11:EB:71:32:AA:C7:79:F1
X509v3 Authority Key Identifier:
keyid:E1:56:1B:D6:05:23:EB:2E:18:F3:E4:2E:55:E0:0E:03:0C:79:0F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d1f8421-d319-4f80-8974-b17d805953c2/97a29b1e8920947701c37565fccce55fa847c387.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9d1f8421-d319-4f80-8974-b17d805953c2/b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.106.184.0/22
IPv6:
2803:6fe0::/32
Signature Algorithm: sha256WithRSAEncryption
78:0f:05:85:6c:6c:b5:e6:c0:29:82:39:8e:58:f7:81:27:4e:
e0:c0:19:76:ad:0d:4b:50:b3:0c:f1:7f:bb:ad:24:5b:33:e6:
93:46:5b:36:e4:95:0e:ff:54:b5:3e:7e:33:63:b8:d7:38:4a:
e5:23:9c:36:63:d5:af:f4:07:55:9f:e7:5d:30:1a:28:05:25:
15:f6:a1:cc:e3:4e:d4:70:8f:d8:b6:ee:b8:65:62:5e:78:df:
3d:a7:64:e0:90:f8:b3:a1:d4:e7:c6:ac:a1:e8:de:8f:0f:e5:
6e:3b:a8:f0:bb:2b:11:a6:01:04:73:2f:33:5f:66:8e:8f:16:
32:c1:53:eb:02:1b:55:bc:8b:6a:5c:97:b2:d1:c6:93:b1:9f:
67:40:2c:c5:ca:8d:41:c1:de:ec:e1:5b:3d:c8:d8:c0:0d:d1:
36:22:8f:e2:be:35:37:b9:35:c1:27:a0:dc:32:6e:ae:f8:36:
3e:67:15:5f:6e:4d:d9:ff:87:27:b3:55:06:e0:a4:0a:44:37:
d5:7b:4c:be:e0:e7:ca:f4:06:b6:19:7c:81:c2:49:7b:b7:0d:
4d:31:02:d0:ff:0a:f8:56:b6:aa:41:3b:b7:e0:b5:1c:f9:78:
ac:67:6b:ee:8e:67:38:c5:94:62:8f:6b:f9:47:41:a8:7a:35:
2c:b2:b5:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEmD2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIx
Njk4YWQ2M2QyYjM2MDVjMTJlODdhYzA3YzBiZDhiNzM1YmM5Y2UwHhcNMjMwNTAy
MDEzODEzWhcNMjUwNTAzMDEzODEzWjAzMTEwLwYDVQQDEyg5N2EyOWIxZTg5MjA5
NDc3MDFjMzc1NjVmY2NjZTU1ZmE4NDdjMzg3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmmQz2NjlG00qsu34XePdRme6ZmWKgiSy4+JG3hSeP9fwwwLB
9vkP321dEOfD+5NN3aJwF+vNe+qR21TVYyT9bcR+VBACWlgTlTY4OGTcoMl643zU
Izp9A0n37eL27v8K0lJ25zfS6tcFFfU8x0AooZSrAKAPo8Ww/fWa75gUGP43dRBC
yvLvZ6XMmEo0TKzrRBZig5DlM2129qEw2Joa+n4hCR7brniWGa5rGh7PmWHqyHhT
5TKRx0OduO1whX4RWGWTZA/Kn0bDXuducqI42gHR8cC5Himjmn2SmqmZYZ0qPoX6
4yY8cl5Go2fK3yQr0Um9Xxe3fHT8GsWgGMMvUQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFN+iEDlScZKxVw6rMhHrcTKqx3nxMB8GA1UdIwQYMBaAFOFWG9YFI+suGPPk
LlXgDgMMeQ8zMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjE2OThh
ZDYzZDJiMzYwNWMxMmU4N2FjMDdjMGJkOGI3MzViYzljZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQxZjg0MjEtZDMxOS00ZjgwLTg5NzQtYjE3ZDgw
NTk1M2MyLzk3YTI5YjFlODkyMDk0NzcwMWMzNzU2NWZjY2NlNTVmYTg0N2MzODcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDFmODQyMS1kMzE5LTRmODAtODk3NC1iMTdk
ODA1OTUzYzIvYjE2OThhZDYzZDJiMzYwNWMxMmU4N2FjMDdjMGJkOGI3MzViYzlj
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAshquDANBAIAAjAHAwUAKANv4DANBgkqhkiG9w0BAQsFAAOC
AQEAeA8FhWxstebAKYI5jlj3gSdO4MAZdq0NS1CzDPF/u60kWzPmk0ZbNuSVDv9U
tT5+M2O41zhK5SOcNmPVr/QHVZ/nXTAaKAUlFfahzONO1HCP2LbuuGViXnjfPadk
4JD4s6HU58asoejejw/lbjuo8LsrEaYBBHMvM19mjo8WMsFT6wIbVbyLalyXstHG
k7GfZ0AsxcqNQcHe7OFbPcjYwA3RNiKP4r41N7k1wSeg3DJurvg2PmcVX25N2f+H
J7NVBuCkCkQ31XtMvuDnyvQGthl8gcJJe7cNTTEC0P8K+Fa2qkE7t+C1HPl4rGdr
7o5nOMWUYo9r+UdBqHo1LLK1ug==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org