Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/09b16a9e1614ede5f70a01f8c82b479492200969.roa
File: 09b16a9e1614ede5f70a01f8c82b479492200969.roa (raw, json)
Hash identifier: dlsGiyuMWV1Y6mGGfn2EX7Ixgo6lvRmG3rwdqh30Ci4=
Subject key identifier: 1B:EF:72:1F:A4:1C:72:22:06:A4:A6:11:A7:47:74:84:67:BD:0E:53
Certificate issuer: /CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Certificate serial: 1BD129
Authority key identifier: D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/09b16a9e1614ede5f70a01f8c82b479492200969.roa
Signing time: Sat 29 Oct 2022 14:01:39 +0000
ROA not before: Tue 23 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 264660
IP address blocks: 170.247.212.0/22 maxlen: 22
170.247.212.0/23 maxlen: 23
170.247.212.0/24 maxlen: 24
170.247.213.0/24 maxlen: 24
170.247.214.0/23 maxlen: 23
170.247.214.0/24 maxlen: 24
170.247.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1823017 (0x1bd129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Validity
Not Before: Mar 23 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=09b16a9e1614ede5f70a01f8c82b479492200969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:4d:ca:42:fc:e1:91:86:20:fa:d8:e2:7f:
b8:d5:2e:61:15:56:22:5a:96:ec:fd:e5:2d:75:54:
68:a6:b1:b5:26:51:84:cd:94:df:8e:90:51:14:3e:
06:ea:1f:53:45:21:a2:d2:d0:33:e1:3c:e6:8c:49:
0e:fa:6b:2b:e4:5a:06:6a:46:17:79:aa:a1:59:29:
34:de:bc:28:de:d4:85:5b:f5:6b:87:29:d7:6b:cc:
5f:ed:6a:2b:37:e1:90:05:6f:03:b0:25:7f:47:40:
82:02:6c:05:64:35:85:72:34:1a:e1:ee:8e:eb:0d:
bf:c2:51:58:0c:90:ac:61:0c:f2:e3:1b:84:de:8f:
c1:61:d5:7f:72:c6:05:da:3a:da:2a:09:8c:35:60:
b6:06:8c:a6:e8:5c:39:01:0d:79:d8:82:29:88:d9:
8a:9e:9a:70:94:35:d7:66:24:22:41:5c:74:86:76:
c1:b2:af:97:74:95:65:78:64:67:a7:a9:5c:d3:58:
b2:ba:48:07:a7:87:60:8e:11:bc:40:64:fa:9b:a0:
7b:5e:25:33:ff:81:58:94:b0:91:f9:c0:7e:6e:a3:
65:bd:c6:f5:6b:f0:14:a2:3e:f9:e8:32:7d:56:04:
df:56:49:2d:65:8b:d2:2f:95:be:09:e4:a9:15:bd:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EF:72:1F:A4:1C:72:22:06:A4:A6:11:A7:47:74:84:67:BD:0E:53
X509v3 Authority Key Identifier:
keyid:D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/09b16a9e1614ede5f70a01f8c82b479492200969.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/b0e4cadafcf7e03afe28925adf350f1286db7b25.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.212.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:69:c6:c2:44:95:3a:3f:34:91:22:dd:2d:51:ee:e1:3d:12:
2e:22:3d:36:ef:1e:39:0a:91:27:d1:9a:be:f2:2a:20:04:d8:
ca:ac:aa:8f:58:84:b3:20:5a:1f:9c:dc:9e:a4:b0:3f:77:fb:
c8:f4:e0:4c:53:0c:82:f2:13:e0:d8:1a:0d:c3:d9:1a:77:45:
cb:4f:30:2a:34:f7:bf:ce:e5:4e:e8:d9:f2:80:b2:00:2f:c5:
4f:fe:b2:25:8e:da:7b:63:48:16:69:b3:52:ae:ee:1b:b3:f4:
08:16:41:ab:c5:7b:7b:62:fb:3c:06:a6:d3:15:12:7d:65:3a:
b2:f9:14:4e:d5:3f:87:61:00:95:29:1e:dd:3d:ec:13:be:27:
45:5e:9f:b3:4f:d1:83:57:c6:2d:27:e9:50:61:0d:cb:d6:ca:
3e:38:fd:98:52:e8:b2:ab:0b:30:08:0f:db:b8:16:f4:64:c7:
2a:66:30:d6:f1:bc:4f:ee:11:38:90:52:22:78:6e:70:f9:e4:
b4:df:a9:0f:9d:40:d4:32:2b:ef:94:8e:23:6c:02:5f:65:0b:
ac:de:7d:c2:0e:a6:f4:3b:91:5b:22:d3:cd:43:30:00:cc:85:
4e:ad:d8:1e:2b:b0:df:a0:d9:88:1d:ab:dd:27:68:eb:2e:c7:
9b:69:f7:e8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDG9EpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
ZTRjYWRhZmNmN2UwM2FmZTI4OTI1YWRmMzUwZjEyODZkYjdiMjUwHhcNMjEwMzIz
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEygwOWIxNmE5ZTE2MTRl
ZGU1ZjcwYTAxZjhjODJiNDc5NDkyMjAwOTY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApdRNykL84ZGGIPrY4n+41S5hFVYiWpbs/eUtdVRoprG1JlGE
zZTfjpBRFD4G6h9TRSGi0tAz4TzmjEkO+msr5FoGakYXeaqhWSk03rwo3tSFW/Vr
hynXa8xf7WorN+GQBW8DsCV/R0CCAmwFZDWFcjQa4e6O6w2/wlFYDJCsYQzy4xuE
3o/BYdV/csYF2jraKgmMNWC2Boym6Fw5AQ152IIpiNmKnppwlDXXZiQiQVx0hnbB
sq+XdJVleGRnp6lc01iyukgHp4dgjhG8QGT6m6B7XiUz/4FYlLCR+cB+bqNlvcb1
a/AUoj756DJ9VgTfVkktZYvSL5W+CeSpFb0HewIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBvvch+kHHIiBqSmEadHdIRnvQ5TMB8GA1UdIwQYMBaAFNaRNNTUo5m3dxWU
ae+IZyBfwVVzMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjBlNGNh
ZGFmY2Y3ZTAzYWZlMjg5MjVhZGYzNTBmMTI4NmRiN2IyNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQ4YjhmYWEtYmJlMy00MzcxLWE5NWEtZGIxOTdk
ZmQzYmJmLzA5YjE2YTllMTYxNGVkZTVmNzBhMDFmOGM4MmI0Nzk0OTIyMDA5Njku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDhiOGZhYS1iYmUzLTQzNzEtYTk1YS1kYjE5
N2RmZDNiYmYvYjBlNGNhZGFmY2Y3ZTAzYWZlMjg5MjVhZGYzNTBmMTI4NmRiN2Iy
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqr31DANBgkqhkiG9w0BAQsFAAOCAQEAfmnGwkSVOj80kSLd
LVHu4T0SLiI9Nu8eOQqRJ9GavvIqIATYyqyqj1iEsyBaH5zcnqSwP3f7yPTgTFMM
gvIT4NgaDcPZGndFy08wKjT3v87lTujZ8oCyAC/FT/6yJY7ae2NIFmmzUq7uG7P0
CBZBq8V7e2L7PAam0xUSfWU6svkUTtU/h2EAlSke3T3sE74nRV6fs0/Rg1fGLSfp
UGENy9bKPjj9mFLosqsLMAgP27gW9GTHKmYw1vG8T+4ROJBSInhucPnktN+pD51A
1DIr75SOI2wCX2ULrN59wg6m9DuRWyLTzUMwAMyFTq3YHiuw36DZiB2r3Sdo6y7H
m2n36A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org