Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/a32b56ebe85b19ae7b2407670658810e0dc0215d.roa
File: a32b56ebe85b19ae7b2407670658810e0dc0215d.roa (raw, json)
Hash identifier: k5WrNOKM/HbI0hpJZ3G8BEo7gBuKzQnFDBpUSv8Pm24=
Subject key identifier: 0E:AB:B9:5F:8B:95:FD:1B:EF:F1:12:86:AD:57:52:0E:E4:21:62:E1
Certificate issuer: /CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Certificate serial: 21E859
Authority key identifier: BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/a32b56ebe85b19ae7b2407670658810e0dc0215d.roa
Signing time: Fri 02 Jun 2023 05:52:18 +0000
ROA not before: Thu 01 Jun 2023 05:52:17 +0000
ROA not after: Mon 02 Jun 2025 05:52:17 +0000
asID: 52451
IP address blocks: 200.119.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2222169 (0x21e859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Validity
Not Before: Jun 1 05:52:17 2023 GMT
Not After : Jun 2 05:52:17 2025 GMT
Subject: CN=a32b56ebe85b19ae7b2407670658810e0dc0215d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9a:0b:61:26:2e:3e:86:96:ff:07:f6:05:13:
83:c3:84:b8:22:2a:46:e8:c1:cc:92:32:b7:a7:1e:
1f:02:f2:db:9d:b9:fe:f7:95:4a:14:77:a6:80:e0:
d1:ff:b1:30:99:2d:76:7e:0a:d4:15:e1:3d:86:67:
b2:b9:a9:f9:57:dc:a7:1c:72:57:11:c2:ca:41:ee:
e7:fb:08:61:e8:56:f5:e3:67:43:c6:57:85:41:b2:
56:79:45:9d:99:0e:12:25:c9:66:db:78:f1:56:97:
81:0a:23:f6:d1:65:26:9c:2f:59:7b:8e:e8:a2:df:
79:d8:bc:10:50:63:bd:53:2c:46:b2:13:c9:53:dd:
b7:ca:70:37:20:b1:1e:a1:49:6b:51:c3:cd:73:e2:
43:60:2e:2c:7e:f0:32:d2:8d:a6:1a:22:35:08:06:
13:5f:69:89:53:00:89:09:51:ea:87:b3:c9:60:08:
52:2f:4b:bb:08:89:4b:6d:ef:48:16:6c:fd:b8:3a:
d7:55:56:56:32:8b:71:35:b9:23:72:58:bf:43:94:
0d:4e:58:18:0c:e2:0c:f4:68:9a:ba:d6:06:ba:2d:
e9:e1:96:79:d0:c1:50:5e:bb:d5:fe:c7:55:e7:6f:
86:53:ac:1c:1a:33:0c:9b:0f:c7:b7:1c:e0:a5:8e:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AB:B9:5F:8B:95:FD:1B:EF:F1:12:86:AD:57:52:0E:E4:21:62:E1
X509v3 Authority Key Identifier:
keyid:BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/a32b56ebe85b19ae7b2407670658810e0dc0215d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.119.142.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a7:ab:b7:52:ec:99:4f:49:ea:32:fa:06:f8:16:ba:09:2d:
a5:60:eb:b9:35:9c:c0:d0:cd:58:9b:f3:3e:d2:ae:6e:06:58:
82:e7:a2:90:f8:e4:ca:d8:c4:7b:7d:24:4d:bf:06:24:ee:9c:
f2:72:3f:0e:dd:fe:14:58:b9:12:c8:d7:64:7a:aa:2c:ca:70:
80:77:9f:67:ba:b6:91:4e:a0:5b:35:70:68:43:8d:42:1b:56:
32:92:ea:d5:e0:e2:e6:74:44:18:a8:2c:cc:b6:a1:e7:12:cd:
df:3f:59:2e:a0:2d:18:e0:88:aa:da:55:7b:a6:53:4b:db:58:
fb:2c:8c:2b:9c:9c:ab:e0:a2:1f:89:4b:7e:07:2a:70:d8:af:
20:33:c3:73:8e:dd:4d:74:e6:8e:05:70:1d:d6:dc:75:31:87:
6b:21:9e:8f:1c:45:7f:9a:c5:05:c1:bb:2a:e3:4c:5e:b2:33:
ce:2d:e7:34:25:d3:7d:e8:4c:cf:7b:a1:11:e6:ba:23:11:3f:
04:77:2d:03:81:fd:26:cd:74:80:c1:7f:42:b4:e6:f6:cb:43:
2b:7e:5a:17:34:03:3f:ca:cb:b6:22:9d:79:5e:ff:f5:1b:27:
18:94:4d:06:83:52:29:e7:ad:df:09:27:e1:76:bd:8a:17:61:
45:12:de:c1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIehZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVh
MDk0NWM3MmZmODc4ZDc2YWJkOWM0NDlmMmQzZTY0YWZiNjFiYTEwHhcNMjMwNjAx
MDU1MjE3WhcNMjUwNjAyMDU1MjE3WjAzMTEwLwYDVQQDEyhhMzJiNTZlYmU4NWIx
OWFlN2IyNDA3NjcwNjU4ODEwZTBkYzAyMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmZoLYSYuPoaW/wf2BRODw4S4IipG6MHMkjK3px4fAvLbnbn+
95VKFHemgODR/7EwmS12fgrUFeE9hmeyuan5V9ynHHJXEcLKQe7n+whh6Fb142dD
xleFQbJWeUWdmQ4SJclm23jxVpeBCiP20WUmnC9Ze47oot952LwQUGO9UyxGshPJ
U923ynA3ILEeoUlrUcPNc+JDYC4sfvAy0o2mGiI1CAYTX2mJUwCJCVHqh7PJYAhS
L0u7CIlLbe9IFmz9uDrXVVZWMotxNbkjcli/Q5QNTlgYDOIM9GiautYGui3p4ZZ5
0MFQXrvV/sdV52+GU6wcGjMMmw/HtxzgpY4FrwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFA6ruV+Llf0b7/EShq1XUg7kIWLhMB8GA1UdIwQYMBaAFLr0xRgMH7mzhsD2
WcSrd1i1PVKaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWEwOTQ1
YzcyZmY4NzhkNzZhYmQ5YzQ0OWYyZDNlNjRhZmI2MWJhMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTZiYjBjOTQtYTIzOS00ZjdhLWFmZjItNGE0YTM1
MmVlZDQ5L2EzMmI1NmViZTg1YjE5YWU3YjI0MDc2NzA2NTg4MTBlMGRjMDIxNWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNmJiMGM5NC1hMjM5LTRmN2EtYWZmMi00YTRh
MzUyZWVkNDkvNWEwOTQ1YzcyZmY4NzhkNzZhYmQ5YzQ0OWYyZDNlNjRhZmI2MWJh
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMh3jjANBgkqhkiG9w0BAQsFAAOCAQEAiKert1LsmU9J6jL6
BvgWugktpWDruTWcwNDNWJvzPtKubgZYgueikPjkytjEe30kTb8GJO6c8nI/Dt3+
FFi5EsjXZHqqLMpwgHefZ7q2kU6gWzVwaEONQhtWMpLq1eDi5nREGKgszLah5xLN
3z9ZLqAtGOCIqtpVe6ZTS9tY+yyMK5ycq+CiH4lLfgcqcNivIDPDc47dTXTmjgVw
HdbcdTGHayGejxxFf5rFBcG7KuNMXrIzzi3nNCXTfehMz3uhEea6IxE/BHctA4H9
Js10gMF/QrTm9stDK35aFzQDP8rLtiKdeV7/9RsnGJRNBoNSKeet3wkn4Xa9ihdh
RRLewQ==
-----END CERTIFICATE-----
Generated at Mon Mar 18 17:06:33 2024 by rpki-client on console-ams.rpki-client.org