Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/b1bf25377b4b1a41961b7dfd3c0e63c1e683656a.roa
File: b1bf25377b4b1a41961b7dfd3c0e63c1e683656a.roa (raw, json)
Hash identifier: f5DnMo/iSMvDRc6Tahboop6y2g5+2vFa90qtgptnppI=
Subject key identifier: 54:54:25:87:A4:1F:07:93:DA:7E:C7:E1:50:85:15:9D:7F:B9:2A:5C
Certificate issuer: /CN=2733e5fc045a22897f64385008a5c519f68c3738
Certificate serial: 06D955
Authority key identifier: 34:F4:01:2A:E3:5E:A3:ED:47:89:FB:B2:04:40:FF:56:A7:F4:DE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2733e5fc045a22897f64385008a5c519f68c3738.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/b1bf25377b4b1a41961b7dfd3c0e63c1e683656a.roa
Signing time: Thu 23 Mar 2023 21:51:17 +0000
ROA not before: Thu 09 Jun 2022 03:00:00 +0000
ROA not after: Mon 30 Nov 2026 03:00:00 +0000
asID: 272057
IP address blocks: 187.63.156.0/22 maxlen: 24
2803:7d10::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448853 (0x6d955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2733e5fc045a22897f64385008a5c519f68c3738
Validity
Not Before: Jun 9 03:00:00 2022 GMT
Not After : Nov 30 03:00:00 2026 GMT
Subject: CN=b1bf25377b4b1a41961b7dfd3c0e63c1e683656a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:3d:f5:62:40:31:b3:35:63:d7:58:e1:d4:
ee:a4:fc:3e:b5:26:02:4e:60:15:9e:68:af:48:1b:
68:4e:97:b5:46:b7:cc:4a:aa:13:c2:91:3a:0e:22:
53:b4:6b:b8:90:1a:b6:c8:a8:6e:23:9f:f9:af:cf:
08:0e:81:e0:98:43:bf:a1:f5:a4:9d:a7:0c:38:9a:
3f:14:2f:8e:1a:25:86:82:c1:c1:2b:57:54:a0:53:
31:58:3a:f4:93:cd:07:7b:ba:c3:13:08:14:fa:4d:
74:02:14:91:4f:c4:3f:26:84:c9:4d:71:ae:ff:27:
18:7e:cd:4d:45:34:94:90:6e:d5:fe:9d:90:a0:61:
d1:6c:1f:cc:05:81:0e:0d:ff:51:1b:b3:3f:c7:ab:
94:b0:4c:13:d2:4f:26:dd:c3:71:eb:5e:2b:10:01:
a9:cb:0c:f8:1d:2f:8d:ae:97:81:ab:9b:13:19:84:
c3:3a:4d:a7:ed:c1:01:6f:5f:8e:ee:e7:8c:90:f4:
21:22:7d:ab:4e:e9:01:51:08:a5:a5:d3:00:db:c4:
99:a6:9d:88:68:38:24:07:d5:a0:b1:95:12:77:34:
f0:c7:4f:f0:c0:ff:37:72:91:78:c8:7d:97:1f:97:
07:10:d6:07:87:20:21:24:11:bf:e0:00:50:c4:66:
ea:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:54:25:87:A4:1F:07:93:DA:7E:C7:E1:50:85:15:9D:7F:B9:2A:5C
X509v3 Authority Key Identifier:
keyid:34:F4:01:2A:E3:5E:A3:ED:47:89:FB:B2:04:40:FF:56:A7:F4:DE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2733e5fc045a22897f64385008a5c519f68c3738.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/b1bf25377b4b1a41961b7dfd3c0e63c1e683656a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/2733e5fc045a22897f64385008a5c519f68c3738.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.63.156.0/22
IPv6:
2803:7d10::/32
Signature Algorithm: sha256WithRSAEncryption
5b:78:0c:a3:6e:56:90:a3:0e:48:a1:d5:06:ed:ed:02:59:e6:
4e:d5:ec:90:06:04:10:86:5f:50:73:a6:bf:36:1f:bd:99:89:
15:a4:19:14:af:e7:5c:e1:32:34:7b:8b:da:08:f7:77:a3:e5:
b4:24:74:63:12:38:b2:9b:4f:d2:8e:f0:91:51:57:5e:37:b4:
67:2a:b0:fe:60:d0:17:dc:80:54:43:29:a0:74:88:a9:da:5c:
fd:09:05:1d:9d:48:5b:16:4c:7a:13:32:e0:b8:68:30:e3:0a:
07:c3:d4:ac:4b:08:34:13:df:db:a0:ad:da:2c:eb:dd:21:7f:
f3:9c:23:03:52:28:ad:67:44:7a:15:64:2a:47:8f:d4:42:f6:
52:d4:24:bf:06:9f:30:2c:4c:5f:e0:78:ab:1e:c0:d4:4b:0c:
41:8b:f9:d1:8f:d3:71:2c:a5:4b:b8:46:9f:31:46:87:61:1b:
fc:53:95:5c:29:07:80:e3:fe:b8:22:0a:4a:f1:8d:8c:61:7a:
93:84:05:d4:d5:01:d4:81:ee:b5:66:d2:76:be:52:ba:66:cf:
5d:8f:1e:bb:94:2a:eb:db:45:6e:00:e5:2a:ec:6a:ab:06:82:
e7:34:1d:40:4b:03:e5:6f:50:97:a9:ec:bd:1c:6c:77:2d:d7:
8d:d0:48:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDBtlVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI3
MzNlNWZjMDQ1YTIyODk3ZjY0Mzg1MDA4YTVjNTE5ZjY4YzM3MzgwHhcNMjIwNjA5
MDMwMDAwWhcNMjYxMTMwMDMwMDAwWjAzMTEwLwYDVQQDEyhiMWJmMjUzNzdiNGIx
YTQxOTYxYjdkZmQzYzBlNjNjMWU2ODM2NTZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqok99WJAMbM1Y9dY4dTupPw+tSYCTmAVnmivSBtoTpe1RrfM
SqoTwpE6DiJTtGu4kBq2yKhuI5/5r88IDoHgmEO/ofWknacMOJo/FC+OGiWGgsHB
K1dUoFMxWDr0k80He7rDEwgU+k10AhSRT8Q/JoTJTXGu/ycYfs1NRTSUkG7V/p2Q
oGHRbB/MBYEODf9RG7M/x6uUsEwT0k8m3cNx614rEAGpywz4HS+NrpeBq5sTGYTD
Ok2n7cEBb1+O7ueMkPQhIn2rTukBUQilpdMA28SZpp2IaDgkB9WgsZUSdzTwx0/w
wP83cpF4yH2XH5cHENYHhyAhJBG/4ABQxGbq3wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFFRUJYekHweT2n7H4VCFFZ1/uSpcMB8GA1UdIwQYMBaAFDT0ASrjXqPtR4n7
sgRA/1an9N5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjczM2U1
ZmMwNDVhMjI4OTdmNjQzODUwMDhhNWM1MTlmNjhjMzczOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWFhZDlhNDgtYjAzZi00N2YyLWFlOTQtODY3OTdi
M2M5YTA3L2IxYmYyNTM3N2I0YjFhNDE5NjFiN2RmZDNjMGU2M2MxZTY4MzY1NmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYWFkOWE0OC1iMDNmLTQ3ZjItYWU5NC04Njc5
N2IzYzlhMDcvMjczM2U1ZmMwNDVhMjI4OTdmNjQzODUwMDhhNWM1MTlmNjhjMzcz
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEArs/nDANBAIAAjAHAwUAKAN9EDANBgkqhkiG9w0BAQsFAAOC
AQEAW3gMo25WkKMOSKHVBu3tAlnmTtXskAYEEIZfUHOmvzYfvZmJFaQZFK/nXOEy
NHuL2gj3d6PltCR0YxI4sptP0o7wkVFXXje0Zyqw/mDQF9yAVEMpoHSIqdpc/QkF
HZ1IWxZMehMy4LhoMOMKB8PUrEsINBPf26Ct2izr3SF/85wjA1IorWdEehVkKkeP
1EL2UtQkvwafMCxMX+B4qx7A1EsMQYv50Y/TcSylS7hGnzFGh2Eb/FOVXCkHgOP+
uCIKSvGNjGF6k4QF1NUB1IHutWbSdr5SumbPXY8eu5Qq69tFbgDlKuxqqwaC5zQd
QEsD5W9Ql6nsvRxsdy3XjdBIMQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org