Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/ec5637e34f2dfc8f96b7f5f7046d41c6a804c396.roa
File: ec5637e34f2dfc8f96b7f5f7046d41c6a804c396.roa (raw, json)
Hash identifier: aTWKKkPy0eDbfkQW2F97XKWDnGkOLPDqsw4a9luu5aI=
Subject key identifier: D3:39:0B:31:CB:C8:4C:E4:E3:BD:57:22:CF:2E:3F:75:4B:CC:76:7B
Certificate issuer: /CN=901c0d961f219c9ac4920f36c147c92354e14b00
Certificate serial: 208EA9
Authority key identifier: 4A:47:70:41:22:2D:CC:A7:25:04:94:4B:73:16:31:6D:7A:AA:12:EB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/901c0d961f219c9ac4920f36c147c92354e14b00.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/ec5637e34f2dfc8f96b7f5f7046d41c6a804c396.roa
Signing time: Tue 02 May 2023 17:29:12 +0000
ROA not before: Mon 01 May 2023 17:29:12 +0000
ROA not after: Fri 02 May 2025 17:29:12 +0000
asID: 265763
IP address blocks: 164.163.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2133673 (0x208ea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901c0d961f219c9ac4920f36c147c92354e14b00
Validity
Not Before: May 1 17:29:12 2023 GMT
Not After : May 2 17:29:12 2025 GMT
Subject: CN=ec5637e34f2dfc8f96b7f5f7046d41c6a804c396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e6:b6:20:e4:74:42:72:c9:e8:5e:c2:43:d5:
8e:df:87:7d:36:e5:69:eb:88:18:cd:9d:7f:7f:ce:
74:4f:29:b8:50:c0:3f:88:80:74:b6:3d:f1:8f:2a:
03:2e:76:b2:78:47:c8:7f:bc:b2:2a:3a:68:47:43:
3c:b9:80:64:8f:b2:bd:82:28:39:b2:65:8f:d9:53:
2d:ce:7f:af:4c:c9:ab:31:99:11:18:c1:f2:86:f2:
6a:08:c6:4c:08:f5:4e:b9:43:be:20:26:cd:9c:10:
dc:2f:aa:4b:06:6f:99:8c:cd:59:27:67:8b:62:2a:
75:47:9a:71:6d:7f:19:b2:f9:e3:8d:14:37:88:9f:
ca:a7:4d:0b:7b:4e:65:98:77:2c:ab:c6:e0:59:2e:
c4:3f:a1:60:0c:08:eb:0a:9c:6a:e7:14:7f:2c:28:
b4:57:99:8a:68:4b:c5:f8:e0:b0:b0:7b:58:e2:2a:
d9:ca:5d:fe:4a:ee:a7:79:b9:05:aa:ab:2b:83:4f:
9e:db:70:22:1b:a6:96:71:f2:b4:f5:45:6d:2c:d2:
a8:f2:27:cc:d6:bd:c6:1d:03:ff:e5:94:cc:49:32:
e3:9c:28:d6:c0:24:05:b1:a7:af:ee:d6:0f:af:86:
19:21:57:cc:ce:98:6e:40:f8:1e:f2:51:c9:90:1b:
a7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:39:0B:31:CB:C8:4C:E4:E3:BD:57:22:CF:2E:3F:75:4B:CC:76:7B
X509v3 Authority Key Identifier:
keyid:4A:47:70:41:22:2D:CC:A7:25:04:94:4B:73:16:31:6D:7A:AA:12:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/901c0d961f219c9ac4920f36c147c92354e14b00.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/ec5637e34f2dfc8f96b7f5f7046d41c6a804c396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/901c0d961f219c9ac4920f36c147c92354e14b00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.40.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:19:4a:fd:96:e0:a0:ae:c3:0c:d7:16:88:7a:1d:df:ad:2f:
14:88:6d:e1:11:e6:c6:de:0d:38:db:d0:45:57:12:06:ae:e6:
c6:10:56:9d:ba:71:8b:a6:51:62:13:29:c5:8f:9e:6c:07:d0:
71:23:5b:b7:f1:da:ab:f6:2d:2c:a5:5c:13:41:00:0c:c9:9c:
86:40:4e:68:1a:1a:be:0e:32:b8:14:78:00:9f:74:97:d1:4f:
ab:e4:d3:06:5f:c8:1a:9b:d4:13:21:ef:74:12:3f:52:7e:84:
15:fb:58:9f:ec:d7:fa:a3:82:2b:30:b7:af:d1:33:af:24:1c:
ee:52:33:96:b8:83:c3:f9:fd:a0:3c:37:44:b3:48:dd:70:b1:
96:97:57:d0:53:2e:ff:f1:ed:59:58:4a:2c:b1:2e:b3:0c:6f:
1a:e1:43:0b:11:c5:17:e9:70:a6:a3:2a:1a:38:9c:22:82:db:
19:00:c4:c2:2f:19:00:13:8a:4b:d0:19:21:8d:b3:02:65:b0:
64:9f:fc:03:f8:cd:b4:a8:e2:24:cc:bf:04:b1:63:29:4d:23:
5f:38:f4:ff:40:c7:79:a0:71:c2:2f:fb:2f:39:2b:61:a0:33:
08:df:67:16:ea:f1:50:dd:ab:e1:cc:cc:59:3c:49:6d:8a:1f:
e0:39:97:59
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDII6pMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkw
MWMwZDk2MWYyMTljOWFjNDkyMGYzNmMxNDdjOTIzNTRlMTRiMDAwHhcNMjMwNTAx
MTcyOTEyWhcNMjUwNTAyMTcyOTEyWjAzMTEwLwYDVQQDEyhlYzU2MzdlMzRmMmRm
YzhmOTZiN2Y1ZjcwNDZkNDFjNmE4MDRjMzk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxOa2IOR0QnLJ6F7CQ9WO34d9NuVp64gYzZ1/f850Tym4UMA/
iIB0tj3xjyoDLnayeEfIf7yyKjpoR0M8uYBkj7K9gig5smWP2VMtzn+vTMmrMZkR
GMHyhvJqCMZMCPVOuUO+ICbNnBDcL6pLBm+ZjM1ZJ2eLYip1R5pxbX8ZsvnjjRQ3
iJ/Kp00Le05lmHcsq8bgWS7EP6FgDAjrCpxq5xR/LCi0V5mKaEvF+OCwsHtY4irZ
yl3+Su6nebkFqqsrg0+e23AiG6aWcfK09UVtLNKo8ifM1r3GHQP/5ZTMSTLjnCjW
wCQFsaev7tYPr4YZIVfMzphuQPge8lHJkBunCwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNM5CzHLyEzk471XIs8uP3VLzHZ7MB8GA1UdIwQYMBaAFEpHcEEiLcynJQSU
S3MWMW16qhLrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTAxYzBk
OTYxZjIxOWM5YWM0OTIwZjM2YzE0N2M5MjM1NGUxNGIwMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWFmNGE1NjktOWFjYi00NGFiLWJlODgtYTQ2ZDRl
ZGU5NmNlL2VjNTYzN2UzNGYyZGZjOGY5NmI3ZjVmNzA0NmQ0MWM2YTgwNGMzOTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYWY0YTU2OS05YWNiLTQ0YWItYmU4OC1hNDZk
NGVkZTk2Y2UvOTAxYzBkOTYxZjIxOWM5YWM0OTIwZjM2YzE0N2M5MjM1NGUxNGIw
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqSjKDANBgkqhkiG9w0BAQsFAAOCAQEAfBlK/ZbgoK7DDNcW
iHod360vFIht4RHmxt4NONvQRVcSBq7mxhBWnbpxi6ZRYhMpxY+ebAfQcSNbt/Ha
q/YtLKVcE0EADMmchkBOaBoavg4yuBR4AJ90l9FPq+TTBl/IGpvUEyHvdBI/Un6E
FftYn+zX+qOCKzC3r9EzryQc7lIzlriDw/n9oDw3RLNI3XCxlpdX0FMu//HtWVhK
LLEuswxvGuFDCxHFF+lwpqMqGjicIoLbGQDEwi8ZABOKS9AZIY2zAmWwZJ/8A/jN
tKjiJMy/BLFjKU0jXzj0/0DHeaBxwi/7LzkrYaAzCN9nFurxUN2r4czMWTxJbYof
4DmXWQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org