Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/63a57fc59e21cad413f2e9c24df3e06e46d4061e.roa
File: 63a57fc59e21cad413f2e9c24df3e06e46d4061e.roa (raw, json)
Hash identifier: 7i7ZT+5vlxNB3zTaryRlcoV/ERt9DkaA4IGg+mC5TTk=
Subject key identifier: C6:EA:AA:18:13:D2:AA:BD:F2:66:EE:13:2E:E7:9B:00:43:14:7E:F7
Certificate issuer: /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial: 2A2015
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/63a57fc59e21cad413f2e9c24df3e06e46d4061e.roa
Signing time: Mon 26 Feb 2024 17:19:18 +0000
ROA not before: Mon 26 Feb 2024 17:19:17 +0000
ROA not after: Thu 26 Feb 2026 17:19:17 +0000
asID: 28011
IP address blocks: 200.125.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2760725 (0x2a2015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Validity
Not Before: Feb 26 17:19:17 2024 GMT
Not After : Feb 26 17:19:17 2026 GMT
Subject: CN=63a57fc59e21cad413f2e9c24df3e06e46d4061e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fe:4d:c5:2a:a2:bc:7b:56:fd:47:d2:61:ec:
08:29:f4:b5:46:b7:c5:18:95:7a:49:e9:d7:9c:ee:
92:2c:ec:89:f9:5f:ae:6e:85:46:b6:74:8b:97:43:
d3:92:60:2b:71:65:a2:11:2d:e0:a2:6e:0b:96:68:
f5:77:69:5f:5a:9d:e2:6d:1d:13:4a:d0:eb:7f:a6:
ee:0c:01:62:fd:e0:af:9a:02:0f:c6:40:f5:a8:d7:
44:9c:57:17:56:61:ad:cd:fd:67:77:77:75:ad:47:
31:ab:94:46:08:7a:f1:5f:c4:c7:68:6a:73:70:5a:
22:09:73:f7:c8:39:f8:20:33:a4:c0:c6:0a:28:7f:
a4:56:06:67:61:b0:3b:ec:ec:0e:a9:2d:e4:97:e1:
c1:da:bd:06:b7:27:59:04:6c:96:0f:34:e8:a9:4a:
a5:3e:11:32:03:b0:79:da:67:eb:4f:dc:d1:50:20:
2b:2c:38:cf:ae:be:33:39:ad:26:68:f2:49:80:e5:
cb:a0:70:d8:e1:f1:56:00:7a:3f:66:d6:2d:87:76:
0a:6d:b6:fa:3c:de:9a:09:24:9f:57:2f:c8:b7:c8:
c3:06:7f:95:36:44:3f:7a:0e:5d:ac:9e:a0:66:a5:
a5:90:b5:f8:11:4f:e2:d1:7e:e8:03:9e:3c:26:f5:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EA:AA:18:13:D2:AA:BD:F2:66:EE:13:2E:E7:9B:00:43:14:7E:F7
X509v3 Authority Key Identifier:
keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/63a57fc59e21cad413f2e9c24df3e06e46d4061e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:29:eb:be:6e:e3:99:99:9a:f2:55:c2:f9:7c:3b:7b:35:c6:
e5:84:09:20:b9:fe:46:c6:09:db:e7:2c:7c:3f:c4:db:00:1d:
51:69:af:a8:9e:15:a2:d1:37:b1:9b:9e:23:b8:e8:30:ee:cb:
61:70:05:4c:9d:53:38:d0:53:76:82:ad:9f:eb:f6:11:71:02:
7a:a2:de:50:20:58:57:e5:b6:ca:a0:79:19:e5:8f:8a:88:35:
74:d7:8f:71:51:9c:0a:31:cb:d9:7b:ad:e9:b6:1d:65:e2:c5:
95:99:ca:bc:bd:ab:c2:fb:85:87:28:85:2d:c6:17:d2:2c:02:
e0:d3:b3:f1:2a:df:7b:f4:50:a9:4e:31:6d:1c:9c:69:74:79:
92:84:87:58:a3:4e:d1:5c:f9:59:36:6f:11:f4:c4:e3:39:4a:
47:73:2e:91:40:b3:f4:a1:7e:79:1f:fc:d4:28:60:54:25:74:
ec:c2:1f:86:6e:7c:df:e3:d8:2b:f4:bb:f6:de:dc:68:4b:70:
e9:72:6f:27:26:b2:70:37:61:f9:0e:56:12:31:9b:76:66:e7:
63:01:77:e7:44:dc:3f:80:21:29:a6:d0:e2:33:87:4b:28:24:
19:51:8f:75:c7:72:15:6a:7a:ad:02:37:ea:4f:f8:51:51:18:
db:4e:e7:91
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKiAVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
NTllMWUzMzE3NzA0NTc1ZjJjMGI3NTBlZTczYjE2NmEzOWNkMzcwHhcNMjQwMjI2
MTcxOTE3WhcNMjYwMjI2MTcxOTE3WjAzMTEwLwYDVQQDEyg2M2E1N2ZjNTllMjFj
YWQ0MTNmMmU5YzI0ZGYzZTA2ZTQ2ZDQwNjFlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgv5NxSqivHtW/UfSYewIKfS1RrfFGJV6SenXnO6SLOyJ+V+u
boVGtnSLl0PTkmArcWWiES3gom4Llmj1d2lfWp3ibR0TStDrf6buDAFi/eCvmgIP
xkD1qNdEnFcXVmGtzf1nd3d1rUcxq5RGCHrxX8THaGpzcFoiCXP3yDn4IDOkwMYK
KH+kVgZnYbA77OwOqS3kl+HB2r0GtydZBGyWDzToqUqlPhEyA7B52mfrT9zRUCAr
LDjPrr4zOa0maPJJgOXLoHDY4fFWAHo/ZtYth3YKbbb6PN6aCSSfVy/It8jDBn+V
NkQ/eg5drJ6gZqWlkLX4EU/i0X7oA548JvUpoQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMbqqhgT0qq98mbuEy7nmwBDFH73MB8GA1UdIwQYMBaAFIDwxydPgiTR6Xbz
gObvMs8Q+J3TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTA1OWUx
ZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2QzNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWNhNzEzZjUtNmNhYy00ODZlLWEwMTYtYTNlOGIz
MWJmMDI5LzYzYTU3ZmM1OWUyMWNhZDQxM2YyZTljMjRkZjNlMDZlNDZkNDA2MWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hY2E3MTNmNS02Y2FjLTQ4NmUtYTAxNi1hM2U4
YjMxYmYwMjkvMTA1OWUxZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2Qz
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMh90DANBgkqhkiG9w0BAQsFAAOCAQEAoinrvm7jmZma8lXC
+Xw7ezXG5YQJILn+RsYJ2+csfD/E2wAdUWmvqJ4VotE3sZueI7joMO7LYXAFTJ1T
ONBTdoKtn+v2EXECeqLeUCBYV+W2yqB5GeWPiog1dNePcVGcCjHL2Xut6bYdZeLF
lZnKvL2rwvuFhyiFLcYX0iwC4NOz8Srfe/RQqU4xbRycaXR5koSHWKNO0Vz5WTZv
EfTE4zlKR3MukUCz9KF+eR/81ChgVCV07MIfhm583+PYK/S79t7caEtw6XJvJyay
cDdh+Q5WEjGbdmbnYwF350TcP4AhKabQ4jOHSygkGVGPdcdyFWp6rQI36k/4UVEY
207nkQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org