Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ace8b0b1-8025-4d54-8a8f-09ea9f1fc049/89addd6e8186a7368a7ca33624bd4329d6aa1848.roa
File: 89addd6e8186a7368a7ca33624bd4329d6aa1848.roa (raw, json)
Hash identifier: yKpsEIh8J4Z8pbdbrIbgZS/3JoHjOu06z1volpYQ4zo=
Subject key identifier: 8D:61:06:2C:AE:4E:14:0D:6D:81:6C:20:DA:6B:1C:9C:B4:BB:36:6D
Certificate issuer: /CN=cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968
Certificate serial: 0476
Authority key identifier: 4B:BB:65:D6:78:FD:C6:D1:04:8D:59:C2:E5:6C:F5:21:DA:14:DF:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ace8b0b1-8025-4d54-8a8f-09ea9f1fc049/89addd6e8186a7368a7ca33624bd4329d6aa1848.roa
Signing time: Sat 02 Dec 2023 00:50:48 +0000
ROA not before: Sat 02 Dec 2023 00:50:47 +0000
ROA not after: Tue 02 Dec 2025 00:50:47 +0000
asID: 264696
IP address blocks: 168.232.168.0/22 maxlen: 24
2803:9340::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968
Validity
Not Before: Dec 2 00:50:47 2023 GMT
Not After : Dec 2 00:50:47 2025 GMT
Subject: CN=89addd6e8186a7368a7ca33624bd4329d6aa1848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:a0:ad:1c:16:e7:5a:57:f8:20:39:b8:eb:
79:7b:a8:80:62:6e:60:dd:9f:8c:0c:18:f0:4c:25:
06:f4:bf:20:2e:a3:f8:15:7b:e6:bc:5d:40:72:9b:
d1:c4:e1:16:b8:31:20:ae:e8:de:1f:25:f5:45:54:
8e:70:74:e2:16:7e:8a:56:f1:89:b9:34:bb:f0:44:
37:ca:ff:fa:ac:85:5c:45:e6:82:10:c1:75:ac:1a:
c2:88:4b:3a:a5:a2:bd:aa:67:68:35:61:37:25:f2:
a9:81:a2:a5:9d:6c:57:82:c1:08:6b:e4:78:df:23:
43:02:ca:58:08:fe:09:6f:59:d4:6d:3a:bf:ec:5a:
ac:1f:71:f3:e6:fe:35:7b:8d:3d:0b:81:52:45:52:
2f:6c:d4:93:ed:60:ff:94:ad:0a:39:07:e0:c9:55:
2e:39:3f:09:56:83:92:9a:85:55:99:f8:72:b4:8c:
9d:4b:ef:fa:15:3d:c1:07:8c:37:2d:16:12:23:3b:
b6:2d:f8:49:0d:f5:cd:6f:5f:cb:70:73:fb:fc:08:
40:ae:7e:51:b2:90:bf:45:40:7c:f6:7a:99:09:a6:
42:b4:b3:59:13:4a:7b:91:ab:cf:3d:0c:3e:77:b9:
32:84:6b:04:cd:60:74:f9:df:16:5f:5e:b6:d2:22:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:61:06:2C:AE:4E:14:0D:6D:81:6C:20:DA:6B:1C:9C:B4:BB:36:6D
X509v3 Authority Key Identifier:
keyid:4B:BB:65:D6:78:FD:C6:D1:04:8D:59:C2:E5:6C:F5:21:DA:14:DF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ace8b0b1-8025-4d54-8a8f-09ea9f1fc049/89addd6e8186a7368a7ca33624bd4329d6aa1848.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ace8b0b1-8025-4d54-8a8f-09ea9f1fc049/cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.168.0/22
IPv6:
2803:9340::/32
Signature Algorithm: sha256WithRSAEncryption
a2:c7:5e:d0:44:d1:8e:d7:f9:aa:87:59:04:e7:3a:13:a2:f9:
d5:f7:b2:ac:f4:d8:14:7a:1b:0b:61:5d:2d:e3:4c:48:f4:ce:
eb:96:f2:19:a8:84:d3:f0:e7:a3:16:45:62:5f:00:8a:b3:7c:
b8:f0:ce:6a:11:38:08:0a:24:df:ae:5c:96:51:42:e5:f6:30:
18:5b:60:ad:28:48:e3:65:b0:1b:ca:0c:e8:36:77:e0:fa:4f:
bf:a3:f8:7e:b8:dd:77:4d:cf:4f:4b:b8:d6:8d:d1:32:f4:bd:
b1:9c:af:a6:f6:cc:b6:56:e3:1c:77:02:0e:56:15:3e:9b:57:
09:71:1f:ea:33:49:0b:e4:46:f4:76:3c:6e:aa:45:0f:d4:36:
58:90:86:56:b6:b1:6b:26:f9:bf:8c:ce:5d:2e:2a:a2:a8:05:
16:04:93:5a:ab:60:60:1b:d0:8f:3e:94:5d:95:8f:dc:dd:5d:
59:62:8f:5a:40:7a:dc:e1:2b:3d:18:49:26:03:5a:e1:a3:7d:
7a:5f:15:49:bf:30:1f:c7:be:67:81:53:6e:0c:60:7f:29:3d:
65:e6:31:1b:27:aa:30:0b:3a:81:74:b1:a0:9f:a2:45:66:55:
bf:8a:bc:0f:ce:38:88:2e:49:c8:18:06:eb:0f:9c:bc:ff:40:
66:8f:75:24
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoY2Iy
NWMxYjhlNWI1ZTliMDc3M2E1ZWE1YTRjYmNiYzE1ZjNhYTk2ODAeFw0yMzEyMDIw
MDUwNDdaFw0yNTEyMDIwMDUwNDdaMDMxMTAvBgNVBAMTKDg5YWRkZDZlODE4NmE3
MzY4YTdjYTMzNjI0YmQ0MzI5ZDZhYTE4NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYf6CtHBbnWlf4IDm463l7qIBibmDdn4wMGPBMJQb0vyAuo/gV
e+a8XUBym9HE4Ra4MSCu6N4fJfVFVI5wdOIWfopW8Ym5NLvwRDfK//qshVxF5oIQ
wXWsGsKISzqlor2qZ2g1YTcl8qmBoqWdbFeCwQhr5HjfI0MCylgI/glvWdRtOr/s
WqwfcfPm/jV7jT0LgVJFUi9s1JPtYP+UrQo5B+DJVS45PwlWg5KahVWZ+HK0jJ1L
7/oVPcEHjDctFhIjO7Yt+EkN9c1vX8twc/v8CECuflGykL9FQHz2epkJpkK0s1kT
SnuRq889DD53uTKEawTNYHT53xZfXrbSIg6nAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUjWEGLK5OFA1tgWwg2mscnLS7Nm0wHwYDVR0jBBgwFoAUS7tl1nj9xtEEjVnC
5Wz1IdoU3xIwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9jYjI1YzFi
OGU1YjVlOWIwNzczYTVlYTVhNGNiY2JjMTVmM2FhOTY4LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9hY2U4YjBiMS04MDI1LTRkNTQtOGE4Zi0wOWVhOWYx
ZmMwNDkvODlhZGRkNmU4MTg2YTczNjhhN2NhMzM2MjRiZDQzMjlkNmFhMTg0OC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2FjZThiMGIxLTgwMjUtNGQ1NC04YThmLTA5ZWE5
ZjFmYzA0OS9jYjI1YzFiOGU1YjVlOWIwNzczYTVlYTVhNGNiY2JjMTVmM2FhOTY4
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCqOioMA0EAgACMAcDBQAoA5NAMA0GCSqGSIb3DQEBCwUAA4IB
AQCix17QRNGO1/mqh1kE5zoTovnV97Ks9NgUehsLYV0t40xI9M7rlvIZqITT8Oej
FkViXwCKs3y48M5qETgICiTfrlyWUULl9jAYW2CtKEjjZbAbygzoNnfg+k+/o/h+
uN13Tc9PS7jWjdEy9L2xnK+m9sy2VuMcdwIOVhU+m1cJcR/qM0kL5Eb0djxuqkUP
1DZYkIZWtrFrJvm/jM5dLiqiqAUWBJNaq2BgG9CPPpRdlY/c3V1ZYo9aQHrc4Ss9
GEkmA1rho316XxVJvzAfx75ngVNuDGB/KT1l5jEbJ6owCzqBdLGgn6JFZlW/irwP
zjiILknIGAbrD5y8/0Bmj3Uk
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org