Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/ea7d24273b7946395447e6c40a6507e210f141d4.roa
File: ea7d24273b7946395447e6c40a6507e210f141d4.roa (raw, json)
Hash identifier: tlyPT0kgFNaJ3m+oOh+NuRTdR4iMwfvklzByJdy3Nuc=
Subject key identifier: D8:54:1E:A0:2E:A2:19:18:70:85:E1:ED:23:C3:B2:01:37:6B:BC:FE
Certificate issuer: /CN=3a61a7a9840080a44173f942095ac78ead239107
Certificate serial: 0C6EC0
Authority key identifier: 33:72:18:D6:D3:FD:14:5E:F1:AF:03:0A:D8:7B:62:9B:2B:B2:02:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a61a7a9840080a44173f942095ac78ead239107.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/ea7d24273b7946395447e6c40a6507e210f141d4.roa
Signing time: Thu 06 Oct 2022 18:41:18 +0000
ROA not before: Sun 08 Aug 2021 03:00:00 +0000
ROA not after: Thu 08 Aug 2030 03:00:00 +0000
asID: 64120
IP address blocks: 200.49.240.0/24 maxlen: 29
200.49.241.0/24 maxlen: 29
200.49.242.0/24 maxlen: 29
200.49.243.0/24 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 814784 (0xc6ec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a61a7a9840080a44173f942095ac78ead239107
Validity
Not Before: Aug 8 03:00:00 2021 GMT
Not After : Aug 8 03:00:00 2030 GMT
Subject: CN=ea7d24273b7946395447e6c40a6507e210f141d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:84:8f:7f:0d:44:3d:6b:58:a8:7f:02:0a:f1:
73:6a:ad:8b:a8:6e:27:9e:41:21:52:a7:77:6a:ef:
f4:8c:0b:f6:40:4c:65:65:ae:bb:70:61:03:dc:2e:
69:c7:3a:1a:05:20:d4:69:51:d9:b7:a8:cd:e5:ed:
0e:5b:97:a1:6b:37:e5:a2:16:5a:74:c6:78:d7:29:
78:9f:72:be:de:37:43:6f:a3:8a:95:05:f7:50:e3:
8b:a8:d8:91:8b:ce:29:6e:03:a3:1b:a0:62:43:f0:
fc:5f:0e:c9:1c:4b:52:78:67:b4:ca:b8:24:ca:24:
57:1a:b7:1e:bb:73:e4:e5:d9:30:2c:6a:92:fa:f1:
c3:04:7c:23:9c:e8:ba:5c:bf:fc:26:37:de:d6:dd:
64:fe:09:fc:1f:ae:16:db:b9:f7:68:e1:96:ed:25:
de:5d:05:65:29:3f:97:92:33:f5:28:3d:5c:ad:9e:
6a:48:ce:3c:ac:05:d9:cc:d9:ff:a5:34:39:ac:6d:
f5:d2:f8:64:f5:60:e5:c2:fa:2f:52:96:14:d2:86:
fe:ab:77:eb:f4:ba:08:1c:fa:81:fc:d7:09:68:6f:
59:bc:88:50:cd:05:56:a5:27:63:5e:c9:ed:ae:d9:
89:f2:c7:f1:8d:bf:43:d4:e0:37:53:38:5b:df:73:
26:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:54:1E:A0:2E:A2:19:18:70:85:E1:ED:23:C3:B2:01:37:6B:BC:FE
X509v3 Authority Key Identifier:
keyid:33:72:18:D6:D3:FD:14:5E:F1:AF:03:0A:D8:7B:62:9B:2B:B2:02:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a61a7a9840080a44173f942095ac78ead239107.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/ea7d24273b7946395447e6c40a6507e210f141d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/3a61a7a9840080a44173f942095ac78ead239107.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.49.240.0/22
Signature Algorithm: sha256WithRSAEncryption
09:87:02:4f:12:5c:65:52:6a:9c:a1:46:d7:a3:d4:42:24:32:
5d:ab:76:15:4d:8b:90:a4:90:60:6c:4e:b0:98:c1:d2:51:10:
72:9c:8e:5c:15:ae:a8:8f:32:88:c0:63:98:b0:46:c9:70:34:
a4:65:28:f0:0b:a7:29:60:6d:4c:7d:44:7e:ea:d3:d6:76:b5:
1d:51:eb:9f:23:fc:c9:5c:50:bc:cc:a4:54:34:5e:f0:df:39:
84:8c:c7:b6:60:c3:c9:7b:27:e9:8e:25:ad:57:c5:5a:7a:47:
f3:7f:44:05:f7:8c:7d:b9:43:7b:ea:11:8e:34:f6:a7:1c:96:
2b:3f:cf:e4:d6:bd:da:76:bf:17:2e:df:c5:f9:d5:4c:3a:7c:
d5:49:5f:03:fe:0e:9f:ea:28:a2:f6:d0:04:e9:84:09:38:4a:
d1:7a:a5:cb:8e:6f:78:f5:0c:80:5f:30:c2:af:96:2e:a2:6e:
b0:4b:f6:53:5d:51:0c:36:00:7a:b4:3d:9c:d3:da:df:1b:60:
78:13:9c:4a:6c:9d:4d:08:ed:d7:05:3c:77:78:61:3a:92:32:
51:0c:47:43:d5:aa:61:2e:33:27:1e:26:4a:8b:71:22:e1:4b:
20:58:b4:fb:c6:ab:11:24:7e:f2:33:3e:70:00:3d:07:4e:14:
21:61:96:8e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDG7AMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNh
NjFhN2E5ODQwMDgwYTQ0MTczZjk0MjA5NWFjNzhlYWQyMzkxMDcwHhcNMjEwODA4
MDMwMDAwWhcNMzAwODA4MDMwMDAwWjAzMTEwLwYDVQQDEyhlYTdkMjQyNzNiNzk0
NjM5NTQ0N2U2YzQwYTY1MDdlMjEwZjE0MWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmoSPfw1EPWtYqH8CCvFzaq2LqG4nnkEhUqd3au/0jAv2QExl
Za67cGED3C5pxzoaBSDUaVHZt6jN5e0OW5ehazflohZadMZ41yl4n3K+3jdDb6OK
lQX3UOOLqNiRi84pbgOjG6BiQ/D8Xw7JHEtSeGe0yrgkyiRXGrceu3Pk5dkwLGqS
+vHDBHwjnOi6XL/8Jjfe1t1k/gn8H64W27n3aOGW7SXeXQVlKT+XkjP1KD1crZ5q
SM48rAXZzNn/pTQ5rG310vhk9WDlwvovUpYU0ob+q3fr9LoIHPqB/NcJaG9ZvIhQ
zQVWpSdjXsntrtmJ8sfxjb9D1OA3Uzhb33Mm6wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNhUHqAuohkYcIXh7SPDsgE3a7z+MB8GA1UdIwQYMBaAFDNyGNbT/RRe8a8D
Cth7YpsrsgJ8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2E2MWE3
YTk4NDAwODBhNDQxNzNmOTQyMDk1YWM3OGVhZDIzOTEwNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjAwNmM1ZjMtYTBjNC00Yjg5LTkxZjctZWE2NDZi
YWQ1NzdmL2VhN2QyNDI3M2I3OTQ2Mzk1NDQ3ZTZjNDBhNjUwN2UyMTBmMTQxZDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMDA2YzVmMy1hMGM0LTRiODktOTFmNy1lYTY0
NmJhZDU3N2YvM2E2MWE3YTk4NDAwODBhNDQxNzNmOTQyMDk1YWM3OGVhZDIzOTEw
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsgx8DANBgkqhkiG9w0BAQsFAAOCAQEACYcCTxJcZVJqnKFG
16PUQiQyXat2FU2LkKSQYGxOsJjB0lEQcpyOXBWuqI8yiMBjmLBGyXA0pGUo8Aun
KWBtTH1EfurT1na1HVHrnyP8yVxQvMykVDRe8N85hIzHtmDDyXsn6Y4lrVfFWnpH
839EBfeMfblDe+oRjjT2pxyWKz/P5Na92na/Fy7fxfnVTDp81UlfA/4On+ooovbQ
BOmECThK0Xqly45vePUMgF8wwq+WLqJusEv2U11RDDYAerQ9nNPa3xtgeBOcSmyd
TQjt1wU8d3hhOpIyUQxHQ9WqYS4zJx4mSotxIuFLIFi0+8arESR+8jM+cAA9B04U
IWGWjg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org