Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/5a0f008ffdd9009ef065a621c1fa4550193edd52.roa
File: 5a0f008ffdd9009ef065a621c1fa4550193edd52.roa (raw, json)
Hash identifier: p2rddfTGtr8yYsKb+IVU27NuD2ndE/I27ovaLEr/dPg=
Subject key identifier: 31:2A:8C:32:03:6E:B4:1C:2C:71:34:E3:7C:DF:69:76:32:4D:BF:75
Certificate issuer: /CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Certificate serial: 23BA97
Authority key identifier: E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/5a0f008ffdd9009ef065a621c1fa4550193edd52.roa
Signing time: Wed 22 Nov 2023 12:26:05 +0000
ROA not before: Wed 22 Nov 2023 12:26:05 +0000
ROA not after: Sat 22 Nov 2025 12:26:05 +0000
asID: 7005
IP address blocks: 200.115.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2341527 (0x23ba97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Validity
Not Before: Nov 22 12:26:05 2023 GMT
Not After : Nov 22 12:26:05 2025 GMT
Subject: CN=5a0f008ffdd9009ef065a621c1fa4550193edd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a8:d0:97:91:8a:88:5f:b6:ac:61:e6:eb:7f:
98:13:d9:d5:ef:f3:86:88:d6:01:16:69:39:1b:7d:
20:8e:f1:78:13:68:97:c1:99:80:cf:bc:0c:b6:fe:
48:73:46:e5:24:fb:2e:fa:dc:6b:ad:ac:2f:c1:b8:
a1:44:9e:a0:1a:22:fc:80:be:85:cd:9e:8e:0b:01:
49:0f:9b:2b:b6:cd:fc:e3:e8:32:36:e9:ff:2f:25:
a6:29:d3:95:4a:ee:0c:7c:92:19:a4:07:98:ba:8c:
79:d1:b0:3e:3f:57:67:df:77:57:e9:34:59:3b:a4:
f5:21:fa:ce:92:bb:76:82:e9:a7:cf:c2:e6:cf:6a:
26:d5:d9:eb:b6:62:d3:cf:31:d7:0d:95:78:6a:d6:
24:05:5e:7a:5d:7a:34:c2:42:27:5a:2c:77:3a:f2:
b4:d9:03:3e:12:b9:e5:bf:47:a2:30:5d:84:f2:b8:
2c:47:99:d2:64:dd:ef:eb:71:b8:69:de:db:68:53:
93:95:16:31:d1:22:45:6b:fd:93:15:54:dd:7b:01:
5e:79:f8:b5:10:2e:59:ec:c3:36:0b:f9:ee:5b:08:
8d:2e:90:bb:e5:62:7b:fa:6f:23:25:6e:bf:8a:61:
33:96:8e:e4:0e:17:53:16:9e:c0:29:99:e8:e7:d5:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2A:8C:32:03:6E:B4:1C:2C:71:34:E3:7C:DF:69:76:32:4D:BF:75
X509v3 Authority Key Identifier:
keyid:E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/5a0f008ffdd9009ef065a621c1fa4550193edd52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.24.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d6:fd:68:c6:b9:96:3b:0b:e4:ad:db:f4:44:0c:5f:85:b3:
6f:c3:af:55:1f:c0:b3:89:8b:33:3f:0e:73:68:55:9c:7f:07:
b7:95:54:7d:3e:59:a7:2f:9a:9e:4b:b7:ce:15:20:e9:5e:f2:
78:6a:a1:34:fb:ad:02:ea:b5:f8:43:5d:40:2f:e8:08:e1:7a:
21:82:59:19:fe:7f:9a:a7:ef:b1:71:e9:c1:38:15:d2:9d:12:
68:2b:62:6b:fa:77:7f:13:54:a9:fb:2a:59:b9:93:de:75:0b:
6b:a3:c0:69:46:41:4b:be:69:79:f6:80:07:e6:e7:af:f8:29:
db:90:d3:8b:34:58:d9:c3:fb:ca:ba:d0:2d:eb:17:83:0a:eb:
7c:3e:2d:08:45:43:81:ed:05:ef:f5:77:1f:5e:63:96:fd:6e:
5c:a5:98:2b:6d:85:d1:59:43:28:6e:67:4d:d7:22:d2:f6:d6:
a9:3f:a3:2d:c7:8c:c6:e0:77:11:36:75:c6:b1:ad:30:7d:92:
50:88:8e:4b:2f:b7:a9:83:99:cb:b9:cb:65:5a:5a:3f:48:ed:
54:db:f7:b7:53:fa:e2:bb:a9:8f:7f:55:ab:a6:5d:e5:d5:d1:
48:d3:c0:25:38:d2:cc:21:0a:80:a5:06:b7:ee:d9:45:f4:46:
12:ee:11:3a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI7qXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJm
ZmZjMWUwYmI2ZDVmZWE4NTI5YzRmZTY1YmRhNzZmNzJkNGM4OGMwHhcNMjMxMTIy
MTIyNjA1WhcNMjUxMTIyMTIyNjA1WjAzMTEwLwYDVQQDEyg1YTBmMDA4ZmZkZDkw
MDllZjA2NWE2MjFjMWZhNDU1MDE5M2VkZDUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlqjQl5GKiF+2rGHm63+YE9nV7/OGiNYBFmk5G30gjvF4E2iX
wZmAz7wMtv5Ic0blJPsu+txrrawvwbihRJ6gGiL8gL6FzZ6OCwFJD5srts384+gy
Nun/LyWmKdOVSu4MfJIZpAeYuox50bA+P1dn33dX6TRZO6T1IfrOkrt2gumnz8Lm
z2om1dnrtmLTzzHXDZV4atYkBV56XXo0wkInWix3OvK02QM+Ernlv0eiMF2E8rgs
R5nSZN3v63G4ad7baFOTlRYx0SJFa/2TFVTdewFeefi1EC5Z7MM2C/nuWwiNLpC7
5WJ7+m8jJW6/imEzlo7kDhdTFp7AKZno59VhqwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDEqjDIDbrQcLHE043zfaXYyTb91MB8GA1UdIwQYMBaAFOKxgIx8ev/AjDHz
50OUxayJBKaoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmZmZmMx
ZTBiYjZkNWZlYTg1MjljNGZlNjViZGE3NmY3MmQ0Yzg4Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjI0NzZhNDgtM2RjOS00NzM2LWJmOWYtZDc2MWJh
ZjQzN2MyLzVhMGYwMDhmZmRkOTAwOWVmMDY1YTYyMWMxZmE0NTUwMTkzZWRkNTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMjQ3NmE0OC0zZGM5LTQ3MzYtYmY5Zi1kNzYx
YmFmNDM3YzIvMmZmZmMxZTBiYjZkNWZlYTg1MjljNGZlNjViZGE3NmY3MmQ0Yzg4
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhzGDANBgkqhkiG9w0BAQsFAAOCAQEAO9b9aMa5ljsL5K3b
9EQMX4Wzb8OvVR/As4mLMz8Oc2hVnH8Ht5VUfT5Zpy+anku3zhUg6V7yeGqhNPut
Auq1+ENdQC/oCOF6IYJZGf5/mqfvsXHpwTgV0p0SaCtia/p3fxNUqfsqWbmT3nUL
a6PAaUZBS75pefaAB+bnr/gp25DTizRY2cP7yrrQLesXgwrrfD4tCEVDge0F7/V3
H15jlv1uXKWYK22F0VlDKG5nTdci0vbWqT+jLceMxuB3ETZ1xrGtMH2SUIiOSy+3
qYOZy7nLZVpaP0jtVNv3t1P64rupj39Vq6Zd5dXRSNPAJTjSzCEKgKUGt+7ZRfRG
Eu4ROg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org