Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/41672042caa76f120ce394b8141d28f7a8ff05e0.roa
File: 41672042caa76f120ce394b8141d28f7a8ff05e0.roa (raw, json)
Hash identifier: 5psgV0m2PkNdwyJ10/sF6RMpne/nc2CsukXpXVGd8HM=
Subject key identifier: 34:A8:8A:6A:C8:B4:6E:27:69:4C:B9:6B:72:E8:99:CE:FA:0D:CF:79
Certificate issuer: /CN=8ec75d0ca59e365a5c0a68c7f4ea3709b805a441
Certificate serial: 09DCEB
Authority key identifier: 12:96:28:D8:49:3C:C6:4B:7E:44:C0:23:24:58:62:CA:E6:F8:97:92
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/41672042caa76f120ce394b8141d28f7a8ff05e0.roa
Signing time: Wed 24 Mar 2021 14:29:55 +0000
ROA not before: Wed 24 Mar 2021 14:29:55 +0000
ROA not after: Tue 24 Mar 2026 14:29:55 +0000
asID: 264795
IP address blocks: 170.238.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646379 (0x9dceb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec75d0ca59e365a5c0a68c7f4ea3709b805a441
Validity
Not Before: Mar 24 14:29:55 2021 GMT
Not After : Mar 24 14:29:55 2026 GMT
Subject: CN=41672042caa76f120ce394b8141d28f7a8ff05e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:83:c6:cc:91:b0:a0:c0:1b:ce:cf:d1:0c:f6:
7c:11:f2:f7:85:b9:9e:18:58:e5:5d:a1:c7:a0:7d:
ca:d1:f0:71:aa:79:82:57:16:4a:2f:c4:98:0f:1a:
e7:09:c8:cb:41:89:e8:63:4e:b2:a5:d2:5a:10:87:
6f:43:73:de:14:d8:b9:97:c6:2d:29:b6:33:18:de:
c4:8e:80:11:b5:ab:2f:0c:68:ee:02:66:1c:3d:09:
49:ed:82:9d:7a:41:b5:44:25:62:f7:b5:ea:9b:c6:
da:ed:15:91:76:48:77:db:9b:fe:68:3c:bb:6a:3c:
a0:d1:24:01:fb:17:48:3b:91:1e:87:05:c0:25:8e:
34:01:82:85:c3:c4:a4:69:d4:fb:1f:ab:ce:37:c6:
2b:fb:af:4b:54:4d:8c:f5:9a:34:59:38:3a:b7:54:
10:08:0c:ec:f5:4c:57:2e:e9:32:01:48:0e:56:db:
ac:97:17:17:17:19:78:24:aa:37:a3:9e:7d:0e:d9:
6d:6e:65:05:a8:14:e1:06:4a:4f:4c:cb:6e:4e:b5:
4f:aa:e1:a1:4c:1e:01:f1:31:da:db:a0:6e:64:a7:
1a:66:9f:c6:97:a9:f1:d7:4a:9d:79:30:d4:1b:b1:
68:72:79:fc:d9:8b:6b:6c:5f:58:58:33:d8:4a:cd:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A8:8A:6A:C8:B4:6E:27:69:4C:B9:6B:72:E8:99:CE:FA:0D:CF:79
X509v3 Authority Key Identifier:
keyid:12:96:28:D8:49:3C:C6:4B:7E:44:C0:23:24:58:62:CA:E6:F8:97:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/41672042caa76f120ce394b8141d28f7a8ff05e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.42.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:d5:e7:af:25:d4:91:a6:65:7e:2a:c1:b0:b6:4b:33:e3:96:
fe:7c:d3:4e:9e:e0:cb:f2:5e:34:a4:46:bc:19:4a:9e:02:57:
4b:e7:53:e1:7c:b5:57:aa:bd:b6:0e:e3:48:b3:78:7d:5f:50:
40:a3:03:33:52:a6:f7:b9:14:41:00:a6:0c:99:8f:4b:be:86:
f4:c0:9a:1b:90:e0:c3:5e:9d:a6:02:8d:6d:79:ff:eb:3e:57:
09:d3:07:64:f1:91:77:7d:e8:75:df:02:5e:16:01:5d:eb:bc:
fd:b2:24:f5:d7:4d:e6:5c:7a:20:3a:32:d1:29:4b:11:ee:ee:
b9:70:5a:53:65:0d:ba:9b:31:19:79:22:3a:c7:ec:15:1c:77:
6e:4d:d9:09:c5:06:8c:92:80:06:e9:37:b4:33:63:e2:ec:d3:
33:29:0d:08:85:a6:51:51:03:68:42:5d:f4:63:8f:d4:91:24:
11:dd:b9:3e:fc:4d:21:d7:62:9b:b7:83:f6:49:86:ef:e0:75:
fe:ec:b0:6c:35:d4:52:ed:6b:d0:90:b1:f5:84:1c:17:e9:61:
20:8a:48:bb:07:0b:55:62:ae:32:11:ee:f6:54:d4:0c:ec:f0:
42:ca:61:84:4c:00:2e:00:c3:8e:2a:5b:e3:3d:61:4f:06:cb:
db:cc:d7:0f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCdzrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhl
Yzc1ZDBjYTU5ZTM2NWE1YzBhNjhjN2Y0ZWEzNzA5YjgwNWE0NDEwHhcNMjEwMzI0
MTQyOTU1WhcNMjYwMzI0MTQyOTU1WjAzMTEwLwYDVQQDEyg0MTY3MjA0MmNhYTc2
ZjEyMGNlMzk0YjgxNDFkMjhmN2E4ZmYwNWUwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg4PGzJGwoMAbzs/RDPZ8EfL3hbmeGFjlXaHHoH3K0fBxqnmC
VxZKL8SYDxrnCcjLQYnoY06ypdJaEIdvQ3PeFNi5l8YtKbYzGN7EjoARtasvDGju
AmYcPQlJ7YKdekG1RCVi97Xqm8ba7RWRdkh325v+aDy7ajyg0SQB+xdIO5EehwXA
JY40AYKFw8SkadT7H6vON8Yr+69LVE2M9Zo0WTg6t1QQCAzs9UxXLukyAUgOVtus
lxcXFxl4JKo3o559DtltbmUFqBThBkpPTMtuTrVPquGhTB4B8THa26BuZKcaZp/G
l6nx10qdeTDUG7Focnn82YtrbF9YWDPYSs0GWQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDSoimrItG4naUy5a3Lomc76Dc95MB8GA1UdIwQYMBaAFBKWKNhJPMZLfkTA
IyRYYsrm+JeSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGVjNzVk
MGNhNTllMzY1YTVjMGE2OGM3ZjRlYTM3MDliODA1YTQ0MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmEzNzE5ZWYtZTMyNy00ODljLWE1NDUtNTRmNWFl
NWMwYThkLzQxNjcyMDQyY2FhNzZmMTIwY2UzOTRiODE0MWQyOGY3YThmZjA1ZTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYTM3MTllZi1lMzI3LTQ4OWMtYTU0NS01NGY1
YWU1YzBhOGQvOGVjNzVkMGNhNTllMzY1YTVjMGE2OGM3ZjRlYTM3MDliODA1YTQ0
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaruKjANBgkqhkiG9w0BAQsFAAOCAQEAmtXnryXUkaZlfirB
sLZLM+OW/nzTTp7gy/JeNKRGvBlKngJXS+dT4Xy1V6q9tg7jSLN4fV9QQKMDM1Km
97kUQQCmDJmPS76G9MCaG5Dgw16dpgKNbXn/6z5XCdMHZPGRd33odd8CXhYBXeu8
/bIk9ddN5lx6IDoy0SlLEe7uuXBaU2UNupsxGXkiOsfsFRx3bk3ZCcUGjJKABuk3
tDNj4uzTMykNCIWmUVEDaEJd9GOP1JEkEd25PvxNIddim7eD9kmG7+B1/uywbDXU
Uu1r0JCx9YQcF+lhIIpIuwcLVWKuMhHu9lTUDOzwQsphhEwALgDDjipb4z1hTwbL
28zXDw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org