Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/ef4721bf927ba104ec9a98411598cf7fb85f3f8b.roa
File: ef4721bf927ba104ec9a98411598cf7fb85f3f8b.roa (raw, json)
Hash identifier: uA9O4KjehOaiPgQuor9gfJCgLXIPDYBo+V0T1ojCCG8=
Subject key identifier: 66:8B:38:6F:6B:D1:77:04:69:78:6F:1A:AC:E6:46:47:53:A3:80:87
Certificate issuer: /CN=71a464f59d46ac27cdbcbb0efe6e417e3717efd0
Certificate serial: 06B013
Authority key identifier: 50:06:D9:00:0E:20:81:07:C1:3A:6B:1F:EA:9B:3D:4C:9F:EF:69:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71a464f59d46ac27cdbcbb0efe6e417e3717efd0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/ef4721bf927ba104ec9a98411598cf7fb85f3f8b.roa
Signing time: Thu 29 Jun 2023 16:34:12 +0000
ROA not before: Wed 28 Jun 2023 16:34:12 +0000
ROA not after: Sun 29 Jun 2025 16:34:12 +0000
asID: 8026
IP address blocks: 200.4.16.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438291 (0x6b013)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a464f59d46ac27cdbcbb0efe6e417e3717efd0
Validity
Not Before: Jun 28 16:34:12 2023 GMT
Not After : Jun 29 16:34:12 2025 GMT
Subject: CN=ef4721bf927ba104ec9a98411598cf7fb85f3f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:60:17:21:80:ff:44:33:da:f1:59:cd:1a:
b4:6f:ff:9d:fd:51:da:b4:5e:dd:f5:a6:46:54:78:
31:90:3d:e4:01:97:09:5c:4e:82:38:4b:d6:b2:9d:
5e:e0:36:fc:36:d0:e8:e6:59:f2:93:2b:2f:a5:52:
1e:19:da:c7:e1:d4:44:4c:9d:a1:fd:6c:3e:78:af:
df:b4:bd:b0:a9:29:4f:c5:94:c2:1e:f7:1c:fd:01:
31:e8:a5:0d:84:4e:4b:4e:0a:09:c3:b3:98:f6:63:
c9:b8:b3:20:37:44:ae:7b:83:f1:c6:5e:36:b1:47:
78:ab:d3:b6:b6:86:64:9a:3d:ea:6a:38:f0:0f:fe:
0a:2c:40:81:e8:93:04:db:91:c5:a7:21:af:58:c9:
99:52:10:db:5a:16:b0:37:49:82:be:f8:13:99:3b:
bd:f3:bd:0f:05:2e:79:fc:1d:b4:a2:8b:54:d1:17:
29:03:2b:5e:ab:12:77:f2:6c:19:22:dc:e2:14:b0:
40:67:24:cb:c3:cf:49:7c:6a:b6:1f:17:0a:be:ca:
f9:74:a8:6c:a8:ee:29:4b:37:34:9e:b8:8a:e7:4b:
99:8a:51:1f:e1:32:2b:78:67:c8:16:76:40:66:ba:
1c:89:4c:2f:5a:51:5e:8d:db:0c:e8:10:da:5e:f8:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8B:38:6F:6B:D1:77:04:69:78:6F:1A:AC:E6:46:47:53:A3:80:87
X509v3 Authority Key Identifier:
keyid:50:06:D9:00:0E:20:81:07:C1:3A:6B:1F:EA:9B:3D:4C:9F:EF:69:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71a464f59d46ac27cdbcbb0efe6e417e3717efd0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/ef4721bf927ba104ec9a98411598cf7fb85f3f8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/71a464f59d46ac27cdbcbb0efe6e417e3717efd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.4.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:7f:31:cb:18:63:c1:cf:45:de:c7:ab:54:2e:45:6e:ed:6c:
2e:b4:3a:2a:0a:8d:e6:b5:98:61:40:02:62:37:f2:84:ae:55:
7e:3b:36:70:6f:b0:4e:34:92:07:9b:45:f0:13:f3:d6:14:1b:
b4:f6:ed:5e:f4:ea:c3:4e:ec:50:0b:b8:6c:ca:6e:15:0f:ec:
b5:c2:c7:27:4d:48:3b:fe:c8:51:08:d8:75:fd:ef:f0:5e:39:
ed:f1:ff:05:f2:ac:65:86:82:92:50:40:e1:22:79:a6:8d:4a:
84:5a:c8:9e:3b:c0:8f:72:05:7a:31:0a:a0:0b:8f:ae:80:6a:
20:75:ca:fa:12:45:8f:5d:a3:52:e0:27:e3:f3:13:b0:3c:21:
7b:9a:e9:e6:b9:90:0e:0b:da:ed:75:fe:a2:7a:22:c4:0a:51:
8f:99:55:89:2f:d8:61:c7:76:98:71:e1:88:56:ba:91:71:83:
58:9c:a7:ff:38:c4:c3:89:b5:c1:b5:a4:f4:6b:27:46:5a:49:
cf:8c:e0:90:2f:d5:c8:df:bd:d7:23:f5:08:3c:27:5b:16:ec:
7f:73:fc:2f:55:9c:21:28:0d:cc:04:68:ea:29:99:56:f2:8a:
d5:60:26:6d:74:1a:69:d8:62:e5:ae:c6:2b:79:a9:a9:79:66:
a9:e6:2b:ab
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBrATMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx
YTQ2NGY1OWQ0NmFjMjdjZGJjYmIwZWZlNmU0MTdlMzcxN2VmZDAwHhcNMjMwNjI4
MTYzNDEyWhcNMjUwNjI5MTYzNDEyWjAzMTEwLwYDVQQDEyhlZjQ3MjFiZjkyN2Jh
MTA0ZWM5YTk4NDExNTk4Y2Y3ZmI4NWYzZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAorFgFyGA/0Qz2vFZzRq0b/+d/VHatF7d9aZGVHgxkD3kAZcJ
XE6COEvWsp1e4Db8NtDo5lnykysvpVIeGdrH4dRETJ2h/Ww+eK/ftL2wqSlPxZTC
Hvcc/QEx6KUNhE5LTgoJw7OY9mPJuLMgN0Sue4Pxxl42sUd4q9O2toZkmj3qajjw
D/4KLECB6JME25HFpyGvWMmZUhDbWhawN0mCvvgTmTu9870PBS55/B20ootU0Rcp
AyteqxJ38mwZItziFLBAZyTLw89JfGq2HxcKvsr5dKhsqO4pSzc0nriK50uZilEf
4TIreGfIFnZAZrociUwvWlFejdsM6BDaXvjAvQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGaLOG9r0XcEaXhvGqzmRkdTo4CHMB8GA1UdIwQYMBaAFFAG2QAOIIEHwTpr
H+qbPUyf72m5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzFhNDY0
ZjU5ZDQ2YWMyN2NkYmNiYjBlZmU2ZTQxN2UzNzE3ZWZkMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmFkZWU5MWEtMzVjMC00NjM0LWJlOWItNTgzODUz
NWQ0YTAyL2VmNDcyMWJmOTI3YmExMDRlYzlhOTg0MTE1OThjZjdmYjg1ZjNmOGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYWRlZTkxYS0zNWMwLTQ2MzQtYmU5Yi01ODM4
NTM1ZDRhMDIvNzFhNDY0ZjU5ZDQ2YWMyN2NkYmNiYjBlZmU2ZTQxN2UzNzE3ZWZk
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBMgEEDANBgkqhkiG9w0BAQsFAAOCAQEADX8xyxhjwc9F3ser
VC5Fbu1sLrQ6KgqN5rWYYUACYjfyhK5Vfjs2cG+wTjSSB5tF8BPz1hQbtPbtXvTq
w07sUAu4bMpuFQ/stcLHJ01IO/7IUQjYdf3v8F457fH/BfKsZYaCklBA4SJ5po1K
hFrInjvAj3IFejEKoAuProBqIHXK+hJFj12jUuAn4/MTsDwhe5rp5rmQDgva7XX+
onoixApRj5lViS/YYcd2mHHhiFa6kXGDWJyn/zjEw4m1wbWk9GsnRlpJz4zgkC/V
yN+91yP1CDwnWxbsf3P8L1WcISgNzARo6imZVvKK1WAmbXQaadhi5a7GK3mpqXlm
qeYrqw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org