Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcace1f2-688c-441b-9e31-007e18d52115/e7ea5cba30db25e0dea9a4a682c27f0663300f35.roa
File: e7ea5cba30db25e0dea9a4a682c27f0663300f35.roa (raw, json)
Hash identifier: mkZ3gPF7yY/ooA8wd2ntz+nMqBhiT03U4Lv0PjPhlQk=
Subject key identifier: 39:6D:A0:C6:A5:5C:13:22:10:94:6E:F7:5A:2B:1B:30:34:5B:89:47
Certificate issuer: /CN=1b7cd011cb92d7bcdc0d171ef2438570e26f0259
Certificate serial: 0DA8C0
Authority key identifier: 61:15:32:78:73:AB:8F:16:BB:E9:6B:2C:FF:7D:48:E0:2A:F0:AD:43
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b7cd011cb92d7bcdc0d171ef2438570e26f0259.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcace1f2-688c-441b-9e31-007e18d52115/e7ea5cba30db25e0dea9a4a682c27f0663300f35.roa
Signing time: Wed 24 Mar 2021 14:31:03 +0000
ROA not before: Wed 24 Mar 2021 14:31:03 +0000
ROA not after: Tue 24 Mar 2026 14:31:03 +0000
asID: 262934
IP address blocks: 168.227.144.0/22 maxlen: 24
191.102.248.0/21 maxlen: 24
2803:fa80::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895168 (0xda8c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b7cd011cb92d7bcdc0d171ef2438570e26f0259
Validity
Not Before: Mar 24 14:31:03 2021 GMT
Not After : Mar 24 14:31:03 2026 GMT
Subject: CN=e7ea5cba30db25e0dea9a4a682c27f0663300f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:55:18:cb:7d:9f:0b:d1:54:94:c3:84:e4:
8a:82:f8:11:d5:2c:f4:42:75:ad:c6:4d:0a:47:d4:
d3:8d:c7:6e:93:28:18:cb:53:1f:54:5d:cd:a9:3f:
8d:88:cd:3f:e5:d0:af:8b:42:a7:46:23:5d:87:65:
93:52:09:6b:d0:92:fd:4e:52:d7:8e:5f:5d:ed:8f:
be:d5:63:79:20:e9:0c:1c:a5:63:e8:e0:fe:0c:68:
0a:44:77:f2:35:06:52:71:a3:d0:a4:a9:c1:aa:29:
71:b5:38:b9:6e:23:09:3a:ce:db:af:5c:68:5a:3f:
14:57:ca:e4:f1:b4:b2:11:e1:61:50:75:ff:de:0d:
3a:37:ff:86:38:77:10:7e:b4:f5:66:8b:db:be:f1:
26:0b:5a:29:2f:b4:11:54:7f:90:bb:9c:9c:3b:b7:
ee:23:1b:72:06:c1:75:15:65:e7:13:01:b9:26:ee:
25:a9:bb:d9:03:32:c5:82:57:7d:47:d1:f3:7e:db:
bd:e5:16:0b:39:36:cd:06:0f:53:74:ba:40:46:91:
d5:ad:39:49:32:05:62:45:5f:12:13:09:41:d7:ae:
5a:00:1c:66:e6:05:ec:f2:0f:86:3f:2e:0d:37:b0:
bd:26:6f:e7:f6:bf:15:9f:49:12:23:ff:30:bf:64:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6D:A0:C6:A5:5C:13:22:10:94:6E:F7:5A:2B:1B:30:34:5B:89:47
X509v3 Authority Key Identifier:
keyid:61:15:32:78:73:AB:8F:16:BB:E9:6B:2C:FF:7D:48:E0:2A:F0:AD:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b7cd011cb92d7bcdc0d171ef2438570e26f0259.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcace1f2-688c-441b-9e31-007e18d52115/e7ea5cba30db25e0dea9a4a682c27f0663300f35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcace1f2-688c-441b-9e31-007e18d52115/1b7cd011cb92d7bcdc0d171ef2438570e26f0259.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.144.0/22
191.102.248.0/21
IPv6:
2803:fa80::/32
Signature Algorithm: sha256WithRSAEncryption
8c:f0:2b:10:bf:fa:41:86:fc:55:91:a7:b1:4b:7f:03:7e:76:
2e:4c:95:c3:4f:b8:26:f2:3d:0e:32:47:1a:bd:15:98:f0:0b:
a4:ae:b2:c7:71:7e:5c:53:75:79:45:81:24:2e:3b:ca:3f:60:
f8:2d:18:3e:7f:7d:d8:64:af:63:aa:f7:4a:5e:1b:0d:ce:e4:
61:12:79:23:47:75:15:ee:2c:73:8f:ba:1f:30:40:b7:32:1f:
35:ca:66:a7:79:3d:ef:61:77:85:82:28:c8:23:78:1a:2a:9a:
23:43:1e:fb:19:3d:4d:49:cb:5f:d4:2c:b7:f2:c7:83:a9:10:
e4:cf:59:68:87:d3:c8:65:8f:e8:0c:32:6b:4f:a1:f1:c4:88:
db:61:f1:7b:99:f7:82:44:c3:f5:94:2c:0e:94:c3:91:f5:21:
b8:5d:d3:86:77:db:d8:fc:f1:d8:f4:9e:ec:56:34:74:0d:5e:
43:70:86:d9:32:62:8d:e7:0a:c7:09:a3:4c:92:2e:bb:14:7d:
1c:0a:09:e3:c9:33:8b:9d:5a:e8:c5:4a:0f:19:b8:61:25:36:
31:f1:b3:4f:5e:bd:af:9b:d6:5a:5f:b4:1b:58:e2:e3:e2:f6:
3b:bf:95:bf:3f:49:15:0a:04:d4:11:1e:81:ce:a6:4e:d6:c8:
70:b4:3f:40
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDDajAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFi
N2NkMDExY2I5MmQ3YmNkYzBkMTcxZWYyNDM4NTcwZTI2ZjAyNTkwHhcNMjEwMzI0
MTQzMTAzWhcNMjYwMzI0MTQzMTAzWjAzMTEwLwYDVQQDEyhlN2VhNWNiYTMwZGIy
NWUwZGVhOWE0YTY4MmMyN2YwNjYzMzAwZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmQ5VGMt9nwvRVJTDhOSKgvgR1Sz0QnWtxk0KR9TTjcdukygY
y1MfVF3NqT+NiM0/5dCvi0KnRiNdh2WTUglr0JL9TlLXjl9d7Y++1WN5IOkMHKVj
6OD+DGgKRHfyNQZScaPQpKnBqilxtTi5biMJOs7br1xoWj8UV8rk8bSyEeFhUHX/
3g06N/+GOHcQfrT1ZovbvvEmC1opL7QRVH+Qu5ycO7fuIxtyBsF1FWXnEwG5Ju4l
qbvZAzLFgld9R9Hzftu95RYLOTbNBg9TdLpARpHVrTlJMgViRV8SEwlB165aABxm
5gXs8g+GPy4NN7C9Jm/n9r8Vn0kSI/8wv2R9tQIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFDltoMalXBMiEJRu91orGzA0W4lHMB8GA1UdIwQYMBaAFGEVMnhzq48Wu+lr
LP99SOAq8K1DMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWI3Y2Qw
MTFjYjkyZDdiY2RjMGQxNzFlZjI0Mzg1NzBlMjZmMDI1OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmNhY2UxZjItNjg4Yy00NDFiLTllMzEtMDA3ZTE4
ZDUyMTE1L2U3ZWE1Y2JhMzBkYjI1ZTBkZWE5YTRhNjgyYzI3ZjA2NjMzMDBmMzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iY2FjZTFmMi02ODhjLTQ0MWItOWUzMS0wMDdl
MThkNTIxMTUvMWI3Y2QwMTFjYjkyZDdiY2RjMGQxNzFlZjI0Mzg1NzBlMjZmMDI1
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAqjjkAMEA79m+DANBAIAAjAHAwUAKAP6gDANBgkqhkiG9w0B
AQsFAAOCAQEAjPArEL/6QYb8VZGnsUt/A352LkyVw0+4JvI9DjJHGr0VmPALpK6y
x3F+XFN1eUWBJC47yj9g+C0YPn992GSvY6r3Sl4bDc7kYRJ5I0d1Fe4sc4+6HzBA
tzIfNcpmp3k972F3hYIoyCN4GiqaI0Me+xk9TUnLX9Qst/LHg6kQ5M9ZaIfTyGWP
6Awya0+h8cSI22Hxe5n3gkTD9ZQsDpTDkfUhuF3Thnfb2Pzx2PSe7FY0dA1eQ3CG
2TJijecKxwmjTJIuuxR9HAoJ48kzi51a6MVKDxm4YSU2MfGzT169r5vWWl+0G1ji
4+L2O7+Vvz9JFQoE1BEegc6mTtbIcLQ/QA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org