Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/a09b5cf58b2142bc50f5e632d4f505fb0de13f18.roa
File: a09b5cf58b2142bc50f5e632d4f505fb0de13f18.roa (raw, json)
Hash identifier: GkUR07eiOyRS2nElxeEQaSjSmi4tD4iCqImIuJbdSPs=
Subject key identifier: 2C:69:15:1E:6C:A1:26:11:C0:73:32:81:88:1C:C7:3B:D4:91:57:0D
Certificate issuer: /CN=fdfd425584dd260c812e3b649911e7753efa8f09
Certificate serial: 16EC8C
Authority key identifier: BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/a09b5cf58b2142bc50f5e632d4f505fb0de13f18.roa
Signing time: Thu 28 Apr 2022 01:14:11 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 264819
IP address blocks: 170.80.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1502348 (0x16ec8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdfd425584dd260c812e3b649911e7753efa8f09
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=a09b5cf58b2142bc50f5e632d4f505fb0de13f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0c:df:fa:86:d2:26:da:fc:22:79:39:1c:f1:
87:8d:8c:9b:11:10:44:8b:57:30:8c:27:27:68:bc:
b6:3f:85:5c:39:7d:0b:b7:0d:ed:78:9b:3b:fc:c3:
e5:7a:60:c6:76:b2:a6:9b:a7:5e:a4:57:90:83:23:
cc:5a:e1:29:dd:ac:69:8d:75:7d:42:b3:a3:b6:fa:
d6:f9:da:da:f2:75:24:ae:1d:5e:f9:8f:1b:88:d4:
b8:07:d1:e5:24:6e:5e:7e:7e:70:29:49:de:40:a9:
d1:f7:71:ee:53:74:9b:1b:4d:6f:8e:f7:8d:de:13:
66:78:f6:a4:ac:b4:c4:7f:65:74:2f:1f:a1:2d:02:
89:55:c1:eb:ab:18:f3:df:78:5b:94:e7:7d:3a:b2:
15:ea:dc:df:66:f6:03:cb:03:73:7c:8e:a6:63:29:
0f:14:e5:76:22:a5:11:f5:c3:d7:fd:c9:00:7a:c3:
86:ad:d3:0e:3c:17:fd:d3:86:88:cb:d9:c9:7b:eb:
b5:83:12:18:2b:7d:62:79:b2:8b:6b:ff:8a:8f:02:
ef:3e:4a:9b:fe:a8:44:48:77:b1:fe:15:df:5f:8a:
92:73:54:93:de:e2:6e:64:6b:18:44:ae:04:65:fc:
0a:be:0c:8b:66:f0:a2:92:45:0c:8f:7e:6d:8d:ad:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:69:15:1E:6C:A1:26:11:C0:73:32:81:88:1C:C7:3B:D4:91:57:0D
X509v3 Authority Key Identifier:
keyid:BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/a09b5cf58b2142bc50f5e632d4f505fb0de13f18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/fdfd425584dd260c812e3b649911e7753efa8f09.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.140.0/22
Signature Algorithm: sha256WithRSAEncryption
98:d2:a5:97:f5:bd:03:a5:43:ea:5e:fe:56:d6:6c:50:4c:f4:
6b:7f:0d:68:38:14:0d:34:5a:c7:cd:13:ab:5f:44:67:16:37:
f4:95:3d:a9:e7:d4:9e:73:41:eb:1b:49:94:1c:e1:19:3f:27:
ce:ea:fc:5d:30:65:fd:7e:b2:5d:a5:fc:1e:7c:c7:73:da:fe:
f0:1e:7e:5e:66:ea:43:59:59:85:bc:4a:39:a5:b0:fb:4c:78:
e4:e3:e2:44:c2:06:45:02:46:6d:c2:aa:e7:fb:62:99:97:ac:
9f:ad:bc:af:80:a9:e8:ff:0f:66:d0:e3:48:f2:d9:0c:ca:3f:
54:46:71:91:38:d2:e8:c8:d5:d5:0e:95:dd:45:fd:da:3b:9e:
2e:e9:1c:a0:53:77:f9:95:0f:24:3b:a2:e7:91:cb:20:56:f6:
33:09:b3:1c:94:00:7d:e9:37:a8:3e:02:96:42:17:eb:47:e2:
24:a2:dc:70:86:1b:59:df:e6:c0:28:30:56:69:ea:65:e6:4a:
11:b8:a8:8f:30:81:76:cb:54:bd:8a:a4:c3:e6:91:4d:0e:c7:
10:61:39:88:ad:68:45:d9:6a:bd:e6:8e:72:6e:9f:89:ba:b7:
85:f4:cd:91:25:13:5a:ab:79:1c:46:d2:d9:89:1e:d5:a7:fc:
91:37:88:f5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFuyMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZk
ZmQ0MjU1ODRkZDI2MGM4MTJlM2I2NDk5MTFlNzc1M2VmYThmMDkwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhhMDliNWNmNThiMjE0
MmJjNTBmNWU2MzJkNGY1MDVmYjBkZTEzZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjQzf+obSJtr8Ink5HPGHjYybERBEi1cwjCcnaLy2P4VcOX0L
tw3teJs7/MPlemDGdrKmm6depFeQgyPMWuEp3axpjXV9QrOjtvrW+dra8nUkrh1e
+Y8biNS4B9HlJG5efn5wKUneQKnR93HuU3SbG01vjveN3hNmePakrLTEf2V0Lx+h
LQKJVcHrqxjz33hblOd9OrIV6tzfZvYDywNzfI6mYykPFOV2IqUR9cPX/ckAesOG
rdMOPBf904aIy9nJe+u1gxIYK31iebKLa/+KjwLvPkqb/qhESHex/hXfX4qSc1ST
3uJuZGsYRK4EZfwKvgyLZvCikkUMj35tja0LeQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCxpFR5soSYRwHMygYgcxzvUkVcNMB8GA1UdIwQYMBaAFLz1gZ4oFe74vuhC
GWu1kH2z62AdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmRmZDQy
NTU4NGRkMjYwYzgxMmUzYjY0OTkxMWU3NzUzZWZhOGYwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmU2NzI4NzItNzcwYS00ZDY1LWJjYmItMDU1ODc4
YWJkMWRlL2EwOWI1Y2Y1OGIyMTQyYmM1MGY1ZTYzMmQ0ZjUwNWZiMGRlMTNmMTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZTY3Mjg3Mi03NzBhLTRkNjUtYmNiYi0wNTU4
NzhhYmQxZGUvZmRmZDQyNTU4NGRkMjYwYzgxMmUzYjY0OTkxMWU3NzUzZWZhOGYw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqpQjDANBgkqhkiG9w0BAQsFAAOCAQEAmNKll/W9A6VD6l7+
VtZsUEz0a38NaDgUDTRax80Tq19EZxY39JU9qefUnnNB6xtJlBzhGT8nzur8XTBl
/X6yXaX8HnzHc9r+8B5+XmbqQ1lZhbxKOaWw+0x45OPiRMIGRQJGbcKq5/timZes
n628r4Cp6P8PZtDjSPLZDMo/VEZxkTjS6MjV1Q6V3UX92jueLukcoFN3+ZUPJDui
55HLIFb2MwmzHJQAfek3qD4ClkIX60fiJKLccIYbWd/mwCgwVmnqZeZKEbiojzCB
dstUvYqkw+aRTQ7HEGE5iK1oRdlqveaOcm6fibq3hfTNkSUTWqt5HEbS2Yke1af8
kTeI9Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org