Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/65421a9cd7f632b95eff6444fc35f3b0cf33ab11.roa
File: 65421a9cd7f632b95eff6444fc35f3b0cf33ab11.roa (raw, json)
Hash identifier: CEAOQo3csEwSabkdYZ1J5QCOJTONY7Fd43qQPs4u3XY=
Subject key identifier: 1E:3C:29:CB:9A:E9:7A:29:12:9C:42:48:F5:19:EB:97:7A:60:97:0B
Certificate issuer: /CN=296ae134c63fda98feba9ece79438406ecc84f03
Certificate serial: 214562
Authority key identifier: 8C:CF:F6:AD:9A:13:14:73:58:AC:E2:D8:C7:E3:B8:F5:0E:34:30:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/296ae134c63fda98feba9ece79438406ecc84f03.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/65421a9cd7f632b95eff6444fc35f3b0cf33ab11.roa
Signing time: Tue 13 Jun 2023 00:29:04 +0000
ROA not before: Mon 12 Jun 2023 00:29:04 +0000
ROA not after: Fri 13 Jun 2025 00:29:04 +0000
asID: 17079
IP address blocks: 181.189.176.0/20 maxlen: 24
143.0.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180450 (0x214562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296ae134c63fda98feba9ece79438406ecc84f03
Validity
Not Before: Jun 12 00:29:04 2023 GMT
Not After : Jun 13 00:29:04 2025 GMT
Subject: CN=65421a9cd7f632b95eff6444fc35f3b0cf33ab11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:dc:c7:12:96:b5:ad:3c:f4:02:bb:ff:95:
d6:74:45:57:6f:a6:4e:29:50:fc:8b:71:21:e8:1e:
92:8d:7c:6a:12:31:d7:88:3c:23:17:59:52:de:09:
39:0b:e3:01:b7:da:30:c3:5c:16:31:ab:69:26:7a:
1f:69:5b:85:8a:4f:57:73:0c:4f:41:33:2d:be:6c:
fc:3c:83:9a:28:dc:9f:9b:8c:7f:a6:50:be:9f:0b:
c3:bb:8b:14:15:38:4a:6a:66:63:bb:c7:95:9b:8d:
0d:13:7a:32:62:89:83:08:b6:c2:94:3c:9d:6f:b3:
cd:e5:78:31:8c:aa:9e:f7:82:57:a0:47:32:7d:79:
48:95:21:99:3f:fc:ff:8e:ed:98:1a:03:9c:0e:35:
c6:e9:8e:b8:8b:1e:e0:f9:0a:59:27:c2:0c:6f:1f:
2b:fb:d6:e6:92:62:62:c6:d4:40:bb:b7:4a:af:46:
9d:61:04:5a:b4:b5:45:df:ea:c9:3f:45:84:92:40:
8a:1e:3c:68:70:91:41:e6:1d:73:27:95:ff:d3:52:
b5:ac:d6:58:d6:ee:ac:78:1b:12:99:a5:40:0c:7b:
70:77:fa:15:c3:ef:2d:9c:77:a1:f4:ce:7e:6e:0b:
21:0e:29:13:b4:be:bf:97:7f:7b:c2:2c:21:fb:5a:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3C:29:CB:9A:E9:7A:29:12:9C:42:48:F5:19:EB:97:7A:60:97:0B
X509v3 Authority Key Identifier:
keyid:8C:CF:F6:AD:9A:13:14:73:58:AC:E2:D8:C7:E3:B8:F5:0E:34:30:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/296ae134c63fda98feba9ece79438406ecc84f03.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/65421a9cd7f632b95eff6444fc35f3b0cf33ab11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/296ae134c63fda98feba9ece79438406ecc84f03.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.104.0/22
181.189.176.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:6d:db:6b:85:3d:55:98:b3:dd:16:41:a5:b9:19:c9:89:a9:
96:54:c9:f9:42:c4:04:92:a6:dc:34:42:80:62:eb:7b:0d:47:
a5:d7:c4:60:4e:79:44:b9:4a:9c:ba:32:eb:60:1f:39:d0:ee:
43:a1:44:ce:b3:e7:03:79:94:74:10:ae:d4:16:53:30:7c:2f:
2f:d6:67:b4:ad:57:c6:76:0e:ed:d6:2f:46:e5:c9:f6:45:52:
04:37:76:0b:5a:ed:b7:67:a7:36:7b:fa:2d:f5:2d:4b:c3:dd:
05:0c:57:fd:d6:d5:74:c3:7c:52:43:0d:c2:7e:df:ad:77:59:
30:7b:4f:22:0d:74:46:d4:29:12:1a:4d:aa:8a:db:0c:97:e6:
2f:fd:76:86:de:4c:ad:c5:a7:4e:ae:64:ba:c8:8a:5f:2e:61:
6e:17:98:53:0e:1b:2f:08:07:96:60:0b:aa:1a:d0:dc:f3:aa:
77:09:ef:be:db:45:5f:f8:d4:89:6f:ba:5c:96:20:9b:3c:95:
40:11:2b:20:65:8f:c8:a6:ef:14:2f:f4:57:61:1c:14:b9:d7:
0a:3e:53:eb:74:86:b6:64:e1:ac:4b:82:a0:9d:38:04:17:72:
cd:9c:44:e1:18:a3:2f:bc:59:70:20:42:d4:26:b1:e0:a7:8a:
a0:04:76:7a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDIUViMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
NmFlMTM0YzYzZmRhOThmZWJhOWVjZTc5NDM4NDA2ZWNjODRmMDMwHhcNMjMwNjEy
MDAyOTA0WhcNMjUwNjEzMDAyOTA0WjAzMTEwLwYDVQQDEyg2NTQyMWE5Y2Q3ZjYz
MmI5NWVmZjY0NDRmYzM1ZjNiMGNmMzNhYjExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAukrcxxKWta089AK7/5XWdEVXb6ZOKVD8i3Eh6B6SjXxqEjHX
iDwjF1lS3gk5C+MBt9oww1wWMatpJnofaVuFik9XcwxPQTMtvmz8PIOaKNyfm4x/
plC+nwvDu4sUFThKamZju8eVm40NE3oyYomDCLbClDydb7PN5XgxjKqe94JXoEcy
fXlIlSGZP/z/ju2YGgOcDjXG6Y64ix7g+QpZJ8IMbx8r+9bmkmJixtRAu7dKr0ad
YQRatLVF3+rJP0WEkkCKHjxocJFB5h1zJ5X/01K1rNZY1u6seBsSmaVADHtwd/oV
w+8tnHeh9M5+bgshDikTtL6/l397wiwh+1qpjwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFB48Kcua6XopEpxCSPUZ65d6YJcLMB8GA1UdIwQYMBaAFIzP9q2aExRzWKzi
2MfjuPUONDASMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjk2YWUx
MzRjNjNmZGE5OGZlYmE5ZWNlNzk0Mzg0MDZlY2M4NGYwMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmY3NzBkMmMtODE1OC00ZWIwLWE1NWMtYjViZTYz
ZWNiODE3LzY1NDIxYTljZDdmNjMyYjk1ZWZmNjQ0NGZjMzVmM2IwY2YzM2FiMTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZjc3MGQyYy04MTU4LTRlYjAtYTU1Yy1iNWJl
NjNlY2I4MTcvMjk2YWUxMzRjNjNmZGE5OGZlYmE5ZWNlNzk0Mzg0MDZlY2M4NGYw
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAo8AaAMEBLW9sDANBgkqhkiG9w0BAQsFAAOCAQEAnm3ba4U9
VZiz3RZBpbkZyYmpllTJ+ULEBJKm3DRCgGLrew1HpdfEYE55RLlKnLoy62AfOdDu
Q6FEzrPnA3mUdBCu1BZTMHwvL9ZntK1XxnYO7dYvRuXJ9kVSBDd2C1rtt2enNnv6
LfUtS8PdBQxX/dbVdMN8UkMNwn7frXdZMHtPIg10RtQpEhpNqorbDJfmL/12ht5M
rcWnTq5kusiKXy5hbheYUw4bLwgHlmALqhrQ3POqdwnvvttFX/jUiW+6XJYgmzyV
QBErIGWPyKbvFC/0V2EcFLnXCj5T63SGtmThrEuCoJ04BBdyzZxE4RijL7xZcCBC
1Cax4KeKoAR2eg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org