Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/d3491ebec288d48ceb70556b5fac30977c59de52.roa
File: d3491ebec288d48ceb70556b5fac30977c59de52.roa (raw, json)
Hash identifier: CdC/zeIUwsZs3mRA1t+Esvhm4uqzMHbjBjryqWaHlIw=
Subject key identifier: B4:17:BF:F7:C9:08:0B:ED:30:67:A0:01:3E:F6:A4:D9:54:31:16:EE
Certificate issuer: /CN=53a84133ecea8791e075c28348a5c7805616cc52
Certificate serial: 10ED61
Authority key identifier: F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53a84133ecea8791e075c28348a5c7805616cc52.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/d3491ebec288d48ceb70556b5fac30977c59de52.roa
Signing time: Wed 21 Feb 2024 17:04:14 +0000
ROA not before: Wed 21 Feb 2024 17:04:14 +0000
ROA not after: Sat 21 Feb 2026 17:04:14 +0000
asID: 272978
IP address blocks: 131.72.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1109345 (0x10ed61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a84133ecea8791e075c28348a5c7805616cc52
Validity
Not Before: Feb 21 17:04:14 2024 GMT
Not After : Feb 21 17:04:14 2026 GMT
Subject: CN=d3491ebec288d48ceb70556b5fac30977c59de52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:54:ee:a5:3b:c2:1b:7d:ca:0e:29:13:ea:81:
4b:8b:d0:f2:e1:de:a8:3b:45:fa:05:6d:1b:c7:74:
ee:5c:ae:46:0d:03:22:f3:4a:fb:d7:7b:2f:26:2b:
da:b7:03:e5:e4:78:7d:dc:43:e2:50:10:97:d2:ab:
0b:d1:ab:da:ec:c0:9e:73:07:e7:00:78:59:dd:88:
98:d6:85:95:c5:e2:58:87:27:2c:41:76:42:23:b0:
32:bb:ff:db:84:2a:ec:43:52:c1:ca:4d:c4:4a:ea:
1a:fd:58:0a:15:3d:eb:bf:40:9f:08:d4:76:03:7e:
c9:87:b7:8c:9d:71:98:cb:5b:72:83:a4:84:99:36:
fb:96:1a:d6:7c:c2:71:bc:ce:ed:9f:12:dd:47:83:
9d:97:84:22:18:02:d4:10:d1:70:fe:d5:ee:86:1f:
a2:7b:7f:9c:69:79:1e:94:ed:05:5e:d2:e0:e3:0e:
b4:2c:90:2d:6a:a8:a5:64:05:59:df:dc:ee:4c:57:
bd:ad:14:65:41:88:fc:4c:6b:15:6f:29:54:e0:ca:
84:a3:e5:b8:b1:20:0c:b8:7d:dc:c9:ac:4f:cf:0f:
25:da:7c:82:64:9e:30:e5:f4:dd:fe:e8:d0:82:dc:
e1:d1:0d:be:db:ca:96:8a:0d:43:91:55:31:bc:c4:
0e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:17:BF:F7:C9:08:0B:ED:30:67:A0:01:3E:F6:A4:D9:54:31:16:EE
X509v3 Authority Key Identifier:
keyid:F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53a84133ecea8791e075c28348a5c7805616cc52.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/d3491ebec288d48ceb70556b5fac30977c59de52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/53a84133ecea8791e075c28348a5c7805616cc52.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.138.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:85:47:6b:e6:d5:30:22:b8:11:fe:b1:8c:f2:a7:86:83:d5:
2c:f2:bc:51:68:5f:52:e3:eb:ff:e1:c3:fd:4a:3f:16:09:48:
ce:dc:71:01:31:20:0b:8f:61:c5:cf:d7:87:c3:56:2e:4e:78:
8c:2b:62:ec:7f:59:d0:ea:9b:58:2f:69:00:dd:84:65:75:4c:
de:d0:ae:1d:8c:eb:8d:e7:71:e6:d7:a2:db:24:2a:8d:c2:96:
4a:b6:20:c4:d0:99:ff:a9:27:64:5e:62:25:69:3a:1e:4d:13:
ef:d2:d6:5b:72:f4:fa:b6:0d:78:a4:b4:19:a6:c1:07:f6:43:
0f:95:05:2a:cd:21:52:33:82:08:5d:ef:c0:3e:a9:50:14:17:
c1:1a:99:10:cd:d6:bd:e0:ee:37:45:ed:d5:e3:8a:ef:9d:27:
db:13:55:f2:4c:28:65:f6:e9:43:98:83:8b:5f:cb:71:4f:b9:
2b:24:94:df:52:56:d7:d3:d9:f0:27:1a:f3:6d:af:41:d7:9b:
85:e6:d2:45:d6:ac:00:9b:e7:9c:22:75:84:e6:36:63:fe:2a:
2d:92:d5:f9:80:38:ec:d3:de:43:c2:55:41:9c:2a:ad:87:ff:
b0:5e:e4:a8:48:4e:a6:d7:de:e7:77:c8:5d:a2:10:89:4f:bb:
2c:56:48:6f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEO1hMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUz
YTg0MTMzZWNlYTg3OTFlMDc1YzI4MzQ4YTVjNzgwNTYxNmNjNTIwHhcNMjQwMjIx
MTcwNDE0WhcNMjYwMjIxMTcwNDE0WjAzMTEwLwYDVQQDEyhkMzQ5MWViZWMyODhk
NDhjZWI3MDU1NmI1ZmFjMzA5NzdjNTlkZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjVTupTvCG33KDikT6oFLi9Dy4d6oO0X6BW0bx3TuXK5GDQMi
80r713svJivatwPl5Hh93EPiUBCX0qsL0ava7MCecwfnAHhZ3YiY1oWVxeJYhycs
QXZCI7Ayu//bhCrsQ1LByk3ESuoa/VgKFT3rv0CfCNR2A37Jh7eMnXGYy1tyg6SE
mTb7lhrWfMJxvM7tnxLdR4Odl4QiGALUENFw/tXuhh+ie3+caXkelO0FXtLg4w60
LJAtaqilZAVZ39zuTFe9rRRlQYj8TGsVbylU4MqEo+W4sSAMuH3cyaxPzw8l2nyC
ZJ4w5fTd/ujQgtzh0Q2+28qWig1DkVUxvMQOFQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLQXv/fJCAvtMGegAT72pNlUMRbuMB8GA1UdIwQYMBaAFPDOJQheC3d0fFSp
w3dZT0zXraxSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTNhODQx
MzNlY2VhODc5MWUwNzVjMjgzNDhhNWM3ODA1NjE2Y2M1Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDNiM2QyMjQtOGM1MC00N2E0LTg4NmEtMDEzODA5
ZmY3MTRjL2QzNDkxZWJlYzI4OGQ0OGNlYjcwNTU2YjVmYWMzMDk3N2M1OWRlNTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kM2IzZDIyNC04YzUwLTQ3YTQtODg2YS0wMTM4
MDlmZjcxNGMvNTNhODQxMzNlY2VhODc5MWUwNzVjMjgzNDhhNWM3ODA1NjE2Y2M1
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAINIijANBgkqhkiG9w0BAQsFAAOCAQEAxYVHa+bVMCK4Ef6x
jPKnhoPVLPK8UWhfUuPr/+HD/Uo/FglIztxxATEgC49hxc/Xh8NWLk54jCti7H9Z
0OqbWC9pAN2EZXVM3tCuHYzrjedx5tei2yQqjcKWSrYgxNCZ/6knZF5iJWk6Hk0T
79LWW3L0+rYNeKS0GabBB/ZDD5UFKs0hUjOCCF3vwD6pUBQXwRqZEM3WveDuN0Xt
1eOK750n2xNV8kwoZfbpQ5iDi1/LcU+5KySU31JW19PZ8Cca822vQdebhebSRdas
AJvnnCJ1hOY2Y/4qLZLV+YA47NPeQ8JVQZwqrYf/sF7kqEhOptfe53fIXaIQiU+7
LFZIbw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org