Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/22e6a25d9b44bc071f41f4e97fb9f02b47808868.roa
File: 22e6a25d9b44bc071f41f4e97fb9f02b47808868.roa (raw, json)
Hash identifier: T6V3WUThTq5cdr6rJso6ZPhLpYv/atbX0MliOD5ilHE=
Subject key identifier: 7E:04:A5:9A:C7:BA:27:40:1D:22:9F:3D:26:E7:72:6D:34:27:D7:BE
Certificate issuer: /CN=2ea1715958333398146179fdbf2e485fe6525742
Certificate serial: 1A3AFF
Authority key identifier: 60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/22e6a25d9b44bc071f41f4e97fb9f02b47808868.roa
Signing time: Fri 15 Sep 2023 21:29:23 +0000
ROA not before: Thu 14 Sep 2023 21:29:00 +0000
ROA not after: Fri 15 Sep 2028 21:29:00 +0000
asID: 28001
IP address blocks: 201.219.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1719039 (0x1a3aff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea1715958333398146179fdbf2e485fe6525742
Validity
Not Before: Sep 14 21:29:00 2023 GMT
Not After : Sep 15 21:29:00 2028 GMT
Subject: CN=22e6a25d9b44bc071f41f4e97fb9f02b47808868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e3:ce:0e:e9:d2:13:b4:5f:e6:d3:4d:7d:8c:
39:78:9f:86:08:43:aa:f6:2e:cd:7c:5c:fa:15:f9:
4a:f6:b5:49:60:75:d9:cd:c3:4d:10:00:cc:58:f8:
ed:37:26:74:45:0c:c7:55:ba:53:53:f5:00:f5:bc:
9f:81:62:05:32:28:98:3b:d8:17:68:54:63:fe:4d:
02:97:1c:d5:a7:94:4c:20:b0:d7:e4:cc:fa:40:df:
20:d1:27:4e:70:51:01:85:cf:a6:b7:12:eb:a0:6f:
87:18:16:13:fa:9c:57:34:fb:8a:13:53:bb:9e:15:
f1:bb:a1:b0:4f:fb:65:31:28:b5:1e:0c:0d:46:9d:
fc:c8:10:9f:02:00:33:49:33:dd:d7:e0:6b:21:62:
74:92:28:40:c7:af:2b:9e:5f:dd:79:0f:4f:a2:67:
13:1f:59:c6:ff:88:23:0d:7a:8f:6d:6a:32:f7:5b:
2d:ee:94:5d:2b:10:b0:24:69:a4:88:c2:56:d5:9f:
2e:64:f9:29:4d:6f:0d:a8:4a:5f:4d:61:2d:03:e7:
25:d8:50:a5:79:96:01:9c:d6:d7:00:55:6e:73:e6:
9f:36:5b:8e:5e:09:ad:1f:6c:8e:ec:8e:5e:cf:d6:
26:85:61:8a:db:b8:a6:e1:30:74:50:ec:cd:5e:be:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:04:A5:9A:C7:BA:27:40:1D:22:9F:3D:26:E7:72:6D:34:27:D7:BE
X509v3 Authority Key Identifier:
keyid:60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/22e6a25d9b44bc071f41f4e97fb9f02b47808868.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2ea1715958333398146179fdbf2e485fe6525742.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.252.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:ed:74:ee:7f:95:f3:6f:18:04:1a:b7:75:c6:2b:b0:33:98:
ea:14:12:23:90:5e:01:1c:ce:cc:90:99:ec:9b:2f:37:ce:29:
6b:7d:ab:96:9f:d4:5e:f3:b2:95:f5:c3:b7:d8:08:25:e0:66:
4a:2e:46:3b:23:59:43:00:f7:94:98:80:29:33:f8:a7:ef:51:
bb:cf:f7:49:61:2f:f7:a4:a2:77:d4:b1:dd:d6:e1:af:b7:da:
41:8e:fd:da:05:2c:ae:c1:14:13:c4:d9:60:9a:11:e3:4c:92:
01:ca:0e:41:81:0a:0d:80:22:f9:4c:b9:c1:8c:39:21:da:94:
b3:83:be:c0:a9:fc:cf:82:84:be:65:00:e5:a2:2f:49:67:04:
08:e7:a2:34:ac:d5:b0:82:09:11:b7:0b:d0:3e:7a:31:5c:05:
d6:d9:9e:dd:61:44:da:e3:bc:0b:ee:19:b2:d0:5a:aa:98:a1:
51:61:82:d7:db:65:1d:12:eb:80:f2:db:13:f8:db:18:42:e1:
1c:d5:98:35:82:f8:38:1c:9e:c3:8d:7e:f0:54:8b:46:3a:8f:
72:fc:aa:4c:38:5b:b0:d0:ec:c9:20:69:fc:b8:47:b2:d2:62:
26:d9:b4:9d:e0:df:bb:5c:6e:d2:1f:03:cc:13:c0:04:14:36:
1d:db:f5:4a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGjr/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJl
YTE3MTU5NTgzMzMzOTgxNDYxNzlmZGJmMmU0ODVmZTY1MjU3NDIwHhcNMjMwOTE0
MjEyOTAwWhcNMjgwOTE1MjEyOTAwWjAzMTEwLwYDVQQDEygyMmU2YTI1ZDliNDRi
YzA3MWY0MWY0ZTk3ZmI5ZjAyYjQ3ODA4ODY4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhuPODunSE7Rf5tNNfYw5eJ+GCEOq9i7NfFz6FflK9rVJYHXZ
zcNNEADMWPjtNyZ0RQzHVbpTU/UA9byfgWIFMiiYO9gXaFRj/k0ClxzVp5RMILDX
5Mz6QN8g0SdOcFEBhc+mtxLroG+HGBYT+pxXNPuKE1O7nhXxu6GwT/tlMSi1HgwN
Rp38yBCfAgAzSTPd1+BrIWJ0kihAx68rnl/deQ9PomcTH1nG/4gjDXqPbWoy91st
7pRdKxCwJGmkiMJW1Z8uZPkpTW8NqEpfTWEtA+cl2FCleZYBnNbXAFVuc+afNluO
XgmtH2yO7I5ez9YmhWGK27im4TB0UOzNXr7AMwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFH4EpZrHuidAHSKfPSbncm00J9e+MB8GA1UdIwQYMBaAFGCEYUh8NmTYlwrD
qaF0ZoCLrci/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmVhMTcx
NTk1ODMzMzM5ODE0NjE3OWZkYmYyZTQ4NWZlNjUyNTc0Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDliNmM1ZjUtMmZiMi00NzQ0LWI2ZTEtOTlkOTU4
OTJkMzc3LzIyZTZhMjVkOWI0NGJjMDcxZjQxZjRlOTdmYjlmMDJiNDc4MDg4Njgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWI2YzVmNS0yZmIyLTQ3NDQtYjZlMS05OWQ5
NTg5MmQzNzcvMmVhMTcxNTk1ODMzMzM5ODE0NjE3OWZkYmYyZTQ4NWZlNjUyNTc0
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsnb/DANBgkqhkiG9w0BAQsFAAOCAQEATO107n+V828YBBq3
dcYrsDOY6hQSI5BeARzOzJCZ7JsvN84pa32rlp/UXvOylfXDt9gIJeBmSi5GOyNZ
QwD3lJiAKTP4p+9Ru8/3SWEv96Sid9Sx3dbhr7faQY792gUsrsEUE8TZYJoR40yS
AcoOQYEKDYAi+Uy5wYw5IdqUs4O+wKn8z4KEvmUA5aIvSWcECOeiNKzVsIIJEbcL
0D56MVwF1tme3WFE2uO8C+4ZstBaqpihUWGC19tlHRLrgPLbE/jbGELhHNWYNYL4
OByew41+8FSLRjqPcvyqTDhbsNDsySBp/LhHstJiJtm0neDfu1xu0h8DzBPABBQ2
Hdv1Sg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org