Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/4d07af338c3c87b870f775f0f058ffd52471cc3d.roa
File: 4d07af338c3c87b870f775f0f058ffd52471cc3d.roa (raw, json)
Hash identifier: xXJTFDZriaG6JVOl5O/5sJ8DWwMkZV2SvUE1INhQMdc=
Subject key identifier: 60:DD:B6:49:B9:3D:CB:B7:EC:64:FE:8F:D1:23:3A:48:22:47:B8:67
Certificate issuer: /CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
Certificate serial: 17AD4D
Authority key identifier: 64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/4d07af338c3c87b870f775f0f058ffd52471cc3d.roa
Signing time: Mon 12 Jun 2023 17:19:52 +0000
ROA not before: Sun 11 Jun 2023 17:19:52 +0000
ROA not after: Thu 12 Jun 2025 17:19:52 +0000
asID: 52266
IP address blocks: 201.219.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1551693 (0x17ad4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
Validity
Not Before: Jun 11 17:19:52 2023 GMT
Not After : Jun 12 17:19:52 2025 GMT
Subject: CN=4d07af338c3c87b870f775f0f058ffd52471cc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:b4:57:2f:af:64:a9:16:19:aa:1b:3d:68:
fc:ee:25:57:c3:40:3e:53:0d:74:5f:45:16:e3:8f:
c5:b9:78:cf:51:40:29:0e:66:78:66:04:4b:ea:1d:
e1:48:3e:e9:41:32:5c:36:a6:13:70:e9:ef:19:04:
75:be:11:17:84:61:3e:4d:ca:d2:e4:9b:9c:17:fa:
cb:d4:12:6a:fc:27:53:01:77:05:9a:3e:87:f4:eb:
44:0e:89:85:ce:78:6b:47:d3:89:62:12:40:6b:cf:
b0:7a:ae:37:25:c0:9c:d7:84:a4:52:cf:8e:94:da:
02:b4:16:82:71:5c:17:d6:be:b1:57:fc:6e:ba:83:
1a:ff:79:97:a6:23:f6:a0:21:97:c1:c5:45:0a:7a:
75:b7:02:1f:e8:0b:b5:19:ae:a7:60:ee:12:e6:66:
d2:26:72:91:af:22:0b:e4:d8:73:26:32:66:04:31:
40:a9:6b:e4:86:88:a5:c7:36:57:ac:9a:9a:6f:b1:
ce:d2:9a:a5:30:d7:83:1b:0c:68:57:92:f1:95:65:
90:d5:6e:7a:e6:30:71:c2:66:3d:53:96:2c:f2:b8:
e6:c6:85:ff:b5:9c:39:ac:29:5d:ad:38:aa:1c:eb:
2a:dc:b1:69:d1:34:02:1d:cb:2b:15:48:c4:49:ab:
01:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DD:B6:49:B9:3D:CB:B7:EC:64:FE:8F:D1:23:3A:48:22:47:B8:67
X509v3 Authority Key Identifier:
keyid:64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/4d07af338c3c87b870f775f0f058ffd52471cc3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/15ab7504ada349e4ed5816cfb2531293bf4331b7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.252.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:df:f5:30:39:52:5c:cb:3e:3a:8e:d5:f5:9e:74:21:f6:5f:
01:36:f8:64:fe:77:a9:2b:a4:22:00:1d:62:51:71:77:a8:0b:
b0:5a:c1:da:71:a8:f4:1d:b5:63:99:1a:99:42:bc:b5:0f:a2:
f7:03:21:15:c1:79:45:d1:fb:2c:35:ab:9a:e2:88:6d:d8:1f:
7c:6d:77:4e:e4:92:80:28:9b:2d:f1:1d:8d:74:40:e1:58:fd:
26:0e:38:35:a6:21:8d:55:b4:78:6b:eb:1f:1a:87:bd:cd:c9:
fa:12:28:ac:68:aa:02:a8:9c:26:6a:ff:e9:ad:34:b5:2b:96:
9e:42:44:b4:47:57:ef:58:ef:69:32:55:35:62:d2:d5:72:1d:
64:b4:05:07:f1:06:53:6e:b4:55:80:dc:56:63:f6:72:cf:ad:
d9:eb:56:bf:c1:e1:21:d9:8f:4f:44:ff:e8:b4:3f:52:40:0c:
01:6d:c3:27:a5:6a:95:44:d2:04:b7:9e:b1:42:cc:be:0f:7b:
18:06:af:66:12:e9:20:4d:a7:ec:2b:d8:0b:a9:6a:01:c3:5a:
5f:f8:86:97:30:92:49:44:ef:11:da:06:0b:c9:41:2d:4b:1a:
81:5c:be:49:58:38:9f:52:b4:b7:1f:d4:2f:ff:d2:14:52:cf:
64:35:d7:e1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDF61NMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE1
YWI3NTA0YWRhMzQ5ZTRlZDU4MTZjZmIyNTMxMjkzYmY0MzMxYjcwHhcNMjMwNjEx
MTcxOTUyWhcNMjUwNjEyMTcxOTUyWjAzMTEwLwYDVQQDEyg0ZDA3YWYzMzhjM2M4
N2I4NzBmNzc1ZjBmMDU4ZmZkNTI0NzFjYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjrC0Vy+vZKkWGaobPWj87iVXw0A+Uw10X0UW44/FuXjPUUAp
DmZ4ZgRL6h3hSD7pQTJcNqYTcOnvGQR1vhEXhGE+TcrS5JucF/rL1BJq/CdTAXcF
mj6H9OtEDomFznhrR9OJYhJAa8+weq43JcCc14SkUs+OlNoCtBaCcVwX1r6xV/xu
uoMa/3mXpiP2oCGXwcVFCnp1twIf6Au1Ga6nYO4S5mbSJnKRryIL5NhzJjJmBDFA
qWvkhoilxzZXrJqab7HO0pqlMNeDGwxoV5LxlWWQ1W565jBxwmY9U5Ys8rjmxoX/
tZw5rCldrTiqHOsq3LFp0TQCHcsrFUjESasBdwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGDdtkm5Pcu37GT+j9EjOkgiR7hnMB8GA1UdIwQYMBaAFGSGDU9swPmh2wvJ
RbSZ5gHyEydxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTVhYjc1
MDRhZGEzNDllNGVkNTgxNmNmYjI1MzEyOTNiZjQzMzFiNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDliNmM1ZjUtMmZiMi00NzQ0LWI2ZTEtOTlkOTU4
OTJkMzc3LzRkMDdhZjMzOGMzYzg3Yjg3MGY3NzVmMGYwNThmZmQ1MjQ3MWNjM2Qu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWI2YzVmNS0yZmIyLTQ3NDQtYjZlMS05OWQ5
NTg5MmQzNzcvMTVhYjc1MDRhZGEzNDllNGVkNTgxNmNmYjI1MzEyOTNiZjQzMzFi
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsnb/DANBgkqhkiG9w0BAQsFAAOCAQEAjt/1MDlSXMs+Oo7V
9Z50IfZfATb4ZP53qSukIgAdYlFxd6gLsFrB2nGo9B21Y5kamUK8tQ+i9wMhFcF5
RdH7LDWrmuKIbdgffG13TuSSgCibLfEdjXRA4Vj9Jg44NaYhjVW0eGvrHxqHvc3J
+hIorGiqAqicJmr/6a00tSuWnkJEtEdX71jvaTJVNWLS1XIdZLQFB/EGU260VYDc
VmP2cs+t2etWv8HhIdmPT0T/6LQ/UkAMAW3DJ6VqlUTSBLeesULMvg97GAavZhLp
IE2n7CvYC6lqAcNaX/iGlzCSSUTvEdoGC8lBLUsagVy+SVg4n1K0tx/UL//SFFLP
ZDXX4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org