Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/8a4f776a6b5001b3f62b2ec33d2f2fe0fd4634f7.roa
File: 8a4f776a6b5001b3f62b2ec33d2f2fe0fd4634f7.roa (raw, json)
Hash identifier: ObzVdyvID4ai0mtHbqlcCEylAUDol2HoGSF/aREgsxw=
Subject key identifier: 44:09:34:94:7D:AB:B3:66:29:B8:7C:49:22:15:E7:5D:AB:1F:AD:BD
Certificate issuer: /CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
Certificate serial: 176DCC
Authority key identifier: 64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/8a4f776a6b5001b3f62b2ec33d2f2fe0fd4634f7.roa
Signing time: Fri 09 Jun 2023 18:12:46 +0000
ROA not before: Thu 08 Jun 2023 18:12:46 +0000
ROA not after: Mon 09 Jun 2025 18:12:46 +0000
asID: 52266
IP address blocks: 201.219.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1535436 (0x176dcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
Validity
Not Before: Jun 8 18:12:46 2023 GMT
Not After : Jun 9 18:12:46 2025 GMT
Subject: CN=8a4f776a6b5001b3f62b2ec33d2f2fe0fd4634f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d5:ad:1e:be:e0:7e:2e:b1:bb:e8:a8:16:04:
fe:cc:48:35:b5:da:11:ea:56:df:f6:ae:dd:45:da:
ac:2a:bf:d4:7e:65:44:57:c0:7f:ba:fc:cb:a7:d4:
a4:05:d2:4e:6a:91:d3:c3:c2:7e:8d:5c:2e:27:18:
59:e4:e6:36:42:1d:ab:fc:f1:66:93:0f:1e:ba:d7:
e0:a7:c1:06:16:94:b6:b9:f2:d3:90:04:76:a5:12:
a9:6e:83:b7:49:06:47:5f:39:98:b8:3e:03:c6:34:
6c:b2:95:5a:cc:47:7d:29:b3:b3:58:52:ef:98:ba:
3f:83:14:2b:55:9d:da:b6:cc:86:81:d5:6d:3f:2f:
13:d2:2b:fc:94:8d:19:07:db:28:1b:fd:de:09:eb:
37:b4:db:5b:c2:e8:36:fd:54:3f:bc:18:2b:3a:11:
ef:43:26:2b:c3:de:1f:48:f7:59:f4:53:4d:07:7b:
3e:45:6b:38:5d:02:c3:cc:10:a4:e6:a7:d1:39:d1:
1a:c7:60:ed:e3:2a:08:50:5a:fe:8f:7d:1e:3a:82:
d9:d9:96:6f:21:b8:b8:cb:9d:9d:9d:9a:08:40:bf:
f0:3b:c3:44:bb:b4:fb:33:89:e2:54:ac:42:6e:88:
70:a6:36:81:88:38:6a:9b:89:ad:02:bb:a0:91:2e:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:09:34:94:7D:AB:B3:66:29:B8:7C:49:22:15:E7:5D:AB:1F:AD:BD
X509v3 Authority Key Identifier:
keyid:64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/8a4f776a6b5001b3f62b2ec33d2f2fe0fd4634f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/15ab7504ada349e4ed5816cfb2531293bf4331b7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.252.0/22
Signature Algorithm: sha256WithRSAEncryption
95:40:f7:dd:b3:3e:b1:aa:d0:d9:d2:a3:c5:3d:23:8a:88:bf:
69:2d:ef:60:08:2a:0e:4b:67:b0:bf:e1:db:c6:9c:c4:fa:e5:
20:90:03:6f:2c:90:e1:96:72:49:85:30:03:65:f6:6e:08:c3:
b1:e8:d6:4f:b6:c5:b5:0a:1c:f9:ca:ca:4d:71:a3:26:be:d8:
c4:e1:f4:f5:43:f8:5c:58:d4:54:5b:f9:5a:c7:7e:af:3f:6a:
3c:71:5f:65:04:a2:90:0d:6b:d4:3a:1f:7c:25:1a:94:18:b9:
4d:2c:c7:64:ef:b8:4b:eb:5b:a6:65:6a:2b:e9:4b:bf:b9:47:
cd:c1:b1:2a:2e:55:9d:5f:ad:e0:a1:42:e1:aa:f4:f4:17:c2:
1d:b1:27:74:19:b9:0b:b1:2e:35:21:3e:5a:b0:b0:48:08:df:
20:80:9d:e2:eb:e7:d7:99:87:92:75:76:79:6d:c6:17:94:15:
eb:6d:1e:ef:32:29:ec:95:43:e5:c2:c0:e4:84:cf:dd:e1:d3:
e1:3b:2a:42:51:01:59:2a:16:97:0b:7a:04:bf:c0:87:45:6f:
10:0d:fb:f9:e9:b7:a5:d6:10:b7:de:9d:a0:e7:14:45:8b:e9:
2c:00:6b:b2:52:30:fe:20:72:47:36:8b:a1:16:2f:56:99:06:
46:12:62:7f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDF23MMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE1
YWI3NTA0YWRhMzQ5ZTRlZDU4MTZjZmIyNTMxMjkzYmY0MzMxYjcwHhcNMjMwNjA4
MTgxMjQ2WhcNMjUwNjA5MTgxMjQ2WjAzMTEwLwYDVQQDEyg4YTRmNzc2YTZiNTAw
MWIzZjYyYjJlYzMzZDJmMmZlMGZkNDYzNGY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAodWtHr7gfi6xu+ioFgT+zEg1tdoR6lbf9q7dRdqsKr/UfmVE
V8B/uvzLp9SkBdJOapHTw8J+jVwuJxhZ5OY2Qh2r/PFmkw8eutfgp8EGFpS2ufLT
kAR2pRKpboO3SQZHXzmYuD4DxjRsspVazEd9KbOzWFLvmLo/gxQrVZ3atsyGgdVt
Py8T0iv8lI0ZB9soG/3eCes3tNtbwug2/VQ/vBgrOhHvQyYrw94fSPdZ9FNNB3s+
RWs4XQLDzBCk5qfROdEax2Dt4yoIUFr+j30eOoLZ2ZZvIbi4y52dnZoIQL/wO8NE
u7T7M4niVKxCbohwpjaBiDhqm4mtArugkS77dQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEQJNJR9q7NmKbh8SSIV512rH629MB8GA1UdIwQYMBaAFGSGDU9swPmh2wvJ
RbSZ5gHyEydxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTVhYjc1
MDRhZGEzNDllNGVkNTgxNmNmYjI1MzEyOTNiZjQzMzFiNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDliNmM1ZjUtMmZiMi00NzQ0LWI2ZTEtOTlkOTU4
OTJkMzc3LzhhNGY3NzZhNmI1MDAxYjNmNjJiMmVjMzNkMmYyZmUwZmQ0NjM0Zjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWI2YzVmNS0yZmIyLTQ3NDQtYjZlMS05OWQ5
NTg5MmQzNzcvMTVhYjc1MDRhZGEzNDllNGVkNTgxNmNmYjI1MzEyOTNiZjQzMzFi
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsnb/DANBgkqhkiG9w0BAQsFAAOCAQEAlUD33bM+sarQ2dKj
xT0jioi/aS3vYAgqDktnsL/h28acxPrlIJADbyyQ4ZZySYUwA2X2bgjDsejWT7bF
tQoc+crKTXGjJr7YxOH09UP4XFjUVFv5Wsd+rz9qPHFfZQSikA1r1DoffCUalBi5
TSzHZO+4S+tbpmVqK+lLv7lHzcGxKi5VnV+t4KFC4ar09BfCHbEndBm5C7EuNSE+
WrCwSAjfIICd4uvn15mHknV2eW3GF5QV620e7zIp7JVD5cLA5ITP3eHT4TsqQlEB
WSoWlwt6BL/Ah0VvEA37+em3pdYQt96doOcURYvpLABrslIw/iByRzaLoRYvVpkG
RhJifw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org