Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/f128c8d9dac1f2328b62522fbf92b461757652ce.roa
File: f128c8d9dac1f2328b62522fbf92b461757652ce.roa (raw, json)
Hash identifier: 7CkZmKipxXPPIYqElSU7FnViPWuUqLs7IwEm0swfKj8=
Subject key identifier: D9:BF:A2:DC:9E:CD:67:D2:79:73:EB:F3:EE:B4:0B:21:C2:35:0A:C9
Certificate issuer: /CN=2ea1715958333398146179fdbf2e485fe6525742
Certificate serial: 1CB749
Authority key identifier: 60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/f128c8d9dac1f2328b62522fbf92b461757652ce.roa
Signing time: Mon 11 Dec 2023 17:40:08 +0000
ROA not before: Mon 11 Dec 2023 17:40:08 +0000
ROA not after: Thu 11 Dec 2025 17:40:08 +0000
asID: 264845
IP address blocks: 201.219.252.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881929 (0x1cb749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea1715958333398146179fdbf2e485fe6525742
Validity
Not Before: Dec 11 17:40:08 2023 GMT
Not After : Dec 11 17:40:08 2025 GMT
Subject: CN=f128c8d9dac1f2328b62522fbf92b461757652ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:9b:e0:7e:1d:bd:a4:0e:48:88:3e:f6:7a:
9b:70:a5:6f:6d:76:49:73:60:d8:f8:ce:63:4f:d7:
b3:7d:e8:a4:28:a0:db:ea:9a:86:02:5d:ff:a6:eb:
68:c6:22:80:a8:08:97:fc:04:e3:8a:00:3e:58:74:
9e:ef:c6:d9:fc:d9:57:66:59:e6:ea:7f:fe:ad:d6:
12:cb:24:88:f0:e3:2a:d5:45:9d:4f:de:0e:85:ae:
9e:da:0c:d9:81:7f:6d:9c:fc:80:9b:1a:f2:dd:25:
15:49:cb:59:49:aa:4c:94:4b:93:7a:66:5d:4a:2c:
5c:3f:44:ee:f5:ad:3d:30:3c:cb:5c:fb:95:65:8d:
4f:8b:9a:0f:c8:d2:eb:6e:55:e7:67:e4:ae:a1:d6:
7b:44:c4:18:8e:0d:1f:3d:0b:a5:3e:62:13:17:c5:
1b:11:30:f7:ad:0a:d2:bc:5d:24:e9:0c:25:14:89:
29:1f:4b:d7:fe:85:ec:3e:1f:21:62:89:3d:ae:0d:
bc:3c:92:96:27:f8:c9:b3:ef:2f:b7:8a:aa:7c:51:
f4:14:13:bb:47:60:62:0d:7a:77:18:77:dc:d3:4b:
20:ba:8d:f5:20:9a:1a:fb:f4:fc:a5:3a:a3:44:55:
d6:9e:74:a5:df:72:56:24:6e:06:f2:ef:7e:80:61:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BF:A2:DC:9E:CD:67:D2:79:73:EB:F3:EE:B4:0B:21:C2:35:0A:C9
X509v3 Authority Key Identifier:
keyid:60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/f128c8d9dac1f2328b62522fbf92b461757652ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2ea1715958333398146179fdbf2e485fe6525742.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.252.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:88:dc:51:f9:7c:3e:cf:48:87:3e:10:6d:e7:e0:6c:49:d2:
3c:42:41:a9:e6:ae:12:ab:9f:13:b2:7f:25:bd:e2:28:e1:43:
b1:a4:33:07:ce:7b:b9:f1:43:55:cc:56:7a:93:76:ff:40:db:
62:bf:2d:8b:49:3a:aa:a4:d9:75:8c:87:85:9b:55:7b:33:ad:
72:e9:c3:bf:94:88:5d:6f:4e:a8:2d:94:7e:a8:a5:bf:a9:68:
4f:66:6f:c5:6f:f0:9c:37:3d:26:08:77:5c:f4:a9:50:78:7b:
29:b6:d7:a7:79:39:ee:50:68:6c:0e:cd:13:e0:a5:9e:8c:f6:
f1:ac:80:b2:ce:15:b0:8d:ec:58:69:c4:5e:68:44:f9:13:09:
33:d6:a4:95:5b:c9:e4:87:ac:0a:75:a7:e8:9a:75:e9:93:4d:
d8:f3:96:b4:c0:91:4f:7b:2d:4d:6e:65:03:e0:7c:a7:39:20:
4b:2d:5e:a3:15:27:5a:da:f8:e5:40:60:1f:36:13:c2:d6:2d:
c8:97:54:11:b7:79:51:87:1e:e8:ba:71:a7:e9:38:19:21:68:
65:26:f7:6c:2e:cd:84:a7:29:16:5c:b6:8e:9d:33:3e:d6:94:
01:88:5c:4c:79:63:e6:a0:0e:b4:14:87:37:32:d6:dc:d0:89:
d1:a5:07:c6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHLdJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJl
YTE3MTU5NTgzMzMzOTgxNDYxNzlmZGJmMmU0ODVmZTY1MjU3NDIwHhcNMjMxMjEx
MTc0MDA4WhcNMjUxMjExMTc0MDA4WjAzMTEwLwYDVQQDEyhmMTI4YzhkOWRhYzFm
MjMyOGI2MjUyMmZiZjkyYjQ2MTc1NzY1MmNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoLib4H4dvaQOSIg+9nqbcKVvbXZJc2DY+M5jT9ezfeikKKDb
6pqGAl3/putoxiKAqAiX/ATjigA+WHSe78bZ/NlXZlnm6n/+rdYSyySI8OMq1UWd
T94Oha6e2gzZgX9tnPyAmxry3SUVSctZSapMlEuTemZdSixcP0Tu9a09MDzLXPuV
ZY1Pi5oPyNLrblXnZ+SuodZ7RMQYjg0fPQulPmITF8UbETD3rQrSvF0k6QwlFIkp
H0vX/oXsPh8hYok9rg28PJKWJ/jJs+8vt4qqfFH0FBO7R2BiDXp3GHfc00sguo31
IJoa+/T8pTqjRFXWnnSl33JWJG4G8u9+gGFILwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNm/otyezWfSeXPr8+60CyHCNQrJMB8GA1UdIwQYMBaAFGCEYUh8NmTYlwrD
qaF0ZoCLrci/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmVhMTcx
NTk1ODMzMzM5ODE0NjE3OWZkYmYyZTQ4NWZlNjUyNTc0Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDliNmM1ZjUtMmZiMi00NzQ0LWI2ZTEtOTlkOTU4
OTJkMzc3L2YxMjhjOGQ5ZGFjMWYyMzI4YjYyNTIyZmJmOTJiNDYxNzU3NjUyY2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWI2YzVmNS0yZmIyLTQ3NDQtYjZlMS05OWQ5
NTg5MmQzNzcvMmVhMTcxNTk1ODMzMzM5ODE0NjE3OWZkYmYyZTQ4NWZlNjUyNTc0
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsnb/DANBgkqhkiG9w0BAQsFAAOCAQEALojcUfl8Ps9Ihz4Q
befgbEnSPEJBqeauEqufE7J/Jb3iKOFDsaQzB857ufFDVcxWepN2/0DbYr8ti0k6
qqTZdYyHhZtVezOtcunDv5SIXW9OqC2Ufqilv6loT2ZvxW/wnDc9Jgh3XPSpUHh7
KbbXp3k57lBobA7NE+Clnoz28ayAss4VsI3sWGnEXmhE+RMJM9aklVvJ5IesCnWn
6Jp16ZNN2POWtMCRT3stTW5lA+B8pzkgSy1eoxUnWtr45UBgHzYTwtYtyJdUEbd5
UYce6Lpxp+k4GSFoZSb3bC7NhKcpFly2jp0zPtaUAYhcTHlj5qAOtBSHNzLW3NCJ
0aUHxg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org