Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/f2a2fa63a12ea4109264d0f7841bde2ab6e7f360.roa
File: f2a2fa63a12ea4109264d0f7841bde2ab6e7f360.roa (raw, json)
Hash identifier: AqN6mCOUR6BJefgum3J3OnAgktOaqJdsyQEOoGZ2UCI=
Subject key identifier: 11:A0:6F:45:42:6D:86:41:E0:E6:05:74:C7:87:F0:41:C9:5F:93:C1
Certificate issuer: /CN=2ea1715958333398146179fdbf2e485fe6525742
Certificate serial: 1C4CC1
Authority key identifier: 60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/f2a2fa63a12ea4109264d0f7841bde2ab6e7f360.roa
Signing time: Wed 29 Nov 2023 17:15:34 +0000
ROA not before: Wed 29 Nov 2023 17:15:34 +0000
ROA not after: Sat 29 Nov 2025 17:15:34 +0000
asID: 28000
IP address blocks: 201.219.252.0/22 maxlen: 22
201.219.252.0/25 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1854657 (0x1c4cc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea1715958333398146179fdbf2e485fe6525742
Validity
Not Before: Nov 29 17:15:34 2023 GMT
Not After : Nov 29 17:15:34 2025 GMT
Subject: CN=f2a2fa63a12ea4109264d0f7841bde2ab6e7f360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:06:d3:54:e9:c5:00:a8:e6:2e:6f:5d:fc:
ba:10:26:94:14:42:f7:50:fe:02:df:41:7a:05:a8:
f8:54:4d:85:e5:07:5e:0e:28:e3:f1:08:38:1e:a9:
3a:06:38:7b:64:aa:57:d4:3e:c0:ef:b7:3a:32:69:
3e:49:3c:07:08:c7:a9:b6:40:df:cb:38:aa:f9:5e:
ce:10:e9:63:74:3f:83:88:03:9f:f3:db:44:15:6b:
56:03:9f:04:0b:4d:e0:1f:0f:b5:7d:fe:37:b9:5f:
1c:b7:90:ab:7b:99:79:fc:4a:ff:e0:37:a0:4b:d4:
ef:de:54:07:c3:52:2b:bd:f6:c9:3f:de:ad:95:53:
ed:26:1f:cc:9f:03:88:86:bf:3b:f3:b3:81:77:90:
03:22:65:40:1a:66:bd:38:a3:62:a4:3b:a0:b5:7a:
c2:be:34:10:6c:da:9c:94:61:83:77:d0:1b:2c:22:
89:72:3e:bb:dd:50:03:33:15:5d:0b:1b:b0:bf:93:
a0:be:5f:7a:d4:d8:43:0f:e4:ba:f7:19:93:e1:2f:
c9:91:6a:56:32:da:ad:99:06:79:40:d9:74:76:d4:
3a:3e:77:bc:c1:7f:fa:5f:49:45:bb:f5:ea:b7:7f:
44:ad:12:d9:37:99:ac:90:e1:a2:88:6f:7d:a4:db:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A0:6F:45:42:6D:86:41:E0:E6:05:74:C7:87:F0:41:C9:5F:93:C1
X509v3 Authority Key Identifier:
keyid:60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/f2a2fa63a12ea4109264d0f7841bde2ab6e7f360.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2ea1715958333398146179fdbf2e485fe6525742.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.252.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:9a:02:9d:0e:43:4c:95:00:2d:f6:cc:69:b2:01:72:6b:60:
fb:b4:08:bf:23:49:88:90:a1:73:03:b8:0f:88:f8:36:00:b9:
16:bd:c8:05:ee:5a:39:14:83:0f:70:a9:03:71:a0:52:ef:0c:
5d:02:5b:09:cd:66:dd:d7:03:90:19:6d:b5:e7:76:cc:70:8c:
11:35:7b:70:fd:3b:0e:b0:10:fe:06:29:6f:87:b8:0f:c4:e0:
df:23:c3:f4:84:ce:ce:31:58:d4:15:2c:bd:4e:84:d1:4f:d6:
ee:a0:55:2e:6a:5c:65:17:47:2e:f1:95:7e:d6:73:c7:e2:4a:
4d:a8:05:73:30:36:ff:fa:c6:6d:d7:eb:ca:e5:04:2d:5f:c2:
19:7d:2a:22:3e:2e:62:6b:d0:4d:f2:0f:c4:2b:9c:36:dc:8f:
2a:56:fc:c9:88:b3:fd:70:8e:c1:e8:ff:49:e6:79:53:06:f0:
cc:86:8c:ed:1f:cd:bb:e5:cc:03:cb:08:29:80:de:8a:2b:d9:
fb:ff:b1:a0:6c:ee:f0:a7:27:7d:9a:90:50:b4:f7:0a:78:76:
f3:93:5c:18:18:af:fb:2d:16:df:f1:35:f1:8b:6b:23:49:a4:
52:fd:5f:b5:d9:42:c2:00:c6:71:3f:fd:58:1c:8b:b4:62:4b:
ba:77:a9:d6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHEzBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJl
YTE3MTU5NTgzMzMzOTgxNDYxNzlmZGJmMmU0ODVmZTY1MjU3NDIwHhcNMjMxMTI5
MTcxNTM0WhcNMjUxMTI5MTcxNTM0WjAzMTEwLwYDVQQDEyhmMmEyZmE2M2ExMmVh
NDEwOTI2NGQwZjc4NDFiZGUyYWI2ZTdmMzYwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA088G01TpxQCo5i5vXfy6ECaUFEL3UP4C30F6Baj4VE2F5Qde
Dijj8Qg4Hqk6Bjh7ZKpX1D7A77c6Mmk+STwHCMeptkDfyziq+V7OEOljdD+DiAOf
89tEFWtWA58EC03gHw+1ff43uV8ct5Cre5l5/Er/4DegS9Tv3lQHw1IrvfbJP96t
lVPtJh/MnwOIhr8787OBd5ADImVAGma9OKNipDugtXrCvjQQbNqclGGDd9AbLCKJ
cj673VADMxVdCxuwv5Ogvl961NhDD+S69xmT4S/JkWpWMtqtmQZ5QNl0dtQ6Pne8
wX/6X0lFu/Xqt39ErRLZN5mskOGiiG99pNsHXwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBGgb0VCbYZB4OYFdMeH8EHJX5PBMB8GA1UdIwQYMBaAFGCEYUh8NmTYlwrD
qaF0ZoCLrci/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmVhMTcx
NTk1ODMzMzM5ODE0NjE3OWZkYmYyZTQ4NWZlNjUyNTc0Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDliNmM1ZjUtMmZiMi00NzQ0LWI2ZTEtOTlkOTU4
OTJkMzc3L2YyYTJmYTYzYTEyZWE0MTA5MjY0ZDBmNzg0MWJkZTJhYjZlN2YzNjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWI2YzVmNS0yZmIyLTQ3NDQtYjZlMS05OWQ5
NTg5MmQzNzcvMmVhMTcxNTk1ODMzMzM5ODE0NjE3OWZkYmYyZTQ4NWZlNjUyNTc0
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsnb/DANBgkqhkiG9w0BAQsFAAOCAQEAK5oCnQ5DTJUALfbM
abIBcmtg+7QIvyNJiJChcwO4D4j4NgC5Fr3IBe5aORSDD3CpA3GgUu8MXQJbCc1m
3dcDkBltted2zHCMETV7cP07DrAQ/gYpb4e4D8Tg3yPD9ITOzjFY1BUsvU6E0U/W
7qBVLmpcZRdHLvGVftZzx+JKTagFczA2//rGbdfryuUELV/CGX0qIj4uYmvQTfIP
xCucNtyPKlb8yYiz/XCOwej/SeZ5UwbwzIaM7R/Nu+XMA8sIKYDeiivZ+/+xoGzu
8KcnfZqQULT3Cnh285NcGBiv+y0W3/E18YtrI0mkUv1ftdlCwgDGcT/9WByLtGJL
unep1g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org