Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/94b8534eba9a368308b97be57cc154ed22cef9cd.roa
File: 94b8534eba9a368308b97be57cc154ed22cef9cd.roa (raw, json)
Hash identifier: n9GP3Ao0ErlThA63vPwbiBfkMTcLqgJyj2z1X5mF9lY=
Subject key identifier: 27:97:CE:C7:32:06:14:6D:CC:BD:CA:BC:EA:84:F9:31:1B:5D:27:5E
Certificate issuer: /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial: 029F07
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/94b8534eba9a368308b97be57cc154ed22cef9cd.roa
Signing time: Tue 11 Jul 2023 17:46:47 +0000
ROA not before: Mon 10 Jul 2023 17:46:47 +0000
ROA not after: Fri 11 Jul 2025 17:46:47 +0000
asID: 16629
IP address blocks: 200.50.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171783 (0x29f07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
Validity
Not Before: Jul 10 17:46:47 2023 GMT
Not After : Jul 11 17:46:47 2025 GMT
Subject: CN=94b8534eba9a368308b97be57cc154ed22cef9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:a1:06:73:f3:c9:74:b6:97:16:8a:0d:fd:
e6:4c:28:7d:f3:16:dd:6c:b3:17:7e:32:49:8f:dc:
28:99:d8:97:45:d2:d5:a9:7c:ee:8b:17:c8:b8:d4:
e9:52:1b:f5:28:4a:d5:7f:5b:43:a0:18:5e:95:e2:
9d:59:2b:8b:de:61:c4:37:1c:cf:66:7f:2b:9e:b5:
74:00:8a:47:a5:72:7b:1e:8f:97:83:e2:c7:df:c4:
d4:f7:39:e2:35:9e:f5:99:9e:e1:e6:45:9e:c2:9a:
23:7b:e3:b3:22:6f:d7:b9:be:4e:a8:9e:f9:b0:93:
b7:cb:ab:34:e2:92:00:de:de:e0:c4:e3:5b:d4:d0:
d2:38:1b:33:a1:42:b4:84:23:e7:42:1a:29:2f:0e:
b0:43:e6:a4:3a:f8:3c:9d:38:f1:0c:81:04:19:6c:
09:9a:1f:3d:66:d3:78:16:20:4a:df:97:76:8b:de:
30:bf:80:df:b2:1d:95:cf:1e:93:67:1e:83:4d:92:
a1:ba:d4:d0:0a:09:f5:bb:42:d8:41:9f:22:ad:e5:
c0:d3:47:39:ca:9d:a0:51:ad:cd:a1:3d:cb:86:33:
bc:f8:f3:e5:ce:f4:6c:2f:a0:b1:f3:68:3d:d2:d5:
33:d2:0e:3f:95:45:6d:53:78:b5:a6:32:a8:72:71:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:97:CE:C7:32:06:14:6D:CC:BD:CA:BC:EA:84:F9:31:1B:5D:27:5E
X509v3 Authority Key Identifier:
keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/94b8534eba9a368308b97be57cc154ed22cef9cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.100.0/22
Signature Algorithm: sha256WithRSAEncryption
08:e7:7d:5a:25:38:8a:72:20:03:27:03:23:54:69:dd:8f:96:
42:5d:ec:ab:99:7c:88:28:cf:c4:11:22:f9:26:c1:3a:69:7d:
1b:7f:c1:2d:a1:5c:51:73:cd:95:de:00:1c:72:63:80:bf:7f:
77:18:4c:2e:42:a3:09:91:42:ec:fa:b9:21:69:24:ec:d3:9f:
c4:6d:f4:9b:c8:7b:54:e6:7d:01:48:80:9b:60:f0:37:db:0d:
a2:c2:7d:32:32:41:1b:40:36:35:65:b0:b1:f1:3b:71:a0:d4:
82:a7:e8:dc:82:dc:3f:88:26:89:94:ba:7d:c8:80:54:12:b3:
79:b2:a8:e4:67:d6:11:84:8a:6d:aa:4a:9a:26:24:06:ae:54:
37:1f:ca:e4:06:f3:2a:9d:ad:76:a6:47:a0:10:f1:1f:1f:4d:
f1:68:5e:e2:74:c3:93:7d:9c:3c:c3:0a:ec:e0:19:a9:4b:80:
8c:18:2d:41:3f:64:53:a4:1b:b6:b1:01:73:51:d9:7d:a3:09:
e7:a1:d3:da:a6:b7:42:85:4f:73:b8:9b:63:d7:c1:79:59:2f:
46:7f:7f:e9:82:d1:fd:a1:82:fc:87:0c:e6:e4:aa:41:66:68:
81:ac:26:b8:cc:c4:76:27:f6:84:2a:dd:d8:1c:8d:49:64:69:
f4:f2:3e:94
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAp8HMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg1
ZDQyOGVkNzY2NzAxYjU5MzU1OGEyMmUxZmMwOGMxN2FjYzZlMjcwHhcNMjMwNzEw
MTc0NjQ3WhcNMjUwNzExMTc0NjQ3WjAzMTEwLwYDVQQDEyg5NGI4NTM0ZWJhOWEz
NjgzMDhiOTdiZTU3Y2MxNTRlZDIyY2VmOWNkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtYOhBnPzyXS2lxaKDf3mTCh98xbdbLMXfjJJj9womdiXRdLV
qXzuixfIuNTpUhv1KErVf1tDoBheleKdWSuL3mHENxzPZn8rnrV0AIpHpXJ7Ho+X
g+LH38TU9zniNZ71mZ7h5kWewpoje+OzIm/Xub5OqJ75sJO3y6s04pIA3t7gxONb
1NDSOBszoUK0hCPnQhopLw6wQ+akOvg8nTjxDIEEGWwJmh89ZtN4FiBK35d2i94w
v4Dfsh2Vzx6TZx6DTZKhutTQCgn1u0LYQZ8ireXA00c5yp2gUa3NoT3LhjO8+PPl
zvRsL6Cx82g90tUz0g4/lUVtU3i1pjKocnG9bwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCeXzscyBhRtzL3KvOqE+TEbXSdeMB8GA1UdIwQYMBaAFJWVjQpUS4dtXXTJ
+maZxquWcU7TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODVkNDI4
ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDlmNGQzMTYtOTAxYy00YzZiLWJiZDYtNGNiYjcw
M2IwY2ZkLzk0Yjg1MzRlYmE5YTM2ODMwOGI5N2JlNTdjYzE1NGVkMjJjZWY5Y2Qu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWY0ZDMxNi05MDFjLTRjNmItYmJkNi00Y2Ji
NzAzYjBjZmQvODVkNDI4ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsgyZDANBgkqhkiG9w0BAQsFAAOCAQEACOd9WiU4inIgAycD
I1Rp3Y+WQl3sq5l8iCjPxBEi+SbBOml9G3/BLaFcUXPNld4AHHJjgL9/dxhMLkKj
CZFC7Pq5IWkk7NOfxG30m8h7VOZ9AUiAm2DwN9sNosJ9MjJBG0A2NWWwsfE7caDU
gqfo3ILcP4gmiZS6fciAVBKzebKo5GfWEYSKbapKmiYkBq5UNx/K5AbzKp2tdqZH
oBDxHx9N8Whe4nTDk32cPMMK7OAZqUuAjBgtQT9kU6QbtrEBc1HZfaMJ56HT2qa3
QoVPc7ibY9fBeVkvRn9/6YLR/aGC/IcM5uSqQWZogawmuMzEdif2hCrd2ByNSWRp
9PI+lA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org