Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e09b0492-6996-4814-ac96-4f9cce1bf241/8b56034aedcb26e8ef3e38db85059fa7c1f6a24c.roa
File: 8b56034aedcb26e8ef3e38db85059fa7c1f6a24c.roa (raw, json)
Hash identifier: s3X8+G31ZT1Mi23wXX/xFqY4IcIyRD0I2VggEQWHRr8=
Subject key identifier: D6:B1:C4:A3:1F:34:2B:F0:C8:D0:65:95:15:6E:E7:EF:BB:AE:F2:1B
Certificate issuer: /CN=cd3c6cc0b111e1c19749d72c35803c56e03114ce
Certificate serial: 25150F
Authority key identifier: 75:2A:B0:64:A7:73:C2:50:BD:5F:28:17:2E:11:57:4A:26:E7:82:15
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd3c6cc0b111e1c19749d72c35803c56e03114ce.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e09b0492-6996-4814-ac96-4f9cce1bf241/8b56034aedcb26e8ef3e38db85059fa7c1f6a24c.roa
Signing time: Tue 05 Dec 2023 01:29:52 +0000
ROA not before: Tue 05 Dec 2023 01:29:52 +0000
ROA not after: Fri 05 Dec 2025 01:29:52 +0000
asID: 52408
IP address blocks: 186.2.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2430223 (0x25150f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3c6cc0b111e1c19749d72c35803c56e03114ce
Validity
Not Before: Dec 5 01:29:52 2023 GMT
Not After : Dec 5 01:29:52 2025 GMT
Subject: CN=8b56034aedcb26e8ef3e38db85059fa7c1f6a24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:31:fb:0c:e1:57:f4:03:c9:3d:96:34:5c:
9f:0c:39:0e:60:0a:5c:73:8b:23:ab:79:8f:c3:66:
ba:f8:75:cf:fe:aa:7f:d6:0b:be:99:61:f6:ec:94:
6e:f2:c1:53:ce:8a:af:0d:34:8c:cd:16:1c:64:8f:
12:75:bc:da:7b:fb:b3:c9:b7:a4:4a:1e:f6:59:5b:
03:97:70:c0:ec:a9:4c:4a:df:9b:92:f7:f2:4f:24:
7c:a6:8e:ea:9c:72:2a:44:71:f2:82:58:2c:75:42:
fc:5a:c4:cc:6f:3e:4b:90:31:f5:78:3e:24:9f:1d:
04:27:d8:70:b1:07:5b:96:2f:7a:60:f9:91:d3:e7:
ea:16:18:b1:31:31:1f:44:90:9f:eb:30:ba:39:5c:
94:ba:a8:5d:bd:67:0e:fa:48:28:9f:9b:83:33:8d:
1a:26:5c:45:30:4f:a6:96:62:b0:f2:46:0c:dc:b7:
d2:c7:84:a5:a6:94:e5:d0:50:4d:12:97:66:97:9a:
ba:fc:e7:04:53:af:6b:15:14:5a:5c:9f:0b:af:c8:
22:03:8d:c4:ac:0c:1e:e6:ac:ff:9c:52:9f:bf:9a:
f8:6c:00:21:fe:3d:de:ef:cd:1f:3d:1e:72:6e:e2:
f2:fb:a2:c3:50:45:d4:e6:33:52:a1:9f:23:3f:61:
b7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B1:C4:A3:1F:34:2B:F0:C8:D0:65:95:15:6E:E7:EF:BB:AE:F2:1B
X509v3 Authority Key Identifier:
keyid:75:2A:B0:64:A7:73:C2:50:BD:5F:28:17:2E:11:57:4A:26:E7:82:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd3c6cc0b111e1c19749d72c35803c56e03114ce.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e09b0492-6996-4814-ac96-4f9cce1bf241/8b56034aedcb26e8ef3e38db85059fa7c1f6a24c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e09b0492-6996-4814-ac96-4f9cce1bf241/cd3c6cc0b111e1c19749d72c35803c56e03114ce.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.2.240.0/22
Signature Algorithm: sha256WithRSAEncryption
48:25:f7:0d:55:3c:54:cf:89:20:d9:48:a7:40:07:a2:65:0c:
18:c6:76:46:f4:79:b8:3f:10:d1:0c:18:4e:12:db:62:a9:36:
13:59:0b:fd:3c:7a:6e:80:cf:89:66:a7:5a:77:91:bd:48:0b:
48:e2:22:ef:be:4d:db:ac:24:aa:d0:2f:3b:99:4c:79:84:dc:
eb:fc:7c:d2:e5:ea:09:f3:79:59:55:cd:1c:30:08:cc:84:ec:
85:94:b8:0d:ff:cf:a1:06:fd:70:fa:84:ef:ae:14:0d:6e:2c:
6a:91:7d:0e:29:f3:ec:b0:67:66:4c:82:76:32:b0:5c:43:7c:
1a:a0:79:ce:45:7b:72:ba:b6:e2:c0:a2:68:f6:2d:bf:59:14:
cb:b0:88:41:e4:74:97:4d:eb:45:7c:1a:9d:0f:d4:45:30:d3:
ec:fe:25:55:b5:2e:e9:3b:5d:f1:da:b6:2b:3c:d3:be:fc:f7:
da:a7:f7:c2:bc:43:0f:4d:57:ae:a9:0e:ea:8e:78:b2:7c:a5:
70:ee:d7:5c:f3:90:f2:25:83:5a:7d:31:37:ee:cc:e9:a7:dd:
04:ec:97:1e:3a:e7:e0:36:70:fa:d7:69:a9:e2:fc:30:0a:2b:
1f:84:75:cf:6f:74:06:b2:cc:74:18:44:c8:14:fe:e0:24:90:
b7:a0:79:3e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJRUPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNk
M2M2Y2MwYjExMWUxYzE5NzQ5ZDcyYzM1ODAzYzU2ZTAzMTE0Y2UwHhcNMjMxMjA1
MDEyOTUyWhcNMjUxMjA1MDEyOTUyWjAzMTEwLwYDVQQDEyg4YjU2MDM0YWVkY2Iy
NmU4ZWYzZTM4ZGI4NTA1OWZhN2MxZjZhMjRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuVkx+wzhV/QDyT2WNFyfDDkOYApcc4sjq3mPw2a6+HXP/qp/
1gu+mWH27JRu8sFTzoqvDTSMzRYcZI8Sdbzae/uzybekSh72WVsDl3DA7KlMSt+b
kvfyTyR8po7qnHIqRHHyglgsdUL8WsTMbz5LkDH1eD4knx0EJ9hwsQdbli96YPmR
0+fqFhixMTEfRJCf6zC6OVyUuqhdvWcO+kgon5uDM40aJlxFME+mlmKw8kYM3LfS
x4SlppTl0FBNEpdml5q6/OcEU69rFRRaXJ8Lr8giA43ErAwe5qz/nFKfv5r4bAAh
/j3e780fPR5ybuLy+6LDUEXU5jNSoZ8jP2G3tQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNaxxKMfNCvwyNBllRVu5++7rvIbMB8GA1UdIwQYMBaAFHUqsGSnc8JQvV8o
Fy4RV0om54IVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2QzYzZj
YzBiMTExZTFjMTk3NDlkNzJjMzU4MDNjNTZlMDMxMTRjZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTA5YjA0OTItNjk5Ni00ODE0LWFjOTYtNGY5Y2Nl
MWJmMjQxLzhiNTYwMzRhZWRjYjI2ZThlZjNlMzhkYjg1MDU5ZmE3YzFmNmEyNGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMDliMDQ5Mi02OTk2LTQ4MTQtYWM5Ni00Zjlj
Y2UxYmYyNDEvY2QzYzZjYzBiMTExZTFjMTk3NDlkNzJjMzU4MDNjNTZlMDMxMTRj
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAroC8DANBgkqhkiG9w0BAQsFAAOCAQEASCX3DVU8VM+JINlI
p0AHomUMGMZ2RvR5uD8Q0QwYThLbYqk2E1kL/Tx6boDPiWanWneRvUgLSOIi775N
26wkqtAvO5lMeYTc6/x80uXqCfN5WVXNHDAIzITshZS4Df/PoQb9cPqE764UDW4s
apF9Dinz7LBnZkyCdjKwXEN8GqB5zkV7crq24sCiaPYtv1kUy7CIQeR0l03rRXwa
nQ/URTDT7P4lVbUu6Ttd8dq2KzzTvvz32qf3wrxDD01XrqkO6o54snylcO7XXPOQ
8iWDWn0xN+7M6afdBOyXHjrn4DZw+tdpqeL8MAorH4R1z290BrLMdBhEyBT+4CSQ
t6B5Pg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org