Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/a4cdf05365d502d9eecb04c899386930f5591086.roa
File: a4cdf05365d502d9eecb04c899386930f5591086.roa (raw, json)
Hash identifier: JgAz1Dhh+E+YxuaFyAhzkdwidcxfcTHPWPXNwejF+Uw=
Subject key identifier: 12:6C:45:F9:1F:ED:9D:AB:0E:20:00:12:85:A7:EE:16:D8:64:F6:6B
Certificate issuer: /CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
Certificate serial: 0D70CD
Authority key identifier: 76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/a4cdf05365d502d9eecb04c899386930f5591086.roa
Signing time: Wed 24 Mar 2021 14:46:56 +0000
ROA not before: Wed 24 Mar 2021 14:46:54 +0000
ROA not after: Tue 24 Mar 2026 14:46:54 +0000
asID: 26617
IP address blocks: 200.13.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880845 (0xd70cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
Validity
Not Before: Mar 24 14:46:54 2021 GMT
Not After : Mar 24 14:46:54 2026 GMT
Subject: CN=a4cdf05365d502d9eecb04c899386930f5591086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f0:d3:65:09:52:29:17:74:ee:7d:84:1e:85:
52:28:2f:be:7b:8b:c7:94:ed:f4:ae:aa:9c:86:ae:
e3:98:a3:1d:ed:37:31:ec:cc:b7:36:d7:8b:b6:09:
a5:0b:22:0c:5a:35:15:5b:50:a2:5d:c5:37:8d:6e:
fc:89:07:b9:a4:78:8d:62:27:c0:82:df:95:af:39:
87:82:c4:33:6a:c7:f0:cd:79:c8:10:ad:c3:01:6d:
84:2b:a6:11:ee:d9:2b:28:71:80:4d:51:71:c9:12:
1d:78:bc:38:33:d7:e2:05:f0:f7:ff:53:27:1b:9b:
80:70:75:01:00:12:74:ba:97:5f:06:90:40:6d:01:
07:40:bd:52:cb:da:92:94:5b:fc:96:ca:f2:79:4f:
74:c2:5b:84:d0:a8:1c:9c:23:d6:08:6c:50:90:d7:
8d:4a:99:02:6d:24:53:f7:eb:e6:5b:24:e3:b0:c6:
be:80:e1:72:fe:63:ee:e7:ba:cc:1d:2a:46:3f:57:
20:d8:8a:52:06:9d:16:d3:88:d2:6f:2d:e4:07:d3:
36:a9:43:5f:af:5f:f9:e6:d9:9e:b4:ba:67:60:21:
4f:96:09:a3:e4:44:1b:70:12:e8:4c:4a:1c:5b:10:
52:16:3c:6e:c6:72:8f:f1:69:b5:39:cb:24:21:72:
17:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6C:45:F9:1F:ED:9D:AB:0E:20:00:12:85:A7:EE:16:D8:64:F6:6B
X509v3 Authority Key Identifier:
keyid:76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/a4cdf05365d502d9eecb04c899386930f5591086.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/eb6de066f1c70b82f75b54d19209c0e03f1f0279.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.13.160.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c3:7d:af:cd:0f:4f:4a:5b:9b:ab:9b:45:7d:e4:78:7f:bd:
22:fa:ae:d2:ca:7f:c0:b9:ae:72:a8:3d:51:e6:59:c5:66:09:
70:06:9e:45:cc:4b:6c:14:eb:8c:5a:ee:39:72:56:20:57:f0:
4d:38:da:d7:2e:db:69:12:9d:0c:8b:49:5b:07:7a:5c:8b:7d:
5f:95:0a:3f:3c:a0:75:35:da:63:03:61:f5:ad:74:2c:80:c2:
3d:7e:71:cd:f5:c7:d8:44:92:5c:e7:c4:75:40:3c:63:81:04:
8b:af:8d:90:7b:e8:af:46:13:1d:c8:53:93:e1:d9:9d:e8:ca:
de:0a:42:d0:98:5e:f7:4b:b1:b1:cc:9c:bc:79:d2:a0:0f:d6:
e6:26:46:d1:fd:58:64:53:e7:e3:d9:74:8c:d7:51:50:4a:43:
d1:b1:69:5c:ca:d4:b3:a0:57:43:38:4a:15:f2:95:a9:07:1e:
de:f3:72:63:8f:34:f1:37:44:aa:f8:86:7b:45:85:cd:2b:65:
84:f1:d1:3f:72:69:8b:70:e3:35:56:8e:2b:90:54:a8:7a:dd:
a5:ab:a1:cd:b0:bf:47:b7:a6:f1:f5:90:37:2e:1a:1f:e6:f8:
77:5f:93:bc:73:38:41:f9:94:40:da:84:ce:be:3d:37:86:42:
af:98:6d:87
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDXDNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVi
NmRlMDY2ZjFjNzBiODJmNzViNTRkMTkyMDljMGUwM2YxZjAyNzkwHhcNMjEwMzI0
MTQ0NjU0WhcNMjYwMzI0MTQ0NjU0WjAzMTEwLwYDVQQDEyhhNGNkZjA1MzY1ZDUw
MmQ5ZWVjYjA0Yzg5OTM4NjkzMGY1NTkxMDg2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp/DTZQlSKRd07n2EHoVSKC++e4vHlO30rqqchq7jmKMd7Tcx
7My3NteLtgmlCyIMWjUVW1CiXcU3jW78iQe5pHiNYifAgt+VrzmHgsQzasfwzXnI
EK3DAW2EK6YR7tkrKHGATVFxyRIdeLw4M9fiBfD3/1MnG5uAcHUBABJ0updfBpBA
bQEHQL1Sy9qSlFv8lsryeU90wluE0KgcnCPWCGxQkNeNSpkCbSRT9+vmWyTjsMa+
gOFy/mPu57rMHSpGP1cg2IpSBp0W04jSby3kB9M2qUNfr1/55tmetLpnYCFPlgmj
5EQbcBLoTEocWxBSFjxuxnKP8Wm1OcskIXIXsQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBJsRfkf7Z2rDiAAEoWn7hbYZPZrMB8GA1UdIwQYMBaAFHYSSUZZz8/4GUvd
h3YgwlVo4OoMMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWI2ZGUw
NjZmMWM3MGI4MmY3NWI1NGQxOTIwOWMwZTAzZjFmMDI3OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTM0OGJkZjMtNmMyYS00ZTdmLTlkZWItZWJjZDJj
NTZmMjQ1L2E0Y2RmMDUzNjVkNTAyZDllZWNiMDRjODk5Mzg2OTMwZjU1OTEwODYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMzQ4YmRmMy02YzJhLTRlN2YtOWRlYi1lYmNk
MmM1NmYyNDUvZWI2ZGUwNjZmMWM3MGI4MmY3NWI1NGQxOTIwOWMwZTAzZjFmMDI3
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgNoDANBgkqhkiG9w0BAQsFAAOCAQEAhcN9r80PT0pbm6ub
RX3keH+9Ivqu0sp/wLmucqg9UeZZxWYJcAaeRcxLbBTrjFruOXJWIFfwTTja1y7b
aRKdDItJWwd6XIt9X5UKPzygdTXaYwNh9a10LIDCPX5xzfXH2ESSXOfEdUA8Y4EE
i6+NkHvor0YTHchTk+HZnejK3gpC0Jhe90uxscycvHnSoA/W5iZG0f1YZFPn49l0
jNdRUEpD0bFpXMrUs6BXQzhKFfKVqQce3vNyY4808TdEqviGe0WFzStlhPHRP3Jp
i3DjNVaOK5BUqHrdpauhzbC/R7em8fWQNy4aH+b4d1+TvHM4QfmUQNqEzr49N4ZC
r5hthw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org