Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/1f3d35ecc7d6e39481903989340cadd2603fa004.roa
File: 1f3d35ecc7d6e39481903989340cadd2603fa004.roa (raw, json)
Hash identifier: W9RjklztLkh/wTNY3WqnZfgR73kiEb+rFEqYU8a+Iyg=
Subject key identifier: 67:C6:35:1A:95:83:E8:B1:49:46:D0:F5:3E:E5:0F:CA:2A:86:CA:0D
Certificate issuer: /CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7
Certificate serial: 2213C9
Authority key identifier: 5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/1f3d35ecc7d6e39481903989340cadd2603fa004.roa
Signing time: Sun 17 Sep 2023 21:14:03 +0000
ROA not before: Sat 16 Sep 2023 21:14:02 +0000
ROA not after: Wed 17 Sep 2025 21:14:02 +0000
asID: 20473
IP address blocks: 200.35.153.0/24 maxlen: 24
190.112.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2233289 (0x2213c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7
Validity
Not Before: Sep 16 21:14:02 2023 GMT
Not After : Sep 17 21:14:02 2025 GMT
Subject: CN=1f3d35ecc7d6e39481903989340cadd2603fa004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:63:b0:cf:38:88:87:fe:5d:e7:04:73:da:ab:
9e:5d:53:7b:6a:eb:fb:01:8f:4a:02:01:55:98:95:
68:2e:3c:7c:3d:f5:a0:67:cf:df:bf:83:6d:fd:59:
96:ad:d8:9d:3d:44:7a:34:4b:64:a2:71:97:90:d8:
43:08:d6:f6:a0:19:bb:71:a0:9f:c1:7f:65:2e:86:
e4:a5:fa:ab:ba:bd:bd:5f:2d:31:d4:da:45:3b:77:
5e:67:3f:0a:3b:05:6b:b4:1d:75:69:55:28:fc:ea:
11:85:0b:ce:3a:d3:fd:4a:5d:e7:bb:b1:ea:50:7c:
9e:ca:4d:52:f1:0d:de:e3:5f:ed:12:aa:46:ff:11:
d6:cd:cd:af:05:45:cd:2b:23:70:f5:e4:f4:cd:70:
3b:22:28:d3:88:28:c1:85:41:68:ff:75:6d:49:ab:
1e:a3:c3:9f:db:a8:d8:4c:19:33:7e:02:31:09:eb:
b8:d3:37:24:26:1e:44:6d:d8:e2:e1:1b:6a:5b:15:
9a:0e:03:a9:e7:d7:a3:dc:a3:12:44:ed:ad:ac:55:
aa:ba:0f:1e:a3:d1:67:9e:81:c3:de:e3:63:6b:e2:
01:b7:2c:38:4c:30:9b:9d:ab:19:c8:9c:99:f0:44:
6f:33:7c:a1:72:77:8f:be:86:16:51:3f:d2:84:e2:
b9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C6:35:1A:95:83:E8:B1:49:46:D0:F5:3E:E5:0F:CA:2A:86:CA:0D
X509v3 Authority Key Identifier:
keyid:5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/1f3d35ecc7d6e39481903989340cadd2603fa004.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.202.0/24
200.35.153.0/24
Signature Algorithm: sha256WithRSAEncryption
03:fc:a7:99:03:aa:1f:46:d8:d5:4d:bf:1d:b5:26:60:a5:1e:
10:44:81:09:c6:94:61:bf:74:89:ad:d9:03:d0:da:de:0b:36:
9a:20:60:eb:89:d8:a1:55:f1:77:f3:6f:99:c9:6d:3a:48:69:
ee:ec:7b:ac:17:b2:7f:c6:72:dc:3e:cb:cf:4e:6b:29:52:3c:
cd:6b:c9:39:6d:43:a7:8a:86:52:0d:96:c2:55:82:14:74:e9:
2c:20:3c:a5:b3:84:af:46:6c:38:91:55:54:08:d6:f1:42:f9:
aa:4a:be:8f:b4:24:4b:95:2b:6b:7c:b2:c9:53:c8:02:16:20:
1f:10:30:66:f8:65:19:e5:15:da:4d:ac:6d:16:15:3d:ff:e6:
4e:fe:ea:26:70:9b:91:e8:76:8c:1a:1a:ce:ed:8f:a1:e4:ec:
89:23:94:e1:a6:e8:6c:7a:a8:e3:59:33:03:8e:6f:6d:06:15:
5a:2a:fc:e4:f8:eb:fb:8c:2d:47:18:ac:0a:65:11:ae:06:db:
ae:ae:cc:c5:31:89:be:4c:b1:b6:36:69:5c:d7:45:b0:a4:59:
45:26:9f:ca:70:af:ca:57:70:b6:98:16:3b:ad:ed:c2:10:99:
1b:14:6b:78:c8:58:b3:7e:df:7f:c0:a2:3b:9a:1b:a8:b3:4b:
d1:bd:aa:fb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDIhPJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE5
YTZjZmU4MmEyYzM4OWI1ZTNmY2U4MTUxM2QzYmEwZGRmM2E4ZTcwHhcNMjMwOTE2
MjExNDAyWhcNMjUwOTE3MjExNDAyWjAzMTEwLwYDVQQDEygxZjNkMzVlY2M3ZDZl
Mzk0ODE5MDM5ODkzNDBjYWRkMjYwM2ZhMDA0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgmOwzziIh/5d5wRz2queXVN7auv7AY9KAgFVmJVoLjx8PfWg
Z8/fv4Nt/VmWrdidPUR6NEtkonGXkNhDCNb2oBm7caCfwX9lLobkpfqrur29Xy0x
1NpFO3deZz8KOwVrtB11aVUo/OoRhQvOOtP9Sl3nu7HqUHyeyk1S8Q3e41/tEqpG
/xHWzc2vBUXNKyNw9eT0zXA7IijTiCjBhUFo/3VtSaseo8Of26jYTBkzfgIxCeu4
0zckJh5Ebdji4RtqWxWaDgOp59ej3KMSRO2trFWqug8eo9FnnoHD3uNja+IBtyw4
TDCbnasZyJyZ8ERvM3yhcnePvoYWUT/ShOK5HwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFGfGNRqVg+ixSUbQ9T7lD8oqhsoNMB8GA1UdIwQYMBaAFFqUMHnHoXRoE1gO
GANZ3oDZpsO3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTlhNmNm
ZTgyYTJjMzg5YjVlM2ZjZTgxNTEzZDNiYTBkZGYzYThlNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTQ0ZWYzNTktZDM3Ny00YjViLWI2OGMtMjZlZmJi
ZDdlYmZjLzFmM2QzNWVjYzdkNmUzOTQ4MTkwMzk4OTM0MGNhZGQyNjAzZmEwMDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNDRlZjM1OS1kMzc3LTRiNWItYjY4Yy0yNmVm
YmJkN2ViZmMvYTlhNmNmZTgyYTJjMzg5YjVlM2ZjZTgxNTEzZDNiYTBkZGYzYThl
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAL5wygMEAMgjmTANBgkqhkiG9w0BAQsFAAOCAQEAA/ynmQOq
H0bY1U2/HbUmYKUeEESBCcaUYb90ia3ZA9Da3gs2miBg64nYoVXxd/NvmcltOkhp
7ux7rBeyf8Zy3D7Lz05rKVI8zWvJOW1Dp4qGUg2WwlWCFHTpLCA8pbOEr0ZsOJFV
VAjW8UL5qkq+j7QkS5Ura3yyyVPIAhYgHxAwZvhlGeUV2k2sbRYVPf/mTv7qJnCb
keh2jBoazu2PoeTsiSOU4abobHqo41kzA45vbQYVWir85Pjr+4wtRxisCmURrgbb
rq7MxTGJvkyxtjZpXNdFsKRZRSafynCvyldwtpgWO63twhCZGxRreMhYs37ff8Ci
O5obqLNL0b2q+w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org