Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/a259c113471f8214fb76bbab5eced7310af0b730.roa
File: a259c113471f8214fb76bbab5eced7310af0b730.roa (raw, json)
Hash identifier: HRz06r3eR7GGnxS0l6ZrU17hyZ7oy6yS4qz/zPS6qr8=
Subject key identifier: 56:52:73:8E:A8:46:DA:39:E2:BC:80:B0:03:4C:92:23:8B:DA:85:2A
Certificate issuer: /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial: 0AFD43
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/a259c113471f8214fb76bbab5eced7310af0b730.roa
Signing time: Fri 18 Nov 2022 18:47:45 +0000
ROA not before: Wed 16 Nov 2022 18:39:43 +0000
ROA not after: Mon 18 Nov 2024 18:39:43 +0000
asID: 27768
IP address blocks: 201.217.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720195 (0xafd43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
Validity
Not Before: Nov 16 18:39:43 2022 GMT
Not After : Nov 18 18:39:43 2024 GMT
Subject: CN=a259c113471f8214fb76bbab5eced7310af0b730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:30:12:e1:80:e5:b3:04:d4:31:0e:95:54:01:
12:9a:34:6d:93:fe:4c:69:89:d7:1f:de:23:6d:ad:
be:ef:df:b6:4f:1f:ae:66:bf:13:e1:51:0e:6f:25:
1d:20:c6:26:ce:23:d7:fb:8e:dd:d0:cb:5e:0d:48:
5a:88:71:cf:ce:0f:7f:74:2a:50:97:9d:2c:26:3f:
00:db:e3:9c:93:53:60:17:86:ca:7a:f0:1f:ef:02:
60:4e:19:63:1f:20:ca:3a:13:7c:f0:cf:73:02:e7:
2b:50:9a:fb:1d:c3:e8:30:c4:cc:17:5d:e6:ca:82:
fc:db:7a:b5:df:37:37:60:e7:70:37:34:a8:41:53:
4e:a6:dc:32:d7:67:ca:3e:10:b4:73:af:01:89:d6:
20:e3:4e:2d:93:58:db:8b:38:38:d4:80:8a:5f:4c:
47:54:9f:cc:b5:c3:f3:62:fa:06:fe:0c:21:9d:5d:
f7:40:96:de:17:5b:0d:98:e4:45:ca:9a:75:37:e1:
4c:bd:f6:13:87:f1:14:f0:a9:45:5b:fa:5e:57:30:
90:1e:0b:b1:a5:f9:8b:40:ed:c4:bd:7f:df:14:56:
3a:e0:7f:eb:12:50:75:17:2b:4e:2a:3d:65:cd:10:
5e:b6:cc:d3:6a:4e:77:43:53:36:27:c4:6f:61:35:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:52:73:8E:A8:46:DA:39:E2:BC:80:B0:03:4C:92:23:8B:DA:85:2A
X509v3 Authority Key Identifier:
keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/a259c113471f8214fb76bbab5eced7310af0b730.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.217.19.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ed:f5:ad:ee:13:8a:35:f9:3d:d4:39:5d:7a:67:57:e2:f0:
03:9d:e1:75:6c:6b:2a:29:93:28:23:a3:b5:da:65:6c:e5:20:
2b:6c:36:5d:17:bc:02:18:3a:42:7a:1e:da:24:39:27:0f:ed:
af:01:0a:3b:b8:56:02:c2:66:e9:1f:1a:35:27:70:c5:a0:4d:
f3:42:9e:16:9f:22:91:f7:88:c4:67:9b:b2:cc:e3:36:5b:93:
ea:44:24:dc:7a:1f:bc:01:ab:8b:8e:17:54:ac:b7:c2:94:0a:
91:97:77:12:a2:d5:b2:3d:37:35:0a:28:6d:c4:05:08:94:0b:
0d:85:6f:03:48:2c:20:f0:9b:21:a0:88:c3:55:2d:44:a9:c8:
88:43:26:74:4e:80:de:db:01:f5:dc:18:1b:99:c4:c6:e0:4d:
fa:56:9b:5c:c7:f3:5a:e2:a7:ab:8d:4e:f7:ca:96:14:2f:e2:
fd:40:f0:66:79:fc:42:3a:ed:41:66:48:3d:92:be:d9:a3:db:
d4:ef:fa:61:e9:b1:42:52:ff:c6:07:da:d7:9e:e0:ea:c4:5e:
03:10:68:1f:3c:40:94:da:fd:44:75:d5:09:6f:40:d9:49:55:
38:be:ac:14:3f:a5:77:8c:25:30:fc:f6:8d:35:13:03:a4:64:
d9:d1:f4:c2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCv1DMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
NjlmYjM4N2JlZmM5NmYwMTlkMDE0YzZlNTIzNGQwOTU1NTUzYTkwHhcNMjIxMTE2
MTgzOTQzWhcNMjQxMTE4MTgzOTQzWjAzMTEwLwYDVQQDEyhhMjU5YzExMzQ3MWY4
MjE0ZmI3NmJiYWI1ZWNlZDczMTBhZjBiNzMwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA6jAS4YDlswTUMQ6VVAESmjRtk/5MaYnXH94jba2+79+2Tx+u
Zr8T4VEObyUdIMYmziPX+47d0MteDUhaiHHPzg9/dCpQl50sJj8A2+Ock1NgF4bK
evAf7wJgThljHyDKOhN88M9zAucrUJr7HcPoMMTMF13myoL823q13zc3YOdwNzSo
QVNOptwy12fKPhC0c68BidYg404tk1jbizg41ICKX0xHVJ/MtcPzYvoG/gwhnV33
QJbeF1sNmORFypp1N+FMvfYTh/EU8KlFW/peVzCQHguxpfmLQO3EvX/fFFY64H/r
ElB1FytOKj1lzRBetszTak53Q1M2J8RvYTWYzQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFZSc46oRto54ryAsANMkiOL2oUqMB8GA1UdIwQYMBaAFAyFBRRHaAvbICkP
JHQ1FbXmEmp/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTQ2OWZi
Mzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNhOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTRhZDY4ZTMtYTdmMC00ZDUxLTg2NTgtY2NmOWMy
NmQzZWE3L2EyNTljMTEzNDcxZjgyMTRmYjc2YmJhYjVlY2VkNzMxMGFmMGI3MzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNGFkNjhlMy1hN2YwLTRkNTEtODY1OC1jY2Y5
YzI2ZDNlYTcvOTQ2OWZiMzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNh
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnZEzANBgkqhkiG9w0BAQsFAAOCAQEAf+31re4TijX5PdQ5
XXpnV+LwA53hdWxrKimTKCOjtdplbOUgK2w2XRe8Ahg6Qnoe2iQ5Jw/trwEKO7hW
AsJm6R8aNSdwxaBN80KeFp8ikfeIxGebsszjNluT6kQk3HofvAGri44XVKy3wpQK
kZd3EqLVsj03NQoobcQFCJQLDYVvA0gsIPCbIaCIw1UtRKnIiEMmdE6A3tsB9dwY
G5nExuBN+labXMfzWuKnq41O98qWFC/i/UDwZnn8QjrtQWZIPZK+2aPb1O/6Yemx
QlL/xgfa157g6sReAxBoHzxAlNr9RHXVCW9A2UlVOL6sFD+ld4wlMPz2jTUTA6Rk
2dH0wg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org