Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/98c9b68f195fabbe508ec566ed6c1c9328978703.roa
File: 98c9b68f195fabbe508ec566ed6c1c9328978703.roa (raw, json)
Hash identifier: ht7S+0YKCPLoBsOxcrNzDoZOV2c6JA5ymTGYdSrEPKM=
Subject key identifier: EB:56:0C:B9:9B:59:C4:4A:66:CE:32:39:5C:61:93:9C:D0:DF:84:FB
Certificate issuer: /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial: 213DCD
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/98c9b68f195fabbe508ec566ed6c1c9328978703.roa
Signing time: Thu 06 Jul 2023 04:41:19 +0000
ROA not before: Wed 05 Jul 2023 04:41:19 +0000
ROA not after: Sun 06 Jul 2025 04:41:19 +0000
asID: 52468
IP address blocks: 157.100.52.0/22 maxlen: 22
157.100.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2178509 (0x213dcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Validity
Not Before: Jul 5 04:41:19 2023 GMT
Not After : Jul 6 04:41:19 2025 GMT
Subject: CN=98c9b68f195fabbe508ec566ed6c1c9328978703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ef:3b:96:e1:c2:b8:93:ff:4b:4b:f6:fb:17:
c5:36:5d:30:53:2c:68:f3:b6:2f:d4:ea:00:d4:01:
ab:ea:a2:a0:28:79:c5:c0:1c:6b:88:05:d1:f0:7b:
6f:e9:ca:9b:f1:8e:d3:aa:d9:9e:44:59:4e:c3:71:
a4:40:36:01:9d:95:4c:52:08:33:c8:38:d3:08:7e:
b3:f2:97:83:1d:18:21:67:8a:d9:12:ad:74:6a:7c:
a3:2e:7f:61:89:7f:a2:4a:19:a2:70:f3:d8:85:40:
8f:b2:25:b4:35:74:7f:ee:97:38:33:92:9c:69:6a:
4a:be:68:0f:3f:fd:a2:cb:1a:cd:8a:7b:03:55:ee:
c6:54:89:98:50:ed:02:83:58:0e:8e:95:3b:1d:1c:
be:fd:08:92:f7:81:95:d7:df:5a:0b:30:69:69:6e:
e6:cb:6e:94:ba:61:84:62:f5:a5:f7:ea:01:bf:e8:
4d:01:4c:17:1d:df:a9:3f:6e:8a:19:2b:a7:51:7e:
13:e8:0c:dc:d4:0d:8b:17:7d:ae:0c:d3:34:ff:83:
8a:49:b1:cc:b9:1f:69:6d:40:00:0d:fc:cb:6e:30:
ec:79:3b:a5:70:30:e7:5b:e7:a1:66:c5:1d:12:56:
b9:88:ed:a1:aa:94:71:cc:eb:32:9b:91:54:4b:7b:
4e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:56:0C:B9:9B:59:C4:4A:66:CE:32:39:5C:61:93:9C:D0:DF:84:FB
X509v3 Authority Key Identifier:
keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/98c9b68f195fabbe508ec566ed6c1c9328978703.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.100.52.0-157.100.59.255
Signature Algorithm: sha256WithRSAEncryption
2c:80:ea:08:8e:c9:42:eb:f1:3e:0e:c4:39:d3:d1:75:6f:0d:
05:22:83:cf:f7:25:12:b7:f8:fe:a2:c6:96:64:d7:c2:27:2a:
48:42:73:0b:67:d3:00:6a:45:78:66:34:7a:38:d3:01:aa:ca:
40:95:73:ae:11:3b:bd:a2:1c:f2:d3:50:bf:de:b6:04:69:7c:
90:70:07:3e:bc:13:87:c8:72:cd:2a:cb:77:9c:84:e4:f0:1c:
7b:86:44:62:5a:d4:cb:e8:ba:6f:c0:8b:e5:ea:82:f3:0b:74:
d6:dd:4c:51:7e:a9:fe:71:1d:d2:aa:ad:4c:d9:6e:21:62:44:
05:5e:71:a5:69:2c:35:6e:07:7d:0d:d4:99:b3:28:e0:74:b2:
21:f3:35:5f:9d:fd:f3:a7:52:de:99:d8:9e:46:57:f2:6f:1e:
b7:17:00:32:53:55:ab:b8:22:e2:ee:09:84:e6:a4:07:00:97:
eb:af:fc:14:8e:9f:d3:5a:4b:ef:11:9a:11:2a:02:c8:59:99:
2f:6d:4e:22:bb:0b:83:e4:4e:53:b7:d3:26:1c:36:1a:52:b8:
b1:02:e6:89:b4:42:e9:67:15:9b:3a:e4:04:cd:24:ff:af:99:
db:4b:89:2b:7d:8b:45:a1:5f:2d:a9:27:ba:9f:e9:9a:2c:63:
90:70:e8:bc
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDIT3NMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcw
MWVhNWUyYWJhNGM2YzA5MjllYWJmMGExNGI4OGY0MDNhNzI2ZTIwHhcNMjMwNzA1
MDQ0MTE5WhcNMjUwNzA2MDQ0MTE5WjAzMTEwLwYDVQQDEyg5OGM5YjY4ZjE5NWZh
YmJlNTA4ZWM1NjZlZDZjMWM5MzI4OTc4NzAzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjO87luHCuJP/S0v2+xfFNl0wUyxo87Yv1OoA1AGr6qKgKHnF
wBxriAXR8Htv6cqb8Y7TqtmeRFlOw3GkQDYBnZVMUggzyDjTCH6z8peDHRghZ4rZ
Eq10anyjLn9hiX+iShmicPPYhUCPsiW0NXR/7pc4M5KcaWpKvmgPP/2iyxrNinsD
Ve7GVImYUO0Cg1gOjpU7HRy+/QiS94GV199aCzBpaW7my26UumGEYvWl9+oBv+hN
AUwXHd+pP26KGSunUX4T6Azc1A2LF32uDNM0/4OKSbHMuR9pbUAADfzLbjDseTul
cDDnW+ehZsUdEla5iO2hqpRxzOsym5FUS3tOUQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFOtWDLmbWcRKZs4yOVxhk5zQ34T7MB8GA1UdIwQYMBaAFLY/3JXBPG71vVGE
Wglkv+ALFJ6OMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzAxZWE1
ZTJhYmE0YzZjMDkyOWVhYmYwYTE0Yjg4ZjQwM2E3MjZlMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTU5NDg0MzQtNDA1Ni00Mzk0LWI3YTctNDMzZjUx
NzUxNzNhLzk4YzliNjhmMTk1ZmFiYmU1MDhlYzU2NmVkNmMxYzkzMjg5Nzg3MDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNTk0ODQzNC00MDU2LTQzOTQtYjdhNy00MzNm
NTE3NTE3M2EvNzAxZWE1ZTJhYmE0YzZjMDkyOWVhYmYwYTE0Yjg4ZjQwM2E3MjZl
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQCnWQ0AwQCnWQ4MA0GCSqGSIb3DQEBCwUAA4IBAQAsgOoI
jslC6/E+DsQ509F1bw0FIoPP9yUSt/j+osaWZNfCJypIQnMLZ9MAakV4ZjR6ONMB
qspAlXOuETu9ohzy01C/3rYEaXyQcAc+vBOHyHLNKst3nITk8Bx7hkRiWtTL6Lpv
wIvl6oLzC3TW3UxRfqn+cR3Sqq1M2W4hYkQFXnGlaSw1bgd9DdSZsyjgdLIh8zVf
nf3zp1LemdieRlfybx63FwAyU1WruCLi7gmE5qQHAJfrr/wUjp/TWkvvEZoRKgLI
WZkvbU4iuwuD5E5Tt9MmHDYaUrixAuaJtELpZxWbOuQEzST/r5nbS4krfYtFoV8t
qSe6n+maLGOQcOi8
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org