Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/66e1c16a4b69254f41be0fb89ab3e8f9d0d20eb3.roa
File: 66e1c16a4b69254f41be0fb89ab3e8f9d0d20eb3.roa (raw, json)
Hash identifier: Mdgm2Uav2WRq1xj0YggyDZSxxeUTiIvCNoHNFoIgLWY=
Subject key identifier: DA:E0:91:F2:32:A1:C5:25:5C:4C:6F:3A:B8:7C:F7:F4:21:3C:DB:27
Certificate issuer: /CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Certificate serial: 213C0C
Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/66e1c16a4b69254f41be0fb89ab3e8f9d0d20eb3.roa
Signing time: Fri 05 May 2023 20:55:00 +0000
ROA not before: Thu 04 May 2023 20:54:59 +0000
ROA not after: Mon 05 May 2025 20:54:59 +0000
asID: 7195
IP address blocks: 148.222.224.0/20 maxlen: 24
200.25.0.0/17 maxlen: 24
2800:1e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2178060 (0x213c0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Validity
Not Before: May 4 20:54:59 2023 GMT
Not After : May 5 20:54:59 2025 GMT
Subject: CN=66e1c16a4b69254f41be0fb89ab3e8f9d0d20eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:af:88:67:35:26:16:86:8a:07:0a:d4:6e:
fc:fb:b5:ef:01:23:b8:40:1f:63:93:a5:0d:68:d1:
d2:34:01:ca:e4:79:96:c3:dd:c8:64:ae:9e:80:dc:
12:da:3e:51:61:24:1e:48:e5:ea:65:42:5e:3e:ae:
3a:f1:fb:f6:ac:66:e9:a4:9d:28:bb:a8:b6:9a:17:
72:75:c1:83:f7:76:27:6c:84:64:1c:14:9d:b5:9b:
21:1b:78:b6:71:3e:18:21:e7:99:7a:dd:5c:1d:b6:
c5:00:04:3b:2e:e3:93:0b:01:83:d5:f0:fd:77:41:
7a:34:ca:34:b1:e4:18:35:17:c5:f7:c1:42:ac:89:
2a:54:f3:ab:dd:95:c7:19:34:80:df:d8:c8:8c:c7:
0b:d0:82:ee:e4:8e:28:c3:32:31:ce:aa:50:b8:b7:
d1:ff:43:94:b1:0b:e2:cd:0b:2a:3e:31:1a:fe:99:
42:d6:7f:ac:92:69:dc:5a:e8:61:f6:e1:36:a9:b1:
d7:d7:82:48:b6:c3:ed:0b:34:6a:b8:3c:fc:33:0d:
84:92:2e:d6:06:fd:3e:58:37:6f:ba:9c:f3:03:41:
3f:1c:c5:1c:11:18:77:5e:4a:1e:e3:97:62:36:8d:
d9:5a:60:b6:b2:40:76:44:b2:75:e1:f8:bd:58:60:
1f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E0:91:F2:32:A1:C5:25:5C:4C:6F:3A:B8:7C:F7:F4:21:3C:DB:27
X509v3 Authority Key Identifier:
keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/66e1c16a4b69254f41be0fb89ab3e8f9d0d20eb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.224.0/20
200.25.0.0/17
IPv6:
2800:1e0::/32
Signature Algorithm: sha256WithRSAEncryption
23:5a:20:5d:b4:4b:9b:a3:27:2b:84:10:e1:56:46:bf:ed:1d:
df:19:7c:30:4f:0f:12:7c:fd:5b:61:85:2a:9f:bb:06:e8:ee:
1c:f6:c4:85:de:23:80:72:92:89:21:3a:d4:e9:70:67:78:43:
54:ef:a2:17:e7:65:74:ae:dc:a5:26:4f:16:10:d1:1e:c2:0f:
f6:29:cb:6a:d5:f2:65:e4:2a:7a:f9:71:6c:27:e2:e3:56:7c:
df:86:51:3c:0f:1f:32:d8:8e:d7:35:d6:53:13:e9:e4:a1:e6:
f6:64:b7:c8:f8:5e:a2:9f:e6:4c:5c:19:85:61:eb:d7:b9:9a:
b2:1a:06:54:7e:49:2e:22:cf:70:8c:93:a1:ed:1c:f4:f2:cb:
8c:97:6a:5e:46:a3:fd:42:42:7e:2c:89:11:00:4e:ea:4b:b7:
e6:e0:a8:1b:8a:15:ad:85:b5:7b:df:0d:a7:b2:e8:5b:29:ec:
56:4d:61:3f:1f:b9:e8:6b:0a:9f:7f:75:d9:e4:27:d4:a0:2f:
c6:68:21:a7:10:d8:6b:4a:8d:62:37:df:62:78:cb:0c:c5:3c:
ea:40:05:50:52:3f:cc:10:7e:77:de:fe:35:a8:b5:16:4c:ce:
21:d9:33:d5:4a:77:4a:f2:65:d6:88:29:b5:62:3b:dc:3a:96:
e5:9d:eb:74
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDITwMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY5
N2ViOWIyNTNmYTU0NmY4N2IzZjc2MTY3ZjI4M2JjYzM3MDAzNjEwHhcNMjMwNTA0
MjA1NDU5WhcNMjUwNTA1MjA1NDU5WjAzMTEwLwYDVQQDEyg2NmUxYzE2YTRiNjky
NTRmNDFiZTBmYjg5YWIzZThmOWQwZDIwZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzkiviGc1JhaGigcK1G78+7XvASO4QB9jk6UNaNHSNAHK5HmW
w93IZK6egNwS2j5RYSQeSOXqZUJePq468fv2rGbppJ0ou6i2mhdydcGD93YnbIRk
HBSdtZshG3i2cT4YIeeZet1cHbbFAAQ7LuOTCwGD1fD9d0F6NMo0seQYNRfF98FC
rIkqVPOr3ZXHGTSA39jIjMcL0ILu5I4owzIxzqpQuLfR/0OUsQvizQsqPjEa/plC
1n+skmncWuhh9uE2qbHX14JItsPtCzRquDz8Mw2Eki7WBv0+WDdvupzzA0E/HMUc
ERh3Xkoe45diNo3ZWmC2skB2RLJ14fi9WGAfFQIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFNrgkfIyocUlXExvOrh89/QhPNsnMB8GA1UdIwQYMBaAFOgIY7ziIgGTR4SY
RE4X0EUNX1AXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjk3ZWI5
YjI1M2ZhNTQ2Zjg3YjNmNzYxNjdmMjgzYmNjMzcwMDM2MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTdmNWNkMTQtYWRkNy00YjcwLTljM2EtNDM3MTYz
M2Y1NWRhLzY2ZTFjMTZhNGI2OTI1NGY0MWJlMGZiODlhYjNlOGY5ZDBkMjBlYjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lN2Y1Y2QxNC1hZGQ3LTRiNzAtOWMzYS00Mzcx
NjMzZjU1ZGEvZjk3ZWI5YjI1M2ZhNTQ2Zjg3YjNmNzYxNjdmMjgzYmNjMzcwMDM2
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEBJTe4AMEB8gZADANBAIAAjAHAwUAKAAB4DANBgkqhkiG9w0B
AQsFAAOCAQEAI1ogXbRLm6MnK4QQ4VZGv+0d3xl8ME8PEnz9W2GFKp+7BujuHPbE
hd4jgHKSiSE61OlwZ3hDVO+iF+dldK7cpSZPFhDRHsIP9inLatXyZeQqevlxbCfi
41Z834ZRPA8fMtiO1zXWUxPp5KHm9mS3yPheop/mTFwZhWHr17mashoGVH5JLiLP
cIyToe0c9PLLjJdqXkaj/UJCfiyJEQBO6ku35uCoG4oVrYW1e98Np7LoWynsVk1h
Px+56GsKn3912eQn1KAvxmghpxDYa0qNYjffYnjLDMU86kAFUFI/zBB+d97+Nai1
FkzOIdkz1Up3SvJl1ogptWI73DqW5Z3rdA==
-----END CERTIFICATE-----
Generated at Mon Feb 19 21:07:38 2024 by rpki-client on console-fra.rpki-client.org