Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/e5853cc40b1e360688c2f22fc137ca55e78a1297.roa
File: e5853cc40b1e360688c2f22fc137ca55e78a1297.roa (raw, json)
Hash identifier: ifbSQiUoGoVxkIBI9V2cf9hSOg9x7ssjbphORcdoNVI=
Subject key identifier: B5:80:02:F1:93:E8:65:54:79:D3:59:23:D0:24:A5:05:A8:94:B3:56
Certificate issuer: /CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Certificate serial: 213F98
Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/e5853cc40b1e360688c2f22fc137ca55e78a1297.roa
Signing time: Fri 05 May 2023 20:55:21 +0000
ROA not before: Thu 04 May 2023 20:54:59 +0000
ROA not after: Mon 05 May 2025 20:54:59 +0000
asID: 64124
IP address blocks: 200.25.13.0/24 maxlen: 24
200.25.68.0/24 maxlen: 24
2800:1e0:2100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2178968 (0x213f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Validity
Not Before: May 4 20:54:59 2023 GMT
Not After : May 5 20:54:59 2025 GMT
Subject: CN=e5853cc40b1e360688c2f22fc137ca55e78a1297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:f7:6c:3d:da:df:47:83:6e:40:34:ff:d0:
4e:38:f7:0f:76:ce:f7:01:f7:1d:0f:66:af:51:ef:
30:41:aa:0d:88:f3:b5:96:85:82:2a:10:77:e0:1d:
5f:40:29:13:05:8c:ed:a3:bb:99:cb:b1:5f:24:2b:
3a:e9:b9:df:74:c6:d7:85:47:83:06:b2:3a:74:97:
ec:f5:a1:57:81:40:8c:e0:6e:c7:a1:da:2d:f8:9f:
3a:c6:66:95:11:82:02:d1:94:dd:d8:7b:49:48:0b:
d4:04:48:69:17:50:e6:75:84:67:99:76:e4:e5:7a:
74:2d:c3:1b:68:00:ea:33:96:06:44:cd:70:33:c8:
8b:e9:3e:e9:06:63:99:c7:07:86:39:9a:44:de:29:
51:58:11:a1:9d:50:e9:b2:65:34:81:aa:94:00:4c:
9e:4b:d4:39:bd:d7:ec:79:40:c6:06:67:e5:64:7a:
2b:a8:f1:f8:f2:6a:00:bc:e7:e4:98:43:c4:a0:a9:
4f:77:01:d6:0b:f2:17:ab:06:b8:18:d8:19:df:ad:
c1:5e:c5:c7:5f:9b:21:7e:95:b3:9c:4c:6e:69:3a:
a2:fd:10:cc:20:f6:29:40:b5:36:c8:cb:f4:a3:20:
d1:e5:95:a2:ff:c1:6f:94:a6:b8:e1:f3:0f:9f:95:
6f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:80:02:F1:93:E8:65:54:79:D3:59:23:D0:24:A5:05:A8:94:B3:56
X509v3 Authority Key Identifier:
keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/e5853cc40b1e360688c2f22fc137ca55e78a1297.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.25.13.0/24
200.25.68.0/24
IPv6:
2800:1e0:2100::/40
Signature Algorithm: sha256WithRSAEncryption
08:83:9c:87:82:79:e4:3b:2b:88:65:65:07:b4:08:c9:d1:d0:
76:50:c2:73:36:e2:f5:58:ec:4a:4a:0e:16:71:f6:8d:64:76:
e6:85:9f:6c:34:5d:00:d1:d9:ea:fc:ff:96:4f:90:99:1b:60:
ac:d6:30:25:90:85:fd:de:1b:9f:b0:3b:a1:83:ea:d0:58:c6:
02:cc:ed:f5:1c:0f:d9:bb:c2:10:b2:e9:2c:61:18:8e:ba:64:
55:6b:e7:3e:e2:86:46:29:61:2a:7f:20:d4:38:21:09:c3:f6:
10:66:3b:92:a4:6e:ed:d0:5a:1b:41:2b:e2:48:6a:50:9b:0a:
f5:f4:97:9a:0c:37:0c:42:f9:8b:c7:bf:2e:d2:0c:20:89:59:
13:99:2c:87:af:e6:57:68:47:95:22:f7:2e:19:eb:0c:58:fb:
f5:b8:97:58:c4:17:5b:4d:e8:31:7f:81:d7:bf:1a:0c:12:f3:
74:22:df:d3:bd:1f:4a:a1:ab:28:55:57:d6:10:05:3b:9b:0c:
6e:57:c8:b2:30:ab:54:94:52:02:54:9c:fb:60:a0:69:e0:20:
e5:f3:e0:e5:c3:08:0f:c2:4c:c5:cd:dc:aa:24:b9:46:71:93:
61:a3:78:d6:7b:da:f7:c9:af:89:8c:a2:41:64:c2:55:a1:8a:
14:10:45:a8
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIDIT+YMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY5
N2ViOWIyNTNmYTU0NmY4N2IzZjc2MTY3ZjI4M2JjYzM3MDAzNjEwHhcNMjMwNTA0
MjA1NDU5WhcNMjUwNTA1MjA1NDU5WjAzMTEwLwYDVQQDEyhlNTg1M2NjNDBiMWUz
NjA2ODhjMmYyMmZjMTM3Y2E1NWU3OGExMjk3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArr/3bD3a30eDbkA0/9BOOPcPds73AfcdD2avUe8wQaoNiPO1
loWCKhB34B1fQCkTBYzto7uZy7FfJCs66bnfdMbXhUeDBrI6dJfs9aFXgUCM4G7H
odot+J86xmaVEYIC0ZTd2HtJSAvUBEhpF1DmdYRnmXbk5Xp0LcMbaADqM5YGRM1w
M8iL6T7pBmOZxweGOZpE3ilRWBGhnVDpsmU0gaqUAEyeS9Q5vdfseUDGBmflZHor
qPH48moAvOfkmEPEoKlPdwHWC/IXqwa4GNgZ363BXsXHX5shfpWznExuaTqi/RDM
IPYpQLU2yMv0oyDR5ZWi/8FvlKa44fMPn5VvAQIDAQABo4ICcTCCAm0wHQYDVR0O
BBYEFLWAAvGT6GVUedNZI9AkpQWolLNWMB8GA1UdIwQYMBaAFOgIY7ziIgGTR4SY
RE4X0EUNX1AXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjk3ZWI5
YjI1M2ZhNTQ2Zjg3YjNmNzYxNjdmMjgzYmNjMzcwMDM2MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTdmNWNkMTQtYWRkNy00YjcwLTljM2EtNDM3MTYz
M2Y1NWRhL2U1ODUzY2M0MGIxZTM2MDY4OGMyZjIyZmMxMzdjYTU1ZTc4YTEyOTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lN2Y1Y2QxNC1hZGQ3LTRiNzAtOWMzYS00Mzcx
NjMzZjU1ZGEvZjk3ZWI5YjI1M2ZhNTQ2Zjg3YjNmNzYxNjdmMjgzYmNjMzcwMDM2
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA1BggrBgEFBQcBBwEB/wQm
MCQwEgQCAAEwDAMEAMgZDQMEAMgZRDAOBAIAAjAIAwYAKAAB4CEwDQYJKoZIhvcN
AQELBQADggEBAAiDnIeCeeQ7K4hlZQe0CMnR0HZQwnM24vVY7EpKDhZx9o1kduaF
n2w0XQDR2er8/5ZPkJkbYKzWMCWQhf3eG5+wO6GD6tBYxgLM7fUcD9m7whCy6Sxh
GI66ZFVr5z7ihkYpYSp/INQ4IQnD9hBmO5Kkbu3QWhtBK+JIalCbCvX0l5oMNwxC
+YvHvy7SDCCJWROZLIev5ldoR5Ui9y4Z6wxY+/W4l1jEF1tN6DF/gde/GgwS83Qi
39O9H0qhqyhVV9YQBTubDG5XyLIwq1SUUgJUnPtgoGngIOXz4OXDCA/CTMXN3Kok
uUZxk2GjeNZ72vfJr4mMokFkwlWhihQQRag=
-----END CERTIFICATE-----
Generated at Mon Feb 19 21:07:38 2024 by rpki-client on console-fra.rpki-client.org