Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eec74bf4-2e5a-420d-901d-42adb8cacd2a/ae8d67cbda365256a7830848816cc9ca2c5a194b.roa
File: ae8d67cbda365256a7830848816cc9ca2c5a194b.roa (raw, json)
Hash identifier: ppDBjXxTDhh0lX8Vk9hKJSripuuLSNUekucyGfAcd+Q=
Subject key identifier: 64:70:CF:64:40:66:D1:99:03:83:00:C3:4A:56:19:12:F0:CD:83:DD
Certificate issuer: /CN=355b51da14265bb4fea985c4dc23d1a38ce581bc
Certificate serial: 04FDE4
Authority key identifier: BE:0D:50:85:81:CD:5C:9F:4F:38:C8:D7:EA:CD:03:92:39:2D:01:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/355b51da14265bb4fea985c4dc23d1a38ce581bc.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/eec74bf4-2e5a-420d-901d-42adb8cacd2a/ae8d67cbda365256a7830848816cc9ca2c5a194b.roa
Signing time: Wed 24 Mar 2021 14:46:08 +0000
ROA not before: Wed 24 Mar 2021 14:46:08 +0000
ROA not after: Tue 24 Mar 2026 14:46:08 +0000
asID: 27843
IP address blocks: 170.233.144.0/22 maxlen: 24
143.208.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327140 (0x4fde4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=355b51da14265bb4fea985c4dc23d1a38ce581bc
Validity
Not Before: Mar 24 14:46:08 2021 GMT
Not After : Mar 24 14:46:08 2026 GMT
Subject: CN=ae8d67cbda365256a7830848816cc9ca2c5a194b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:6d:22:f2:b4:ec:11:f7:52:19:82:b3:ab:
33:a7:64:06:42:71:53:84:f9:97:55:be:8a:cb:b2:
b4:d9:b6:a2:cc:98:fb:b2:50:95:f3:83:f5:ad:d7:
1f:d9:4d:46:ed:d7:9c:1b:a0:10:74:7d:37:bc:9f:
89:79:15:79:da:f3:f8:aa:6e:40:aa:35:a5:6e:ed:
49:a5:f1:bd:4e:5e:90:04:4b:b1:fb:f5:7a:27:db:
7c:c1:63:9a:a7:ac:bb:53:b7:45:ef:33:69:e9:56:
55:91:f3:e7:07:9d:96:a9:1a:42:c7:a9:ca:94:a1:
a9:fd:0b:d4:6b:32:14:eb:2b:6f:e9:85:15:fa:f0:
cf:44:ba:54:e6:53:0f:de:23:35:97:a2:b5:3d:78:
7d:ad:6d:d2:57:ba:2f:a8:9d:42:55:18:33:68:ed:
38:91:9d:43:21:2d:61:ce:55:0b:a2:74:dc:4c:18:
c7:e3:c2:bf:90:26:ad:6e:fc:a3:c4:67:06:d9:f8:
e9:52:ef:9c:97:9a:e7:f0:74:7c:07:07:58:00:b8:
57:17:d1:5a:9e:46:9b:7a:42:a7:fe:a7:d1:e6:ac:
11:8e:6b:c0:35:e2:79:d9:7d:f7:dc:b8:7f:ac:cd:
f1:a9:a4:44:d2:c7:ea:8a:49:4e:ed:a1:4b:2e:0f:
ce:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:70:CF:64:40:66:D1:99:03:83:00:C3:4A:56:19:12:F0:CD:83:DD
X509v3 Authority Key Identifier:
keyid:BE:0D:50:85:81:CD:5C:9F:4F:38:C8:D7:EA:CD:03:92:39:2D:01:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/355b51da14265bb4fea985c4dc23d1a38ce581bc.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eec74bf4-2e5a-420d-901d-42adb8cacd2a/ae8d67cbda365256a7830848816cc9ca2c5a194b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/eec74bf4-2e5a-420d-901d-42adb8cacd2a/355b51da14265bb4fea985c4dc23d1a38ce581bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.132.0/22
170.233.144.0/22
Signature Algorithm: sha256WithRSAEncryption
58:a1:2d:fe:61:a8:b3:2e:24:ff:87:5f:47:b6:d6:e3:fa:71:
c3:f8:61:bb:1a:0d:e2:08:b3:68:55:47:4a:f0:e7:98:1b:82:
63:b6:47:b2:5a:2c:4e:cd:e6:ef:8a:ed:62:29:12:48:4b:51:
81:92:64:34:c3:dd:5c:48:9f:11:b3:35:ee:fa:ad:f0:c0:92:
18:97:6a:0f:70:80:07:66:b1:ac:49:3e:7c:12:88:65:a8:8f:
1a:ba:94:85:6c:76:10:f3:65:26:1f:11:cf:35:8c:73:44:fd:
3d:68:ab:41:25:b3:77:94:55:ca:d6:a8:43:19:28:eb:79:64:
e4:f1:3c:88:67:54:bc:27:1d:47:f4:82:7e:27:bf:ae:3a:f7:
4b:34:29:09:df:e9:e5:e1:79:8a:06:9e:70:ad:6d:c5:f1:ef:
0c:d3:5c:bc:89:f7:fd:46:76:0a:6f:d5:6c:21:7c:79:30:5c:
a4:25:bc:18:8d:e9:e9:24:2e:b4:54:47:02:29:2d:c9:a9:fd:
04:46:3c:23:3d:7e:43:d6:a8:6f:cf:75:e0:48:aa:1b:9d:37:
ab:eb:fa:01:96:6f:41:22:71:ed:8f:df:a5:32:a7:b1:db:60:
10:c6:dc:b6:12:34:83:86:07:93:76:92:ea:32:9f:7c:ef:27:
90:04:74:98
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDBP3kMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM1
NWI1MWRhMTQyNjViYjRmZWE5ODVjNGRjMjNkMWEzOGNlNTgxYmMwHhcNMjEwMzI0
MTQ0NjA4WhcNMjYwMzI0MTQ0NjA4WjAzMTEwLwYDVQQDEyhhZThkNjdjYmRhMzY1
MjU2YTc4MzA4NDg4MTZjYzljYTJjNWExOTRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwAdtIvK07BH3UhmCs6szp2QGQnFThPmXVb6Ky7K02baizJj7
slCV84P1rdcf2U1G7decG6AQdH03vJ+JeRV52vP4qm5AqjWlbu1JpfG9Tl6QBEux
+/V6J9t8wWOap6y7U7dF7zNp6VZVkfPnB52WqRpCx6nKlKGp/QvUazIU6ytv6YUV
+vDPRLpU5lMP3iM1l6K1PXh9rW3SV7ovqJ1CVRgzaO04kZ1DIS1hzlULonTcTBjH
48K/kCatbvyjxGcG2fjpUu+cl5rn8HR8BwdYALhXF9FankabekKn/qfR5qwRjmvA
NeJ52X333Lh/rM3xqaRE0sfqiklO7aFLLg/OrwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFGRwz2RAZtGZA4MAw0pWGRLwzYPdMB8GA1UdIwQYMBaAFL4NUIWBzVyfTzjI
1+rNA5I5LQG2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzU1YjUx
ZGExNDI2NWJiNGZlYTk4NWM0ZGMyM2QxYTM4Y2U1ODFiYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWVjNzRiZjQtMmU1YS00MjBkLTkwMWQtNDJhZGI4
Y2FjZDJhL2FlOGQ2N2NiZGEzNjUyNTZhNzgzMDg0ODgxNmNjOWNhMmM1YTE5NGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZWM3NGJmNC0yZTVhLTQyMGQtOTAxZC00MmFk
YjhjYWNkMmEvMzU1YjUxZGExNDI2NWJiNGZlYTk4NWM0ZGMyM2QxYTM4Y2U1ODFi
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAo/QhAMEAqrpkDANBgkqhkiG9w0BAQsFAAOCAQEAWKEt/mGo
sy4k/4dfR7bW4/pxw/hhuxoN4gizaFVHSvDnmBuCY7ZHslosTs3m74rtYikSSEtR
gZJkNMPdXEifEbM17vqt8MCSGJdqD3CAB2axrEk+fBKIZaiPGrqUhWx2EPNlJh8R
zzWMc0T9PWirQSWzd5RVytaoQxko63lk5PE8iGdUvCcdR/SCfie/rjr3SzQpCd/p
5eF5igaecK1txfHvDNNcvIn3/UZ2Cm/VbCF8eTBcpCW8GI3p6SQutFRHAiktyan9
BEY8Iz1+Q9aob8914EiqG503q+v6AZZvQSJx7Y/fpTKnsdtgEMbcthI0g4YHk3aS
6jKffO8nkAR0mA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org