Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/bc30c574bc98bef27dcfed0e47ff468d805fd8a4.roa
File: bc30c574bc98bef27dcfed0e47ff468d805fd8a4.roa (raw, json)
Hash identifier: uzwvQJ7C5qMi1tUy0oTE2p5+9Csc+Fmpt8xOZjPQ1Eo=
Subject key identifier: 83:F8:60:25:77:A7:74:6D:F3:93:70:A4:55:54:F1:7D:76:12:35:B0
Certificate issuer: /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial: 24398F
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/bc30c574bc98bef27dcfed0e47ff468d805fd8a4.roa
Signing time: Tue 17 Oct 2023 22:00:54 +0000
ROA not before: Mon 16 Oct 2023 22:00:54 +0000
ROA not after: Fri 17 Oct 2025 22:00:54 +0000
asID: 273041
IP address blocks: 168.234.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2374031 (0x24398f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
Validity
Not Before: Oct 16 22:00:54 2023 GMT
Not After : Oct 17 22:00:54 2025 GMT
Subject: CN=bc30c574bc98bef27dcfed0e47ff468d805fd8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:84:b4:d0:3b:9b:15:56:07:a5:50:6a:a0:
c3:8f:82:05:29:7d:b8:5e:cd:ff:f6:dd:9d:fb:d6:
f8:be:09:81:f0:bb:4e:53:c4:13:d8:a9:aa:81:fd:
0c:61:41:b6:77:16:c5:85:c2:b0:31:29:b2:d4:74:
eb:e2:a2:fa:81:68:e7:3b:bd:b4:c5:97:c4:36:2a:
66:a8:bd:6b:01:18:4f:d7:a1:b5:31:13:65:a0:ef:
dc:49:51:c9:52:89:b2:a1:78:a6:0a:34:87:29:b0:
c6:72:06:be:9c:57:eb:73:f0:1d:bf:6e:e2:b6:70:
74:39:dc:5b:9b:73:c4:1f:bc:5b:61:ca:54:4d:62:
89:e1:db:4b:d5:71:63:ff:53:96:3c:69:d9:44:94:
d2:1d:e2:a3:e6:14:2b:c2:4f:95:3b:61:4f:30:2c:
ac:40:e9:87:7f:83:21:8c:9e:80:ef:96:74:19:af:
89:dc:06:13:25:01:04:9a:f6:9a:da:b0:3a:36:96:
0c:5c:6b:82:f6:92:f6:0b:d4:b9:4c:89:b7:06:b5:
69:6e:85:e4:6e:db:3a:68:93:55:4d:38:3a:09:0d:
a4:a2:97:84:64:9c:c3:95:cb:eb:d3:35:c7:93:9f:
f7:55:e7:42:ee:3a:8d:8d:b3:d4:d3:5f:ce:87:59:
67:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F8:60:25:77:A7:74:6D:F3:93:70:A4:55:54:F1:7D:76:12:35:B0
X509v3 Authority Key Identifier:
keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/bc30c574bc98bef27dcfed0e47ff468d805fd8a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.78.0/24
Signature Algorithm: sha256WithRSAEncryption
81:2a:ae:ef:1a:69:b9:e5:7b:ed:99:22:6c:96:35:f5:da:d5:
fc:71:b8:53:7a:df:12:eb:17:b2:30:89:bc:07:4f:a0:71:bd:
cf:c4:48:70:b8:35:99:35:6e:94:b1:08:b2:ac:a4:b0:90:e5:
7d:31:7f:24:3d:78:c2:bc:4e:d7:cb:f0:18:0d:50:bb:b4:05:
d0:54:50:e2:97:76:6e:58:b9:2b:db:93:ee:23:97:21:cc:ad:
22:54:5d:2d:f0:0a:1a:dd:38:17:ad:8e:fd:a0:4d:d2:c4:49:
3d:da:1f:0c:c9:26:9c:33:71:76:82:c2:69:e8:65:57:88:41:
8c:23:07:44:80:93:c3:dc:c1:5c:db:5c:82:32:da:77:76:1d:
0a:52:e8:f3:77:c0:a6:c0:d1:68:fd:e3:5b:a3:fb:db:2f:b0:
88:0f:70:25:35:66:76:c1:79:d2:35:86:d8:0f:8e:c8:a5:1a:
6f:bd:ca:07:5f:42:a1:75:bf:2c:2c:7f:39:f4:d3:cc:3c:a9:
54:c3:d7:0b:a4:4f:4e:31:4e:bf:0d:9c:03:f3:ac:ad:85:2e:
a2:ce:59:f9:b7:b3:bd:89:56:78:ca:8f:2b:f4:f2:36:4a:46:
bc:f5:fe:09:3a:72:83:fc:b4:12:fa:4f:97:26:e3:22:c6:cb:
a6:84:cb:53
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJDmPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM3
YTA3NDBlMGI0NjJiMzZmZDIyN2IyMjBhZmYzMzUzOGI5MzJhNzIwHhcNMjMxMDE2
MjIwMDU0WhcNMjUxMDE3MjIwMDU0WjAzMTEwLwYDVQQDEyhiYzMwYzU3NGJjOThi
ZWYyN2RjZmVkMGU0N2ZmNDY4ZDgwNWZkOGE0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwAmEtNA7mxVWB6VQaqDDj4IFKX24Xs3/9t2d+9b4vgmB8LtO
U8QT2Kmqgf0MYUG2dxbFhcKwMSmy1HTr4qL6gWjnO720xZfENipmqL1rARhP16G1
MRNloO/cSVHJUomyoXimCjSHKbDGcga+nFfrc/Adv27itnB0Odxbm3PEH7xbYcpU
TWKJ4dtL1XFj/1OWPGnZRJTSHeKj5hQrwk+VO2FPMCysQOmHf4MhjJ6A75Z0Ga+J
3AYTJQEEmvaa2rA6NpYMXGuC9pL2C9S5TIm3BrVpboXkbts6aJNVTTg6CQ2kopeE
ZJzDlcvr0zXHk5/3VedC7jqNjbPU01/Oh1ln1QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIP4YCV3p3Rt85NwpFVU8X12EjWwMB8GA1UdIwQYMBaAFM7h2MxrM3HBmchw
TET0Qk7gI9K+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzdhMDc0
MGUwYjQ2MmIzNmZkMjI3YjIyMGFmZjMzNTM4YjkzMmE3Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjViODQ1ZGYtYjQ0NS00ZTlhLTliN2UtMzQxZWM0
ZjY5NDUzL2JjMzBjNTc0YmM5OGJlZjI3ZGNmZWQwZTQ3ZmY0NjhkODA1ZmQ4YTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mNWI4NDVkZi1iNDQ1LTRlOWEtOWI3ZS0zNDFl
YzRmNjk0NTMvMzdhMDc0MGUwYjQ2MmIzNmZkMjI3YjIyMGFmZjMzNTM4YjkzMmE3
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKjqTjANBgkqhkiG9w0BAQsFAAOCAQEAgSqu7xppueV77Zki
bJY19drV/HG4U3rfEusXsjCJvAdPoHG9z8RIcLg1mTVulLEIsqyksJDlfTF/JD14
wrxO18vwGA1Qu7QF0FRQ4pd2bli5K9uT7iOXIcytIlRdLfAKGt04F62O/aBN0sRJ
PdofDMkmnDNxdoLCaehlV4hBjCMHRICTw9zBXNtcgjLad3YdClLo83fApsDRaP3j
W6P72y+wiA9wJTVmdsF50jWG2A+OyKUab73KB19CoXW/LCx/OfTTzDypVMPXC6RP
TjFOvw2cA/OsrYUuos5Z+bezvYlWeMqPK/TyNkpGvPX+CTpyg/y0EvpPlybjIsbL
poTLUw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org