Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/bc726113e364cda9e91ccf8d4f99124991906626.roa
File: bc726113e364cda9e91ccf8d4f99124991906626.roa (raw, json)
Hash identifier: +0DwWn1082v96urPCUGA5SEUQfTCWPq/MXT0XRAzZpg=
Subject key identifier: 58:5F:C3:E7:52:13:89:8C:51:E4:53:6D:F9:3E:F2:9F:31:6B:67:B5
Certificate issuer: /CN=185ca6bb80f033ceba341dcaab97097fc3891bcd
Certificate serial: 0557B1
Authority key identifier: BB:72:A9:73:72:8A:BF:4E:93:B7:E0:82:F3:30:CB:6E:16:D3:36:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/185ca6bb80f033ceba341dcaab97097fc3891bcd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/bc726113e364cda9e91ccf8d4f99124991906626.roa
Signing time: Fri 05 May 2023 16:59:02 +0000
ROA not before: Thu 04 May 2023 16:59:02 +0000
ROA not after: Mon 05 May 2025 16:59:02 +0000
asID: 32098
IP address blocks: 200.23.53.0/24 maxlen: 24
200.23.168.0/23 maxlen: 23
200.23.170.0/24 maxlen: 24
200.23.168.0/24 maxlen: 24
200.23.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350129 (0x557b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185ca6bb80f033ceba341dcaab97097fc3891bcd
Validity
Not Before: May 4 16:59:02 2023 GMT
Not After : May 5 16:59:02 2025 GMT
Subject: CN=bc726113e364cda9e91ccf8d4f99124991906626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:3b:d2:2e:0b:3c:f6:40:05:40:9e:e0:a3:
fe:a4:0e:ee:d5:74:27:88:a5:5a:aa:a2:98:bf:d2:
00:70:35:5b:ef:bd:b3:04:ce:5e:1c:b9:a6:22:50:
b8:40:0a:a2:4a:cd:e8:b3:41:02:e2:13:f8:bc:4f:
f8:9a:49:e7:50:a9:20:e6:e5:77:ab:ea:8a:32:9a:
82:3a:16:f1:24:52:d1:24:f4:6e:57:a2:bc:62:4f:
88:c5:c9:5b:ca:e5:58:2b:dd:f5:5d:47:34:1c:a5:
9e:87:09:71:92:ad:b8:cf:bf:1e:e1:2f:c2:bb:3d:
a4:34:b8:74:26:93:b8:90:96:31:c4:45:85:9e:7d:
64:b1:96:13:eb:34:48:28:8a:9a:ba:f8:47:7e:12:
86:d3:4c:33:4e:a6:db:f3:21:6b:ef:8d:66:7e:e2:
f5:3b:07:26:54:37:04:9d:62:f9:46:75:33:e1:7f:
44:d5:08:5b:ff:9e:96:83:e3:1b:9b:43:10:62:85:
52:04:56:f5:95:88:b4:06:66:be:96:77:b3:14:67:
5b:8b:21:00:0d:76:79:63:55:24:9d:de:bb:39:66:
55:9f:23:2b:24:17:93:dc:46:93:b7:e6:8e:91:2f:
76:3b:c2:df:ac:39:db:e6:45:ee:ce:09:e5:f0:f5:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5F:C3:E7:52:13:89:8C:51:E4:53:6D:F9:3E:F2:9F:31:6B:67:B5
X509v3 Authority Key Identifier:
keyid:BB:72:A9:73:72:8A:BF:4E:93:B7:E0:82:F3:30:CB:6E:16:D3:36:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/185ca6bb80f033ceba341dcaab97097fc3891bcd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/bc726113e364cda9e91ccf8d4f99124991906626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/185ca6bb80f033ceba341dcaab97097fc3891bcd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.23.53.0/24
200.23.168.0-200.23.170.255
Signature Algorithm: sha256WithRSAEncryption
61:71:41:d6:ed:87:d4:6f:18:50:e2:13:e0:93:91:39:e0:41:
01:5f:59:9d:2f:26:31:c4:34:55:3f:12:bf:da:ad:f7:c1:ea:
89:a2:b8:bd:1f:bb:5a:c9:4c:a5:17:0c:2f:08:4b:76:9b:1a:
c1:4f:07:1a:b4:3e:69:17:4d:1b:7c:e6:6c:60:1b:44:01:21:
31:25:58:cb:fc:92:4b:63:37:85:2c:e4:0d:44:8b:da:ee:43:
32:a2:7e:8b:95:55:93:8a:56:75:66:bc:47:fa:2f:57:0f:ce:
dd:d0:57:b5:1f:ea:a7:a2:72:f7:c3:82:a1:73:cd:09:14:22:
4d:39:28:7f:e6:e2:40:c1:d2:27:a1:2a:28:c5:a4:ba:11:fa:
fb:80:d6:ad:a2:d9:2d:de:e2:c4:66:74:13:0b:e3:53:27:c2:
a9:b1:36:b3:99:bc:bd:d9:de:d4:cc:cd:bc:a6:19:44:32:1a:
32:72:a2:21:0b:61:23:78:56:26:05:cc:9c:c9:d4:e7:1d:be:
07:bb:cd:c9:9f:1b:48:9e:03:79:9e:80:68:50:64:5e:7e:e6:
f7:49:a0:28:e0:83:01:de:62:be:42:8d:9d:b4:44:76:3e:52:
e8:90:5f:b5:a8:ac:a7:40:26:99:85:43:25:3c:62:b3:f6:ee:
15:e2:45:be
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDBVexMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE4
NWNhNmJiODBmMDMzY2ViYTM0MWRjYWFiOTcwOTdmYzM4OTFiY2QwHhcNMjMwNTA0
MTY1OTAyWhcNMjUwNTA1MTY1OTAyWjAzMTEwLwYDVQQDEyhiYzcyNjExM2UzNjRj
ZGE5ZTkxY2NmOGQ0Zjk5MTI0OTkxOTA2NjI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlG070i4LPPZABUCe4KP+pA7u1XQniKVaqqKYv9IAcDVb772z
BM5eHLmmIlC4QAqiSs3os0EC4hP4vE/4mknnUKkg5uV3q+qKMpqCOhbxJFLRJPRu
V6K8Yk+IxclbyuVYK931XUc0HKWehwlxkq24z78e4S/Cuz2kNLh0JpO4kJYxxEWF
nn1ksZYT6zRIKIqauvhHfhKG00wzTqbb8yFr741mfuL1OwcmVDcEnWL5RnUz4X9E
1Qhb/56Wg+Mbm0MQYoVSBFb1lYi0Bma+lnezFGdbiyEADXZ5Y1Uknd67OWZVnyMr
JBeT3EaTt+aOkS92O8LfrDnb5kXuzgnl8PVZvQIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFFhfw+dSE4mMUeRTbfk+8p8xa2e1MB8GA1UdIwQYMBaAFLtyqXNyir9Ok7fg
gvMwy24W0zYbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTg1Y2E2
YmI4MGYwMzNjZWJhMzQxZGNhYWI5NzA5N2ZjMzg5MWJjZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjYxOGY3ZDUtZWFiYi00ZTZmLTlmMWEtMjM5MDFi
NWYxOTQ0L2JjNzI2MTEzZTM2NGNkYTllOTFjY2Y4ZDRmOTkxMjQ5OTE5MDY2MjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mNjE4ZjdkNS1lYWJiLTRlNmYtOWYxYS0yMzkw
MWI1ZjE5NDQvMTg1Y2E2YmI4MGYwMzNjZWJhMzQxZGNhYWI5NzA5N2ZjMzg5MWJj
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAEwFAMEAMgXNTAMAwQDyBeoAwQAyBeqMA0GCSqGSIb3DQEBCwUAA4IB
AQBhcUHW7YfUbxhQ4hPgk5E54EEBX1mdLyYxxDRVPxK/2q33weqJori9H7tayUyl
FwwvCEt2mxrBTwcatD5pF00bfOZsYBtEASExJVjL/JJLYzeFLOQNRIva7kMyon6L
lVWTilZ1ZrxH+i9XD87d0Fe1H+qnonL3w4Khc80JFCJNOSh/5uJAwdInoSooxaS6
Efr7gNatotkt3uLEZnQTC+NTJ8KpsTazmby92d7UzM28phlEMhoycqIhC2EjeFYm
BcycydTnHb4Hu83JnxtIngN5noBoUGRefub3SaAo4IMB3mK+Qo2dtER2PlLokF+1
qKynQCaZhUMlPGKz9u4V4kW+
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org