Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f80cb3d1-8335-49f8-b600-49f350103b02/a6084f0dca86fe169dddcd593dfdfdb9acd77840.roa
File: a6084f0dca86fe169dddcd593dfdfdb9acd77840.roa (raw, json)
Hash identifier: a7hAQEA6s895bXTFYMM3eDWSuwjv188LkpjRciouvTQ=
Subject key identifier: DD:FF:79:34:E0:46:72:6D:CC:9F:E6:DC:8E:8A:23:BF:13:A6:D9:AB
Certificate issuer: /CN=bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0
Certificate serial: 0DD50E
Authority key identifier: 0A:26:3B:CE:B9:F7:4D:A9:83:42:09:5A:07:6F:E6:16:8D:F5:83:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f80cb3d1-8335-49f8-b600-49f350103b02/a6084f0dca86fe169dddcd593dfdfdb9acd77840.roa
Signing time: Wed 24 Mar 2021 14:46:05 +0000
ROA not before: Wed 24 Mar 2021 14:46:05 +0000
ROA not after: Tue 24 Mar 2026 14:46:05 +0000
asID: 27843
IP address blocks: 143.0.248.0/22 maxlen: 24
170.231.80.0/22 maxlen: 24
167.249.8.0/22 maxlen: 24
168.121.48.0/22 maxlen: 24
168.121.220.0/22 maxlen: 24
170.82.96.0/22 maxlen: 24
170.231.168.0/22 maxlen: 24
168.181.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906510 (0xdd50e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0
Validity
Not Before: Mar 24 14:46:05 2021 GMT
Not After : Mar 24 14:46:05 2026 GMT
Subject: CN=a6084f0dca86fe169dddcd593dfdfdb9acd77840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:94:46:c3:4c:3a:2e:77:d2:b4:87:2c:48:
50:5a:a3:80:12:99:c8:29:d4:9f:dc:36:82:80:1f:
a0:53:fc:b1:f3:f5:c7:fc:01:1b:bb:89:19:dc:1d:
f3:31:f9:b2:c0:84:ac:49:d8:9e:00:76:32:b0:43:
0b:2c:62:a5:db:b6:c2:7c:f3:4d:ff:c0:ca:5a:62:
9b:59:2f:6f:45:ce:ca:9b:f4:46:c9:e2:7c:f8:33:
47:d2:10:44:fd:ce:14:41:76:19:8e:91:20:f8:8b:
5d:e1:5c:01:7c:f7:49:7c:d4:60:b0:dd:bd:0c:67:
dd:54:3c:12:0b:06:ed:f9:9d:ff:93:e6:e4:91:b3:
06:13:e4:54:bd:da:1f:9a:1c:67:f9:d1:8b:f1:01:
cd:05:f5:24:70:a7:ac:cb:46:8c:e9:a8:cf:d5:6f:
67:74:1e:58:e3:14:fb:b8:e3:1e:b5:2a:94:06:76:
01:a7:a1:cd:7c:a6:c1:91:19:87:dc:f0:4e:fe:1a:
67:bb:e9:77:75:ad:b8:ee:f6:71:b6:06:81:fd:c9:
13:bb:18:47:ab:d0:27:a1:d8:aa:49:06:bb:f4:92:
64:64:9c:b6:d9:0c:bc:84:64:a8:48:80:51:af:56:
ba:d8:29:a2:64:a1:a5:af:4d:83:8b:6a:9a:34:8f:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FF:79:34:E0:46:72:6D:CC:9F:E6:DC:8E:8A:23:BF:13:A6:D9:AB
X509v3 Authority Key Identifier:
keyid:0A:26:3B:CE:B9:F7:4D:A9:83:42:09:5A:07:6F:E6:16:8D:F5:83:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f80cb3d1-8335-49f8-b600-49f350103b02/a6084f0dca86fe169dddcd593dfdfdb9acd77840.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f80cb3d1-8335-49f8-b600-49f350103b02/bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.248.0/22
167.249.8.0/22
168.121.48.0/22
168.121.220.0/22
168.181.8.0/22
170.82.96.0/22
170.231.80.0/22
170.231.168.0/22
Signature Algorithm: sha256WithRSAEncryption
96:a4:10:9c:5b:97:4b:4a:ef:af:d6:1c:7b:91:33:b2:81:14:
3d:e2:15:8d:eb:38:a2:74:79:3e:e7:b2:a4:d8:18:e2:1b:73:
ce:bb:19:8a:cd:30:40:4d:91:77:de:47:1e:a1:ed:7f:1a:5e:
5f:56:ba:50:e9:6c:cc:f2:79:81:15:7b:d0:74:47:64:6e:97:
b4:73:e7:2a:f7:b3:1f:06:17:f9:6b:75:b1:93:e0:c1:b6:2a:
ef:be:1f:6a:e4:49:8c:66:b6:98:9c:8d:ea:ec:2e:67:4a:7f:
a3:a1:f6:aa:9b:6d:02:09:5f:68:f7:f8:ec:a9:a7:74:af:07:
82:9a:9b:4d:4a:c2:d9:40:bf:f0:3c:bb:f2:54:f2:18:3b:a3:
93:ac:ac:f1:6a:83:ca:62:b4:10:dc:1b:d6:2f:15:44:8e:51:
dd:42:f1:1b:66:9c:e8:48:8c:21:cd:d7:07:01:af:e5:9a:7c:
0b:62:61:e4:24:ce:e0:0a:2d:a0:c6:56:a0:b9:6b:5a:4e:3a:
33:82:d9:43:1e:95:a3:54:5c:3e:29:a8:5b:50:8a:b2:15:7c:
d4:49:46:0a:fa:5e:d8:cf:09:20:f6:62:20:63:40:88:6b:3e:
be:3d:24:d8:25:f7:c7:ae:c3:4b:4f:fa:01:ee:38:e8:e2:64:
20:99:35:32
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIDDdUOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJj
NjBmYWUyYjhiNWQxMTgzNjZkMGZmYjBkN2VjYWNmMDE2N2FlZDAwHhcNMjEwMzI0
MTQ0NjA1WhcNMjYwMzI0MTQ0NjA1WjAzMTEwLwYDVQQDEyhhNjA4NGYwZGNhODZm
ZTE2OWRkZGNkNTkzZGZkZmRiOWFjZDc3ODQwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAod6URsNMOi530rSHLEhQWqOAEpnIKdSf3DaCgB+gU/yx8/XH
/AEbu4kZ3B3zMfmywISsSdieAHYysEMLLGKl27bCfPNN/8DKWmKbWS9vRc7Km/RG
yeJ8+DNH0hBE/c4UQXYZjpEg+Itd4VwBfPdJfNRgsN29DGfdVDwSCwbt+Z3/k+bk
kbMGE+RUvdofmhxn+dGL8QHNBfUkcKesy0aM6ajP1W9ndB5Y4xT7uOMetSqUBnYB
p6HNfKbBkRmH3PBO/hpnu+l3da247vZxtgaB/ckTuxhHq9AnodiqSQa79JJkZJy2
2Qy8hGSoSIBRr1a62CmiZKGlr02Di2qaNI+oQwIDAQABo4IChTCCAoEwHQYDVR0O
BBYEFN3/eTTgRnJtzJ/m3I6KI78TptmrMB8GA1UdIwQYMBaAFAomO865902pg0IJ
Wgdv5haN9YPjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmM2MGZh
ZTJiOGI1ZDExODM2NmQwZmZiMGQ3ZWNhY2YwMTY3YWVkMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjgwY2IzZDEtODMzNS00OWY4LWI2MDAtNDlmMzUw
MTAzYjAyL2E2MDg0ZjBkY2E4NmZlMTY5ZGRkY2Q1OTNkZmRmZGI5YWNkNzc4NDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mODBjYjNkMS04MzM1LTQ5ZjgtYjYwMC00OWYz
NTAxMDNiMDIvYmM2MGZhZTJiOGI1ZDExODM2NmQwZmZiMGQ3ZWNhY2YwMTY3YWVk
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJBggrBgEFBQcBBwEB/wQ6
MDgwNgQCAAEwMAMEAo8A+AMEAqf5CAMEAqh5MAMEAqh53AMEAqi1CAMEAqpSYAME
AqrnUAMEAqrnqDANBgkqhkiG9w0BAQsFAAOCAQEAlqQQnFuXS0rvr9Yce5EzsoEU
PeIVjes4onR5PueypNgY4htzzrsZis0wQE2Rd95HHqHtfxpeX1a6UOlszPJ5gRV7
0HRHZG6XtHPnKvezHwYX+Wt1sZPgwbYq774fauRJjGa2mJyN6uwuZ0p/o6H2qptt
AglfaPf47KmndK8HgpqbTUrC2UC/8Dy78lTyGDujk6ys8WqDymK0ENwb1i8VRI5R
3ULxG2ac6EiMIc3XBwGv5Zp8C2Jh5CTO4AotoMZWoLlrWk46M4LZQx6Vo1RcPimo
W1CKshV81ElGCvpe2M8JIPZiIGNAiGs+vj0k2CX3x67DS0/6Ae446OJkIJk1Mg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org