Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/3f14c97708e1b08b15736f2f4af174f230e13c6a.roa
File: 3f14c97708e1b08b15736f2f4af174f230e13c6a.roa (raw, json)
Hash identifier: MyZ+BWveXOUd9S01LvzBCPFxyXIX05Ic/IWpsGByKMQ=
Subject key identifier: 8B:56:C0:74:6A:5B:AA:4B:0C:5B:37:0A:46:32:73:EE:83:96:C4:FF
Certificate issuer: /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial: 1F1289
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/3f14c97708e1b08b15736f2f4af174f230e13c6a.roa
Signing time: Wed 26 Apr 2023 17:24:40 +0000
ROA not before: Tue 25 Apr 2023 17:24:40 +0000
ROA not after: Sat 26 Apr 2025 17:24:40 +0000
asID: 265700
IP address blocks: 170.210.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2036361 (0x1f1289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Validity
Not Before: Apr 25 17:24:40 2023 GMT
Not After : Apr 26 17:24:40 2025 GMT
Subject: CN=3f14c97708e1b08b15736f2f4af174f230e13c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:15:b9:5c:6e:df:fe:bd:a6:4c:b9:b6:b8:ed:
90:0b:d0:d9:ae:31:f4:22:3e:6a:b1:40:88:33:69:
7a:5f:bf:ce:ef:de:d7:ee:83:35:79:02:8c:5d:e4:
cd:d1:ce:75:23:c9:1c:dc:0d:10:50:a6:b4:ac:20:
14:81:24:24:47:2f:43:5b:54:68:cb:59:b9:ee:eb:
5f:85:fc:1c:74:62:ef:6c:30:d6:46:52:64:a0:27:
ca:32:9f:0e:13:0a:43:6e:5c:a3:46:7b:f1:ba:b3:
57:9b:fe:96:d2:90:8f:dd:d3:23:f6:14:98:65:68:
f4:94:d6:fb:09:17:83:b9:35:6e:f8:53:2d:c5:e5:
88:98:ae:f7:31:72:79:c8:66:b8:17:dc:03:dd:fd:
42:a6:89:2a:a2:23:34:42:60:ec:76:c4:11:b3:3b:
1c:6e:5e:00:ee:7a:49:c0:cf:5e:30:d1:8a:a7:69:
51:d5:16:b6:de:6e:c2:99:6a:07:34:61:9e:3a:41:
d0:f4:08:e0:6d:ea:47:90:54:5d:b9:94:7f:23:6c:
36:22:08:f9:27:c0:4d:12:46:3b:d3:a5:5a:e9:17:
7d:87:cf:18:b2:c5:2f:06:93:ef:cc:e1:be:38:9c:
8d:97:ae:91:46:f9:5d:79:07:9a:ed:b0:bd:25:97:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:56:C0:74:6A:5B:AA:4B:0C:5B:37:0A:46:32:73:EE:83:96:C4:FF
X509v3 Authority Key Identifier:
keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/3f14c97708e1b08b15736f2f4af174f230e13c6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.92.0/22
Signature Algorithm: sha256WithRSAEncryption
91:b1:b8:cf:0b:cc:77:df:72:5e:33:62:de:3f:14:ca:16:3e:
10:da:e8:22:38:46:41:2f:ed:77:56:98:20:30:7b:c9:cc:d3:
7d:70:34:e4:65:ff:cd:57:05:e5:86:52:1c:7b:72:2c:e4:6d:
b8:68:bf:ce:bb:89:e1:db:06:32:bd:81:8c:b5:d7:af:98:b4:
93:20:33:a1:95:0c:7f:8c:94:46:ed:ab:3d:a4:81:4c:78:e7:
bd:51:eb:b1:0f:9b:07:7d:99:39:f8:b0:0d:28:e0:54:45:ff:
1f:3a:f2:17:8a:5b:78:47:ba:e7:98:ef:43:10:4d:38:73:32:
77:dd:b3:a8:96:07:80:5e:cb:ce:e6:29:2c:3b:4b:bb:26:54:
ed:86:18:a2:6b:b0:55:dd:52:01:e2:96:46:32:a4:3f:87:30:
e8:1a:26:53:ed:d7:f2:68:98:43:aa:05:38:05:15:ef:cc:85:
9d:d2:8e:22:b1:10:a4:2d:15:f8:9d:9b:5d:ea:43:de:9a:a2:
af:20:ca:14:e7:d1:1e:21:52:b4:bc:88:2e:8e:73:dc:93:d4:
1f:8e:bb:bd:90:b4:0d:74:81:19:ef:ee:9f:af:60:9c:27:9e:
ab:45:5b:c7:b8:60:fe:f7:d9:dc:23:99:b7:89:ec:49:6a:39:
7f:2d:60:d4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHxKJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVl
YzkzMzQ3ODlkNGZiOTdiMGMwYWE0ODM1NjM5MDZhNWQ2OWI0YzIwHhcNMjMwNDI1
MTcyNDQwWhcNMjUwNDI2MTcyNDQwWjAzMTEwLwYDVQQDEygzZjE0Yzk3NzA4ZTFi
MDhiMTU3MzZmMmY0YWYxNzRmMjMwZTEzYzZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhxW5XG7f/r2mTLm2uO2QC9DZrjH0Ij5qsUCIM2l6X7/O797X
7oM1eQKMXeTN0c51I8kc3A0QUKa0rCAUgSQkRy9DW1Roy1m57utfhfwcdGLvbDDW
RlJkoCfKMp8OEwpDblyjRnvxurNXm/6W0pCP3dMj9hSYZWj0lNb7CReDuTVu+FMt
xeWImK73MXJ5yGa4F9wD3f1CpokqoiM0QmDsdsQRszscbl4A7npJwM9eMNGKp2lR
1Ra23m7CmWoHNGGeOkHQ9AjgbepHkFRduZR/I2w2Igj5J8BNEkY706Va6Rd9h88Y
ssUvBpPvzOG+OJyNl66RRvldeQea7bC9JZfYkwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFItWwHRqW6pLDFs3CkYyc+6DlsT/MB8GA1UdIwQYMBaAFAiRqsSRgrsOBnj6
2ng1jFjfNFzLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWVjOTMz
NDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRjMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjhkNWJlNGQtZTc1MS00YzcwLTk2NmItY2ZmNWVk
N2JmNWJlLzNmMTRjOTc3MDhlMWIwOGIxNTczNmYyZjRhZjE3NGYyMzBlMTNjNmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mOGQ1YmU0ZC1lNzUxLTRjNzAtOTY2Yi1jZmY1
ZWQ3YmY1YmUvZWVjOTMzNDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRj
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqrSXDANBgkqhkiG9w0BAQsFAAOCAQEAkbG4zwvMd99yXjNi
3j8UyhY+ENroIjhGQS/td1aYIDB7yczTfXA05GX/zVcF5YZSHHtyLORtuGi/zruJ
4dsGMr2BjLXXr5i0kyAzoZUMf4yURu2rPaSBTHjnvVHrsQ+bB32ZOfiwDSjgVEX/
HzryF4pbeEe655jvQxBNOHMyd92zqJYHgF7LzuYpLDtLuyZU7YYYomuwVd1SAeKW
RjKkP4cw6BomU+3X8miYQ6oFOAUV78yFndKOIrEQpC0V+J2bXepD3pqiryDKFOfR
HiFStLyILo5z3JPUH467vZC0DXSBGe/un69gnCeeq0Vbx7hg/vfZ3COZt4nsSWo5
fy1g1A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org