Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/92342962b467ec7a1904c8ec45e1314d04b4f70d.roa
File: 92342962b467ec7a1904c8ec45e1314d04b4f70d.roa (raw, json)
Hash identifier: uqEs4MKgD/dFDickWuIy2JGkNjVAur013fYQNzkmvt4=
Subject key identifier: 33:17:AB:E7:27:1B:FA:E4:14:72:F9:60:3E:32:5A:C0:17:DB:34:5D
Certificate issuer: /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial: 1F22F7
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/92342962b467ec7a1904c8ec45e1314d04b4f70d.roa
Signing time: Wed 26 Apr 2023 17:24:44 +0000
ROA not before: Tue 25 Apr 2023 17:24:40 +0000
ROA not after: Sat 26 Apr 2025 17:24:40 +0000
asID: 52424
IP address blocks: 170.210.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2040567 (0x1f22f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Validity
Not Before: Apr 25 17:24:40 2023 GMT
Not After : Apr 26 17:24:40 2025 GMT
Subject: CN=92342962b467ec7a1904c8ec45e1314d04b4f70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:7b:ed:cc:e7:36:f3:e1:fe:de:9c:3e:e9:
62:fe:35:82:0c:28:c6:f7:a2:90:55:5c:5e:9c:31:
8a:b5:2e:41:ea:7b:53:1b:7c:5f:b9:ee:80:05:ba:
23:ce:c8:49:f3:06:3a:0c:3a:76:6b:40:64:51:f1:
ff:99:83:a9:d9:f3:41:6c:5d:c6:83:0f:6b:a8:c3:
2b:ba:fd:4f:38:f4:ea:ad:db:e9:2d:07:23:25:ce:
4d:64:98:a3:b4:38:2e:47:7a:e3:03:1f:24:16:a3:
a8:d9:c6:69:6f:03:24:b0:3e:36:cf:72:1a:5d:2f:
cb:d5:43:c2:84:19:9f:36:1e:29:e9:53:9a:59:f2:
58:c5:72:75:48:0f:1b:d5:b6:2d:a4:46:e3:be:d7:
28:7e:99:4b:d9:22:d0:cf:f0:b9:27:ee:05:1a:46:
d7:f2:eb:33:30:34:ca:f2:63:01:6c:c9:4a:4a:39:
ce:29:cb:10:95:e5:8e:a4:ad:b4:bd:d3:5f:b1:01:
8d:f3:8e:1d:45:88:8e:f3:4d:de:61:f7:a0:b9:8c:
41:ef:03:3e:57:d7:d3:47:ea:76:70:08:fd:a6:d6:
d0:45:fc:f2:4c:86:c4:b7:73:62:66:6d:58:b9:0e:
6f:af:19:74:8e:42:de:11:c5:af:0b:b0:89:b6:62:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:17:AB:E7:27:1B:FA:E4:14:72:F9:60:3E:32:5A:C0:17:DB:34:5D
X509v3 Authority Key Identifier:
keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/92342962b467ec7a1904c8ec45e1314d04b4f70d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.24.0/21
Signature Algorithm: sha256WithRSAEncryption
05:18:c2:7e:12:46:a1:67:c0:fb:b6:66:90:5e:6c:2b:aa:1d:
5d:bc:b7:04:c8:97:66:c2:71:a5:c0:8b:ae:6a:41:e8:54:87:
9f:5d:a1:ef:87:a4:d5:81:9f:da:55:3c:3b:50:e5:28:50:b8:
57:cf:3d:c3:e1:dd:df:96:ad:17:c0:c9:2c:63:1c:c0:4d:be:
53:7e:5d:f1:e9:10:8b:9f:19:50:8e:73:7c:5a:99:bc:77:ce:
9e:fc:48:3b:6d:e1:aa:92:02:f3:fc:61:26:be:bd:cc:7e:c2:
da:c1:de:8f:35:d5:ad:60:01:52:63:c5:7c:bd:cc:05:e2:24:
2f:f7:7d:fb:a2:ec:a2:60:b6:00:80:cc:39:86:3e:eb:b2:55:
2d:47:89:8b:fc:84:57:25:58:f0:e5:93:c7:f9:26:80:d1:37:
cd:be:98:42:07:14:57:03:dc:00:9c:2b:65:fe:f0:a8:0d:cd:
f2:a8:55:14:71:da:59:3a:62:b3:8c:d5:33:79:f7:b7:2b:68:
76:e8:8f:d3:bf:d7:cf:b5:95:42:76:4f:ce:6e:36:32:2b:69:
4f:33:a5:71:66:e3:a7:4a:45:4a:d5:01:3b:2d:d1:51:c4:01:
08:66:1e:04:8f:d8:0c:20:8a:a6:e6:48:31:53:e0:d4:32:88:
5e:e5:78:0b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHyL3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVl
YzkzMzQ3ODlkNGZiOTdiMGMwYWE0ODM1NjM5MDZhNWQ2OWI0YzIwHhcNMjMwNDI1
MTcyNDQwWhcNMjUwNDI2MTcyNDQwWjAzMTEwLwYDVQQDEyg5MjM0Mjk2MmI0Njdl
YzdhMTkwNGM4ZWM0NWUxMzE0ZDA0YjRmNzBkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv6B77cznNvPh/t6cPuli/jWCDCjG96KQVVxenDGKtS5B6ntT
G3xfue6ABbojzshJ8wY6DDp2a0BkUfH/mYOp2fNBbF3Ggw9rqMMruv1POPTqrdvp
LQcjJc5NZJijtDguR3rjAx8kFqOo2cZpbwMksD42z3IaXS/L1UPChBmfNh4p6VOa
WfJYxXJ1SA8b1bYtpEbjvtcofplL2SLQz/C5J+4FGkbX8uszMDTK8mMBbMlKSjnO
KcsQleWOpK20vdNfsQGN844dRYiO803eYfeguYxB7wM+V9fTR+p2cAj9ptbQRfzy
TIbEt3NiZm1YuQ5vrxl0jkLeEcWvC7CJtmL3sQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDMXq+cnG/rkFHL5YD4yWsAX2zRdMB8GA1UdIwQYMBaAFAiRqsSRgrsOBnj6
2ng1jFjfNFzLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWVjOTMz
NDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRjMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjhkNWJlNGQtZTc1MS00YzcwLTk2NmItY2ZmNWVk
N2JmNWJlLzkyMzQyOTYyYjQ2N2VjN2ExOTA0YzhlYzQ1ZTEzMTRkMDRiNGY3MGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mOGQ1YmU0ZC1lNzUxLTRjNzAtOTY2Yi1jZmY1
ZWQ3YmY1YmUvZWVjOTMzNDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRj
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA6rSGDANBgkqhkiG9w0BAQsFAAOCAQEABRjCfhJGoWfA+7Zm
kF5sK6odXby3BMiXZsJxpcCLrmpB6FSHn12h74ek1YGf2lU8O1DlKFC4V889w+Hd
35atF8DJLGMcwE2+U35d8ekQi58ZUI5zfFqZvHfOnvxIO23hqpIC8/xhJr69zH7C
2sHejzXVrWABUmPFfL3MBeIkL/d9+6LsomC2AIDMOYY+67JVLUeJi/yEVyVY8OWT
x/kmgNE3zb6YQgcUVwPcAJwrZf7wqA3N8qhVFHHaWTpis4zVM3n3tytoduiP07/X
z7WVQnZPzm42MitpTzOlcWbjp0pFStUBOy3RUcQBCGYeBI/YDCCKpuZIMVPg1DKI
XuV4Cw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org