Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/095602b172c003737704195961a4d1172cbf3f88.roa
File: 095602b172c003737704195961a4d1172cbf3f88.roa (raw, json)
Hash identifier: wqTijwenx4xOzAsL7oDpSinc7RQFb2SxqZs5L32UFKM=
Subject key identifier: 13:FA:CF:1C:D6:20:71:C0:86:15:D5:76:24:9D:BC:27:55:81:4C:24
Certificate issuer: /CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
Certificate serial: 3F08
Authority key identifier: 6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/095602b172c003737704195961a4d1172cbf3f88.roa
Signing time: Mon 20 Feb 2023 13:18:03 +0000
ROA not before: Sun 19 Feb 2023 13:18:03 +0000
ROA not after: Sun 20 Feb 2028 14:18:03 +0000
asID: 270088
IP address blocks: 170.0.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16136 (0x3f08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
Validity
Not Before: Feb 19 13:18:03 2023 GMT
Not After : Feb 20 14:18:03 2028 GMT
Subject: CN=095602b172c003737704195961a4d1172cbf3f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2d:6c:a6:1b:79:58:74:4e:20:47:82:7e:0f:
ea:a5:b2:f9:62:00:3a:0d:c2:1e:b6:65:c0:48:ef:
c0:cd:dd:e1:d1:7e:03:6a:e1:a1:eb:08:42:8f:26:
df:a3:ea:08:2b:1b:51:f6:c3:d1:28:72:cd:d2:3b:
8f:a0:fe:b0:78:80:1f:e5:61:d5:31:53:ab:1b:74:
4c:e0:20:b6:ed:63:30:8e:3e:a8:e6:3c:2e:06:5b:
a6:c4:3e:4b:c9:f7:05:f9:a6:bd:2f:5e:59:1d:e4:
fb:85:8e:98:9f:e4:ef:25:bd:a6:c5:cd:4f:a4:5f:
53:30:93:a8:e9:e7:a7:0a:76:39:e3:45:8f:98:b9:
75:f3:5a:c8:53:75:a1:7a:ac:3f:9a:e2:40:9d:3a:
d4:61:64:67:e5:f6:cd:07:e0:ac:66:88:28:4e:c1:
17:f7:72:47:e7:33:96:f9:54:94:83:75:48:77:a9:
d3:85:f6:eb:7e:26:d8:7b:b4:ef:f3:24:4c:6a:e5:
ef:cc:8d:e6:8d:33:7e:7e:5e:7e:10:f2:6e:ab:7f:
0e:e3:5b:7d:cf:6a:e8:58:7c:5c:e3:2b:22:8c:ad:
e5:11:88:b5:ce:d1:59:45:a3:b9:96:87:1f:9b:29:
3f:22:5f:a6:04:09:ec:b5:54:ee:9f:d9:cb:61:21:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FA:CF:1C:D6:20:71:C0:86:15:D5:76:24:9D:BC:27:55:81:4C:24
X509v3 Authority Key Identifier:
keyid:6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/095602b172c003737704195961a4d1172cbf3f88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/88c828fbf7c4212619b24a7d12142f15f0f5ffea.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.8.0/23
Signature Algorithm: sha256WithRSAEncryption
88:0f:1a:46:bc:10:ad:5d:fc:8c:77:b7:23:a7:b5:35:de:ff:
b1:40:83:e2:32:57:77:cb:b5:00:40:3f:c9:e5:b1:bb:1a:ba:
1d:30:b2:1a:3a:89:23:81:7e:24:45:a4:61:e4:0a:6f:2c:1b:
67:bb:47:7f:09:1f:a6:fd:d9:d5:ef:cf:a0:7b:7c:09:e9:90:
f2:73:9e:28:39:1f:a1:27:40:ff:77:d4:a4:fe:64:05:1d:74:
41:8c:11:b0:2c:62:c0:56:53:d7:cc:0e:f2:1e:92:ee:a1:bc:
a0:0a:be:51:46:12:b1:05:20:12:27:50:34:e0:2f:69:8f:93:
96:8d:e7:e6:5e:21:79:60:28:2f:bc:5b:4b:01:0e:37:6f:cf:
36:cc:f9:b5:47:a2:50:15:6f:44:e6:91:e4:d3:87:cb:79:b6:
c4:07:63:7d:07:a0:c8:f3:eb:eb:aa:e6:08:54:90:6c:91:20:
aa:47:b6:67:59:c4:76:7f:01:47:31:c4:bc:8c:2c:a0:ce:19:
50:0f:fc:1c:c2:ea:ac:98:7d:2a:58:13:bb:54:bc:c4:29:f0:
59:e7:79:b9:4a:24:ca:b5:ce:a6:e7:29:92:cc:0b:2d:27:7e:
b6:79:86:3a:30:e7:11:11:0b:fd:d9:42:79:25:66:21:b3:a4:
01:bc:e7:17
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICPwgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODhj
ODI4ZmJmN2M0MjEyNjE5YjI0YTdkMTIxNDJmMTVmMGY1ZmZlYTAeFw0yMzAyMTkx
MzE4MDNaFw0yODAyMjAxNDE4MDNaMDMxMTAvBgNVBAMTKDA5NTYwMmIxNzJjMDAz
NzM3NzA0MTk1OTYxYTRkMTE3MmNiZjNmODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiLWymG3lYdE4gR4J+D+qlsvliADoNwh62ZcBI78DN3eHRfgNq
4aHrCEKPJt+j6ggrG1H2w9Eocs3SO4+g/rB4gB/lYdUxU6sbdEzgILbtYzCOPqjm
PC4GW6bEPkvJ9wX5pr0vXlkd5PuFjpif5O8lvabFzU+kX1Mwk6jp56cKdjnjRY+Y
uXXzWshTdaF6rD+a4kCdOtRhZGfl9s0H4KxmiChOwRf3ckfnM5b5VJSDdUh3qdOF
9ut+Jth7tO/zJExq5e/MjeaNM35+Xn4Q8m6rfw7jW33PauhYfFzjKyKMreURiLXO
0VlFo7mWhx+bKT8iX6YECey1VO6f2cthIYZ/AgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUE/rPHNYgccCGFdV2JJ28J1WBTCQwHwYDVR0jBBgwFoAUahWAPEsWRJpswbEu
KOgsj+inb/YwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS84OGM4Mjhm
YmY3YzQyMTI2MTliMjRhN2QxMjE0MmYxNWYwZjVmZmVhLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mYjFkZjlhYS1hOWJjLTRmM2MtOGU1Mi03MTE0NmE2
MTk2ZjkvMDk1NjAyYjE3MmMwMDM3Mzc3MDQxOTU5NjFhNGQxMTcyY2JmM2Y4OC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2ZiMWRmOWFhLWE5YmMtNGYzYy04ZTUyLTcxMTQ2
YTYxOTZmOS84OGM4MjhmYmY3YzQyMTI2MTliMjRhN2QxMjE0MmYxNWYwZjVmZmVh
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQBqgAIMA0GCSqGSIb3DQEBCwUAA4IBAQCIDxpGvBCtXfyMd7cj
p7U13v+xQIPiMld3y7UAQD/J5bG7GrodMLIaOokjgX4kRaRh5ApvLBtnu0d/CR+m
/dnV78+ge3wJ6ZDyc54oOR+hJ0D/d9Sk/mQFHXRBjBGwLGLAVlPXzA7yHpLuobyg
Cr5RRhKxBSASJ1A04C9pj5OWjefmXiF5YCgvvFtLAQ43b882zPm1R6JQFW9E5pHk
04fLebbEB2N9B6DI8+vrquYIVJBskSCqR7ZnWcR2fwFHMcS8jCygzhlQD/wcwuqs
mH0qWBO7VLzEKfBZ53m5SiTKtc6m5ymSzAstJ362eYY6MOcREQv92UJ5JWYhs6QB
vOcX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org