Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ff69234e-b485-4bd9-b2b0-251e710afd97/158d28d24233faaf74aafd1127060970af1a189f.roa
File: 158d28d24233faaf74aafd1127060970af1a189f.roa (raw, json)
Hash identifier: fVlOqrqCL9sa3bnsEX3TowZewEYsqCW3nckxdjqojkQ=
Subject key identifier: F1:4B:7E:4D:EC:EA:28:2E:A4:A9:8B:E7:40:50:DB:41:50:44:F2:8C
Certificate issuer: /CN=69813c730fd9e85b82ed4f58164a66407cc89431
Certificate serial: 0D3134
Authority key identifier: A7:B1:EB:0D:B4:78:95:80:C9:4B:49:3A:61:22:D3:1E:8A:BD:83:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/69813c730fd9e85b82ed4f58164a66407cc89431.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ff69234e-b485-4bd9-b2b0-251e710afd97/158d28d24233faaf74aafd1127060970af1a189f.roa
Signing time: Wed 24 Mar 2021 14:38:03 +0000
ROA not before: Wed 24 Mar 2021 14:38:03 +0000
ROA not after: Tue 24 Mar 2026 14:38:03 +0000
asID: 11960
IP address blocks: 200.0.16.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 864564 (0xd3134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69813c730fd9e85b82ed4f58164a66407cc89431
Validity
Not Before: Mar 24 14:38:03 2021 GMT
Not After : Mar 24 14:38:03 2026 GMT
Subject: CN=158d28d24233faaf74aafd1127060970af1a189f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b1:df:25:31:08:bd:23:be:80:2c:d6:38:fa:
ed:5f:2e:59:75:08:27:50:9c:b8:92:6c:02:d2:bf:
fe:25:24:54:0d:57:70:50:6c:a8:55:5f:62:45:ab:
af:db:8f:a9:3f:9b:85:c7:10:c9:1f:bc:f3:bb:03:
d0:bb:25:8c:75:68:0d:9e:5f:ba:6e:b0:7b:d6:8c:
d6:b4:36:97:1d:fd:82:fc:32:09:58:7d:51:0e:be:
33:0d:d2:d7:d2:ab:fc:dc:8c:d2:05:06:e4:c3:29:
82:9c:bb:04:50:02:07:db:71:dd:1f:3c:d5:fb:0f:
cf:1d:e5:79:55:5d:03:e1:0a:ae:d5:04:db:02:67:
3b:52:d0:35:a9:74:53:80:89:24:51:eb:ca:ab:df:
f5:a9:77:ee:d0:28:62:3a:60:7d:66:4a:01:01:c5:
69:21:98:12:22:d1:6d:25:10:91:c9:f9:05:06:63:
56:d3:77:50:32:d6:48:d9:bc:dd:46:a9:d6:32:e7:
c6:d6:2b:59:28:fa:fc:5a:0a:19:be:28:ca:10:73:
9f:49:1f:ae:83:40:dc:b5:e8:af:2f:3c:88:bf:f2:
c0:96:cd:87:4e:0a:35:c2:26:7f:6e:7a:5d:40:15:
2d:f1:8c:31:a3:0e:2d:3d:e0:83:b0:60:6c:d8:32:
07:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4B:7E:4D:EC:EA:28:2E:A4:A9:8B:E7:40:50:DB:41:50:44:F2:8C
X509v3 Authority Key Identifier:
keyid:A7:B1:EB:0D:B4:78:95:80:C9:4B:49:3A:61:22:D3:1E:8A:BD:83:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/69813c730fd9e85b82ed4f58164a66407cc89431.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ff69234e-b485-4bd9-b2b0-251e710afd97/158d28d24233faaf74aafd1127060970af1a189f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ff69234e-b485-4bd9-b2b0-251e710afd97/69813c730fd9e85b82ed4f58164a66407cc89431.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.16.0/24
Signature Algorithm: sha256WithRSAEncryption
17:9f:db:7f:65:06:12:af:bb:40:b7:f2:83:7c:ff:3e:95:48:
63:83:04:df:d8:e2:de:7e:95:c8:4b:87:23:a4:21:0a:8d:2e:
ef:7c:71:41:1b:ec:58:65:eb:f1:35:08:0f:25:9d:68:04:14:
ae:b0:29:ca:7c:49:a8:0f:80:d9:99:75:ec:82:40:46:e4:32:
db:e7:1c:e3:53:b3:08:60:10:0f:d8:04:27:22:7d:26:32:c9:
89:97:70:90:e4:ab:ea:17:5f:dd:be:43:c7:eb:5f:54:f5:48:
a0:59:be:3f:c8:69:32:0d:42:0e:6f:36:34:d8:df:44:e2:62:
95:cc:ba:2e:19:79:c5:86:3e:71:6e:cb:58:32:ed:32:1c:f0:
b2:55:5d:fe:e7:64:7d:98:8b:1a:8f:8c:57:66:4c:bf:ef:07:
6d:95:3a:2e:5c:65:05:ae:5c:00:02:33:a7:31:ae:79:da:75:
db:cb:e6:3f:f8:40:6b:df:64:a7:57:4a:08:61:6e:00:32:6b:
d3:b0:07:9e:bf:8f:e2:39:b2:ef:c1:48:f1:c1:94:69:31:d8:
98:24:cc:17:72:ee:73:4a:89:b3:a2:99:1a:03:4e:06:20:89:
c7:13:f5:eb:ed:48:ef:ab:5e:fe:c4:3b:aa:db:b5:ba:88:2f:
c1:fc:26:62
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDTE0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY5
ODEzYzczMGZkOWU4NWI4MmVkNGY1ODE2NGE2NjQwN2NjODk0MzEwHhcNMjEwMzI0
MTQzODAzWhcNMjYwMzI0MTQzODAzWjAzMTEwLwYDVQQDEygxNThkMjhkMjQyMzNm
YWFmNzRhYWZkMTEyNzA2MDk3MGFmMWExODlmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi7HfJTEIvSO+gCzWOPrtXy5ZdQgnUJy4kmwC0r/+JSRUDVdw
UGyoVV9iRauv24+pP5uFxxDJH7zzuwPQuyWMdWgNnl+6brB71ozWtDaXHf2C/DIJ
WH1RDr4zDdLX0qv83IzSBQbkwymCnLsEUAIH23HdHzzV+w/PHeV5VV0D4Qqu1QTb
Amc7UtA1qXRTgIkkUevKq9/1qXfu0ChiOmB9ZkoBAcVpIZgSItFtJRCRyfkFBmNW
03dQMtZI2bzdRqnWMufG1itZKPr8WgoZvijKEHOfSR+ug0DcteivLzyIv/LAls2H
Tgo1wiZ/bnpdQBUt8Ywxow4tPeCDsGBs2DIH3QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPFLfk3s6igupKmL50BQ20FQRPKMMB8GA1UdIwQYMBaAFKex6w20eJWAyUtJ
OmEi0x6KvYNAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjk4MTNj
NzMwZmQ5ZTg1YjgyZWQ0ZjU4MTY0YTY2NDA3Y2M4OTQzMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmY2OTIzNGUtYjQ4NS00YmQ5LWIyYjAtMjUxZTcx
MGFmZDk3LzE1OGQyOGQyNDIzM2ZhYWY3NGFhZmQxMTI3MDYwOTcwYWYxYTE4OWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZjY5MjM0ZS1iNDg1LTRiZDktYjJiMC0yNTFl
NzEwYWZkOTcvNjk4MTNjNzMwZmQ5ZTg1YjgyZWQ0ZjU4MTY0YTY2NDA3Y2M4OTQz
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgAEDANBgkqhkiG9w0BAQsFAAOCAQEAF5/bf2UGEq+7QLfy
g3z/PpVIY4ME39ji3n6VyEuHI6QhCo0u73xxQRvsWGXr8TUIDyWdaAQUrrApynxJ
qA+A2Zl17IJARuQy2+cc41OzCGAQD9gEJyJ9JjLJiZdwkOSr6hdf3b5Dx+tfVPVI
oFm+P8hpMg1CDm82NNjfROJilcy6Lhl5xYY+cW7LWDLtMhzwslVd/udkfZiLGo+M
V2ZMv+8HbZU6LlxlBa5cAAIzpzGuedp128vmP/hAa99kp1dKCGFuADJr07AHnr+P
4jmy78FI8cGUaTHYmCTMF3Luc0qJs6KZGgNOBiCJxxP16+1I76te/sQ7qtu1uogv
wfwmYg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org