Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/0612f0e59b5bc49b72e9a0615e9918bdd84b8a9f.roa
File: 0612f0e59b5bc49b72e9a0615e9918bdd84b8a9f.roa (raw, json)
Hash identifier: Qy4bDo+FmQUU8+K/igsvRP1wPsArJpuAzEMGK3OjVeA=
Subject key identifier: CF:1F:14:C7:02:28:5C:55:44:81:46:6E:69:BF:47:C0:8B:14:00:FF
Certificate issuer: /CN=b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f
Certificate serial: 28313A
Authority key identifier: 2C:1E:B6:2A:68:B7:1E:98:C5:3F:97:1A:91:9C:F5:FE:2F:B3:DB:71
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/0612f0e59b5bc49b72e9a0615e9918bdd84b8a9f.roa
Signing time: Wed 20 Mar 2024 16:08:50 +0000
ROA not before: Wed 20 Mar 2024 16:08:50 +0000
ROA not after: Fri 20 Mar 2026 16:08:50 +0000
asID: 27806
IP address blocks: 200.13.136.0/21 maxlen: 24
200.13.136.0/22 maxlen: 24
200.13.141.0/24 maxlen: 24
200.13.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2634042 (0x28313a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f
Validity
Not Before: Mar 20 16:08:50 2024 GMT
Not After : Mar 20 16:08:50 2026 GMT
Subject: CN=0612f0e59b5bc49b72e9a0615e9918bdd84b8a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:eb:1c:1b:14:a6:d4:c7:9e:ef:87:f3:ca:7a:
69:bd:0a:c5:37:c4:82:41:e4:fc:43:98:3a:6e:6d:
84:92:d5:1d:f7:98:a4:2a:22:90:63:6c:1d:e5:dd:
57:73:03:a8:e7:23:95:c1:0d:3b:fe:b9:81:9b:f9:
53:b5:7f:03:3f:1b:e6:15:d2:9e:20:07:29:c8:f2:
e6:44:24:01:3d:fc:e9:28:27:8b:a4:85:68:52:71:
0f:1b:50:12:14:ac:24:66:fb:66:64:32:b1:22:83:
70:52:98:70:0c:ea:f0:25:6f:93:c8:af:95:0e:b5:
0a:39:49:8b:8e:35:c4:c2:df:32:bf:14:40:ee:ba:
d8:c1:dd:96:84:46:a4:77:98:24:14:e2:8d:c4:fb:
9b:44:f5:be:b3:a3:9c:75:b9:3e:10:96:a1:46:6f:
ca:87:32:1f:1f:aa:19:54:e5:13:8f:f1:a2:40:96:
6f:b0:11:f0:d0:7c:c3:af:29:81:8e:f0:7e:f6:67:
d1:fd:3e:3a:0c:b0:a0:70:90:e5:94:f1:e7:aa:3d:
c3:8a:8a:04:84:09:20:18:99:a0:e1:c7:05:80:46:
ae:eb:52:d1:e4:a8:92:b1:85:2d:6c:85:c3:7b:1e:
60:40:f9:b2:10:0b:7e:08:3c:ea:48:6f:51:32:eb:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1F:14:C7:02:28:5C:55:44:81:46:6E:69:BF:47:C0:8B:14:00:FF
X509v3 Authority Key Identifier:
keyid:2C:1E:B6:2A:68:B7:1E:98:C5:3F:97:1A:91:9C:F5:FE:2F:B3:DB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/0612f0e59b5bc49b72e9a0615e9918bdd84b8a9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.13.136.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:53:15:9b:90:c1:75:60:73:99:bf:ff:99:73:f3:f9:be:48:
51:03:23:a5:84:60:96:ca:ff:3a:2e:58:b8:ca:bd:eb:db:59:
ff:90:77:06:1d:40:c4:fb:75:17:99:60:93:1e:66:c2:35:b0:
7b:ad:24:2c:15:7d:09:93:a1:34:92:9a:31:85:c9:9b:07:c1:
78:ee:bd:6c:2d:f0:dd:10:ad:b8:18:44:9b:9d:1f:a3:bb:11:
ff:1d:6b:1c:31:1d:49:a5:34:91:b5:75:87:b3:c3:9f:42:6b:
78:9f:a1:f2:02:51:01:32:85:8a:19:fc:00:e3:e8:12:c2:f5:
a0:46:6e:70:84:cb:d8:af:df:f4:0e:9f:5d:15:ac:04:9a:fb:
bb:59:5d:89:7f:8c:5d:32:5f:f5:56:63:91:e6:6c:db:68:a5:
99:68:6c:4f:fd:3e:25:b3:7d:f9:c2:4d:9e:f7:c5:2b:27:fd:
ba:f3:ff:6a:7b:4c:e8:b5:21:19:28:bd:1e:77:f0:46:1c:24:
66:0b:10:49:86:24:c5:d3:2f:ce:f4:b7:f6:25:49:10:d8:b6:
ac:9f:15:42:5d:a7:58:36:ea:29:63:6c:60:04:0c:31:05:7b:
2c:bc:fe:d8:9e:74:54:fd:f6:82:79:04:b3:d3:96:43:41:6e:
94:f0:51:53
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKDE6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI4
Y2I2ZDAzNGJjNGIyMjVmYjYzMjE1N2ExYWE5ZDY3YzY5ZjFlNmYwHhcNMjQwMzIw
MTYwODUwWhcNMjYwMzIwMTYwODUwWjAzMTEwLwYDVQQDEygwNjEyZjBlNTliNWJj
NDliNzJlOWEwNjE1ZTk5MThiZGQ4NGI4YTlmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmOscGxSm1Mee74fzynppvQrFN8SCQeT8Q5g6bm2EktUd95ik
KiKQY2wd5d1XcwOo5yOVwQ07/rmBm/lTtX8DPxvmFdKeIAcpyPLmRCQBPfzpKCeL
pIVoUnEPG1ASFKwkZvtmZDKxIoNwUphwDOrwJW+TyK+VDrUKOUmLjjXEwt8yvxRA
7rrYwd2WhEakd5gkFOKNxPubRPW+s6Ocdbk+EJahRm/KhzIfH6oZVOUTj/GiQJZv
sBHw0HzDrymBjvB+9mfR/T46DLCgcJDllPHnqj3DiooEhAkgGJmg4ccFgEau61LR
5KiSsYUtbIXDex5gQPmyEAt+CDzqSG9RMutouwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFM8fFMcCKFxVRIFGbmm/R8CLFAD/MB8GA1UdIwQYMBaAFCwetipotx6YxT+X
GpGc9f4vs9txMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjhjYjZk
MDM0YmM0YjIyNWZiNjMyMTU3YTFhYTlkNjdjNjlmMWU2Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGE5MTZjZjktYzdjMC00NDY5LWExOTEtYmM3MDNi
MjVjMzA1LzA2MTJmMGU1OWI1YmM0OWI3MmU5YTA2MTVlOTkxOGJkZDg0YjhhOWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYTkxNmNmOS1jN2MwLTQ0NjktYTE5MS1iYzcw
M2IyNWMzMDUvYjhjYjZkMDM0YmM0YjIyNWZiNjMyMTU3YTFhYTlkNjdjNjlmMWU2
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA8gNiDANBgkqhkiG9w0BAQsFAAOCAQEAP1MVm5DBdWBzmb//
mXPz+b5IUQMjpYRglsr/Oi5YuMq969tZ/5B3Bh1AxPt1F5lgkx5mwjWwe60kLBV9
CZOhNJKaMYXJmwfBeO69bC3w3RCtuBhEm50fo7sR/x1rHDEdSaU0kbV1h7PDn0Jr
eJ+h8gJRATKFihn8AOPoEsL1oEZucITL2K/f9A6fXRWsBJr7u1ldiX+MXTJf9VZj
keZs22ilmWhsT/0+JbN9+cJNnvfFKyf9uvP/antM6LUhGSi9HnfwRhwkZgsQSYYk
xdMvzvS39iVJENi2rJ8VQl2nWDbqKWNsYAQMMQV7LLz+2J50VP32gnkEs9OWQ0Fu
lPBRUw==
-----END CERTIFICATE-----
Generated at Wed Mar 20 22:53:02 2024 by rpki-client on console.sobornost.net