Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133312e3136312e35322e302f32322d3234203d3e20323633363836.roa
File: 3133312e3136312e35322e302f32322d3234203d3e20323633363836.roa (raw, json)
Hash identifier: p/EvRrebGPBLYy6EUAU4RHztAJ2hsks7LCKNvVCpet4=
Subject key identifier: 89:D2:08:96:10:F7:59:2B:AA:45:23:6D:52:87:DB:1C:02:DB:80:38
Certificate issuer: /CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
Certificate serial: 319804109244ACAD5EAFC52897C24E7939CF1A5D
Authority key identifier: 15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133312e3136312e35322e302f32322d3234203d3e20323633363836.roa
Signing time: Tue 05 Mar 2024 18:02:16 +0000
ROA not before: Tue 05 Mar 2024 17:57:16 +0000
ROA not after: Tue 04 Mar 2025 18:02:16 +0000
asID: 263686
IP address blocks: 131.161.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:98:04:10:92:44:ac:ad:5e:af:c5:28:97:c2:4e:79:39:cf:1a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
Validity
Not Before: Mar 5 17:57:16 2024 GMT
Not After : Mar 4 18:02:16 2025 GMT
Subject: CN=89D2089610F7592BAA45236D5287DB1C02DB8038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:0c:5e:7b:7d:04:e4:7c:05:26:ee:df:2d:
b7:17:7a:eb:f6:19:f2:17:0b:86:42:c7:3f:63:3f:
23:f8:1e:33:71:e6:33:ed:a6:e1:6a:6d:33:48:e4:
e2:fa:f5:09:6a:b4:aa:dc:f7:1e:47:91:fc:33:f1:
18:b0:87:62:f6:17:89:4c:9f:74:00:4f:fc:f7:37:
19:88:7b:0d:40:cb:39:af:11:45:a0:60:03:9a:8d:
22:f1:42:ce:de:50:a7:6f:92:7a:80:e5:0b:13:99:
09:86:d1:c2:65:1d:5c:94:22:41:c3:12:e9:b7:90:
42:21:c7:ed:c7:fb:50:a8:41:0a:51:74:05:a5:a1:
26:6b:c5:9f:b4:80:23:84:c8:59:c3:83:16:f2:80:
ae:b7:b9:61:92:a2:ef:ec:71:be:23:06:d4:2f:c2:
b3:79:b5:fd:2a:8f:64:bf:55:b1:b7:83:10:ae:2f:
34:5a:e8:01:cc:ae:42:3d:ec:b3:ca:23:9e:f0:1f:
67:7e:cd:11:f7:b3:80:cd:f0:20:84:6b:ca:28:1f:
d5:08:90:ae:e6:eb:21:6f:0e:75:a0:61:6c:2f:c5:
39:f0:02:5e:9d:ec:be:7f:0b:36:30:eb:24:d8:05:
4e:3e:9b:fe:0c:36:c8:27:a3:22:c9:7d:69:35:10:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D2:08:96:10:F7:59:2B:AA:45:23:6D:52:87:DB:1C:02:DB:80:38
X509v3 Authority Key Identifier:
keyid:15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133312e3136312e35322e302f32322d3234203d3e20323633363836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.52.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:5a:c6:5c:fb:63:e4:c8:73:fe:7f:79:19:78:3f:fa:84:6e:
3a:30:fc:11:b0:ed:60:f5:05:b6:14:89:ab:2f:ac:2a:3d:c3:
17:71:f2:8f:72:70:27:ea:64:2d:ed:5d:b0:5f:74:4d:22:f8:
4b:2a:e7:70:2d:d4:fb:ab:d8:40:91:c1:a2:75:f4:d7:c3:45:
26:ac:fd:28:45:20:77:1e:44:26:01:65:9b:05:ea:b2:bf:a0:
1e:27:21:2a:24:68:af:52:02:b3:89:45:9a:d8:fb:04:b2:8e:
f4:05:ef:95:57:d2:50:73:f6:7d:e4:dd:13:f3:d0:2d:a0:e3:
30:86:98:d5:1f:00:4b:57:26:f1:a9:8d:21:19:6e:33:ce:3a:
17:a6:50:4e:7c:cb:80:2e:c7:85:2e:5f:55:d9:ba:cc:36:6a:
27:03:12:63:21:1a:43:68:02:80:e5:ea:d7:da:9d:ae:69:e6:
35:91:fe:8b:38:f4:62:2d:5e:1a:58:de:5b:e9:14:7e:74:03:
63:6c:89:81:e7:7a:6f:57:91:b8:f2:64:37:e2:a4:82:99:a4:
b3:7c:e0:54:e3:e9:c2:9f:b0:68:05:0e:ad:54:5f:f6:a6:fb:
ad:f9:3f:1f:f0:02:c7:a2:9b:67:22:d5:87:b0:0a:23:a8:99:
fc:fb:c6:2f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMZgEEJJErK1er8Uol8JOeTnPGl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUxNkMyRkUzRjNFNEI4Qzg2NDFCNUJEQzZCRDY0ODNE
OTFEMjU2ODAeFw0yNDAzMDUxNzU3MTZaFw0yNTAzMDQxODAyMTZaMDMxMTAvBgNV
BAMTKDg5RDIwODk2MTBGNzU5MkJBQTQ1MjM2RDUyODdEQjFDMDJEQjgwMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xgxee30E5HwFJu7fLbcXeuv2
GfIXC4ZCxz9jPyP4HjNx5jPtpuFqbTNI5OL69QlqtKrc9x5Hkfwz8Riwh2L2F4lM
n3QAT/z3NxmIew1AyzmvEUWgYAOajSLxQs7eUKdvknqA5QsTmQmG0cJlHVyUIkHD
Eum3kEIhx+3H+1CoQQpRdAWloSZrxZ+0gCOEyFnDgxbygK63uWGSou/scb4jBtQv
wrN5tf0qj2S/VbG3gxCuLzRa6AHMrkI97LPKI57wH2d+zRH3s4DN8CCEa8ooH9UI
kK7m6yFvDnWgYWwvxTnwAl6d7L5/CzYw6yTYBU4+m/4MNsgnoyLJfWk1ENkZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUidIIlhD3WSuqRSNtUofbHALbgDgwHwYDVR0j
BBgwFoAUFRbC/j8+S4yGQbW9xr1kg9kdJWgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QUIzNDBCMDg3MkEwNzNGQjM5RUFDMzJBMTFERDA0OUFE
QTMzQTI2QTdEMTJCRTQ3MEEyNDUxMDA1MDlDMkEyLzAvMTUxNkMyRkUzRjNFNEI4
Qzg2NDFCNUJEQzZCRDY0ODNEOTFEMjU2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNTE2QzJGRTNGM0U0QjhDODY0
MUI1QkRDNkJENjQ4M0Q5MUQyNTY4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUFCMzQwQjA4NzJBMDczRkIzOUVBQzMyQTExREQwNDlBREEzM0EyNkE3
RDEyQkU0NzBBMjQ1MTAwNTA5QzJBMi8wLzMxMzMzMTJlMzEzNjMxMmUzNTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzYzODM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg6E0
MA0GCSqGSIb3DQEBCwUAA4IBAQBuWsZc+2PkyHP+f3kZeD/6hG46MPwRsO1g9QW2
FImrL6wqPcMXcfKPcnAn6mQt7V2wX3RNIvhLKudwLdT7q9hAkcGidfTXw0UmrP0o
RSB3HkQmAWWbBeqyv6AeJyEqJGivUgKziUWa2PsEso70Be+VV9JQc/Z95N0T89At
oOMwhpjVHwBLVybxqY0hGW4zzjoXplBOfMuALseFLl9V2brMNmonAxJjIRpDaAKA
5erX2p2uaeY1kf6LOPRiLV4aWN5b6RR+dANjbImB53pvV5G48mQ34qSCmaSzfOBU
4+nCn7BoBQ6tVF/2pvut+T8f8ALHoptnItWHsAojqJn8+8Yv
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:49:04 2025 by rpki-client