Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/04c9f93172a9a2cffffbb72cb3b8d8676474bc0b.roa
File: 04c9f93172a9a2cffffbb72cb3b8d8676474bc0b.roa (raw, json)
Hash identifier: 5I5UO+Jko+9tKWo24M3WzdmgBzo9RTqRHPP/oXgp+CM=
Subject key identifier: A7:90:67:73:A9:AF:00:2C:D5:79:A1:1C:E1:8F:12:4E:5F:1A:CE:F6
Certificate issuer: /CN=2bee98b52bf99165b867835f5390295e9317bb56
Certificate serial: 21E5A8
Authority key identifier: 87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/04c9f93172a9a2cffffbb72cb3b8d8676474bc0b.roa
Signing time: Tue 27 Jun 2023 02:12:54 +0000
ROA not before: Mon 26 Jun 2023 02:12:53 +0000
ROA not after: Fri 27 Jun 2025 02:12:53 +0000
asID: 266841
IP address blocks: 170.83.76.0/22 maxlen: 22
2803:52c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2221480 (0x21e5a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bee98b52bf99165b867835f5390295e9317bb56
Validity
Not Before: Jun 26 02:12:53 2023 GMT
Not After : Jun 27 02:12:53 2025 GMT
Subject: CN=04c9f93172a9a2cffffbb72cb3b8d8676474bc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:d3:d0:c4:ea:dd:ce:87:ae:79:38:bd:9e:
ae:f8:96:31:b7:65:f1:99:97:80:7c:1f:90:d7:b6:
b1:d0:78:90:4f:68:5f:46:a0:39:74:7e:e3:5b:93:
ce:2b:61:55:9c:a0:53:0c:4e:de:d7:10:4a:db:d7:
e2:04:6b:b3:b7:c5:26:f9:d2:c0:6f:5a:11:93:3b:
29:24:a1:bf:01:ef:17:a6:7b:0a:b3:f6:d7:23:78:
33:bd:59:35:f9:3e:09:e6:c5:95:94:f2:9f:f8:f3:
16:1f:4a:45:59:bb:83:b6:b4:bc:b9:c2:73:b5:9d:
cd:cd:a4:10:3e:cb:8b:7a:76:e4:3a:8d:11:74:fb:
97:d2:e3:3f:ba:09:29:4b:67:45:94:31:1b:d1:18:
95:0a:b1:5f:81:aa:be:a0:81:88:7f:d0:77:0e:36:
9e:a2:93:2c:82:c6:92:57:63:f0:0e:5d:11:cd:43:
8e:9a:e9:0e:46:00:0f:6f:c8:8b:6f:4c:02:2c:ac:
be:b7:07:b5:45:c7:68:d3:1f:eb:83:9e:3a:37:1c:
9a:40:48:82:45:a9:99:3f:c1:c6:dd:20:1d:bd:9b:
2e:be:7b:77:71:2c:72:b3:52:4f:8b:95:6e:be:1e:
ee:eb:6e:2b:39:36:37:9b:f9:bc:d1:57:0a:25:4b:
aa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:90:67:73:A9:AF:00:2C:D5:79:A1:1C:E1:8F:12:4E:5F:1A:CE:F6
X509v3 Authority Key Identifier:
keyid:87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/04c9f93172a9a2cffffbb72cb3b8d8676474bc0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/2bee98b52bf99165b867835f5390295e9317bb56.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.76.0/22
IPv6:
2803:52c0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:92:90:b7:60:07:d0:5b:ec:a0:7a:a2:77:89:6c:0b:c3:67:
84:71:ce:83:f4:da:84:a2:1b:87:f4:80:8e:a2:11:0b:b1:40:
ac:41:7e:95:eb:0d:62:d0:e9:d0:79:53:c6:d4:df:a1:a6:89:
f3:38:e1:68:55:e4:f8:fa:2b:6e:5b:73:df:bc:4e:a5:f8:85:
a6:a7:36:a4:9f:15:30:67:6f:13:a7:b5:76:e1:49:0a:ca:fe:
ec:2d:14:bb:77:9a:f9:57:90:da:7b:9d:fa:cc:70:00:14:f5:
b1:8b:ec:7a:63:07:2e:49:e6:fe:a0:11:f3:21:c0:b5:6d:a9:
c6:3b:d6:31:48:23:f3:2d:a8:0f:02:cd:c9:48:ea:29:f1:b5:
93:51:5b:cf:f9:38:60:4c:e6:08:c8:b8:ee:f5:fb:9c:fd:a4:
b6:63:67:ce:3b:c4:d7:8a:84:fb:38:07:9f:d1:ac:76:a0:fc:
d0:4c:68:71:bb:11:c1:2c:98:49:ff:2f:0c:90:0e:a7:73:3a:
d5:66:e3:37:93:b4:c7:d5:31:8b:e5:94:28:1b:e1:69:87:ba:
c2:98:70:10:5e:93:4c:65:19:01:f8:31:74:9c:7a:74:36:0e:
fe:16:fc:b5:df:68:09:43:b2:92:b0:f6:70:8c:a2:8c:ef:d3:
ac:ca:c8:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDIeWoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJi
ZWU5OGI1MmJmOTkxNjViODY3ODM1ZjUzOTAyOTVlOTMxN2JiNTYwHhcNMjMwNjI2
MDIxMjUzWhcNMjUwNjI3MDIxMjUzWjAzMTEwLwYDVQQDEygwNGM5ZjkzMTcyYTlh
MmNmZmZmYmI3MmNiM2I4ZDg2NzY0NzRiYzBiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn1zT0MTq3c6Hrnk4vZ6u+JYxt2XxmZeAfB+Q17ax0HiQT2hf
RqA5dH7jW5POK2FVnKBTDE7e1xBK29fiBGuzt8Um+dLAb1oRkzspJKG/Ae8XpnsK
s/bXI3gzvVk1+T4J5sWVlPKf+PMWH0pFWbuDtrS8ucJztZ3NzaQQPsuLenbkOo0R
dPuX0uM/ugkpS2dFlDEb0RiVCrFfgaq+oIGIf9B3DjaeopMsgsaSV2PwDl0RzUOO
mukORgAPb8iLb0wCLKy+twe1Rcdo0x/rg546NxyaQEiCRamZP8HG3SAdvZsuvnt3
cSxys1JPi5Vuvh7u624rOTY3m/m80VcKJUuqYQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFKeQZ3OprwAs1XmhHOGPEk5fGs72MB8GA1UdIwQYMBaAFIelwp/kt8HkvTq9
QysXqEdgHU65MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmJlZTk4
YjUyYmY5OTE2NWI4Njc4MzVmNTM5MDI5NWU5MzE3YmI1Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjcyYWQ4MjEtODQ2Yi00ZGRkLWE1ZGMtZjg3N2Qz
N2EzMWRjLzA0YzlmOTMxNzJhOWEyY2ZmZmZiYjcyY2IzYjhkODY3NjQ3NGJjMGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mNzJhZDgyMS04NDZiLTRkZGQtYTVkYy1mODc3
ZDM3YTMxZGMvMmJlZTk4YjUyYmY5OTE2NWI4Njc4MzVmNTM5MDI5NWU5MzE3YmI1
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqpTTDANBAIAAjAHAwUAKANSwDANBgkqhkiG9w0BAQsFAAOC
AQEAHZKQt2AH0FvsoHqid4lsC8NnhHHOg/TahKIbh/SAjqIRC7FArEF+lesNYtDp
0HlTxtTfoaaJ8zjhaFXk+Porbltz37xOpfiFpqc2pJ8VMGdvE6e1duFJCsr+7C0U
u3ea+VeQ2nud+sxwABT1sYvsemMHLknm/qAR8yHAtW2pxjvWMUgj8y2oDwLNyUjq
KfG1k1Fbz/k4YEzmCMi47vX7nP2ktmNnzjvE14qE+zgHn9GsdqD80ExocbsRwSyY
Sf8vDJAOp3M61WbjN5O0x9Uxi+WUKBvhaYe6wphwEF6TTGUZAfgxdJx6dDYO/hb8
td9oCUOykrD2cIyijO/TrMrIkA==
-----END CERTIFICATE-----
Generated at Sat May 10 20:16:03 2025 by rpki-client