Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/e7d1cea8c35c10e5acc1ca0b5c758b24e6468216.roa
File: e7d1cea8c35c10e5acc1ca0b5c758b24e6468216.roa (raw, json)
Hash identifier: t320xhlmXUGr14bXTwPceF6C9vf75irE6vyP0kHjga4=
Subject key identifier: A6:9B:D9:94:73:AA:C1:AB:2A:A6:42:64:30:86:15:48:68:5A:1B:7C
Certificate issuer: /CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
Certificate serial: 35C5
Authority key identifier: 6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/e7d1cea8c35c10e5acc1ca0b5c758b24e6468216.roa
Signing time: Mon 20 Feb 2023 13:13:30 +0000
ROA not before: Sun 19 Feb 2023 13:13:01 +0000
ROA not after: Thu 20 Feb 2025 13:13:01 +0000
asID: 270088
IP address blocks: 170.0.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13765 (0x35c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
Validity
Not Before: Feb 19 13:13:01 2023 GMT
Not After : Feb 20 13:13:01 2025 GMT
Subject: CN=e7d1cea8c35c10e5acc1ca0b5c758b24e6468216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:ff:b8:e1:db:3a:69:11:7f:9a:0b:13:f9:
8d:5b:d0:2b:f5:82:dd:b2:a4:e3:3a:b4:61:4c:48:
48:02:88:a0:03:80:cd:14:52:eb:b0:60:7e:4a:4c:
b2:99:a0:5e:6a:78:5e:70:d6:84:b3:ae:b8:d3:86:
41:b9:ae:f8:74:2c:9b:55:a4:71:47:52:f1:c3:95:
b7:7a:61:e1:35:e8:6a:c4:bf:45:6f:51:11:c2:e8:
86:2c:4c:a8:79:78:8f:bd:fd:02:d1:fb:4d:d8:fb:
f5:4a:16:67:6d:04:ff:91:b4:4a:44:58:90:84:43:
e6:44:58:d6:16:34:22:12:0e:40:d1:ad:43:e3:17:
83:26:a7:3c:fb:89:3a:07:35:0f:d1:41:b4:2d:71:
9b:26:7f:a6:de:03:72:fe:b8:05:61:1f:96:ce:1e:
96:24:02:a5:09:27:39:db:bd:62:06:b7:42:6a:b0:
c2:f0:cc:66:18:d1:0b:da:60:50:45:d5:39:94:be:
b9:65:2b:46:20:e6:f3:2f:04:67:5d:99:b9:6a:99:
f3:50:28:90:c2:ff:46:3a:bc:57:1e:26:60:42:f3:
5a:b8:37:88:a8:4f:68:c4:46:dc:44:69:93:24:3c:
ad:37:d3:04:b1:c8:8b:24:b2:9d:d8:86:88:77:98:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9B:D9:94:73:AA:C1:AB:2A:A6:42:64:30:86:15:48:68:5A:1B:7C
X509v3 Authority Key Identifier:
keyid:6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/e7d1cea8c35c10e5acc1ca0b5c758b24e6468216.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/88c828fbf7c4212619b24a7d12142f15f0f5ffea.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.8.0/23
Signature Algorithm: sha256WithRSAEncryption
66:7d:a8:55:ac:94:2b:34:e7:94:5c:5b:13:e4:0d:96:83:97:
10:4f:19:83:cb:e6:69:d0:84:e4:7a:cc:4a:4d:82:20:72:0b:
b4:0d:8e:d3:77:2c:ef:44:d3:48:26:9e:b5:87:32:6b:37:0c:
6c:a6:fa:89:e4:dd:16:ad:cc:4b:e8:35:4d:14:46:e8:c7:85:
b7:db:11:b5:d0:cd:ee:51:73:a1:8c:cc:12:6c:d5:e2:3a:7d:
b1:97:3f:e0:9a:9e:5f:31:f3:bb:84:75:23:09:24:d0:fa:fb:
96:5a:9d:ce:01:2a:8b:77:2f:7d:7f:f3:27:ea:69:24:64:c6:
5a:6c:54:4c:58:c7:1c:a2:6e:69:0a:40:a8:71:73:d7:0c:fe:
f4:07:d0:78:2a:4b:1b:bf:85:80:b3:d0:86:69:5b:02:5d:b1:
ce:e1:b5:20:37:93:c1:df:0c:84:3d:71:8f:e8:2f:0a:31:e2:
bb:2e:cc:2a:d4:6f:aa:46:9e:76:0e:6c:e9:f2:11:76:78:8d:
98:56:78:8e:03:da:14:96:5b:98:12:12:3a:8b:35:7f:7e:cd:
ac:6e:d7:2d:7b:76:50:a4:17:b9:68:32:53:79:43:c5:8a:de:
35:33:9e:fc:cf:f5:db:0a:81:e8:de:e2:44:6c:48:3d:df:64:
dc:eb:51:90
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICNcUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODhj
ODI4ZmJmN2M0MjEyNjE5YjI0YTdkMTIxNDJmMTVmMGY1ZmZlYTAeFw0yMzAyMTkx
MzEzMDFaFw0yNTAyMjAxMzEzMDFaMDMxMTAvBgNVBAMTKGU3ZDFjZWE4YzM1YzEw
ZTVhY2MxY2EwYjVjNzU4YjI0ZTY0NjgyMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCx4P+44ds6aRF/mgsT+Y1b0Cv1gt2ypOM6tGFMSEgCiKADgM0U
UuuwYH5KTLKZoF5qeF5w1oSzrrjThkG5rvh0LJtVpHFHUvHDlbd6YeE16GrEv0Vv
URHC6IYsTKh5eI+9/QLR+03Y+/VKFmdtBP+RtEpEWJCEQ+ZEWNYWNCISDkDRrUPj
F4Mmpzz7iToHNQ/RQbQtcZsmf6beA3L+uAVhH5bOHpYkAqUJJznbvWIGt0JqsMLw
zGYY0QvaYFBF1TmUvrllK0Yg5vMvBGddmblqmfNQKJDC/0Y6vFceJmBC81q4N4io
T2jERtxEaZMkPK030wSxyIsksp3Yhoh3mFHtAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUppvZlHOqwasqpkJkMIYVSGhaG3wwHwYDVR0jBBgwFoAUahWAPEsWRJpswbEu
KOgsj+inb/YwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS84OGM4Mjhm
YmY3YzQyMTI2MTliMjRhN2QxMjE0MmYxNWYwZjVmZmVhLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mYjFkZjlhYS1hOWJjLTRmM2MtOGU1Mi03MTE0NmE2
MTk2ZjkvZTdkMWNlYThjMzVjMTBlNWFjYzFjYTBiNWM3NThiMjRlNjQ2ODIxNi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2ZiMWRmOWFhLWE5YmMtNGYzYy04ZTUyLTcxMTQ2
YTYxOTZmOS84OGM4MjhmYmY3YzQyMTI2MTliMjRhN2QxMjE0MmYxNWYwZjVmZmVh
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQBqgAIMA0GCSqGSIb3DQEBCwUAA4IBAQBmfahVrJQrNOeUXFsT
5A2Wg5cQTxmDy+Zp0ITkesxKTYIgcgu0DY7TdyzvRNNIJp61hzJrNwxspvqJ5N0W
rcxL6DVNFEbox4W32xG10M3uUXOhjMwSbNXiOn2xlz/gmp5fMfO7hHUjCSTQ+vuW
Wp3OASqLdy99f/Mn6mkkZMZabFRMWMccom5pCkCocXPXDP70B9B4Kksbv4WAs9CG
aVsCXbHO4bUgN5PB3wyEPXGP6C8KMeK7Lswq1G+qRp52Dmzp8hF2eI2YVniOA9oU
lluYEhI6izV/fs2sbtcte3ZQpBe5aDJTeUPFit41M578z/XbCoHo3uJEbEg932Tc
61GQ
-----END CERTIFICATE-----
Generated at Thu May 15 13:46:57 2025 by rpki-client