Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2c4db898-59c8-4568-976e-2adddce7ebed/42a60b903ca4541dd64c5bef40c882c13ffd3b3a.roa
File: 42a60b903ca4541dd64c5bef40c882c13ffd3b3a.roa (raw, json)
Hash identifier: JTuShAHqoH3DlUzkNSRwh1f1Jf69rsjK7oIAejLXBas=
Subject key identifier: D5:81:54:9C:3F:FD:0A:B5:B1:A3:C0:6C:DA:F3:C3:72:5E:DB:91:7A
Certificate issuer: /CN=969da9021496148ea803d6fd9b5a297aebfc905d
Certificate serial: 0D8CA8
Authority key identifier: 3C:FF:80:BF:78:CE:FB:91:D9:BA:3B:13:FE:C2:73:B1:A5:C0:3C:98
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/969da9021496148ea803d6fd9b5a297aebfc905d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2c4db898-59c8-4568-976e-2adddce7ebed/42a60b903ca4541dd64c5bef40c882c13ffd3b3a.roa
Signing time: Wed 24 Mar 2021 14:38:02 +0000
ROA not before: Wed 24 Mar 2021 14:38:01 +0000
ROA not after: Tue 24 Mar 2026 14:38:01 +0000
asID: 28086
IP address blocks: 190.123.128.0/20 maxlen: 24
2803:d200::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887976 (0xd8ca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969da9021496148ea803d6fd9b5a297aebfc905d
Validity
Not Before: Mar 24 14:38:01 2021 GMT
Not After : Mar 24 14:38:01 2026 GMT
Subject: CN=42a60b903ca4541dd64c5bef40c882c13ffd3b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:a9:d3:17:ed:ff:8e:8e:9e:d1:08:07:44:
29:98:55:1a:d0:3c:6a:7b:a7:ca:c3:80:1c:12:e8:
af:6b:99:7b:8d:ef:cc:dc:3a:6c:39:88:dd:f7:be:
51:38:13:24:3f:44:a6:62:0d:6d:80:bb:79:1d:30:
97:1a:c2:8a:a2:b6:c1:52:50:57:ad:1c:67:9d:55:
d5:c3:a0:71:89:dc:85:44:a9:06:05:72:de:28:78:
33:3d:e3:33:35:d0:80:d4:1f:9c:2d:66:f3:bc:2e:
73:29:24:c8:fe:2e:d6:98:63:fd:b9:e7:23:41:ee:
8c:fe:35:ca:b6:83:76:bc:8a:b1:1a:31:83:93:d4:
e9:26:dc:ac:c7:55:b9:82:fc:70:d4:1d:c1:24:9e:
5f:fe:69:3a:92:34:bd:ac:15:ac:58:49:8e:30:d0:
e9:42:eb:2a:bf:37:36:9c:cb:f7:12:d5:c6:e5:2d:
75:d7:a4:f6:92:77:23:68:16:31:71:e2:50:5e:86:
1d:cb:63:7a:f8:8e:33:ac:ff:75:b7:a7:fd:bb:f0:
e3:11:a5:63:d5:ce:be:ca:c2:4d:9f:4e:5c:fd:41:
92:80:44:31:ef:85:bd:ae:31:34:23:e9:cd:dd:b2:
e5:f6:e8:05:f6:64:1d:48:43:49:9f:a8:33:4c:6c:
7d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:81:54:9C:3F:FD:0A:B5:B1:A3:C0:6C:DA:F3:C3:72:5E:DB:91:7A
X509v3 Authority Key Identifier:
keyid:3C:FF:80:BF:78:CE:FB:91:D9:BA:3B:13:FE:C2:73:B1:A5:C0:3C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/969da9021496148ea803d6fd9b5a297aebfc905d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2c4db898-59c8-4568-976e-2adddce7ebed/42a60b903ca4541dd64c5bef40c882c13ffd3b3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2c4db898-59c8-4568-976e-2adddce7ebed/969da9021496148ea803d6fd9b5a297aebfc905d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.123.128.0/20
IPv6:
2803:d200::/32
Signature Algorithm: sha256WithRSAEncryption
6f:a9:b1:e3:6e:a0:d5:b4:7f:c5:77:7c:51:5f:5a:88:ac:3d:
10:28:ed:3d:7a:fc:38:09:ea:6a:be:b7:d6:d7:ac:b0:d2:0e:
75:9d:50:be:75:58:75:a9:d4:b2:d5:93:10:d6:67:b1:c6:e8:
4f:81:df:20:d5:bf:ef:22:68:e1:1d:38:0f:94:d1:85:51:fd:
bb:cc:57:d9:a1:14:01:d2:05:bd:44:f0:56:3c:02:c7:ae:d3:
c0:6f:ad:79:99:c9:e4:6c:c5:f5:b9:a5:4b:23:ca:58:5b:15:
d8:34:84:c6:fe:3f:da:95:95:3d:d4:25:0b:7c:57:37:22:db:
78:1d:36:54:a8:60:48:26:a0:52:0d:ff:91:6a:47:a0:b0:fc:
c5:b4:4b:72:77:9b:b2:31:6b:21:42:77:2b:29:6e:c7:81:31:
30:ba:ff:d6:b4:db:63:41:20:08:a9:d5:71:a3:13:97:36:8f:
1b:15:0a:ef:43:53:53:90:d3:7b:f3:2c:75:5f:32:51:7b:ff:
a2:b0:b9:eb:e1:14:23:f2:31:e2:f7:26:24:56:8e:35:d3:6c:
67:98:f0:24:8a:e4:88:da:b2:6d:e2:a2:b9:cb:8a:a4:37:bd:
69:20:be:c0:93:32:9c:9a:10:01:a6:c9:dc:da:82:12:89:3b:
53:39:6f:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDYyoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk2
OWRhOTAyMTQ5NjE0OGVhODAzZDZmZDliNWEyOTdhZWJmYzkwNWQwHhcNMjEwMzI0
MTQzODAxWhcNMjYwMzI0MTQzODAxWjAzMTEwLwYDVQQDEyg0MmE2MGI5MDNjYTQ1
NDFkZDY0YzViZWY0MGM4ODJjMTNmZmQzYjNhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnVap0xft/46OntEIB0QpmFUa0Dxqe6fKw4AcEuiva5l7je/M
3DpsOYjd975ROBMkP0SmYg1tgLt5HTCXGsKKorbBUlBXrRxnnVXVw6BxidyFRKkG
BXLeKHgzPeMzNdCA1B+cLWbzvC5zKSTI/i7WmGP9uecjQe6M/jXKtoN2vIqxGjGD
k9TpJtysx1W5gvxw1B3BJJ5f/mk6kjS9rBWsWEmOMNDpQusqvzc2nMv3EtXG5S11
16T2kncjaBYxceJQXoYdy2N6+I4zrP91t6f9u/DjEaVj1c6+ysJNn05c/UGSgEQx
74W9rjE0I+nN3bLl9ugF9mQdSENJn6gzTGx95wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFNWBVJw//Qq1saPAbNrzw3Je25F6MB8GA1UdIwQYMBaAFDz/gL94zvuR2bo7
E/7Cc7GlwDyYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTY5ZGE5
MDIxNDk2MTQ4ZWE4MDNkNmZkOWI1YTI5N2FlYmZjOTA1ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmM0ZGI4OTgtNTljOC00NTY4LTk3NmUtMmFkZGRj
ZTdlYmVkLzQyYTYwYjkwM2NhNDU0MWRkNjRjNWJlZjQwYzg4MmMxM2ZmZDNiM2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yYzRkYjg5OC01OWM4LTQ1NjgtOTc2ZS0yYWRk
ZGNlN2ViZWQvOTY5ZGE5MDIxNDk2MTQ4ZWE4MDNkNmZkOWI1YTI5N2FlYmZjOTA1
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEBL57gDANBAIAAjAHAwUAKAPSADANBgkqhkiG9w0BAQsFAAOC
AQEAb6mx426g1bR/xXd8UV9aiKw9ECjtPXr8OAnqar631tessNIOdZ1QvnVYdanU
stWTENZnscboT4HfINW/7yJo4R04D5TRhVH9u8xX2aEUAdIFvUTwVjwCx67TwG+t
eZnJ5GzF9bmlSyPKWFsV2DSExv4/2pWVPdQlC3xXNyLbeB02VKhgSCagUg3/kWpH
oLD8xbRLcnebsjFrIUJ3Kylux4ExMLr/1rTbY0EgCKnVcaMTlzaPGxUK70NTU5DT
e/MsdV8yUXv/orC56+EUI/Ix4vcmJFaONdNsZ5jwJIrkiNqybeKiucuKpDe9aSC+
wJMynJoQAabJ3NqCEok7Uzlvqw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org