Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5239c24254f88fa5b3aace3c911f92a497ecdb3f.roa
File: 5239c24254f88fa5b3aace3c911f92a497ecdb3f.roa (raw, json)
Hash identifier: fYdwJI90r/92OhwBr3j/q3n7PBgXxw8RoKkL5C5mwGE=
Subject key identifier: DC:20:EB:04:3F:CF:F3:82:0C:0E:F8:BF:FF:6E:5B:F7:10:1F:65:12
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 244252
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5239c24254f88fa5b3aace3c911f92a497ecdb3f.roa
Signing time: Thu 20 Apr 2023 03:24:13 +0000
ROA not before: Wed 19 Apr 2023 03:24:13 +0000
ROA not after: Sun 20 Apr 2025 03:24:13 +0000
asID: 14080
IP address blocks: 190.158.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2376274 (0x244252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Apr 19 03:24:13 2023 GMT
Not After : Apr 20 03:24:13 2025 GMT
Subject: CN=5239c24254f88fa5b3aace3c911f92a497ecdb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:15:f7:05:6b:42:9f:22:98:a3:54:ab:e2:
83:93:0c:99:b0:a8:6a:42:74:d4:6e:11:2a:dc:fb:
c5:49:ce:db:d2:e1:99:ed:fa:dc:bf:60:77:c6:2f:
cc:f9:23:b6:9d:fa:b3:b6:45:21:45:66:c2:72:ff:
51:29:96:20:a7:25:0c:97:78:f1:30:ee:e7:cf:82:
95:04:2b:7f:fc:ed:7f:98:89:65:1f:64:b0:52:fc:
8a:84:0a:07:49:57:c8:88:11:f0:85:a6:e2:4b:64:
a3:f0:b9:53:74:ea:79:cc:36:ca:bf:f9:c0:3a:96:
93:b4:4f:7e:99:f0:47:99:be:88:9b:10:b2:03:85:
4f:4c:9b:46:51:dd:27:47:83:73:10:d5:08:2a:e7:
78:da:50:a0:a7:e8:7c:10:ea:47:1d:43:f7:af:93:
f5:32:a9:b0:e4:28:88:84:68:8f:6f:83:78:24:40:
f3:f7:a5:33:89:d6:e4:2b:9b:12:f2:2e:b6:be:2c:
8e:ae:d6:ff:10:d1:e6:03:6f:3b:c0:a5:48:30:a8:
1a:4a:55:4f:cc:62:91:71:de:96:3a:71:d7:9d:4b:
de:9e:97:a0:24:dd:43:dd:bd:af:2f:1d:5b:65:e0:
e6:ab:28:d4:12:ef:76:f7:b7:4b:af:4d:28:4c:6a:
57:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:20:EB:04:3F:CF:F3:82:0C:0E:F8:BF:FF:6E:5B:F7:10:1F:65:12
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5239c24254f88fa5b3aace3c911f92a497ecdb3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.158.134.0/24
Signature Algorithm: sha256WithRSAEncryption
85:db:a8:3c:a6:15:fb:43:4d:39:58:01:81:73:e0:e3:4b:ee:
76:16:db:66:d6:fe:cc:fe:c9:b0:dd:55:90:63:8d:30:66:e3:
69:9d:fb:cb:c9:05:4b:9d:8a:a5:42:d8:6f:8c:39:2a:e6:2e:
74:19:ec:61:e7:9a:a8:a9:b0:ea:11:3d:6b:0b:f1:69:a8:91:
1a:87:3a:b7:9f:1f:ec:dc:5f:ee:69:0b:86:9c:13:97:7e:34:
06:2f:b2:35:36:ad:ad:a7:8f:49:7b:dc:61:92:3a:cf:8a:e1:
fc:ce:69:43:3c:77:a5:4a:f7:70:d8:7c:f9:14:9d:61:f0:f7:
2e:5e:4e:56:9e:14:33:8b:5d:7d:37:16:cb:8b:fb:3e:23:be:
ca:7b:ed:c0:7c:fc:f7:c1:10:9c:1c:74:e5:42:ad:9b:5e:c8:
9a:9d:65:08:47:b2:fa:f5:b3:97:fc:04:33:25:6e:f5:88:b7:
c9:06:c4:21:cc:92:1a:83:fd:ab:7d:ce:c5:08:de:6b:15:3d:
8f:3a:01:ba:d7:da:39:6d:5f:c7:91:79:43:2b:bc:0f:1d:5f:
62:22:d3:91:e1:8e:df:43:4f:75:41:3f:d0:53:27:ec:0f:1f:
b8:7a:8b:67:42:3c:ea:40:d4:46:9c:b7:0c:0a:bb:38:e2:52:
7c:19:96:15
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJEJSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
ZjY4ZWNkMzg5NmIzMjg4ZjgzYzI5YTJjM2RhNDRjODIxYzc2ODQwHhcNMjMwNDE5
MDMyNDEzWhcNMjUwNDIwMDMyNDEzWjAzMTEwLwYDVQQDEyg1MjM5YzI0MjU0Zjg4
ZmE1YjNhYWNlM2M5MTFmOTJhNDk3ZWNkYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmkwV9wVrQp8imKNUq+KDkwyZsKhqQnTUbhEq3PvFSc7b0uGZ
7frcv2B3xi/M+SO2nfqztkUhRWbCcv9RKZYgpyUMl3jxMO7nz4KVBCt//O1/mIll
H2SwUvyKhAoHSVfIiBHwhabiS2Sj8LlTdOp5zDbKv/nAOpaTtE9+mfBHmb6ImxCy
A4VPTJtGUd0nR4NzENUIKud42lCgp+h8EOpHHUP3r5P1Mqmw5CiIhGiPb4N4JEDz
96UzidbkK5sS8i62viyOrtb/ENHmA287wKVIMKgaSlVPzGKRcd6WOnHXnUvenpeg
JN1D3b2vLx1bZeDmqyjUEu9297dLr00oTGpXiwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNwg6wQ/z/OCDA74v/9uW/cQH2USMB8GA1UdIwQYMBaAFKhzgywDCRS4/QD1
P69G5JXZcRs8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFmNjhl
Y2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhLzUyMzljMjQyNTRmODhmYTViM2FhY2UzYzkxMWY5MmE0OTdlY2RiM2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvYzFmNjhlY2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL6ehjANBgkqhkiG9w0BAQsFAAOCAQEAhduoPKYV+0NNOVgB
gXPg40vudhbbZtb+zP7JsN1VkGONMGbjaZ37y8kFS52KpULYb4w5KuYudBnsYeea
qKmw6hE9awvxaaiRGoc6t58f7Nxf7mkLhpwTl340Bi+yNTatraePSXvcYZI6z4rh
/M5pQzx3pUr3cNh8+RSdYfD3Ll5OVp4UM4tdfTcWy4v7PiO+ynvtwHz898EQnBx0
5UKtm17Imp1lCEey+vWzl/wEMyVu9Yi3yQbEIcySGoP9q33OxQjeaxU9jzoButfa
OW1fx5F5Qyu8Dx1fYiLTkeGO30NPdUE/0FMn7A8fuHqLZ0I86kDURpy3DAq7OOJS
fBmWFQ==
-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org