Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/72c53c565f85c383f4244eda7935a1034224e132.roa
File: 72c53c565f85c383f4244eda7935a1034224e132.roa (raw, json)
Hash identifier: fDl/SOrEcD65vO7n7pnYgR5FtMyMgD8R/Ay0SEvk/H8=
Subject key identifier: D9:C1:E9:E4:B8:6A:CB:5D:AF:85:EC:4B:A7:2B:B7:0B:B1:40:7D:76
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 2A2EE1
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/72c53c565f85c383f4244eda7935a1034224e132.roa
Signing time: Thu 30 Nov 2023 15:45:44 +0000
ROA not before: Thu 30 Nov 2023 15:45:44 +0000
ROA not after: Sun 30 Nov 2025 15:45:44 +0000
asID: 14080
IP address blocks: 190.156.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2764513 (0x2a2ee1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Nov 30 15:45:44 2023 GMT
Not After : Nov 30 15:45:44 2025 GMT
Subject: CN=72c53c565f85c383f4244eda7935a1034224e132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:43:4b:33:6a:34:41:89:60:d0:78:0b:b4:
3c:2c:88:02:e4:17:48:62:6e:2c:40:97:65:f9:18:
8d:1e:34:16:e3:15:30:a7:b6:e8:5a:e5:2d:ee:24:
94:21:0f:d0:fb:ee:c3:e2:a7:70:68:28:95:21:c2:
16:f6:5c:b1:52:71:04:8b:fb:a5:d6:5d:65:e7:4c:
98:9b:8c:fa:35:85:f5:7f:c0:d2:92:8b:df:75:b0:
cc:88:f0:28:4e:fb:39:07:b1:94:56:c7:11:0b:0b:
40:6d:5d:b3:14:ef:8a:70:a8:7d:d8:ad:c7:02:13:
ce:ad:25:e7:9a:2f:56:46:10:0b:fb:cd:67:28:44:
d8:9c:c5:25:3c:4c:4e:d3:bd:a8:0e:58:28:a1:f5:
23:b9:e1:78:a5:b8:e3:c7:4c:32:0a:d3:38:b8:18:
07:aa:b7:f9:d4:b7:82:0d:dc:09:c8:3e:77:7d:1e:
f6:e1:00:e9:ad:59:5a:ec:36:25:b5:33:e9:67:c1:
93:92:e1:ec:b8:42:dd:da:71:2c:94:94:6d:0d:36:
9f:a9:88:d2:a8:2d:1b:e5:20:be:66:9d:8c:09:03:
e8:63:da:f4:c9:79:3c:7d:f8:8c:b1:8a:0a:e1:8e:
d8:a6:c7:7b:7e:fb:b1:f8:98:37:cb:50:4c:1e:50:
b1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C1:E9:E4:B8:6A:CB:5D:AF:85:EC:4B:A7:2B:B7:0B:B1:40:7D:76
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/72c53c565f85c383f4244eda7935a1034224e132.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.156.7.0/24
Signature Algorithm: sha256WithRSAEncryption
83:35:58:9e:35:6f:a5:54:2e:fc:64:cf:7f:14:a6:1a:61:f9:
b6:3d:04:da:e9:29:53:5d:fc:fe:9d:ee:70:d1:c0:08:2d:9d:
9d:73:91:a9:02:b3:81:6b:47:49:fc:df:c8:12:7e:84:ae:ec:
d0:b7:f2:49:b1:fe:8e:ab:1a:90:88:1e:6b:b2:14:77:44:3a:
0b:ed:2b:3e:d7:7a:30:1c:c5:2d:9a:da:13:34:7e:d4:ab:b7:
72:a9:c4:54:c3:13:0f:5a:35:2b:58:d4:a4:d4:04:00:5f:e5:
55:aa:91:84:48:a3:9e:0e:e2:0d:65:a8:76:e4:3d:dc:25:6e:
44:83:a4:40:c3:a7:4e:84:a7:e6:ae:b2:f2:4f:91:60:5e:f4:
a2:65:30:c4:7c:44:4a:79:eb:8b:c9:65:45:60:4b:fd:33:e6:
ef:60:c3:48:18:73:86:71:d4:1a:fa:0b:5f:9b:28:60:04:a6:
33:7b:19:48:ed:4e:45:d9:3c:72:e4:05:8e:fb:c7:e4:2d:94:
c9:06:14:f0:11:89:e0:37:e5:c8:ac:f4:04:6c:4f:10:a6:52:
63:f3:43:2b:0f:39:f2:a2:1d:38:c9:cc:da:20:09:23:cf:27:
5c:86:5d:6d:3b:d7:9e:01:79:4e:58:f4:32:f2:da:26:e9:b9:
35:0d:d3:c8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKi7hMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
ZjY4ZWNkMzg5NmIzMjg4ZjgzYzI5YTJjM2RhNDRjODIxYzc2ODQwHhcNMjMxMTMw
MTU0NTQ0WhcNMjUxMTMwMTU0NTQ0WjAzMTEwLwYDVQQDEyg3MmM1M2M1NjVmODVj
MzgzZjQyNDRlZGE3OTM1YTEwMzQyMjRlMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAljpDSzNqNEGJYNB4C7Q8LIgC5BdIYm4sQJdl+RiNHjQW4xUw
p7boWuUt7iSUIQ/Q++7D4qdwaCiVIcIW9lyxUnEEi/ul1l1l50yYm4z6NYX1f8DS
kovfdbDMiPAoTvs5B7GUVscRCwtAbV2zFO+KcKh92K3HAhPOrSXnmi9WRhAL+81n
KETYnMUlPExO072oDlgoofUjueF4pbjjx0wyCtM4uBgHqrf51LeCDdwJyD53fR72
4QDprVla7DYltTPpZ8GTkuHsuELd2nEslJRtDTafqYjSqC0b5SC+Zp2MCQPoY9r0
yXk8ffiMsYoK4Y7Ypsd7fvux+Jg3y1BMHlCxawIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNnB6eS4astdr4XsS6crtwuxQH12MB8GA1UdIwQYMBaAFKhzgywDCRS4/QD1
P69G5JXZcRs8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFmNjhl
Y2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhLzcyYzUzYzU2NWY4NWMzODNmNDI0NGVkYTc5MzVhMTAzNDIyNGUxMzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvYzFmNjhlY2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL6cBzANBgkqhkiG9w0BAQsFAAOCAQEAgzVYnjVvpVQu/GTP
fxSmGmH5tj0E2ukpU138/p3ucNHACC2dnXORqQKzgWtHSfzfyBJ+hK7s0LfySbH+
jqsakIgea7IUd0Q6C+0rPtd6MBzFLZraEzR+1Ku3cqnEVMMTD1o1K1jUpNQEAF/l
VaqRhEijng7iDWWoduQ93CVuRIOkQMOnToSn5q6y8k+RYF70omUwxHxESnnri8ll
RWBL/TPm72DDSBhzhnHUGvoLX5soYASmM3sZSO1ORdk8cuQFjvvH5C2UyQYU8BGJ
4DflyKz0BGxPEKZSY/NDKw858qIdOMnM2iAJI88nXIZdbTvXngF5Tlj0MvLaJum5
NQ3TyA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:54 2024 by rpki-client on console-ams.rpki-client.org