Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f8331e72285d6525438e73bf4f3def85b6b6c706.roa
File: f8331e72285d6525438e73bf4f3def85b6b6c706.roa (raw, json)
Hash identifier: i9tt8nj6G9qBOCMTZmbo3WBOHYAawCBS4FhmBJo4wr8=
Subject key identifier: 9F:6E:CB:EF:5D:B6:B2:B3:04:7F:CB:CB:40:00:7C:30:DA:89:6E:03
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 251CB0
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f8331e72285d6525438e73bf4f3def85b6b6c706.roa
Signing time: Fri 21 Jul 2023 20:57:25 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 263223
IP address blocks: 201.234.239.0/24 maxlen: 24
190.216.240.0/24 maxlen: 24
190.216.245.0/24 maxlen: 24
190.216.249.0/24 maxlen: 24
190.216.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2432176 (0x251cb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=f8331e72285d6525438e73bf4f3def85b6b6c706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:39:0d:65:5d:62:e6:f8:30:9b:f3:de:38:0c:
d6:85:3e:de:c5:57:37:bd:0c:2b:ef:c2:da:00:8e:
05:7a:36:ae:15:c4:93:3a:3e:1c:b2:aa:ef:65:b9:
d6:dd:19:87:99:e8:66:4e:30:18:d0:4e:9a:74:bb:
fd:fd:1a:03:2d:9b:87:5c:ff:21:15:05:f6:56:32:
fb:e9:4a:3c:27:a9:ac:b4:e2:60:0e:71:63:91:c1:
37:dd:05:34:ee:99:73:f7:b5:c1:db:43:83:99:d8:
65:8f:2d:7e:1d:85:66:5d:39:4a:3b:e6:23:e8:7b:
ab:ee:a9:6e:a9:7d:50:cb:a8:08:d3:c5:3e:3f:12:
c0:92:d7:fb:cc:cb:37:64:f1:6a:8e:60:ef:72:ab:
58:b7:4b:ba:68:b5:28:8d:8d:94:6e:a1:3f:74:09:
d6:ca:37:2d:82:44:4c:f8:d0:de:55:4d:8f:cc:4f:
5b:8c:53:0c:9f:38:92:04:3d:ba:67:d0:ff:5f:0c:
52:0d:3f:63:b5:0c:58:04:ec:e1:c7:1a:df:f2:02:
e1:1a:b0:b3:e9:94:14:95:53:7b:9e:8a:8b:c2:29:
b0:5a:bd:08:61:fe:0f:b5:5c:aa:8f:d7:82:52:1f:
27:31:24:2e:56:93:22:14:83:06:ad:93:b0:81:65:
8d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6E:CB:EF:5D:B6:B2:B3:04:7F:CB:CB:40:00:7C:30:DA:89:6E:03
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f8331e72285d6525438e73bf4f3def85b6b6c706.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.216.240.0/24
190.216.245.0/24
190.216.249.0/24
190.216.252.0/24
201.234.239.0/24
Signature Algorithm: sha256WithRSAEncryption
28:15:fd:20:8f:97:75:7c:9a:33:4b:41:a7:03:1c:09:0c:4d:
56:65:b2:79:fa:df:17:97:c3:b2:36:f7:dc:fc:b4:57:6c:8a:
71:1f:29:55:6b:f5:bf:ec:75:8b:c5:03:e2:e0:2f:fb:36:54:
ee:aa:3c:10:59:ca:e5:3a:07:23:49:08:63:a1:93:ce:48:09:
48:3b:cd:0c:09:3b:20:c3:a0:13:39:80:66:9a:9e:df:b2:3c:
26:30:4f:21:09:50:94:60:65:4a:1a:f9:61:34:e5:4f:7e:f7:
a9:6b:f3:9a:9c:15:dd:79:02:ef:e7:d7:7d:84:81:4c:76:68:
19:3c:51:6e:a4:dd:bc:13:d6:93:d1:e7:8c:b8:1a:a8:ac:4a:
81:a1:ca:1b:78:ca:19:6b:ea:cc:75:0c:7c:c1:1f:46:73:1f:
7e:dd:48:04:8f:34:0e:1b:ba:85:8e:48:1b:cd:16:4e:8a:89:
a3:54:7a:3a:63:56:65:0b:44:c1:e7:e8:1b:90:ac:7c:aa:cd:
5a:b9:0f:eb:98:46:6a:d7:64:64:e1:b9:23:3a:31:46:9e:63:
19:80:2b:17:3f:dd:df:53:56:dd:2d:bd:04:f9:ef:5a:21:77:
ca:3d:8d:f8:7e:f4:9d:2f:de:d8:18:87:dd:ff:c3:26:1d:cc:
3b:90:de:ad
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDJRywMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc5
N2ZiYzZjZGRhMmYzNjYxYjJhMzM1MDYwY2I4NGQ4MDg3MDY2NTkwHhcNMjMwNzIw
MjA1NDU3WhcNMjUwNzIxMjA1NDU3WjAzMTEwLwYDVQQDEyhmODMzMWU3MjI4NWQ2
NTI1NDM4ZTczYmY0ZjNkZWY4NWI2YjZjNzA2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5TkNZV1i5vgwm/PeOAzWhT7exVc3vQwr78LaAI4FejauFcST
Oj4csqrvZbnW3RmHmehmTjAY0E6adLv9/RoDLZuHXP8hFQX2VjL76Uo8J6mstOJg
DnFjkcE33QU07plz97XB20ODmdhljy1+HYVmXTlKO+Yj6Hur7qluqX1Qy6gI08U+
PxLAktf7zMs3ZPFqjmDvcqtYt0u6aLUojY2UbqE/dAnWyjctgkRM+NDeVU2PzE9b
jFMMnziSBD26Z9D/XwxSDT9jtQxYBOzhxxrf8gLhGrCz6ZQUlVN7noqLwimwWr0I
Yf4PtVyqj9eCUh8nMSQuVpMiFIMGrZOwgWWNswIDAQABo4ICczCCAm8wHQYDVR0O
BBYEFJ9uy+9dtrKzBH/Ly0AAfDDaiW4DMB8GA1UdIwQYMBaAFCtidz8C0hsm2p0G
Y2LQrCl1X2lJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzk3ZmJj
NmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTI3ZTQwOTUtMmY0NS00ZWM5LThmNzUtZTc5OTM4
NWZiYWQwL2Y4MzMxZTcyMjg1ZDY1MjU0MzhlNzNiZjRmM2RlZjg1YjZiNmM3MDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMjdlNDA5NS0yZjQ1LTRlYzktOGY3NS1lNzk5
Mzg1ZmJhZDAvNzk3ZmJjNmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQo
MCYwJAQCAAEwHgMEAL7Y8AMEAL7Y9QMEAL7Y+QMEAL7Y/AMEAMnq7zANBgkqhkiG
9w0BAQsFAAOCAQEAKBX9II+XdXyaM0tBpwMcCQxNVmWyefrfF5fDsjb33Py0V2yK
cR8pVWv1v+x1i8UD4uAv+zZU7qo8EFnK5ToHI0kIY6GTzkgJSDvNDAk7IMOgEzmA
Zpqe37I8JjBPIQlQlGBlShr5YTTlT373qWvzmpwV3XkC7+fXfYSBTHZoGTxRbqTd
vBPWk9HnjLgaqKxKgaHKG3jKGWvqzHUMfMEfRnMfft1IBI80Dhu6hY5IG80WToqJ
o1R6OmNWZQtEwefoG5CsfKrNWrkP65hGatdkZOG5IzoxRp5jGYArFz/d31NW3S29
BPnvWiF3yj2N+H70nS/e2BiH3f/DJh3MO5DerQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org