Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/16e4ebf752e69cb8426687b8076b45f13cb7b71f.roa
File: 16e4ebf752e69cb8426687b8076b45f13cb7b71f.roa (raw, json)
Hash identifier: ob2vqZ06SwEAonS2AFrmJVvHwRDGkkx7n+osWrZQtk0=
Subject key identifier: 42:F6:80:34:87:8F:94:70:CF:F5:83:0D:67:AA:B8:F2:23:EA:9A:AB
Certificate issuer: /CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
Certificate serial: 21D5AC
Authority key identifier: 2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/16e4ebf752e69cb8426687b8076b45f13cb7b71f.roa
Signing time: Wed 19 Jul 2023 16:33:03 +0000
ROA not before: Tue 18 Jul 2023 16:33:02 +0000
ROA not after: Sat 19 Jul 2025 16:33:02 +0000
asID: 272829
IP address blocks: 190.71.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2217388 (0x21d5ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
Validity
Not Before: Jul 18 16:33:02 2023 GMT
Not After : Jul 19 16:33:02 2025 GMT
Subject: CN=16e4ebf752e69cb8426687b8076b45f13cb7b71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:3b:6a:bb:fc:54:34:1e:c3:46:06:32:ad:
86:0e:1e:87:c9:e7:c8:98:34:3a:24:3a:f7:79:b7:
20:6e:80:e3:0c:56:3b:93:f7:b4:f9:cf:61:37:20:
8b:da:39:00:2a:49:d9:f1:68:a6:cf:ec:2e:fc:a9:
f1:29:20:3c:d1:44:03:cb:3f:0a:d6:01:e9:fa:9c:
96:68:37:3e:11:a0:db:08:1a:36:52:f6:a5:23:e1:
db:74:46:d3:38:be:de:8e:40:9c:22:7c:a3:04:5a:
b6:30:98:34:5e:27:cb:68:87:31:6f:f2:dd:29:27:
1b:77:b6:34:72:bb:a4:9f:b4:cd:9d:2c:4e:1c:87:
ca:73:0e:28:9a:69:19:ae:aa:7b:cc:40:bf:1c:c8:
68:00:b3:65:34:b5:a9:87:3d:4e:18:ea:b5:46:9d:
b5:85:b9:29:26:b6:51:de:f8:7d:56:f6:af:4d:f1:
f9:e7:da:a3:b5:87:b5:89:cc:0c:9d:3c:4a:0b:b6:
7e:89:e0:d3:30:53:ca:60:a6:81:88:e0:66:cc:f4:
bc:90:1a:d1:47:d5:e1:93:40:b5:b2:e0:c2:93:12:
0b:01:48:e2:03:3f:eb:06:25:97:27:d0:09:d1:d8:
66:d0:3d:ff:b5:ec:09:a6:65:b9:62:17:63:de:1c:
1b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F6:80:34:87:8F:94:70:CF:F5:83:0D:67:AA:B8:F2:23:EA:9A:AB
X509v3 Authority Key Identifier:
keyid:2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/16e4ebf752e69cb8426687b8076b45f13cb7b71f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/1159fdc4276fa3bfc64df717e4ca0a75249cf188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.71.85.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:83:52:5d:51:84:8d:41:20:a5:d2:7f:62:ba:b1:3c:2e:9d:
c2:27:c1:c2:8e:20:9d:c1:73:0d:2c:69:28:e9:09:d9:61:5c:
8d:dd:03:13:db:19:43:58:c4:88:11:3d:89:6b:7d:68:b8:9a:
7e:38:28:9c:f8:ec:09:b9:f5:a3:9e:b4:a8:47:7d:b7:03:57:
bc:1f:05:fa:cb:a2:54:e5:e7:54:9b:f0:1a:a1:85:8f:35:5a:
f4:55:40:b6:8c:25:52:63:46:6c:b7:9a:07:2a:f6:5b:d7:69:
97:b8:7e:a6:ae:a6:72:b5:89:5e:10:28:a2:df:c4:20:fe:00:
c9:1c:d2:8a:5a:4f:1d:88:10:d8:d1:08:8a:0a:42:0d:53:5c:
0c:de:dd:1a:83:5e:3d:ba:c4:a0:38:b9:97:f1:3b:f0:6b:c7:
61:c3:76:86:c4:e3:68:64:4f:33:f7:f1:c0:70:d1:fa:50:59:
36:29:8c:d9:d5:71:22:79:61:ae:94:bf:89:62:ea:67:f1:3c:
3a:a3:08:f6:88:25:b9:0c:85:e5:03:90:22:a9:af:32:52:5f:
22:86:2e:ac:aa:87:fb:6a:7b:26:ac:25:0a:65:5b:d2:e4:80:
46:51:ce:98:e6:12:6c:54:f6:3c:35:10:34:dc:b6:cb:f9:02:
77:c8:7b:9e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIdWsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEx
NTlmZGM0Mjc2ZmEzYmZjNjRkZjcxN2U0Y2EwYTc1MjQ5Y2YxODgwHhcNMjMwNzE4
MTYzMzAyWhcNMjUwNzE5MTYzMzAyWjAzMTEwLwYDVQQDEygxNmU0ZWJmNzUyZTY5
Y2I4NDI2Njg3YjgwNzZiNDVmMTNjYjdiNzFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApjY7arv8VDQew0YGMq2GDh6HyefImDQ6JDr3ebcgboDjDFY7
k/e0+c9hNyCL2jkAKknZ8Wimz+wu/KnxKSA80UQDyz8K1gHp+pyWaDc+EaDbCBo2
UvalI+HbdEbTOL7ejkCcInyjBFq2MJg0XifLaIcxb/LdKScbd7Y0crukn7TNnSxO
HIfKcw4ommkZrqp7zEC/HMhoALNlNLWphz1OGOq1Rp21hbkpJrZR3vh9VvavTfH5
59qjtYe1icwMnTxKC7Z+ieDTMFPKYKaBiOBmzPS8kBrRR9Xhk0C1suDCkxILAUji
Az/rBiWXJ9AJ0dhm0D3/tewJpmW5Yhdj3hwb4QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEL2gDSHj5Rwz/WDDWequPIj6pqrMB8GA1UdIwQYMBaAFCzT036K6hCoEkvR
ouJMCszD4aPTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTE1OWZk
YzQyNzZmYTNiZmM2NGRmNzE3ZTRjYTBhNzUyNDljZjE4OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWNkMDA1NjctNDEwNi00MGNhLWJiYzEtMWIwNjli
NjBhNzhlLzE2ZTRlYmY3NTJlNjljYjg0MjY2ODdiODA3NmI0NWYxM2NiN2I3MWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xY2QwMDU2Ny00MTA2LTQwY2EtYmJjMS0xYjA2
OWI2MGE3OGUvMTE1OWZkYzQyNzZmYTNiZmM2NGRmNzE3ZTRjYTBhNzUyNDljZjE4
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5HVTANBgkqhkiG9w0BAQsFAAOCAQEAjINSXVGEjUEgpdJ/
YrqxPC6dwifBwo4gncFzDSxpKOkJ2WFcjd0DE9sZQ1jEiBE9iWt9aLiafjgonPjs
Cbn1o560qEd9twNXvB8F+suiVOXnVJvwGqGFjzVa9FVAtowlUmNGbLeaByr2W9dp
l7h+pq6mcrWJXhAoot/EIP4AyRzSilpPHYgQ2NEIigpCDVNcDN7dGoNePbrEoDi5
l/E78GvHYcN2hsTjaGRPM/fxwHDR+lBZNimM2dVxInlhrpS/iWLqZ/E8OqMI9ogl
uQyF5QOQIqmvMlJfIoYurKqH+2p7JqwlCmVb0uSARlHOmOYSbFT2PDUQNNy2y/kC
d8h7ng==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org