Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/f82b37a3f61493ddc891bf6b6e34f0c5da64d171.roa
File: f82b37a3f61493ddc891bf6b6e34f0c5da64d171.roa (raw, json)
Hash identifier: v+iDORDS4PD7hhuk90UiGSTEKlARifrBfv4VNt4TC98=
Subject key identifier: 70:59:95:61:A9:05:15:37:DA:0C:56:3A:9F:2E:51:DF:4A:23:69:3E
Certificate issuer: /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial: 2384B9
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/f82b37a3f61493ddc891bf6b6e34f0c5da64d171.roa
Signing time: Sat 08 Jul 2023 11:37:13 +0000
ROA not before: Fri 07 Jul 2023 11:37:13 +0000
ROA not after: Tue 08 Jul 2025 11:37:13 +0000
asID: 61461
IP address blocks: 190.124.29.0/24 maxlen: 24
190.124.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2327737 (0x2384b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Validity
Not Before: Jul 7 11:37:13 2023 GMT
Not After : Jul 8 11:37:13 2025 GMT
Subject: CN=f82b37a3f61493ddc891bf6b6e34f0c5da64d171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cc:ea:1a:4b:95:4f:fc:fd:fa:86:f6:06:d2:
02:2f:5a:7f:8e:5e:41:0b:f6:1a:74:0b:bd:c1:78:
75:fc:32:c9:34:d2:1e:ac:2e:32:11:82:ac:be:8b:
18:ea:81:2d:31:33:ee:72:f6:e5:46:f3:f1:ef:04:
67:5f:1f:94:0d:22:9f:e7:43:e1:1f:34:b1:c0:e5:
8b:49:51:8d:d6:c9:3d:0d:56:c7:c7:c3:44:39:c2:
88:fc:2a:03:32:62:9b:d0:e0:83:f0:00:bb:3a:0b:
2d:78:10:a0:e0:ae:a3:9b:9c:00:cb:09:77:67:1d:
75:1b:20:10:a2:9f:90:34:70:e1:25:e1:a0:2e:4a:
72:24:9f:bb:80:d0:79:ec:51:81:32:0d:c8:b3:f7:
70:ba:cd:63:a3:e3:3b:9d:55:d3:37:f6:bd:1e:97:
a3:ae:6c:04:05:3e:4f:e0:d5:43:ba:87:cf:17:99:
63:22:6d:42:51:86:4e:d7:d5:71:66:e5:e5:78:22:
41:6a:26:65:7f:a2:fd:d6:49:96:0e:a0:88:2f:ff:
fe:c7:e5:82:98:71:cf:4a:76:d5:e2:8f:a4:ed:3f:
e8:68:f5:71:dc:aa:c0:50:96:e8:ff:f0:28:7e:98:
bc:59:5e:85:7e:6c:90:09:7c:cd:82:4e:39:cc:80:
5b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:59:95:61:A9:05:15:37:DA:0C:56:3A:9F:2E:51:DF:4A:23:69:3E
X509v3 Authority Key Identifier:
keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/f82b37a3f61493ddc891bf6b6e34f0c5da64d171.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.124.29.0/24
190.124.31.0/24
Signature Algorithm: sha256WithRSAEncryption
40:41:28:a0:8f:33:ba:ef:a5:0f:16:67:78:df:c0:85:3c:1d:
5c:52:14:f3:ee:8b:f3:28:05:c3:92:25:7e:11:98:32:df:d5:
b2:ed:4f:77:e8:52:ec:94:27:df:24:d1:79:2e:1a:d5:79:5e:
95:83:e8:e4:50:db:33:1e:1e:e4:91:ac:67:cb:93:8c:a2:c8:
0f:2b:bd:8c:9c:4a:8c:c6:02:2a:c6:40:b0:d5:ac:f2:c6:eb:
5b:96:e4:c1:cc:7a:f2:54:7d:8b:c1:2b:bc:46:c3:d3:4c:c0:
49:81:1e:cf:d1:ab:65:2b:fa:6b:6c:08:5a:ff:4d:44:37:bc:
f2:a2:e7:46:56:cc:d7:c8:32:a5:75:c1:bf:b0:ff:f1:a9:f4:
47:fc:d1:6a:1e:08:d6:88:c7:fd:12:ab:6a:37:2d:fe:75:44:
43:6a:3c:3b:a8:98:85:6e:89:15:ca:cb:e0:18:35:f3:99:68:
43:62:e1:07:87:ec:99:e4:23:90:98:df:7c:6f:b3:43:33:ed:
29:b7:19:ac:29:d5:74:a2:24:8d:8b:21:1f:fe:65:fe:bd:04:
65:74:df:5e:68:06:93:bb:02:e0:7c:77:97:f9:9f:53:38:1b:
89:2a:d3:08:e1:8a:9e:30:8b:7b:eb:bc:7c:73:43:c1:1e:b4:
73:b4:f0:c2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDI4S5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
MzJlZjNhODllMzgyZWE0Y2EwZTliMGZjNjY4MGFjNGRkODljNjgwHhcNMjMwNzA3
MTEzNzEzWhcNMjUwNzA4MTEzNzEzWjAzMTEwLwYDVQQDEyhmODJiMzdhM2Y2MTQ5
M2RkYzg5MWJmNmI2ZTM0ZjBjNWRhNjRkMTcxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl8zqGkuVT/z9+ob2BtICL1p/jl5BC/YadAu9wXh1/DLJNNIe
rC4yEYKsvosY6oEtMTPucvblRvPx7wRnXx+UDSKf50PhHzSxwOWLSVGN1sk9DVbH
x8NEOcKI/CoDMmKb0OCD8AC7OgsteBCg4K6jm5wAywl3Zx11GyAQop+QNHDhJeGg
LkpyJJ+7gNB57FGBMg3Is/dwus1jo+M7nVXTN/a9HpejrmwEBT5P4NVDuofPF5lj
Im1CUYZO19VxZuXleCJBaiZlf6L91kmWDqCIL//+x+WCmHHPSnbV4o+k7T/oaPVx
3KrAUJbo//Aofpi8WV6FfmyQCXzNgk45zIBbmwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFHBZlWGpBRU32gxWOp8uUd9KI2k+MB8GA1UdIwQYMBaAFMGsGY88wAcWyo6U
h+hJDQs/q15VMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWIzMmVm
M2E4OWUzODJlYTRjYTBlOWIwZmM2NjgwYWM0ZGQ4OWM2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWUzMTM4YTUtYmE4OC00MjQxLWFkZWItMzE2YTNj
YTUyNGU1L2Y4MmIzN2EzZjYxNDkzZGRjODkxYmY2YjZlMzRmMGM1ZGE2NGQxNzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZTMxMzhhNS1iYTg4LTQyNDEtYWRlYi0zMTZh
M2NhNTI0ZTUvYWIzMmVmM2E4OWUzODJlYTRjYTBlOWIwZmM2NjgwYWM0ZGQ4OWM2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAL58HQMEAL58HzANBgkqhkiG9w0BAQsFAAOCAQEAQEEooI8z
uu+lDxZneN/AhTwdXFIU8+6L8ygFw5IlfhGYMt/Vsu1Pd+hS7JQn3yTReS4a1Xle
lYPo5FDbMx4e5JGsZ8uTjKLIDyu9jJxKjMYCKsZAsNWs8sbrW5bkwcx68lR9i8Er
vEbD00zASYEez9GrZSv6a2wIWv9NRDe88qLnRlbM18gypXXBv7D/8an0R/zRah4I
1ojH/RKrajct/nVEQ2o8O6iYhW6JFcrL4Bg185loQ2LhB4fsmeQjkJjffG+zQzPt
KbcZrCnVdKIkjYshH/5l/r0EZXTfXmgGk7sC4Hx3l/mfUzgbiSrTCOGKnjCLe+u8
fHNDwR60c7Twwg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org