Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21246b6e-6d27-49c2-83fc-699554556ccc/876ad4c9c614d129345c559cec56d84d54898c73.roa
File: 876ad4c9c614d129345c559cec56d84d54898c73.roa (raw, json)
Hash identifier: ZhUTJpcMvQFelykA1broyVlVI0Lb+VUxWWLrd+G5ym4=
Subject key identifier: F3:DE:9A:7E:68:1D:B0:05:5F:6E:D9:AA:41:16:31:DD:17:51:B0:67
Certificate issuer: /CN=08c1026e4a85490be0a491c7fc23850086ed1cb0
Certificate serial: 0D7FB5
Authority key identifier: 89:7A:AF:2E:2D:D9:5A:42:1E:07:72:7D:5D:B9:FD:B8:05:FB:9E:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08c1026e4a85490be0a491c7fc23850086ed1cb0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/21246b6e-6d27-49c2-83fc-699554556ccc/876ad4c9c614d129345c559cec56d84d54898c73.roa
Signing time: Wed 24 Mar 2021 14:39:10 +0000
ROA not before: Wed 24 Mar 2021 14:39:09 +0000
ROA not after: Tue 24 Mar 2026 14:39:09 +0000
asID: 28025
IP address blocks: 190.120.64.0/20 maxlen: 24
190.120.80.0/20 maxlen: 24
190.123.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884661 (0xd7fb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08c1026e4a85490be0a491c7fc23850086ed1cb0
Validity
Not Before: Mar 24 14:39:09 2021 GMT
Not After : Mar 24 14:39:09 2026 GMT
Subject: CN=876ad4c9c614d129345c559cec56d84d54898c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1d:be:d5:1f:c2:dd:a8:a0:b5:bf:84:c7:8e:
59:12:1c:9c:f4:7b:69:d7:55:09:12:30:f9:c5:62:
3e:83:50:68:60:6a:b1:36:59:e3:46:38:7c:ad:32:
b9:ab:25:0c:a4:01:31:75:fa:86:47:80:93:ea:1f:
f6:3f:1a:90:53:fe:2e:80:c1:14:e9:e7:aa:38:19:
08:94:a4:5e:bf:75:92:d8:02:21:2f:0d:92:25:02:
cf:72:58:c6:02:08:7e:ba:00:f2:ec:18:74:51:3e:
74:85:be:ad:fe:76:8a:52:4e:20:f3:ce:89:ff:28:
d0:38:ee:26:86:41:d1:cc:e5:8b:a8:3a:0a:44:1b:
32:2a:57:23:cc:be:41:9f:c6:05:87:25:49:b8:44:
24:89:f8:21:d6:dd:e7:81:b8:97:4c:43:0b:2f:f8:
74:bf:67:d4:b3:03:39:ea:8a:5a:5f:b2:5c:e2:be:
3c:09:25:2f:de:a3:02:b7:91:5c:1d:c5:38:ed:4e:
1a:1b:32:97:8a:d1:e0:d3:c7:0a:be:86:87:ab:83:
99:dc:aa:40:4f:fa:94:e3:34:48:18:c6:5c:ab:b4:
25:63:e0:e2:b7:22:f3:51:a9:bb:de:01:09:3e:92:
89:14:1b:05:36:5b:a6:68:b2:09:e4:a8:84:d6:a2:
6a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DE:9A:7E:68:1D:B0:05:5F:6E:D9:AA:41:16:31:DD:17:51:B0:67
X509v3 Authority Key Identifier:
keyid:89:7A:AF:2E:2D:D9:5A:42:1E:07:72:7D:5D:B9:FD:B8:05:FB:9E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08c1026e4a85490be0a491c7fc23850086ed1cb0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21246b6e-6d27-49c2-83fc-699554556ccc/876ad4c9c614d129345c559cec56d84d54898c73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/21246b6e-6d27-49c2-83fc-699554556ccc/08c1026e4a85490be0a491c7fc23850086ed1cb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.120.64.0/19
190.123.48.0/20
Signature Algorithm: sha256WithRSAEncryption
83:36:d3:5f:f8:69:9c:1f:46:6d:2e:1c:cd:30:50:2b:ff:7b:
79:22:31:fe:31:6e:d7:50:18:b1:2d:80:fc:99:8e:f2:19:44:
df:96:44:3d:6e:6d:b7:7d:2e:f8:21:05:5b:ec:cc:11:54:bd:
2b:da:7a:b5:0e:cc:47:1e:1a:58:fb:ec:fd:61:1c:44:68:bf:
60:ce:32:9e:7a:33:1a:c3:1a:8a:3e:ef:93:6d:e3:36:5f:16:
7c:ff:6e:a6:52:20:dc:aa:ff:5d:7e:9a:b8:bd:42:3d:6b:a8:
3d:28:34:7f:79:83:bd:59:1a:42:2f:b6:2d:c0:b9:8c:e0:64:
ff:3e:5b:54:d4:ba:60:1e:52:0e:4a:f0:ca:f4:3e:d9:e3:66:
be:74:bb:c0:e3:f1:a1:5d:b8:e3:34:9c:fe:c5:5a:2e:08:54:
97:69:fa:eb:8e:f4:9a:65:14:3f:67:f0:12:36:03:67:6e:db:
67:28:49:b4:03:48:0f:da:91:1f:3c:6a:bf:02:e4:82:8b:ec:
f2:7f:28:7d:de:f3:d7:0a:bd:53:bf:a5:47:c7:25:5f:d8:78:
3f:53:11:84:1f:b2:be:a6:07:52:31:38:71:b9:fd:0d:e2:21:
02:0c:68:db:94:96:32:ff:98:59:c1:10:54:39:a9:48:95:51:
6d:5f:6f:d6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDDX+1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA4
YzEwMjZlNGE4NTQ5MGJlMGE0OTFjN2ZjMjM4NTAwODZlZDFjYjAwHhcNMjEwMzI0
MTQzOTA5WhcNMjYwMzI0MTQzOTA5WjAzMTEwLwYDVQQDEyg4NzZhZDRjOWM2MTRk
MTI5MzQ1YzU1OWNlYzU2ZDg0ZDU0ODk4YzczMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiB2+1R/C3aigtb+Ex45ZEhyc9Htp11UJEjD5xWI+g1BoYGqx
NlnjRjh8rTK5qyUMpAExdfqGR4CT6h/2PxqQU/4ugMEU6eeqOBkIlKRev3WS2AIh
Lw2SJQLPcljGAgh+ugDy7Bh0UT50hb6t/naKUk4g886J/yjQOO4mhkHRzOWLqDoK
RBsyKlcjzL5Bn8YFhyVJuEQkifgh1t3ngbiXTEMLL/h0v2fUswM56opaX7Jc4r48
CSUv3qMCt5FcHcU47U4aGzKXitHg08cKvoaHq4OZ3KpAT/qU4zRIGMZcq7QlY+Di
tyLzUam73gEJPpKJFBsFNlumaLIJ5KiE1qJqgQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFPPemn5oHbAFX27ZqkEWMd0XUbBnMB8GA1UdIwQYMBaAFIl6ry4t2VpCHgdy
fV25/bgF+57bMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDhjMTAy
NmU0YTg1NDkwYmUwYTQ5MWM3ZmMyMzg1MDA4NmVkMWNiMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjEyNDZiNmUtNmQyNy00OWMyLTgzZmMtNjk5NTU0
NTU2Y2NjLzg3NmFkNGM5YzYxNGQxMjkzNDVjNTU5Y2VjNTZkODRkNTQ4OThjNzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMTI0NmI2ZS02ZDI3LTQ5YzItODNmYy02OTk1
NTQ1NTZjY2MvMDhjMTAyNmU0YTg1NDkwYmUwYTQ5MWM3ZmMyMzg1MDA4NmVkMWNi
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEBb54QAMEBL57MDANBgkqhkiG9w0BAQsFAAOCAQEAgzbTX/hp
nB9GbS4czTBQK/97eSIx/jFu11AYsS2A/JmO8hlE35ZEPW5tt30u+CEFW+zMEVS9
K9p6tQ7MRx4aWPvs/WEcRGi/YM4ynnozGsMaij7vk23jNl8WfP9uplIg3Kr/XX6a
uL1CPWuoPSg0f3mDvVkaQi+2LcC5jOBk/z5bVNS6YB5SDkrwyvQ+2eNmvnS7wOPx
oV244zSc/sVaLghUl2n66470mmUUP2fwEjYDZ27bZyhJtANID9qRHzxqvwLkgovs
8n8ofd7z1wq9U7+lR8clX9h4P1MRhB+yvqYHUjE4cbn9DeIhAgxo25SWMv+YWcEQ
VDmpSJVRbV9v1g==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org