Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/68fa344bfed360f49c348f0c8aaafb7bd2007a77.roa
File: 68fa344bfed360f49c348f0c8aaafb7bd2007a77.roa (raw, json)
Hash identifier: viJZiSZS1SlSy46M0yn6HZYVyHPXZhwjbcVXqyVIIzs=
Subject key identifier: 91:0F:26:64:04:9E:1A:34:ED:32:D9:2A:E3:C8:F4:8A:71:CC:7A:AB
Certificate issuer: /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial: 2798D2
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/68fa344bfed360f49c348f0c8aaafb7bd2007a77.roa
Signing time: Tue 07 Nov 2023 16:00:59 +0000
ROA not before: Tue 07 Nov 2023 16:00:38 +0000
ROA not after: Tue 07 Nov 2028 16:00:38 +0000
asID: 271914
IP address blocks: 190.110.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2595026 (0x2798d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Validity
Not Before: Nov 7 16:00:38 2023 GMT
Not After : Nov 7 16:00:38 2028 GMT
Subject: CN=68fa344bfed360f49c348f0c8aaafb7bd2007a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c6:63:c8:a6:ab:bb:6d:06:b9:50:08:a7:5c:
ad:99:4d:27:72:de:28:c2:a0:a4:ea:a6:59:4b:20:
e4:c4:f9:3d:fe:b1:3a:5e:58:45:45:7e:23:af:f5:
33:df:12:39:43:fe:c4:53:cd:36:01:b6:f2:0b:ac:
33:13:a2:8d:e6:45:ea:b2:ec:a3:4e:c9:f4:f1:54:
97:f3:0f:d7:b5:ce:c7:68:6a:82:2b:b9:fb:51:02:
3f:10:89:cf:86:ee:20:17:c1:91:6b:7e:a7:dc:1b:
e0:53:14:ac:49:1e:80:6c:42:85:31:fe:28:9a:26:
0c:a6:46:95:e4:bc:a5:9e:a1:49:90:f4:93:17:b2:
b1:20:a7:25:6f:7b:a8:5c:65:2f:ff:35:b6:45:44:
48:f1:32:1a:4f:ec:0a:4e:8d:92:5c:80:ab:c4:d3:
a0:88:29:dd:c0:fc:24:69:d2:41:1c:3d:5d:8a:c6:
56:0c:e3:b8:ba:62:21:9e:7b:69:d7:85:85:cc:d5:
72:75:ea:63:cc:74:99:6a:3b:3d:c7:39:d7:d2:78:
53:75:9e:99:51:40:ff:e9:58:28:54:84:5b:c0:c1:
9d:cb:37:e0:ae:8d:45:d8:2d:e3:b5:f5:a9:3f:da:
79:8c:76:10:16:be:b6:4d:40:a9:28:89:63:2c:80:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0F:26:64:04:9E:1A:34:ED:32:D9:2A:E3:C8:F4:8A:71:CC:7A:AB
X509v3 Authority Key Identifier:
keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/68fa344bfed360f49c348f0c8aaafb7bd2007a77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.238.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ed:6c:02:f5:5f:6f:78:1b:62:31:b9:98:a6:71:a7:ef:5a:
29:09:c8:bd:68:ac:0e:aa:4d:e6:7d:9c:45:06:71:02:7f:d8:
d5:e7:c7:f5:fc:7e:2a:7e:79:6b:03:ba:e8:6d:f4:99:06:87:
7c:8b:a6:e8:e6:96:52:90:83:10:89:d7:df:23:2b:51:56:31:
55:c9:9d:74:a3:19:23:b4:4d:c3:c5:a6:c3:f0:a8:06:8e:e3:
0e:d2:c5:a9:04:8c:89:5a:b2:02:62:af:fb:b3:da:c6:e3:45:
82:a2:76:ab:e2:59:a9:bb:7a:3e:6e:b9:0d:e4:8f:54:fc:49:
71:44:d2:52:f4:a8:c9:72:f6:bf:75:7a:a1:b8:a8:e9:05:1d:
1d:d1:47:5c:76:24:7a:c9:e8:c3:a9:f8:84:1f:1c:71:51:21:
eb:a8:eb:39:5c:9e:e8:96:39:8a:9d:7a:4e:cb:2e:49:93:9e:
b9:a5:f1:f1:b6:0a:b0:7d:ad:42:3c:c1:6f:52:46:5f:72:bf:
83:e7:9b:27:24:63:be:39:b9:28:99:82:62:2c:6d:08:a8:84:
67:0a:a4:60:ff:c1:93:32:ea:09:5c:19:31:cf:a7:17:23:5a:
5c:eb:a3:4d:85:dd:a5:7e:0f:23:e7:5c:7d:b7:a7:3a:82:01:
78:56:37:68
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ5jSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI0
ZTRlMjI1ZThiMTRlMmUxYzc0MjBmYjRjZDJmYWQxYTAwOWUyY2UwHhcNMjMxMTA3
MTYwMDM4WhcNMjgxMTA3MTYwMDM4WjAzMTEwLwYDVQQDEyg2OGZhMzQ0YmZlZDM2
MGY0OWMzNDhmMGM4YWFhZmI3YmQyMDA3YTc3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA18ZjyKaru20GuVAIp1ytmU0nct4owqCk6qZZSyDkxPk9/rE6
XlhFRX4jr/Uz3xI5Q/7EU802AbbyC6wzE6KN5kXqsuyjTsn08VSX8w/Xtc7HaGqC
K7n7UQI/EInPhu4gF8GRa36n3BvgUxSsSR6AbEKFMf4omiYMpkaV5LylnqFJkPST
F7KxIKclb3uoXGUv/zW2RURI8TIaT+wKTo2SXICrxNOgiCndwPwkadJBHD1disZW
DOO4umIhnntp14WFzNVydepjzHSZajs9xznX0nhTdZ6ZUUD/6VgoVIRbwMGdyzfg
ro1F2C3jtfWpP9p5jHYQFr62TUCpKIljLIAMAwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJEPJmQEnho07TLZKuPI9IpxzHqrMB8GA1UdIwQYMBaAFIErJnL9fh/G3Qel
w/csCsDI66wdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjRlNGUy
MjVlOGIxNGUyZTFjNzQyMGZiNGNkMmZhZDFhMDA5ZTJjZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzY4ZmEzNDRiZmVkMzYwZjQ5YzM0OGYwYzhhYWFmYjdiZDIwMDdhNzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvYjRlNGUyMjVlOGIxNGUyZTFjNzQyMGZiNGNkMmZhZDFhMDA5ZTJj
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5u7jANBgkqhkiG9w0BAQsFAAOCAQEAeO1sAvVfb3gbYjG5
mKZxp+9aKQnIvWisDqpN5n2cRQZxAn/Y1efH9fx+Kn55awO66G30mQaHfIum6OaW
UpCDEInX3yMrUVYxVcmddKMZI7RNw8Wmw/CoBo7jDtLFqQSMiVqyAmKv+7PaxuNF
gqJ2q+JZqbt6Pm65DeSPVPxJcUTSUvSoyXL2v3V6obio6QUdHdFHXHYkesnow6n4
hB8ccVEh66jrOVye6JY5ip16TssuSZOeuaXx8bYKsH2tQjzBb1JGX3K/g+ebJyRj
vjm5KJmCYixtCKiEZwqkYP/BkzLqCVwZMc+nFyNaXOujTYXdpX4PI+dcfbenOoIB
eFY3aA==
-----END CERTIFICATE-----
Generated at Wed Nov 8 15:28:32 2023 by rpki-client on console-fra.rpki-client.org