Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8856ac700a58936ee5da95bb22b9541a37ccf6fa.roa
File: 8856ac700a58936ee5da95bb22b9541a37ccf6fa.roa (raw, json)
Hash identifier: aygRI0MP4g+xcsmGakKsrtiNjW2pIKdJyxDS/YhO0Ws=
Subject key identifier: 45:8C:62:A7:30:62:F5:0A:9E:8C:75:B4:FB:FA:2C:63:F7:16:54:0C
Certificate issuer: /CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Certificate serial: 29D7F0
Authority key identifier: 43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8856ac700a58936ee5da95bb22b9541a37ccf6fa.roa
Signing time: Tue 30 Jan 2024 15:00:52 +0000
ROA not before: Tue 30 Jan 2024 15:00:49 +0000
ROA not after: Tue 30 Jan 2029 15:00:49 +0000
asID: 52312
IP address blocks: 190.110.240.0/21 maxlen: 24
190.110.236.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2742256 (0x29d7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Validity
Not Before: Jan 30 15:00:49 2024 GMT
Not After : Jan 30 15:00:49 2029 GMT
Subject: CN=8856ac700a58936ee5da95bb22b9541a37ccf6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:de:3a:a9:c3:ea:56:3b:7f:51:ef:a5:43:a0:
4d:46:8b:2f:62:bd:a6:62:3d:0b:02:de:87:48:bf:
c7:5b:b7:fa:f5:70:ad:95:e1:64:c2:68:74:53:e6:
05:dc:e5:24:2a:73:43:a1:7b:c8:77:ed:36:35:ec:
3f:83:56:be:7e:a4:02:6e:9b:bf:48:a5:36:bf:61:
2c:40:ea:47:c3:e6:de:a3:a5:c7:19:0e:ab:78:da:
a3:5b:97:f0:98:fd:d8:5e:4a:d5:8f:41:8f:48:40:
26:cc:10:97:e9:dc:c6:0f:79:d5:01:e7:55:4a:e6:
8d:b1:fe:f7:52:64:c3:b2:36:76:35:88:a7:40:cd:
d8:01:57:08:55:8c:c5:a7:20:9c:b5:de:3c:58:57:
ca:f5:f5:96:f7:f6:27:40:b7:e1:df:bb:13:92:f7:
8f:5b:3c:6e:de:da:4c:55:ce:c7:3a:44:96:d0:42:
8c:6d:32:83:63:5d:90:79:39:25:4e:b7:ba:45:ca:
6e:14:fe:5f:ff:7e:87:18:7f:a5:62:49:0a:31:49:
2f:df:97:99:9d:69:36:e7:61:87:0c:85:42:91:76:
78:59:7c:05:2a:d1:83:83:4b:39:8d:20:b3:d3:51:
16:8d:6d:0b:bf:5e:6f:1e:10:29:80:08:d7:c9:8e:
62:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8C:62:A7:30:62:F5:0A:9E:8C:75:B4:FB:FA:2C:63:F7:16:54:0C
X509v3 Authority Key Identifier:
keyid:43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8856ac700a58936ee5da95bb22b9541a37ccf6fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.236.0/23
190.110.240.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:f2:67:ab:3e:bb:7b:f6:71:06:24:a6:c8:04:83:2b:fe:31:
c0:c8:86:12:7e:bd:ea:ee:68:3f:04:c9:13:d2:25:ff:6f:07:
f5:37:f8:48:3a:b0:d0:79:0e:b9:df:62:b6:ce:f7:d3:21:22:
8c:14:cf:49:ed:e0:75:16:c4:ab:92:aa:3b:fa:14:41:32:a4:
5b:87:c1:c6:de:76:c7:86:ed:9b:79:a2:52:20:28:e1:5c:28:
76:06:22:2c:e7:98:26:7f:c5:ce:42:78:96:2a:b5:d0:12:01:
c4:76:e0:9e:f5:32:53:5c:93:23:b6:92:81:d3:d8:16:02:15:
42:19:7d:9f:75:53:11:17:b2:a5:6d:f6:32:3b:34:19:ee:28:
1f:73:5e:17:88:95:63:0b:8c:2d:6e:da:a8:1d:c7:25:21:e9:
9d:e4:49:c9:5b:37:46:dd:7a:87:4f:a2:04:2c:7f:cb:8a:17:
f7:df:3c:5a:af:ed:e3:ed:f4:97:0f:1c:1d:75:98:84:64:75:
dc:17:b4:db:8d:db:48:ab:55:8a:43:26:0b:92:df:31:dc:c0:
63:7b:94:6e:f2:26:be:2e:7e:85:3a:8a:fb:28:6b:80:ae:e7:
af:6f:8e:06:e0:a3:39:a6:a0:2a:55:7d:bd:3b:0a:a1:c1:a5:
0a:3f:d8:e5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDKdfwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUy
OWQyOGE1NzY5YWYxZTE5ODdhYWRhNTJkNGQ5YWMzYmVjMzliNjgwHhcNMjQwMTMw
MTUwMDQ5WhcNMjkwMTMwMTUwMDQ5WjAzMTEwLwYDVQQDEyg4ODU2YWM3MDBhNTg5
MzZlZTVkYTk1YmIyMmI5NTQxYTM3Y2NmNmZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhN46qcPqVjt/Ue+lQ6BNRosvYr2mYj0LAt6HSL/HW7f69XCt
leFkwmh0U+YF3OUkKnNDoXvId+02New/g1a+fqQCbpu/SKU2v2EsQOpHw+beo6XH
GQ6reNqjW5fwmP3YXkrVj0GPSEAmzBCX6dzGD3nVAedVSuaNsf73UmTDsjZ2NYin
QM3YAVcIVYzFpyCctd48WFfK9fWW9/YnQLfh37sTkvePWzxu3tpMVc7HOkSW0EKM
bTKDY12QeTklTre6RcpuFP5f/36HGH+lYkkKMUkv35eZnWk252GHDIVCkXZ4WXwF
KtGDg0s5jSCz01EWjW0Lv15vHhApgAjXyY5iRQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFEWMYqcwYvUKnox1tPv6LGP3FlQMMB8GA1UdIwQYMBaAFEN2esi5xEbkE92i
tcmFOhdopOHFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTI5ZDI4
YTU3NjlhZjFlMTk4N2FhZGE1MmQ0ZDlhYzNiZWMzOWI2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzg4NTZhYzcwMGE1ODkzNmVlNWRhOTViYjIyYjk1NDFhMzdjY2Y2ZmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvNTI5ZDI4YTU3NjlhZjFlMTk4N2FhZGE1MmQ0ZDlhYzNiZWMzOWI2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAb5u7AMEA75u8DANBgkqhkiG9w0BAQsFAAOCAQEApvJnqz67
e/ZxBiSmyASDK/4xwMiGEn696u5oPwTJE9Il/28H9Tf4SDqw0HkOud9its730yEi
jBTPSe3gdRbEq5KqO/oUQTKkW4fBxt52x4btm3miUiAo4VwodgYiLOeYJn/FzkJ4
liq10BIBxHbgnvUyU1yTI7aSgdPYFgIVQhl9n3VTEReypW32Mjs0Ge4oH3NeF4iV
YwuMLW7aqB3HJSHpneRJyVs3Rt16h0+iBCx/y4oX9988Wq/t4+30lw8cHXWYhGR1
3Be0243bSKtVikMmC5LfMdzAY3uUbvImvi5+hTqK+yhrgK7nr2+OBuCjOaagKlV9
vTsKocGlCj/Y5Q==
-----END CERTIFICATE-----
Generated at Thu Feb 15 23:53:32 2024 by rpki-client on console-fra.rpki-client.org