Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/ba478a178154964e5cade6a7e871434c7e83e7ca.roa
File: ba478a178154964e5cade6a7e871434c7e83e7ca.roa (raw, json)
Hash identifier: i8k/11kEqgsxYA2s7loczB07SQd+W8kAuJZ3xUg4RaA=
Subject key identifier: 10:E1:34:AE:AC:6E:CB:14:AB:85:B6:50:D7:0E:34:ED:CF:AE:CC:CD
Certificate issuer: /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial: 27616C
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/ba478a178154964e5cade6a7e871434c7e83e7ca.roa
Signing time: Tue 07 Nov 2023 16:00:41 +0000
ROA not before: Tue 07 Nov 2023 16:00:38 +0000
ROA not after: Tue 07 Nov 2028 16:00:38 +0000
asID: 11514
IP address blocks: 190.110.253.0/24 maxlen: 24
190.114.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2580844 (0x27616c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Validity
Not Before: Nov 7 16:00:38 2023 GMT
Not After : Nov 7 16:00:38 2028 GMT
Subject: CN=ba478a178154964e5cade6a7e871434c7e83e7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:1f:4e:ed:85:92:0c:f6:fe:43:90:dc:d9:
c9:58:ec:4a:42:d1:69:e5:97:98:3b:4c:58:a2:0f:
b9:86:77:29:46:ee:2b:a7:2c:aa:48:c3:4a:01:9e:
87:bb:ca:14:0e:c8:8b:c6:a8:82:4f:93:fc:bc:b1:
c5:94:3d:f4:93:aa:79:51:0e:43:39:b0:2c:2a:08:
74:0f:d1:e2:61:d5:8e:0d:8d:5a:ee:ee:76:68:1b:
b6:3a:48:54:3d:ad:3b:32:5e:0c:c1:89:21:48:35:
5b:87:e4:e5:30:27:2e:34:7c:3b:86:84:a6:98:ee:
7c:77:5e:4a:26:e5:01:07:f3:bd:43:61:b6:23:62:
e0:cb:0f:ae:32:72:8c:e4:53:a5:66:63:6b:14:ef:
3a:38:d7:da:49:9e:c8:87:73:4c:ee:f1:75:9a:6e:
94:62:7b:cc:a7:3d:8e:cb:a5:a1:8f:e5:d5:1f:d6:
96:ba:fd:c4:c4:5a:cb:62:11:54:56:bf:3a:6c:ed:
92:7a:01:20:f5:d2:cd:d4:4a:2c:c6:67:4b:f1:c0:
78:dd:0f:5c:5e:3f:0f:08:2a:95:1d:be:85:98:9f:
6c:f2:37:bc:9b:7e:d1:7a:ca:20:12:ad:ea:10:34:
e7:9e:b2:61:3b:7d:ae:03:6d:20:9d:0b:99:e5:4b:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E1:34:AE:AC:6E:CB:14:AB:85:B6:50:D7:0E:34:ED:CF:AE:CC:CD
X509v3 Authority Key Identifier:
keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/ba478a178154964e5cade6a7e871434c7e83e7ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.253.0/24
190.114.103.0/24
Signature Algorithm: sha256WithRSAEncryption
96:5c:28:bb:cd:38:32:ba:e6:3c:bd:15:e6:34:63:a2:1e:c7:
e9:f0:15:95:72:10:a6:2a:30:02:6e:a2:95:3a:68:53:c7:44:
fc:41:be:e5:b0:a2:63:5e:2e:78:a6:64:5b:8b:24:44:72:7b:
ec:3c:d6:61:2f:43:3b:c6:7b:86:70:2c:31:37:ce:97:2e:fe:
78:66:c0:ac:c8:0e:f5:0b:62:7e:d5:ba:72:a4:c5:ca:e4:ea:
f0:cb:88:b1:fa:06:8c:f8:d6:4f:66:8d:5a:2d:e4:ca:06:b6:
56:fa:80:e7:5d:89:25:87:e5:20:f4:60:9b:5d:0a:a1:76:3b:
73:5b:81:75:e2:0f:72:be:46:ea:7c:88:5d:9b:5e:ae:39:d0:
67:a3:20:4b:b4:0e:5f:a5:63:a0:96:67:a7:31:db:a7:b5:87:
e7:4d:fe:03:aa:f4:56:87:0d:90:eb:f2:74:33:18:3c:c5:40:
9a:16:85:43:e0:42:54:5a:d7:a4:e3:52:0c:56:28:8c:96:29:
43:09:6d:01:be:8e:e5:c8:d3:82:f7:4a:52:b2:54:3e:55:40:
5e:7c:36:c9:5d:b6:be:4f:47:1c:41:b9:95:fc:3d:4d:f1:e3:
4b:0a:4c:cf:2e:f0:33:c8:9b:48:6c:36:e7:f6:f7:e1:8d:48:
71:1d:99:02
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDJ2FsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI0
ZTRlMjI1ZThiMTRlMmUxYzc0MjBmYjRjZDJmYWQxYTAwOWUyY2UwHhcNMjMxMTA3
MTYwMDM4WhcNMjgxMTA3MTYwMDM4WjAzMTEwLwYDVQQDEyhiYTQ3OGExNzgxNTQ5
NjRlNWNhZGU2YTdlODcxNDM0YzdlODNlN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjY0fTu2Fkgz2/kOQ3NnJWOxKQtFp5ZeYO0xYog+5hncpRu4r
pyyqSMNKAZ6Hu8oUDsiLxqiCT5P8vLHFlD30k6p5UQ5DObAsKgh0D9HiYdWODY1a
7u52aBu2OkhUPa07Ml4MwYkhSDVbh+TlMCcuNHw7hoSmmO58d15KJuUBB/O9Q2G2
I2Lgyw+uMnKM5FOlZmNrFO86ONfaSZ7Ih3NM7vF1mm6UYnvMpz2Oy6Whj+XVH9aW
uv3ExFrLYhFUVr86bO2SegEg9dLN1EosxmdL8cB43Q9cXj8PCCqVHb6FmJ9s8je8
m37ResogEq3qEDTnnrJhO32uA20gnQuZ5Ut55wIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFBDhNK6sbssUq4W2UNcONO3PrszNMB8GA1UdIwQYMBaAFIErJnL9fh/G3Qel
w/csCsDI66wdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjRlNGUy
MjVlOGIxNGUyZTFjNzQyMGZiNGNkMmZhZDFhMDA5ZTJjZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlL2JhNDc4YTE3ODE1NDk2NGU1Y2FkZTZhN2U4NzE0MzRjN2U4M2U3Y2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvYjRlNGUyMjVlOGIxNGUyZTFjNzQyMGZiNGNkMmZhZDFhMDA5ZTJj
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAL5u/QMEAL5yZzANBgkqhkiG9w0BAQsFAAOCAQEAllwou804
MrrmPL0V5jRjoh7H6fAVlXIQpiowAm6ilTpoU8dE/EG+5bCiY14ueKZkW4skRHJ7
7DzWYS9DO8Z7hnAsMTfOly7+eGbArMgO9QtiftW6cqTFyuTq8MuIsfoGjPjWT2aN
Wi3kyga2VvqA512JJYflIPRgm10KoXY7c1uBdeIPcr5G6nyIXZterjnQZ6MgS7QO
X6VjoJZnpzHbp7WH503+A6r0VocNkOvydDMYPMVAmhaFQ+BCVFrXpONSDFYojJYp
QwltAb6O5cjTgvdKUrJUPlVAXnw2yV22vk9HHEG5lfw9TfHjSwpMzy7wM8ibSGw2
5/b34Y1IcR2ZAg==
-----END CERTIFICATE-----
Generated at Wed Nov 8 15:28:33 2023 by rpki-client on console-fra.rpki-client.org