Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/ba838e14d5b7188dfce1dc5dd5116816848ba991.roa
File: ba838e14d5b7188dfce1dc5dd5116816848ba991.roa (raw, json)
Hash identifier: FCdJ4CqKFd4mpqBF7lxtNZgdOESFnimNAuKRatPYuqU=
Subject key identifier: 94:A1:06:A8:73:E1:58:14:87:F7:B0:C9:75:C7:8E:71:12:D9:65:51
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 24117C
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/ba838e14d5b7188dfce1dc5dd5116816848ba991.roa
Signing time: Mon 17 Jul 2023 16:08:57 +0000
ROA not before: Sun 16 Jul 2023 16:08:49 +0000
ROA not after: Thu 17 Jul 2025 16:08:49 +0000
asID: 262932
IP address blocks: 190.114.104.0/21 maxlen: 24
190.114.104.0/21 maxlen: 24
190.114.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2363772 (0x24117c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Jul 16 16:08:49 2023 GMT
Not After : Jul 17 16:08:49 2025 GMT
Subject: CN=ba838e14d5b7188dfce1dc5dd5116816848ba991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:91:91:d0:ff:a9:b2:60:f4:c5:a4:55:dd:
2a:83:6f:f0:2b:c9:2d:a6:a8:37:19:01:e4:17:64:
59:3b:ae:74:7c:37:91:a1:dd:f9:99:6f:f2:50:62:
8a:ab:d4:c4:1a:c3:3f:ee:1d:e8:75:9f:32:a1:81:
e7:0c:7e:01:00:06:9a:eb:dd:4e:c4:90:ab:57:d5:
8d:b7:17:28:79:f5:c1:8a:5e:bb:ac:e8:cc:c8:8a:
48:74:57:b9:2c:83:56:71:b5:10:99:03:dd:38:91:
ea:fa:53:16:11:99:d5:dc:5e:39:b3:90:57:d8:7b:
6d:3d:2a:a7:ac:00:14:62:c4:b6:5b:e3:1c:fb:b5:
9b:ff:ea:50:81:9e:49:98:bc:d3:45:a3:94:3d:28:
c6:5d:b9:10:7b:65:e6:09:43:e6:1f:8a:46:e6:b2:
23:fa:12:52:ba:8d:91:5a:90:c7:04:23:63:53:f7:
1b:aa:8c:5e:8c:2d:ca:4d:2d:09:31:55:65:c2:ea:
b0:1d:f4:4c:6c:11:7b:ea:c3:0e:6d:31:98:8b:a9:
a5:39:c2:9f:f1:9d:7b:b4:7a:af:bd:35:10:95:e1:
5d:ba:87:62:a6:e9:9a:70:34:27:e2:be:74:2a:53:
9f:16:bb:49:e4:95:e8:58:8e:b1:d6:91:ad:3c:68:
05:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A1:06:A8:73:E1:58:14:87:F7:B0:C9:75:C7:8E:71:12:D9:65:51
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/ba838e14d5b7188dfce1dc5dd5116816848ba991.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.114.104.0-190.114.127.255
Signature Algorithm: sha256WithRSAEncryption
35:a9:46:24:4f:2d:df:3d:a3:ba:3f:ce:a7:8b:05:fa:6e:04:
fc:b0:62:01:30:aa:a7:68:6b:6c:2f:46:ca:aa:f6:57:f8:69:
74:3a:76:60:5c:7e:dc:de:c3:dd:37:5c:22:c9:b4:c6:6b:25:
79:67:ff:e6:29:ec:34:8d:d6:f1:ea:8d:7f:64:c0:88:28:8d:
8e:73:0d:44:c8:87:83:8d:22:a9:3a:16:16:03:b2:dd:02:6c:
48:b4:bc:8c:35:f7:b3:4a:f5:57:86:10:06:f4:30:15:3b:2b:
8b:93:f5:93:3a:5d:73:c1:7c:53:b3:c4:ad:68:77:65:6a:08:
d4:a3:12:d9:a4:4c:58:e2:cd:29:35:86:8f:c4:ee:2f:a6:0f:
91:54:26:ea:70:e1:27:dd:1a:95:24:ea:4d:0e:06:c0:af:5f:
4d:1f:19:0e:df:f5:c6:a3:87:74:68:7b:3c:cd:9a:13:90:56:
43:64:7e:67:68:f1:85:1b:0d:28:a5:fd:bf:2d:4e:c4:d2:24:
57:0e:65:8e:c9:78:87:a2:83:d2:60:4d:c8:a6:3e:f6:8e:e9:
5b:59:db:79:a0:33:bd:6b:a6:ff:55:c5:43:f3:15:ee:a1:97:
23:2b:b1:1d:99:d9:8d:d7:8f:45:53:c6:76:ea:05:b8:5d:fe:
58:71:3d:7b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDJBF8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
YjdhNDNmYzMzYmZjN2ZmNWVhNTkyZGVjYWRkZTY0NTI4ODcwNWUwHhcNMjMwNzE2
MTYwODQ5WhcNMjUwNzE3MTYwODQ5WjAzMTEwLwYDVQQDEyhiYTgzOGUxNGQ1Yjcx
ODhkZmNlMWRjNWRkNTExNjgxNjg0OGJhOTkxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0TmRkdD/qbJg9MWkVd0qg2/wK8ktpqg3GQHkF2RZO650fDeR
od35mW/yUGKKq9TEGsM/7h3odZ8yoYHnDH4BAAaa691OxJCrV9WNtxcoefXBil67
rOjMyIpIdFe5LINWcbUQmQPdOJHq+lMWEZnV3F45s5BX2HttPSqnrAAUYsS2W+Mc
+7Wb/+pQgZ5JmLzTRaOUPSjGXbkQe2XmCUPmH4pG5rIj+hJSuo2RWpDHBCNjU/cb
qoxejC3KTS0JMVVlwuqwHfRMbBF76sMObTGYi6mlOcKf8Z17tHqvvTUQleFduodi
pumacDQn4r50KlOfFrtJ5JXoWI6x1pGtPGgFhQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFJShBqhz4VgUh/ewyXXHjnES2WVRMB8GA1UdIwQYMBaAFMGk+QbXxWt9XjK0
PK4zar0RfTlWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzNiN2E0
M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlL2JhODM4ZTE0ZDViNzE4OGRmY2UxZGM1ZGQ1MTE2ODE2ODQ4YmE5OTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvMzNiN2E0M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQDvnJoAwQHvnIAMA0GCSqGSIb3DQEBCwUAA4IBAQA1qUYk
Ty3fPaO6P86niwX6bgT8sGIBMKqnaGtsL0bKqvZX+Gl0OnZgXH7c3sPdN1wiybTG
ayV5Z//mKew0jdbx6o1/ZMCIKI2Ocw1EyIeDjSKpOhYWA7LdAmxItLyMNfezSvVX
hhAG9DAVOyuLk/WTOl1zwXxTs8StaHdlagjUoxLZpExY4s0pNYaPxO4vpg+RVCbq
cOEn3RqVJOpNDgbAr19NHxkO3/XGo4d0aHs8zZoTkFZDZH5naPGFGw0opf2/LU7E
0iRXDmWOyXiHooPSYE3Ipj72julbWdt5oDO9a6b/VcVD8xXuoZcjK7EdmdmN149F
U8Z26gW4Xf5YcT17
-----END CERTIFICATE-----
Generated at Thu Aug 10 18:46:42 2023 by rpki-client on console-ams.rpki-client.org