Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/22be245edaaa8be56ac156fca30479f89406fddd.roa
File: 22be245edaaa8be56ac156fca30479f89406fddd.roa (raw, json)
Hash identifier: /KYU1YSRuAF828sk4I+v5LD17vphtHd86qOQJDnb2G0=
Subject key identifier: 88:78:47:7A:7B:9B:65:1F:8D:12:E2:5F:06:54:B3:27:AC:D9:C9:28
Certificate issuer: /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial: 090958
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/22be245edaaa8be56ac156fca30479f89406fddd.roa
Signing time: Fri 15 Mar 2024 12:47:25 +0000
ROA not before: Fri 15 Mar 2024 12:47:22 +0000
ROA not after: Thu 15 Mar 2029 12:47:22 +0000
asID: 6503
IP address blocks: 189.208.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592216 (0x90958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Validity
Not Before: Mar 15 12:47:22 2024 GMT
Not After : Mar 15 12:47:22 2029 GMT
Subject: CN=22be245edaaa8be56ac156fca30479f89406fddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:34:b6:9e:cd:54:ff:1f:7e:60:98:78:6a:
66:c9:29:bc:33:09:b1:7b:04:49:15:c1:ba:ba:33:
0b:74:58:7a:4a:c1:4f:d7:5b:cd:5e:3f:6d:10:f2:
ba:0e:fb:e5:84:48:d3:f0:40:6b:6d:49:07:d0:0d:
2b:50:8e:73:85:f3:23:54:e9:1e:0e:45:16:29:44:
db:65:db:7b:f7:6b:d9:63:c2:a6:c3:d3:da:6b:19:
cc:97:bb:02:fe:c7:43:f1:48:42:7b:30:f7:db:ea:
5c:0f:ed:59:59:53:86:d3:c0:cf:72:12:1b:17:75:
a7:c6:88:58:fb:7a:ac:c7:fd:57:a0:95:69:a9:9d:
88:87:3b:61:d0:b6:5e:58:de:8e:3f:de:93:f7:5d:
39:24:5e:fb:b0:da:9a:df:d4:2d:9d:7d:61:02:13:
d4:c8:87:ce:52:5a:ac:d3:8b:18:7c:9b:06:70:c0:
f9:9d:35:e7:e6:d1:09:ef:9b:95:5f:50:33:11:86:
3c:10:f5:b6:21:bc:b3:d7:07:99:55:6b:04:1a:52:
5b:a4:4f:96:cb:d3:1a:af:13:b9:af:9b:7e:6e:c0:
85:83:33:dc:39:b6:64:ae:fb:72:ac:ae:82:98:4e:
7d:21:46:b3:d5:d5:27:55:c1:91:e4:e7:4c:86:2c:
40:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:78:47:7A:7B:9B:65:1F:8D:12:E2:5F:06:54:B3:27:AC:D9:C9:28
X509v3 Authority Key Identifier:
keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/22be245edaaa8be56ac156fca30479f89406fddd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.208.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:c0:a7:10:42:44:f3:3f:23:a2:f4:42:4d:13:3f:6f:cf:e4:
64:85:09:88:d4:3d:a6:f6:f3:b9:bf:54:2e:8f:69:78:b6:f6:
01:25:85:6e:4f:fc:05:7b:09:83:82:66:24:e4:b3:8a:07:ad:
4e:ab:09:64:dd:98:b4:6b:74:74:b4:d4:99:4f:1c:9c:fd:c1:
c7:54:e2:c3:b7:b8:71:3f:d6:31:19:1d:1a:73:57:62:18:0b:
87:3b:73:7e:a6:5d:59:a9:67:11:85:12:25:63:93:f6:0f:e9:
b5:fd:a3:d9:34:7b:22:76:71:06:f9:0a:dd:0e:82:7c:30:b6:
05:e5:75:bd:53:06:2e:aa:fc:99:d8:4e:ba:c0:25:11:fb:57:
35:02:4c:84:a3:20:f1:10:ea:25:a1:72:a9:eb:36:95:aa:34:
4b:e0:25:53:85:a4:90:29:b7:ef:74:7f:fb:40:00:3b:a5:b6:
ed:f2:19:2f:ca:72:9c:f1:46:27:d8:69:8c:37:c3:0c:95:52:
0e:25:de:31:2b:71:b5:ed:bd:f7:16:c8:a9:10:1b:e5:17:aa:
eb:f2:3b:52:4d:71:63:5b:de:b7:13:91:70:fd:21:d1:69:56:
31:76:7f:ed:59:09:14:84:d2:5b:e9:d8:ca:21:fe:c7:a5:5f:
75:4c:82:da
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDCQlYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkw
ZWJjNmFhYzFhNWU0MDViZjFlMzBhMTc0ZWQ0YTIyMTQ3YjVlYTIwHhcNMjQwMzE1
MTI0NzIyWhcNMjkwMzE1MTI0NzIyWjAzMTEwLwYDVQQDEygyMmJlMjQ1ZWRhYWE4
YmU1NmFjMTU2ZmNhMzA0NzlmODk0MDZmZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnjI0tp7NVP8ffmCYeGpmySm8MwmxewRJFcG6ujMLdFh6SsFP
11vNXj9tEPK6DvvlhEjT8EBrbUkH0A0rUI5zhfMjVOkeDkUWKUTbZdt792vZY8Km
w9PaaxnMl7sC/sdD8UhCezD32+pcD+1ZWVOG08DPchIbF3WnxohY+3qsx/1XoJVp
qZ2Ihzth0LZeWN6OP96T9105JF77sNqa39QtnX1hAhPUyIfOUlqs04sYfJsGcMD5
nTXn5tEJ75uVX1AzEYY8EPW2Ibyz1weZVWsEGlJbpE+Wy9MarxO5r5t+bsCFgzPc
ObZkrvtyrK6CmE59IUaz1dUnVcGR5OdMhixAXwIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFIh4R3p7m2UfjRLiXwZUsyes2ckoMB8GA1UdIwQYMBaAFFXV8pb5Kej4MMai
f4yVfxZMlv43MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTBlYmM2
YWFjMWE1ZTQwNWJmMWUzMGExNzRlZDRhMjIxNDdiNWVhMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGZlOWJjNjEtMTg2YS00NWRiLTlhN2EtMTFlMTAy
YTkwYmY0LzIyYmUyNDVlZGFhYThiZTU2YWMxNTZmY2EzMDQ3OWY4OTQwNmZkZGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZmU5YmM2MS0xODZhLTQ1ZGItOWE3YS0xMWUx
MDJhOTBiZjQvOTBlYmM2YWFjMWE1ZTQwNWJmMWUzMGExNzRlZDRhMjIxNDdiNWVh
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAL3QMA0GCSqGSIb3DQEBCwUAA4IBAQBvwKcQQkTzPyOi9EJN
Ez9vz+RkhQmI1D2m9vO5v1Quj2l4tvYBJYVuT/wFewmDgmYk5LOKB61Oqwlk3Zi0
a3R0tNSZTxyc/cHHVOLDt7hxP9YxGR0ac1diGAuHO3N+pl1ZqWcRhRIlY5P2D+m1
/aPZNHsidnEG+QrdDoJ8MLYF5XW9UwYuqvyZ2E66wCUR+1c1AkyEoyDxEOoloXKp
6zaVqjRL4CVThaSQKbfvdH/7QAA7pbbt8hkvynKc8UYn2GmMN8MMlVIOJd4xK3G1
7b33FsipEBvlF6rr8jtSTXFjW963E5Fw/SHRaVYxdn/tWQkUhNJb6djKIf7HpV91
TILa
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org