Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7d9a28deed9975be151da2a1d816f0d2e66796b9.roa
File: 7d9a28deed9975be151da2a1d816f0d2e66796b9.roa (raw, json)
Hash identifier: 2tbqG/bnmiyf2OlcaGtzSykWAUl5ACJhfpkFJbn8Emg=
Subject key identifier: 19:45:25:AF:4D:AE:ED:B0:7A:B8:0B:66:F7:27:D2:3F:67:F5:16:35
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2DED3F
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7d9a28deed9975be151da2a1d816f0d2e66796b9.roa
Signing time: Thu 07 Dec 2023 12:42:55 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 264742
IP address blocks: 190.227.181.0/24 maxlen: 24
186.125.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3009855 (0x2ded3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=7d9a28deed9975be151da2a1d816f0d2e66796b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bb:ae:f1:fe:12:45:28:b5:9f:45:4b:b9:8b:
23:a9:e2:2d:83:80:21:9e:dd:0d:32:ba:e2:bc:5c:
56:62:14:70:55:e4:b0:ed:6f:fc:12:eb:ac:fc:ab:
49:05:11:da:91:15:ba:b2:e0:59:b9:9b:ba:6f:f7:
23:6e:04:ff:45:99:9c:d8:54:72:ae:e7:f8:0f:b8:
5f:8a:9d:10:7b:cc:08:05:de:e6:fd:d4:db:21:61:
24:10:fa:e9:86:0e:a0:d4:60:22:c2:b2:33:cc:34:
71:87:6a:87:a8:3a:85:31:65:76:03:81:13:c1:ea:
dc:fb:8f:33:fe:f7:8c:ba:2f:92:e1:67:11:11:53:
8e:54:20:b5:e8:ca:17:30:78:86:5a:bb:97:ab:25:
17:25:64:5a:67:19:a2:94:12:23:b3:cb:ce:d0:a5:
40:a5:5b:bf:58:c0:78:16:38:fa:f8:01:16:9d:64:
a9:16:39:5b:bc:a1:e5:bb:58:e1:51:64:69:2e:b6:
50:37:2e:29:71:8b:d6:1e:f9:02:ed:e7:f9:26:5d:
f0:f4:d7:56:46:a0:0b:4b:fe:22:a9:d5:ff:d3:b1:
1b:ad:45:76:7e:06:12:db:82:5b:da:9f:af:b8:c7:
b1:0f:66:7a:8e:0e:be:8b:9c:8d:4b:b5:9f:83:b0:
88:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:45:25:AF:4D:AE:ED:B0:7A:B8:0B:66:F7:27:D2:3F:67:F5:16:35
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7d9a28deed9975be151da2a1d816f0d2e66796b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.125.246.0/24
190.227.181.0/24
Signature Algorithm: sha256WithRSAEncryption
72:8e:21:20:17:58:c8:e2:dc:a3:16:36:4e:d9:92:81:ad:27:
e1:0c:d9:96:0a:81:df:b5:6a:29:a9:bc:b0:5b:55:81:26:3f:
9b:53:2b:8c:5d:13:aa:e2:7c:df:f4:cc:89:cb:02:1e:60:5d:
27:34:29:ee:fe:cb:0c:19:4d:f1:d4:86:bc:67:2c:2b:64:0f:
6b:05:ac:1f:c2:ed:8e:be:28:4c:02:08:79:f8:ee:3a:98:e2:
e1:c5:3a:7a:67:80:db:e6:82:d1:2a:58:dd:83:52:50:73:45:
72:ac:d7:8d:0e:49:8d:fa:5c:ee:f0:a5:99:e2:54:fb:35:b8:
c8:8b:09:70:1b:d3:d9:05:7a:53:62:a2:7a:32:51:db:51:cf:
fb:0c:70:a5:e1:98:07:f0:5b:81:ae:36:7d:82:a1:1e:f9:c5:
2a:0d:ce:59:a0:3c:19:34:da:76:b5:cd:df:cf:60:24:ae:e1:
44:8a:27:53:29:ed:51:cd:44:3f:97:e7:51:cb:8b:5c:b4:43:
cb:2e:2b:8a:fc:aa:82:c7:9e:49:9a:d5:f3:cd:b3:4b:1f:4b:
75:a8:bf:07:50:54:e0:1f:a3:fc:19:29:57:f7:11:c1:dd:ab:
6e:07:58:91:04:7b:40:89:6e:21:c3:a3:dc:8b:6b:5e:c2:53:
3e:64:b6:e2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDLe0/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
MjYzZjBlYTFiNTYzMjg5MjA1YWQwMjY0NTMwZjhlNmMzMGU1NjkwHhcNMjMxMjA3
MTI0MTU3WhcNMjgxMjA3MTI0MTU3WjAzMTEwLwYDVQQDEyg3ZDlhMjhkZWVkOTk3
NWJlMTUxZGEyYTFkODE2ZjBkMmU2Njc5NmI5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhruu8f4SRSi1n0VLuYsjqeItg4Ahnt0NMrrivFxWYhRwVeSw
7W/8Euus/KtJBRHakRW6suBZuZu6b/cjbgT/RZmc2FRyruf4D7hfip0Qe8wIBd7m
/dTbIWEkEPrphg6g1GAiwrIzzDRxh2qHqDqFMWV2A4ETwerc+48z/veMui+S4WcR
EVOOVCC16MoXMHiGWruXqyUXJWRaZxmilBIjs8vO0KVApVu/WMB4Fjj6+AEWnWSp
FjlbvKHlu1jhUWRpLrZQNy4pcYvWHvkC7ef5Jl3w9NdWRqALS/4iqdX/07EbrUV2
fgYS24Jb2p+vuMexD2Z6jg6+i5yNS7Wfg7CIxQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFBlFJa9Nru2wergLZvcn0j9n9RY1MB8GA1UdIwQYMBaAFMD3ES/X9uODqZpb
XBnhTav8A9wtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjgyNjNm
MGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzdkOWEyOGRlZWQ5OTc1YmUxNTFkYTJhMWQ4MTZmMGQyZTY2Nzk2Yjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZjgyNjNmMGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEALp99gMEAL7jtTANBgkqhkiG9w0BAQsFAAOCAQEAco4hIBdY
yOLcoxY2TtmSga0n4QzZlgqB37VqKam8sFtVgSY/m1MrjF0TquJ83/TMicsCHmBd
JzQp7v7LDBlN8dSGvGcsK2QPawWsH8Ltjr4oTAIIefjuOpji4cU6emeA2+aC0SpY
3YNSUHNFcqzXjQ5Jjfpc7vClmeJU+zW4yIsJcBvT2QV6U2KiejJR21HP+wxwpeGY
B/Bbga42fYKhHvnFKg3OWaA8GTTadrXN389gJK7hRIonUyntUc1EP5fnUcuLXLRD
yy4rivyqgseeSZrV882zSx9Ldai/B1BU4B+j/BkpV/cRwd2rbgdYkQR7QIluIcOj
3ItrXsJTPmS24g==
-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org