Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/3cf77a343634762200893454886708e33a3b99ac.roa
File: 3cf77a343634762200893454886708e33a3b99ac.roa (raw, json)
Hash identifier: 4CgCjn3l1e81fvEJ6wBQGtgno0CYuXht4F3TqW+pTW8=
Subject key identifier: 0F:29:59:65:22:AE:4F:17:09:B6:52:B0:66:CF:42:8E:F0:A9:F5:0F
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 1083F3
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/3cf77a343634762200893454886708e33a3b99ac.roa
Signing time: Tue 24 Oct 2023 16:00:58 +0000
ROA not before: Tue 24 Oct 2023 16:00:56 +0000
ROA not after: Tue 24 Oct 2028 16:00:56 +0000
asID: 22927
IP address blocks: 190.48.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1082355 (0x1083f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Oct 24 16:00:56 2023 GMT
Not After : Oct 24 16:00:56 2028 GMT
Subject: CN=3cf77a343634762200893454886708e33a3b99ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:41:4c:bc:4b:a8:99:aa:94:61:9d:e2:7e:
70:82:cf:ae:2f:c7:08:bf:89:92:67:c2:4a:09:5a:
5f:39:67:d4:f9:fd:07:68:db:1f:72:c8:0f:fc:e0:
77:56:6b:39:0f:16:13:c3:23:57:50:67:5a:e3:37:
c3:94:dd:fb:37:98:45:89:70:98:93:f0:5f:d0:c4:
6b:ba:63:aa:88:a2:b3:6c:27:c3:18:09:d0:8d:13:
f2:76:a7:f9:21:0f:04:0e:39:8d:17:80:2e:6f:ba:
3a:05:89:43:9d:f8:b5:f2:e6:8f:93:47:1c:aa:46:
27:9e:15:9c:10:21:a7:ba:e7:9f:e3:67:1f:00:42:
06:af:81:4d:45:e4:5c:63:28:b4:11:13:30:f4:2d:
cc:61:55:e0:dc:4d:eb:73:07:a4:a9:90:69:e1:02:
21:1c:32:3c:88:b8:46:47:18:5e:4b:fa:5f:3d:e7:
2e:68:d6:e1:49:f4:ac:51:9f:6b:4a:66:cb:b5:83:
fc:70:08:a5:a7:ba:f0:9b:a5:51:0c:8f:17:dc:dc:
11:82:ad:fe:1a:a1:f7:90:cd:61:51:73:61:3d:9b:
8d:cb:a7:af:ec:fb:c7:f7:ca:74:da:99:7b:bb:5c:
45:4a:7a:f3:28:c7:e1:c6:25:93:fe:cb:b6:d2:ec:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:29:59:65:22:AE:4F:17:09:B6:52:B0:66:CF:42:8E:F0:A9:F5:0F
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/3cf77a343634762200893454886708e33a3b99ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.48.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:ee:fc:82:d7:2b:22:32:fb:f3:70:30:9f:cb:36:e6:fc:2f:
cf:b9:1c:7e:1a:ed:c5:25:26:60:de:04:4a:37:f2:91:90:c9:
73:9a:1c:78:0a:ec:16:86:4e:ef:00:24:22:c7:b7:38:25:22:
3d:14:d3:9b:a5:e1:d1:7e:b9:4d:f0:ee:23:32:01:9b:3c:02:
e5:c2:c6:10:5f:bc:07:0f:17:25:80:16:a4:28:78:41:f2:60:
b9:e3:da:92:08:45:06:f5:2a:70:1b:69:59:e5:01:75:9a:26:
fc:b0:0e:e9:ea:27:97:00:b3:6c:1f:5c:04:65:fa:da:3d:14:
e7:ee:e4:c4:b1:6e:8d:b6:55:e3:4f:b0:8d:19:1b:3d:27:c9:
60:3d:c6:f9:4c:85:ea:16:fc:26:a6:2a:80:67:86:87:f1:c4:
f8:c8:35:57:8c:62:af:40:32:de:f5:16:df:83:c7:87:7f:5b:
c2:4e:32:35:54:ef:ed:ee:74:d4:6e:cc:e3:b5:d6:62:da:5a:
e5:bf:3b:c0:18:8b:40:21:17:35:25:8c:73:ae:c6:90:2d:60:
eb:f0:1c:16:ed:2d:05:92:0e:b6:8d:59:c0:91:b9:6a:4f:cc:
04:e0:47:42:9b:2e:2b:bc:a2:1b:fb:d9:0c:4a:83:f9:49:e2:
ee:39:d2:92
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDEIPzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMDI0
MTYwMDU2WhcNMjgxMDI0MTYwMDU2WjAzMTEwLwYDVQQDEygzY2Y3N2EzNDM2MzQ3
NjIyMDA4OTM0NTQ4ODY3MDhlMzNhM2I5OWFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzVhBTLxLqJmqlGGd4n5wgs+uL8cIv4mSZ8JKCVpfOWfU+f0H
aNsfcsgP/OB3Vms5DxYTwyNXUGda4zfDlN37N5hFiXCYk/Bf0MRrumOqiKKzbCfD
GAnQjRPydqf5IQ8EDjmNF4Aub7o6BYlDnfi18uaPk0ccqkYnnhWcECGnuuef42cf
AEIGr4FNReRcYyi0ERMw9C3MYVXg3E3rcwekqZBp4QIhHDI8iLhGRxheS/pfPecu
aNbhSfSsUZ9rSmbLtYP8cAilp7rwm6VRDI8X3NwRgq3+GqH3kM1hUXNhPZuNy6ev
7PvH98p02pl7u1xFSnrzKMfhxiWT/su20uxhrQIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFA8pWWUirk8XCbZSsGbPQo7wqfUPMB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2LzNjZjc3YTM0MzYzNDc2MjIwMDg5MzQ1NDg4NjcwOGUzM2EzYjk5YWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAL4wMA0GCSqGSIb3DQEBCwUAA4IBAQAe7vyC1ysiMvvzcDCf
yzbm/C/PuRx+Gu3FJSZg3gRKN/KRkMlzmhx4CuwWhk7vACQix7c4JSI9FNObpeHR
frlN8O4jMgGbPALlwsYQX7wHDxclgBakKHhB8mC549qSCEUG9SpwG2lZ5QF1mib8
sA7p6ieXALNsH1wEZfraPRTn7uTEsW6NtlXjT7CNGRs9J8lgPcb5TIXqFvwmpiqA
Z4aH8cT4yDVXjGKvQDLe9Rbfg8eHf1vCTjI1VO/t7nTUbszjtdZi2lrlvzvAGItA
IRc1JYxzrsaQLWDr8BwW7S0Fkg62jVnAkblqT8wE4EdCmy4rvKIb+9kMSoP5SeLu
OdKS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org