Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/5cbc18208640e54a86bdd3cf33698762c78ccb6f.roa
File: 5cbc18208640e54a86bdd3cf33698762c78ccb6f.roa (raw, json)
Hash identifier: pmdngJxaIDDdmQF4FO62JNp8Zh7QvYKpIXqqDHukYFE=
Subject key identifier: AD:BD:E0:8D:5A:10:A6:EA:1C:E1:82:92:84:DE:0F:C8:2A:31:36:9C
Certificate issuer: /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial: 22AAF8
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/5cbc18208640e54a86bdd3cf33698762c78ccb6f.roa
Signing time: Thu 22 Jun 2023 18:16:30 +0000
ROA not before: Wed 21 Jun 2023 18:16:00 +0000
ROA not after: Sun 22 Jun 2025 18:16:00 +0000
asID: 61452
IP address blocks: 190.210.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2271992 (0x22aaf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Validity
Not Before: Jun 21 18:16:00 2023 GMT
Not After : Jun 22 18:16:00 2025 GMT
Subject: CN=5cbc18208640e54a86bdd3cf33698762c78ccb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:e1:3d:25:50:3e:77:f3:d8:14:4e:6d:66:
90:89:8a:65:cb:8c:b4:79:78:54:56:c3:cd:41:76:
44:a0:c8:ea:94:af:64:7f:61:31:61:84:81:8e:f9:
b7:9d:5d:4b:3b:e0:50:79:fe:01:cd:86:ee:54:26:
21:53:1e:d9:30:1b:36:14:46:40:bf:2a:0d:9f:06:
6a:12:cc:01:0d:47:d7:f1:31:0b:60:9a:5a:69:0b:
b9:3d:29:23:35:da:d6:43:28:c2:d2:f5:0f:c9:24:
3d:a4:99:be:a3:0f:c6:3d:d2:ae:8a:8e:c4:ca:ff:
5a:fc:8d:01:e4:38:bd:3f:aa:61:0b:1e:64:c4:ee:
aa:5c:d5:44:12:de:64:62:e0:24:a6:38:4e:8e:01:
18:ad:d1:2d:4b:ac:c1:40:fc:31:c5:c9:5d:69:2a:
29:cd:45:a8:d2:46:0d:2e:81:a5:9f:bc:50:1a:4a:
1c:2f:c7:9e:df:fe:a1:a8:10:04:62:b1:90:2b:80:
fb:3b:40:9c:37:d9:1c:92:87:ab:94:79:a3:b7:4d:
f5:95:b7:b0:75:15:ed:56:91:d1:68:25:f3:72:b4:
fd:da:72:37:7e:29:91:fe:73:c9:28:4f:ed:f3:39:
7e:04:14:a6:dd:01:7a:04:84:2d:c5:15:a4:86:b2:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BD:E0:8D:5A:10:A6:EA:1C:E1:82:92:84:DE:0F:C8:2A:31:36:9C
X509v3 Authority Key Identifier:
keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/5cbc18208640e54a86bdd3cf33698762c78ccb6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.210.131.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d3:e4:e2:e0:b0:1a:9a:0b:8d:c8:bf:97:a2:47:15:80:4b:
71:fe:e6:04:7e:2d:11:c2:cd:7d:aa:37:26:14:a9:24:7a:a4:
c4:a6:aa:91:37:d9:2c:8c:28:84:1d:92:11:55:92:e6:25:7b:
bd:85:f2:1d:02:ac:03:25:0e:90:74:c3:6e:9e:fe:c5:66:20:
2c:4a:54:0a:11:f0:57:82:a6:14:7c:b2:6b:d0:e5:c9:cd:cb:
c5:da:11:57:21:b8:c9:44:fa:75:4c:9f:62:68:53:e0:9d:27:
de:81:f6:99:86:b7:07:3b:d0:50:d0:1f:c4:ae:58:d2:ae:f0:
69:44:d0:7f:05:c2:ac:a2:81:96:09:08:74:bb:85:03:28:f8:
5a:68:59:88:19:f1:31:35:17:e0:10:3e:6a:a1:e3:84:59:3c:
3c:e8:c1:60:6d:c1:f3:b5:b4:d9:de:23:04:c8:e7:55:e9:de:
81:d2:fb:03:f9:60:09:ad:ad:e5:e6:1e:52:18:6c:9d:61:62:
45:d9:e7:c3:27:79:3f:e9:a3:e1:b3:d9:2c:db:35:ea:07:d7:
e3:3f:8c:09:69:22:ea:2a:c4:3f:29:f0:65:f7:88:2d:fd:43:
6d:79:99:1e:ad:cf:66:3f:49:84:49:e9:53:8a:70:8b:3c:2e:
d0:e2:77:d7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIqr4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
YmZjNjNjNGQyZTIyMmRmM2EwOTllMjIyNTY3ZGViOWU4OGJiMjcwHhcNMjMwNjIx
MTgxNjAwWhcNMjUwNjIyMTgxNjAwWjAzMTEwLwYDVQQDEyg1Y2JjMTgyMDg2NDBl
NTRhODZiZGQzY2YzMzY5ODc2MmM3OGNjYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArmThPSVQPnfz2BRObWaQiYply4y0eXhUVsPNQXZEoMjqlK9k
f2ExYYSBjvm3nV1LO+BQef4BzYbuVCYhUx7ZMBs2FEZAvyoNnwZqEswBDUfX8TEL
YJpaaQu5PSkjNdrWQyjC0vUPySQ9pJm+ow/GPdKuio7Eyv9a/I0B5Di9P6phCx5k
xO6qXNVEEt5kYuAkpjhOjgEYrdEtS6zBQPwxxcldaSopzUWo0kYNLoGln7xQGkoc
L8ee3/6hqBAEYrGQK4D7O0CcN9kckoerlHmjt031lbewdRXtVpHRaCXzcrT92nI3
fimR/nPJKE/t8zl+BBSm3QF6BIQtxRWkhrLF6QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFK294I1aEKbqHOGCkoTeD8gqMTacMB8GA1UdIwQYMBaAFKbB/2GNliK3iQ+g
mDamXNI878RiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjliZmM2
M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjI2ZjRmMjgtODgwYy00YmI1LTk0NDItOWVlZjkz
MjVkN2ViLzVjYmMxODIwODY0MGU1NGE4NmJkZDNjZjMzNjk4NzYyYzc4Y2NiNmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjZmNGYyOC04ODBjLTRiYjUtOTQ0Mi05ZWVm
OTMyNWQ3ZWIvMjliZmM2M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7SgzANBgkqhkiG9w0BAQsFAAOCAQEAh9Pk4uCwGpoLjci/
l6JHFYBLcf7mBH4tEcLNfao3JhSpJHqkxKaqkTfZLIwohB2SEVWS5iV7vYXyHQKs
AyUOkHTDbp7+xWYgLEpUChHwV4KmFHyya9Dlyc3LxdoRVyG4yUT6dUyfYmhT4J0n
3oH2mYa3BzvQUNAfxK5Y0q7waUTQfwXCrKKBlgkIdLuFAyj4WmhZiBnxMTUX4BA+
aqHjhFk8POjBYG3B87W02d4jBMjnVenegdL7A/lgCa2t5eYeUhhsnWFiRdnnwyd5
P+mj4bPZLNs16gfX4z+MCWki6irEPynwZfeILf1DbXmZHq3PZj9JhEnpU4pwizwu
0OJ31w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org