Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/3f892c6364ad2657607eff4af829929bf4b61e75.roa
File: 3f892c6364ad2657607eff4af829929bf4b61e75.roa (raw, json)
Hash identifier: jI5bKEQWqMWRmhJtwr7Nuo1fIHNB9ue8rKa/0CXEc4g=
Subject key identifier: B7:40:B1:0D:32:18:03:D4:D0:41:2D:8D:8B:CD:3C:FC:0A:BE:63:D0
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 039FAE
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/3f892c6364ad2657607eff4af829929bf4b61e75.roa
Signing time: Tue 11 Jul 2023 13:09:19 +0000
ROA not before: Mon 10 Jul 2023 13:09:19 +0000
ROA not after: Fri 11 Jul 2025 13:09:19 +0000
asID: 7418
IP address blocks: 191.112.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237486 (0x39fae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 13:09:19 2023 GMT
Not After : Jul 11 13:09:19 2025 GMT
Subject: CN=3f892c6364ad2657607eff4af829929bf4b61e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:b6:11:49:d0:8a:99:1b:9d:9c:d7:5f:11:
6f:b5:07:f2:39:24:29:a6:ac:5f:63:10:f3:67:d3:
50:d2:f9:99:34:0b:fd:a0:ca:f0:ae:20:20:67:58:
5f:d3:b1:25:da:7f:62:69:2d:bb:e3:47:07:8f:5b:
4d:94:4f:7e:48:d6:82:bf:5c:76:4e:13:67:bd:ff:
08:2e:cf:ff:f5:ab:5b:08:08:80:0c:0e:c0:10:e0:
04:d1:67:b5:26:96:e8:f3:8d:96:81:79:03:a2:dc:
45:64:09:b3:e1:96:5c:61:8e:6c:34:6d:28:da:66:
1b:a4:80:0c:3f:96:d6:3a:f5:c7:43:8d:08:1f:29:
4d:ff:5d:ca:47:6f:f3:a2:ca:b9:80:b1:3d:5f:86:
e0:28:2a:df:da:3f:81:54:c1:62:1f:1e:7f:8d:f6:
dd:d2:ca:a2:19:74:b7:36:a3:a9:8e:00:db:77:c8:
91:97:94:9c:85:de:47:7e:1b:b2:87:8c:59:14:f1:
d8:e5:c3:08:81:b2:98:95:e2:98:a7:67:1c:31:41:
3c:58:f4:c8:30:86:f4:df:41:cc:b8:aa:87:b0:f0:
bc:87:87:f0:5b:c6:a3:4b:9b:8a:7d:57:4c:77:27:
43:72:4e:5f:e5:25:98:1b:17:a5:5a:54:92:70:bd:
52:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:40:B1:0D:32:18:03:D4:D0:41:2D:8D:8B:CD:3C:FC:0A:BE:63:D0
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/3f892c6364ad2657607eff4af829929bf4b61e75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.112.0.0/14
Signature Algorithm: sha256WithRSAEncryption
10:6b:39:5b:e2:3d:d4:f4:6e:59:76:ca:c1:0e:19:22:c9:fa:
5d:bf:0b:b2:1d:35:b0:9e:85:ca:ab:1d:69:24:85:9b:6a:fc:
ec:c3:10:b9:ed:0e:1c:4f:69:f9:71:84:99:ba:ca:fe:d2:b6:
ec:3d:86:e1:49:55:d4:94:07:19:42:3d:53:d3:51:a6:e4:ba:
78:68:a5:a9:46:4a:24:8f:f8:cb:97:cf:e3:f9:cb:f2:02:47:
d5:22:2f:8e:43:d3:26:05:34:ec:8d:4e:cc:1d:6d:ee:39:d5:
51:ec:7a:e1:c3:cc:b9:e4:83:df:d7:2d:23:2a:2f:80:c4:07:
1b:70:73:e8:82:88:cb:84:c5:cf:35:46:11:61:0d:ab:66:9f:
e7:cb:28:d5:84:fa:a3:76:4b:89:c4:5f:6d:4a:7c:bf:d8:76:
20:1e:34:e7:71:af:a9:5a:0e:e0:a7:81:1c:53:b3:63:1d:ab:
04:e1:68:7e:23:d1:6a:b2:27:97:2b:db:92:43:3d:11:fd:6c:
ab:02:27:73:fd:33:a1:71:e7:e7:3a:f1:23:eb:5a:30:f5:eb:
ad:9e:fa:aa:f1:c5:b3:08:f7:2a:6a:04:d7:14:f2:f8:9c:eb:
8f:5a:b5:4a:ec:dd:36:05:c1:dc:58:ee:87:2c:76:48:e2:7e:
1f:30:2c:71
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDA5+uMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MjZkNmY0MmZmY2E2MjkxYzZjNWM2MTYwMWY5MTZkN2U1OWEyZDMwHhcNMjMwNzEw
MTMwOTE5WhcNMjUwNzExMTMwOTE5WjAzMTEwLwYDVQQDEygzZjg5MmM2MzY0YWQy
NjU3NjA3ZWZmNGFmODI5OTI5YmY0YjYxZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkDy2EUnQipkbnZzXXxFvtQfyOSQppqxfYxDzZ9NQ0vmZNAv9
oMrwriAgZ1hf07El2n9iaS2740cHj1tNlE9+SNaCv1x2ThNnvf8ILs//9atbCAiA
DA7AEOAE0We1Jpbo842WgXkDotxFZAmz4ZZcYY5sNG0o2mYbpIAMP5bWOvXHQ40I
HylN/13KR2/zosq5gLE9X4bgKCrf2j+BVMFiHx5/jfbd0sqiGXS3NqOpjgDbd8iR
l5Schd5Hfhuyh4xZFPHY5cMIgbKYleKYp2ccMUE8WPTIMIb030HMuKqHsPC8h4fw
W8ajS5uKfVdMdydDck5f5SWYGxelWlSScL1SEwIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFLdAsQ0yGAPU0EEtjYvNPPwKvmPQMB8GA1UdIwQYMBaAFM2qHwCJ05renW3b
eH+AQ9p8hu5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyNmQ2
ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVkYjQxNWItYjNkZC00ZjQxLWJlZTMtMjg0ZWRh
MWQ3ZTU5LzNmODkyYzYzNjRhZDI2NTc2MDdlZmY0YWY4Mjk5MjliZjRiNjFlNzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWRiNDE1Yi1iM2RkLTRmNDEtYmVlMy0yODRl
ZGExZDdlNTkvZGYyNmQ2ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAr9wMA0GCSqGSIb3DQEBCwUAA4IBAQAQazlb4j3U9G5ZdsrB
DhkiyfpdvwuyHTWwnoXKqx1pJIWbavzswxC57Q4cT2n5cYSZusr+0rbsPYbhSVXU
lAcZQj1T01Gm5Lp4aKWpRkokj/jLl8/j+cvyAkfVIi+OQ9MmBTTsjU7MHW3uOdVR
7Hrhw8y55IPf1y0jKi+AxAcbcHPogojLhMXPNUYRYQ2rZp/nyyjVhPqjdkuJxF9t
Sny/2HYgHjTnca+pWg7gp4EcU7NjHasE4Wh+I9FqsieXK9uSQz0R/WyrAidz/TOh
cefnOvEj61ow9eutnvqq8cWzCPcqagTXFPL4nOuPWrVK7N02BcHcWO6HLHZI4n4f
MCxx
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org