Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/4a5712d1215c8dfe7c365b573a45d3c7e69a93a9.roa
File: 4a5712d1215c8dfe7c365b573a45d3c7e69a93a9.roa (raw, json)
Hash identifier: U5ObtDyg7Zntjdyfc4b4LvBnxGPWucCdS5bqSDuYQ44=
Subject key identifier: DA:C1:54:35:D5:1C:76:4D:36:60:E3:BE:5E:AF:47:D9:3A:A1:6C:88
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 0476CB
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/4a5712d1215c8dfe7c365b573a45d3c7e69a93a9.roa
Signing time: Tue 18 Jul 2023 18:44:27 +0000
ROA not before: Mon 17 Jul 2023 18:44:26 +0000
ROA not after: Fri 18 Jul 2025 18:44:26 +0000
asID: 16629
IP address blocks: 190.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292555 (0x476cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 17 18:44:26 2023 GMT
Not After : Jul 18 18:44:26 2025 GMT
Subject: CN=4a5712d1215c8dfe7c365b573a45d3c7e69a93a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a0:af:ee:de:e2:6b:7d:6a:f9:dc:33:3e:0e:
33:6b:21:3c:b9:ac:57:56:c1:55:ce:60:2e:79:b1:
79:74:bb:57:86:e2:fd:88:6e:50:16:f4:92:90:44:
04:aa:92:8f:69:41:d6:e9:fb:ea:0e:7d:89:ac:76:
2f:ac:10:c3:57:07:a6:4d:76:32:97:a4:47:b1:c2:
44:56:9d:17:02:e4:dd:b3:f9:a4:39:52:13:a6:ef:
6a:3b:8b:d3:3e:9a:72:a6:e2:4b:75:0a:34:db:5f:
0a:97:e3:e9:53:d8:5e:ca:3d:cb:49:2f:f7:5b:53:
af:07:f5:c9:ea:3c:48:65:ce:92:ac:29:a2:8d:97:
54:bf:26:a5:37:52:25:42:2f:72:ef:1f:c3:ba:fa:
7c:f9:03:c3:20:cb:cc:3a:6e:df:2b:0c:90:aa:1f:
d9:47:33:f0:17:94:2c:b9:de:83:1c:6f:96:79:ae:
76:d7:3d:5a:2d:9f:1a:2a:44:7d:1d:31:b1:3b:c3:
8a:cb:f6:24:37:80:e7:ef:46:ee:88:48:43:6a:44:
e9:d9:dc:29:b3:e1:bd:f4:07:50:ab:83:20:5c:be:
a4:e1:b6:cf:b1:70:50:ba:c1:ad:ac:5c:35:40:a8:
2a:36:d2:13:ba:15:df:3f:9c:9a:c8:a4:aa:6d:44:
33:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C1:54:35:D5:1C:76:4D:36:60:E3:BE:5E:AF:47:D9:3A:A1:6C:88
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/4a5712d1215c8dfe7c365b573a45d3c7e69a93a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.22.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:21:4a:a0:40:62:4f:b8:f3:bc:16:7d:c7:a9:79:3d:80:74:
13:6e:65:f6:25:fc:8f:18:b4:fc:29:5b:a5:43:f3:4a:78:6a:
7a:d5:3b:d5:03:2d:eb:c3:8e:ad:63:17:2b:cc:53:06:cf:af:
17:d1:83:38:6b:89:39:86:4c:2a:0b:15:59:6c:a4:b9:ab:2a:
bd:e0:d1:2e:c2:12:f7:8a:22:f3:5a:8b:76:00:af:3c:b8:8c:
6a:9e:76:8a:74:d4:56:87:17:4d:da:42:5a:d7:ca:f6:08:85:
e7:40:7e:60:60:7a:77:70:26:a0:38:5a:96:06:a0:30:01:41:
a3:e4:3d:78:30:09:db:9d:1c:f2:e0:99:b2:e0:bd:ef:e3:24:
d5:4f:c9:7e:36:d4:78:e6:f5:17:27:9b:25:25:80:50:b7:79:
49:5d:02:fd:a6:b4:6a:1e:a6:52:dc:cb:84:07:db:e0:0e:7f:
95:a7:84:fe:13:b6:cb:6b:70:b6:7d:7c:0c:5d:e1:1a:cb:e0:
f4:68:3b:ca:1b:36:79:06:ce:2e:04:d3:97:8a:71:62:c0:44:
bd:ae:de:d0:e2:f4:19:f8:70:49:2c:ff:3e:72:96:a8:f5:d4:
94:67:86:c5:c7:3c:45:fc:17:8a:6a:00:17:14:a5:bf:63:73:
de:26:19:1c
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDBHbLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MjZkNmY0MmZmY2E2MjkxYzZjNWM2MTYwMWY5MTZkN2U1OWEyZDMwHhcNMjMwNzE3
MTg0NDI2WhcNMjUwNzE4MTg0NDI2WjAzMTEwLwYDVQQDEyg0YTU3MTJkMTIxNWM4
ZGZlN2MzNjViNTczYTQ1ZDNjN2U2OWE5M2E5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiaCv7t7ia31q+dwzPg4zayE8uaxXVsFVzmAuebF5dLtXhuL9
iG5QFvSSkEQEqpKPaUHW6fvqDn2JrHYvrBDDVwemTXYyl6RHscJEVp0XAuTds/mk
OVITpu9qO4vTPppypuJLdQo0218Kl+PpU9heyj3LSS/3W1OvB/XJ6jxIZc6SrCmi
jZdUvyalN1IlQi9y7x/Duvp8+QPDIMvMOm7fKwyQqh/ZRzPwF5Qsud6DHG+Wea52
1z1aLZ8aKkR9HTGxO8OKy/YkN4Dn70buiEhDakTp2dwps+G99AdQq4MgXL6k4bbP
sXBQusGtrFw1QKgqNtITuhXfP5yayKSqbUQzFQIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFNrBVDXVHHZNNmDjvl6vR9k6oWyIMB8GA1UdIwQYMBaAFM2qHwCJ05renW3b
eH+AQ9p8hu5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyNmQ2
ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVkYjQxNWItYjNkZC00ZjQxLWJlZTMtMjg0ZWRh
MWQ3ZTU5LzRhNTcxMmQxMjE1YzhkZmU3YzM2NWI1NzNhNDVkM2M3ZTY5YTkzYTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWRiNDE1Yi1iM2RkLTRmNDEtYmVlMy0yODRl
ZGExZDdlNTkvZGYyNmQ2ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAL4WMA0GCSqGSIb3DQEBCwUAA4IBAQAqIUqgQGJPuPO8Fn3H
qXk9gHQTbmX2JfyPGLT8KVulQ/NKeGp61TvVAy3rw46tYxcrzFMGz68X0YM4a4k5
hkwqCxVZbKS5qyq94NEuwhL3iiLzWot2AK88uIxqnnaKdNRWhxdN2kJa18r2CIXn
QH5gYHp3cCagOFqWBqAwAUGj5D14MAnbnRzy4Jmy4L3v4yTVT8l+NtR45vUXJ5sl
JYBQt3lJXQL9prRqHqZS3MuEB9vgDn+Vp4T+E7bLa3C2fXwMXeEay+D0aDvKGzZ5
Bs4uBNOXinFiwES9rt7Q4vQZ+HBJLP8+cpao9dSUZ4bFxzxF/BeKagAXFKW/Y3Pe
Jhkc
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org