Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/07e64d47adecb6be7e7e35785b7814ef99aa777d.roa
File: 07e64d47adecb6be7e7e35785b7814ef99aa777d.roa (raw, json)
Hash identifier: +0YjgbStCQEVfaG+qEML+vr80n7+Eg4SoxK/NX6HUg8=
Subject key identifier: 4A:65:E2:6B:A4:06:B1:A9:37:6D:C8:71:4F:58:D5:A0:D6:F7:51:22
Certificate issuer: /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial: 28263F
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/07e64d47adecb6be7e7e35785b7814ef99aa777d.roa
Signing time: Mon 12 Feb 2024 15:10:33 +0000
ROA not before: Mon 12 Feb 2024 15:09:57 +0000
ROA not after: Mon 12 Feb 2029 15:09:57 +0000
asID: 262191
IP address blocks: 190.242.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2631231 (0x28263f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Validity
Not Before: Feb 12 15:09:57 2024 GMT
Not After : Feb 12 15:09:57 2029 GMT
Subject: CN=07e64d47adecb6be7e7e35785b7814ef99aa777d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:89:1c:88:4b:2b:a6:29:ba:62:ca:d8:73:6e:
b7:db:99:eb:20:5c:cd:57:34:a9:5f:7d:1a:11:83:
6d:8c:02:c8:a1:20:af:8f:ac:27:8a:62:7e:c1:fb:
54:22:68:90:fa:52:b9:0e:4d:67:bf:fa:33:32:20:
ed:46:60:cb:5d:38:e3:23:a8:95:fc:f2:2b:3c:92:
cc:51:9e:51:6a:ae:3f:47:24:92:be:4d:d8:c8:58:
4a:f7:05:d4:ba:a7:aa:6a:84:2e:6d:9c:38:c6:6b:
44:3f:e9:6a:0f:be:54:46:cd:29:38:5c:07:5d:bf:
74:86:23:29:76:fa:94:a1:10:8e:dd:64:d8:fe:9f:
5a:09:d6:06:b6:4d:92:c3:f5:3b:ca:08:78:aa:9b:
46:9c:10:b1:13:70:27:23:36:cb:cb:af:1c:7e:23:
dd:07:c3:70:50:b3:f0:99:47:71:46:c9:6b:04:5e:
5d:a1:2f:d4:3c:0d:3d:12:1b:12:9b:f7:40:2d:ab:
a5:89:94:16:ff:c2:80:72:92:74:b2:6f:ac:1b:0f:
c3:ac:d6:ff:f4:24:c7:59:3b:d3:cb:32:43:90:0f:
5c:ea:4c:f4:e4:97:81:ef:43:0f:2a:45:18:a9:3e:
32:e6:e7:bc:ef:1f:8e:2d:8b:66:73:7c:a2:a9:43:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:65:E2:6B:A4:06:B1:A9:37:6D:C8:71:4F:58:D5:A0:D6:F7:51:22
X509v3 Authority Key Identifier:
keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/07e64d47adecb6be7e7e35785b7814ef99aa777d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.189.0/24
Signature Algorithm: sha256WithRSAEncryption
97:dc:12:e2:ec:fe:1c:fb:b0:7f:e3:69:22:b4:cc:d7:60:62:
86:bf:f3:6d:82:99:46:d5:32:ae:a6:58:c9:d5:f5:8d:19:9d:
1c:da:18:f7:bc:c6:a3:fc:32:a7:48:ce:87:2e:83:2a:8d:30:
f0:4c:0f:83:14:f5:78:8b:f8:ea:45:7b:39:1d:0c:65:ec:1c:
05:9c:87:68:34:9d:e0:a1:ef:c9:81:97:60:a3:dd:14:93:63:
30:6e:4d:81:e7:96:0e:e6:a0:94:e9:4b:15:f9:fb:c8:51:84:
f3:6e:1e:a7:19:51:30:e3:02:0d:96:f9:df:8e:c1:64:f1:6b:
3b:4a:3c:63:19:db:33:46:66:eb:c6:b7:e8:4c:dc:88:28:84:
94:2b:c4:f9:62:7e:8e:4e:b7:37:a5:3f:5a:c4:c3:7a:00:11:
a3:88:ed:eb:e8:c2:60:56:f1:4d:97:6e:70:e3:94:1a:87:6d:
32:64:be:b6:76:f8:58:a7:c5:75:09:6c:03:7a:80:06:70:12:
5a:1d:bf:90:be:89:54:2f:df:01:31:bb:8c:c5:ea:11:38:6d:
06:45:bc:7d:8c:1b:c4:6d:5f:f1:65:28:88:58:e0:87:db:8e:
e9:1e:eb:19:b8:b5:07:62:c4:04:79:f2:4d:28:72:bb:7a:21:
67:e7:9e:82
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKCY/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE3
MjM3ZDMyZmQzNWJiZjBmZGJhNzczNGE4MzY4ZmQ5NjI2ZWNhNWEwHhcNMjQwMjEy
MTUwOTU3WhcNMjkwMjEyMTUwOTU3WjAzMTEwLwYDVQQDEygwN2U2NGQ0N2FkZWNi
NmJlN2U3ZTM1Nzg1Yjc4MTRlZjk5YWE3NzdkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjokciEsrpim6YsrYc26325nrIFzNVzSpX30aEYNtjALIoSCv
j6wnimJ+wftUImiQ+lK5Dk1nv/ozMiDtRmDLXTjjI6iV/PIrPJLMUZ5Raq4/RySS
vk3YyFhK9wXUuqeqaoQubZw4xmtEP+lqD75URs0pOFwHXb90hiMpdvqUoRCO3WTY
/p9aCdYGtk2Sw/U7ygh4qptGnBCxE3AnIzbLy68cfiPdB8NwULPwmUdxRslrBF5d
oS/UPA09EhsSm/dALauliZQW/8KAcpJ0sm+sGw/DrNb/9CTHWTvTyzJDkA9c6kz0
5JeB70MPKkUYqT4y5ue87x+OLYtmc3yiqUPDHwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEpl4mukBrGpN23IcU9Y1aDW91EiMB8GA1UdIwQYMBaAFL4C0jb4sAa6h4Eq
IC71t2bcjjA/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTcyMzdk
MzJmZDM1YmJmMGZkYmE3NzM0YTgzNjhmZDk2MjZlY2E1YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjdlZDkwMDgtYWUzNC00NGJlLTg4MmYtNTkzODEy
MDFiMWUxLzA3ZTY0ZDQ3YWRlY2I2YmU3ZTdlMzU3ODViNzgxNGVmOTlhYTc3N2Qu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82N2VkOTAwOC1hZTM0LTQ0YmUtODgyZi01OTM4
MTIwMWIxZTEvYTcyMzdkMzJmZDM1YmJmMGZkYmE3NzM0YTgzNjhmZDk2MjZlY2E1
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7yvTANBgkqhkiG9w0BAQsFAAOCAQEAl9wS4uz+HPuwf+Np
IrTM12Bihr/zbYKZRtUyrqZYydX1jRmdHNoY97zGo/wyp0jOhy6DKo0w8EwPgxT1
eIv46kV7OR0MZewcBZyHaDSd4KHvyYGXYKPdFJNjMG5NgeeWDuaglOlLFfn7yFGE
824epxlRMOMCDZb5347BZPFrO0o8YxnbM0Zm68a36EzciCiElCvE+WJ+jk63N6U/
WsTDegARo4jt6+jCYFbxTZducOOUGodtMmS+tnb4WKfFdQlsA3qABnASWh2/kL6J
VC/fATG7jMXqEThtBkW8fYwbxG1f8WUoiFjgh9uO6R7rGbi1B2LEBHnyTShyu3oh
Z+eegg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org