Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/d0748d7c1553b425158daf1026a45b457145ca11.roa
File: d0748d7c1553b425158daf1026a45b457145ca11.roa (raw, json)
Hash identifier: DTpYchW02i/2GofXj40V/MWFf51KKNfNHWK/G5zDhTc=
Subject key identifier: AF:4F:E4:94:DA:05:DE:D4:EA:FE:FA:7B:09:4D:2A:66:B3:73:F8:A1
Certificate issuer: /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial: 27EDA7
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/d0748d7c1553b425158daf1026a45b457145ca11.roa
Signing time: Mon 12 Feb 2024 15:10:07 +0000
ROA not before: Mon 12 Feb 2024 15:09:57 +0000
ROA not after: Mon 12 Feb 2029 15:09:57 +0000
asID: 10620
IP address blocks: 190.242.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2616743 (0x27eda7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Validity
Not Before: Feb 12 15:09:57 2024 GMT
Not After : Feb 12 15:09:57 2029 GMT
Subject: CN=d0748d7c1553b425158daf1026a45b457145ca11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:94:12:5c:de:b0:41:f2:9f:d4:12:c4:75:
f2:cf:e2:9b:87:b7:ce:b7:26:d0:ab:91:0f:ef:27:
46:fa:8a:ce:a0:b6:87:90:1c:c0:54:4d:d2:83:a0:
59:63:24:e5:fc:13:86:38:a9:5d:38:92:4b:f4:f5:
b2:d8:f5:83:4c:a6:fb:7b:fc:06:f6:42:9a:4e:0d:
a7:1a:fe:c4:6a:39:f6:4f:52:1c:de:1c:04:4b:83:
fc:6f:d9:24:5b:35:2e:92:3d:e9:bf:bd:80:5c:d4:
5a:ff:15:5d:43:be:67:f2:6e:56:bd:b4:8d:93:c7:
d4:28:89:94:d4:ba:f2:54:47:93:a7:3b:94:a0:bc:
63:89:16:28:82:55:50:03:fa:b7:f9:54:ed:7d:e5:
e2:bc:4e:4e:5c:e5:24:88:14:c7:31:66:9d:ab:e4:
8e:9a:29:2e:e4:c4:55:c7:eb:6f:49:3b:83:b9:98:
39:5d:34:37:15:2f:5c:70:40:5b:f3:9d:74:c4:cb:
0c:4f:d8:f2:c4:63:c2:7b:c6:8a:6d:c2:57:5f:24:
93:5b:bf:03:3f:b6:db:40:9b:1d:62:c1:c4:f3:d9:
e7:5c:14:af:db:00:1e:52:9a:d2:a8:9d:de:90:f4:
84:e6:48:62:f6:df:84:13:94:26:57:28:b3:45:4d:
e6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4F:E4:94:DA:05:DE:D4:EA:FE:FA:7B:09:4D:2A:66:B3:73:F8:A1
X509v3 Authority Key Identifier:
keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/d0748d7c1553b425158daf1026a45b457145ca11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.72.0/21
Signature Algorithm: sha256WithRSAEncryption
21:6e:62:ce:85:b0:04:35:87:8b:74:3d:21:32:6c:aa:9d:2e:
40:1f:13:4a:1c:23:d1:e6:52:96:3e:d3:e7:8b:3b:60:ae:39:
c4:1c:aa:9c:01:13:01:72:9e:67:4c:eb:51:93:d8:78:85:d6:
87:3f:a7:5c:c9:ba:45:a3:de:04:a2:7e:f6:fc:26:64:4e:90:
2e:a6:83:59:91:31:0e:5f:14:dd:cc:61:77:60:3e:08:64:63:
77:76:93:60:36:02:36:f1:71:7c:0f:83:85:d2:38:a6:be:60:
35:eb:c8:d8:e7:d5:ff:b3:2d:3a:42:37:ad:59:09:23:60:52:
f4:41:eb:2a:e3:63:3b:c3:bb:8a:3b:52:41:68:9c:da:7b:dc:
bd:ba:05:0a:1a:82:9f:38:e7:d0:76:09:20:88:b7:07:39:29:
b7:f2:c8:bb:c1:94:67:79:8f:60:8b:8b:74:d5:86:86:48:52:
98:15:85:5f:71:ee:06:16:5c:d9:01:2a:b5:e0:64:39:fd:65:
b1:31:ed:f9:1d:b0:dc:41:c6:5e:89:d2:65:a9:16:40:a2:b6:
68:45:7f:cf:b8:65:c6:33:8a:36:bd:ec:49:98:2a:0c:e8:1e:
72:9c:a2:83:cc:32:5d:2c:78:9a:6f:fb:a3:ea:ba:c2:63:ca:
5f:6d:e0:57
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ+2nMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE3
MjM3ZDMyZmQzNWJiZjBmZGJhNzczNGE4MzY4ZmQ5NjI2ZWNhNWEwHhcNMjQwMjEy
MTUwOTU3WhcNMjkwMjEyMTUwOTU3WjAzMTEwLwYDVQQDEyhkMDc0OGQ3YzE1NTNi
NDI1MTU4ZGFmMTAyNmE0NWI0NTcxNDVjYTExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAu96UElzesEHyn9QSxHXyz+Kbh7fOtybQq5EP7ydG+orOoLaH
kBzAVE3Sg6BZYyTl/BOGOKldOJJL9PWy2PWDTKb7e/wG9kKaTg2nGv7Eajn2T1Ic
3hwES4P8b9kkWzUukj3pv72AXNRa/xVdQ75n8m5WvbSNk8fUKImU1LryVEeTpzuU
oLxjiRYoglVQA/q3+VTtfeXivE5OXOUkiBTHMWadq+SOmiku5MRVx+tvSTuDuZg5
XTQ3FS9ccEBb8510xMsMT9jyxGPCe8aKbcJXXySTW78DP7bbQJsdYsHE89nnXBSv
2wAeUprSqJ3ekPSE5khi9t+EE5QmVyizRU3mxwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFK9P5JTaBd7U6v76ewlNKmazc/ihMB8GA1UdIwQYMBaAFL4C0jb4sAa6h4Eq
IC71t2bcjjA/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTcyMzdk
MzJmZDM1YmJmMGZkYmE3NzM0YTgzNjhmZDk2MjZlY2E1YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjdlZDkwMDgtYWUzNC00NGJlLTg4MmYtNTkzODEy
MDFiMWUxL2QwNzQ4ZDdjMTU1M2I0MjUxNThkYWYxMDI2YTQ1YjQ1NzE0NWNhMTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82N2VkOTAwOC1hZTM0LTQ0YmUtODgyZi01OTM4
MTIwMWIxZTEvYTcyMzdkMzJmZDM1YmJmMGZkYmE3NzM0YTgzNjhmZDk2MjZlY2E1
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA77ySDANBgkqhkiG9w0BAQsFAAOCAQEAIW5izoWwBDWHi3Q9
ITJsqp0uQB8TShwj0eZSlj7T54s7YK45xByqnAETAXKeZ0zrUZPYeIXWhz+nXMm6
RaPeBKJ+9vwmZE6QLqaDWZExDl8U3cxhd2A+CGRjd3aTYDYCNvFxfA+DhdI4pr5g
NevI2OfV/7MtOkI3rVkJI2BS9EHrKuNjO8O7ijtSQWic2nvcvboFChqCnzjn0HYJ
IIi3Bzkpt/LIu8GUZ3mPYIuLdNWGhkhSmBWFX3HuBhZc2QEqteBkOf1lsTHt+R2w
3EHGXonSZakWQKK2aEV/z7hlxjOKNr3sSZgqDOgecpyig8wyXSx4mm/7o+q6wmPK
X23gVw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org