Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/0c28f4f2f24d1dabfb8e4fbbecd5034530ad6a19.roa
File: 0c28f4f2f24d1dabfb8e4fbbecd5034530ad6a19.roa (raw, json)
Hash identifier: US4VW0LClvP8JANtWsjNFyZD8XyUM1k9c3Iyc92oqQI=
Subject key identifier: 15:DF:34:9C:AD:B4:7C:E9:6A:F2:53:52:F9:C3:A1:AF:8F:9B:84:9F
Certificate issuer: /CN=14ca70169ff8886e815bd50416068dfdf2827fa6
Certificate serial: 238D44
Authority key identifier: 47:75:C8:0B:31:4F:EB:1D:0E:5B:F6:2F:C2:44:8A:2F:33:F4:5A:03
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14ca70169ff8886e815bd50416068dfdf2827fa6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/0c28f4f2f24d1dabfb8e4fbbecd5034530ad6a19.roa
Signing time: Thu 20 Jul 2023 00:36:46 +0000
ROA not before: Wed 19 Jul 2023 00:36:46 +0000
ROA not after: Sun 20 Jul 2025 00:36:46 +0000
asID: 264744
IP address blocks: 170.238.0.0/22 maxlen: 24
190.52.192.0/20 maxlen: 24
200.107.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2329924 (0x238d44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ca70169ff8886e815bd50416068dfdf2827fa6
Validity
Not Before: Jul 19 00:36:46 2023 GMT
Not After : Jul 20 00:36:46 2025 GMT
Subject: CN=0c28f4f2f24d1dabfb8e4fbbecd5034530ad6a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:3a:ca:f8:a1:14:9a:e3:a3:7e:36:d2:f9:
af:b5:3d:96:55:1f:e4:d3:cf:e0:d5:19:a4:8e:d7:
37:ff:21:21:5f:57:84:8a:f1:90:1f:4e:9a:ef:a9:
62:b2:22:c8:99:0f:67:fa:df:03:a8:10:39:1a:f6:
33:82:58:0c:63:70:c4:9a:82:1a:b2:ae:13:ac:bf:
f9:01:eb:ae:ef:f1:48:f2:c8:cf:d8:18:0b:e5:22:
d5:75:01:54:8e:1b:bb:5d:16:fc:e8:2e:46:b6:6e:
94:21:c1:6d:6c:52:99:3e:ff:f1:e3:42:b0:d8:87:
b1:22:b7:9c:f0:19:4b:a2:ec:1a:01:89:56:65:77:
92:9d:e3:ce:38:a8:09:9d:93:25:36:f8:2a:ab:57:
1c:4c:35:2f:70:11:92:59:9f:08:61:1c:fa:5d:87:
af:0f:3d:d8:54:fa:14:af:50:04:83:05:03:8e:b1:
eb:b7:a0:f9:f6:2c:fc:0f:96:14:20:f4:70:35:19:
5d:f1:22:9b:a7:05:e1:a5:5f:37:04:49:d6:d8:1b:
e0:7c:6e:3d:de:de:6d:00:b4:b0:62:1f:38:05:de:
30:c0:91:15:5a:e3:1a:cf:3c:95:84:c0:13:fd:1b:
6c:67:2f:c3:a1:25:c4:33:a0:85:a6:c4:0b:0c:e6:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DF:34:9C:AD:B4:7C:E9:6A:F2:53:52:F9:C3:A1:AF:8F:9B:84:9F
X509v3 Authority Key Identifier:
keyid:47:75:C8:0B:31:4F:EB:1D:0E:5B:F6:2F:C2:44:8A:2F:33:F4:5A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14ca70169ff8886e815bd50416068dfdf2827fa6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/0c28f4f2f24d1dabfb8e4fbbecd5034530ad6a19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/14ca70169ff8886e815bd50416068dfdf2827fa6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.0.0/22
190.52.192.0/20
200.107.248.0/21
Signature Algorithm: sha256WithRSAEncryption
50:8a:22:7a:56:ea:ca:4b:0e:57:7f:ac:b2:73:29:06:d9:6a:
53:f7:d3:16:f6:7e:71:12:4f:c1:49:29:47:4c:b5:74:c0:c9:
9b:7c:03:21:db:4e:d8:73:e8:68:ad:f7:d6:ee:9b:87:7b:b5:
12:35:e2:ed:f4:39:80:3a:e4:6e:03:8f:6b:38:3c:d5:4c:e2:
45:29:ff:f3:c0:9a:4d:73:dd:fe:5a:d2:0d:bc:37:5f:5e:77:
46:67:51:78:e3:5f:2b:11:2f:3a:ff:e1:e2:61:0a:61:1d:08:
8c:57:47:d8:e0:33:d4:8e:f5:c0:31:60:05:dc:24:6b:30:30:
86:77:e1:58:7e:dd:fb:3e:01:65:d8:d3:8e:d5:7d:b7:12:51:
40:10:87:d5:7e:40:ac:4e:75:47:dc:c0:fc:ea:02:db:f4:d5:
fb:50:3a:0b:c6:47:05:ad:4d:fa:d9:57:64:de:5c:d1:ae:96:
6b:fc:91:9e:6a:85:6c:73:44:4f:9a:63:95:2c:23:4f:88:5e:
48:cf:5d:45:b3:ac:1c:18:44:37:5c:be:73:bd:ca:7e:47:eb:
1b:11:83:5a:a1:6b:34:9b:a7:dd:5f:69:9d:63:f6:88:73:e9:
c1:6f:77:ea:d9:c4:17:68:a3:bf:1c:12:2b:d5:dd:14:66:b6:
a7:7e:07:fe
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDI41EMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE0
Y2E3MDE2OWZmODg4NmU4MTViZDUwNDE2MDY4ZGZkZjI4MjdmYTYwHhcNMjMwNzE5
MDAzNjQ2WhcNMjUwNzIwMDAzNjQ2WjAzMTEwLwYDVQQDEygwYzI4ZjRmMmYyNGQx
ZGFiZmI4ZTRmYmJlY2Q1MDM0NTMwYWQ2YTE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv6I6yvihFJrjo3420vmvtT2WVR/k08/g1Rmkjtc3/yEhX1eE
ivGQH06a76lisiLImQ9n+t8DqBA5GvYzglgMY3DEmoIasq4TrL/5Aeuu7/FI8sjP
2BgL5SLVdQFUjhu7XRb86C5Gtm6UIcFtbFKZPv/x40Kw2IexIrec8BlLouwaAYlW
ZXeSnePOOKgJnZMlNvgqq1ccTDUvcBGSWZ8IYRz6XYevDz3YVPoUr1AEgwUDjrHr
t6D59iz8D5YUIPRwNRld8SKbpwXhpV83BEnW2BvgfG493t5tALSwYh84Bd4wwJEV
WuMazzyVhMAT/RtsZy/DoSXEM6CFpsQLDOabqwIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFBXfNJyttHzpavJTUvnDoa+Pm4SfMB8GA1UdIwQYMBaAFEd1yAsxT+sdDlv2
L8JEii8z9FoDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTRjYTcw
MTY5ZmY4ODg2ZTgxNWJkNTA0MTYwNjhkZmRmMjgyN2ZhNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzJiYmYwN2EtZjYxOC00OGE4LTk4NzItNDljOTI0
ZDliNmE1LzBjMjhmNGYyZjI0ZDFkYWJmYjhlNGZiYmVjZDUwMzQ1MzBhZDZhMTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MmJiZjA3YS1mNjE4LTQ4YTgtOTg3Mi00OWM5
MjRkOWI2YTUvMTRjYTcwMTY5ZmY4ODg2ZTgxNWJkNTA0MTYwNjhkZmRmMjgyN2Zh
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAqruAAMEBL40wAMEA8hr+DANBgkqhkiG9w0BAQsFAAOCAQEA
UIoielbqyksOV3+ssnMpBtlqU/fTFvZ+cRJPwUkpR0y1dMDJm3wDIdtO2HPoaK33
1u6bh3u1EjXi7fQ5gDrkbgOPazg81UziRSn/88CaTXPd/lrSDbw3X153RmdReONf
KxEvOv/h4mEKYR0IjFdH2OAz1I71wDFgBdwkazAwhnfhWH7d+z4BZdjTjtV9txJR
QBCH1X5ArE51R9zA/OoC2/TV+1A6C8ZHBa1N+tlXZN5c0a6Wa/yRnmqFbHNET5pj
lSwjT4heSM9dRbOsHBhEN1y+c73KfkfrGxGDWqFrNJun3V9pnWP2iHPpwW936tnE
F2ijvxwSK9XdFGa2p34H/g==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org