Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/aa661374929dece15b8da041808c9830f9a103b7.roa
File: aa661374929dece15b8da041808c9830f9a103b7.roa (raw, json)
Hash identifier: NTcCF1ZeDe4k1EKsJ8ck2yq/2arvDy4RXaIYQH0wJBg=
Subject key identifier: 1D:57:7F:19:32:A8:1E:D6:FE:75:C2:E5:4C:03:8B:0C:66:D3:43:E6
Certificate issuer: /CN=bef02a6151d23f223914a8f6eed9802b4dfd2a0b
Certificate serial: 0D61C6
Authority key identifier: 9C:CA:11:0B:7A:6F:04:CB:57:4B:44:E4:67:33:30:7D:DC:D8:3C:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/aa661374929dece15b8da041808c9830f9a103b7.roa
Signing time: Wed 24 Mar 2021 14:42:14 +0000
ROA not before: Wed 24 Mar 2021 14:42:13 +0000
ROA not after: Tue 24 Mar 2026 14:42:13 +0000
asID: 52253
IP address blocks: 190.108.196.0/22 maxlen: 24
190.108.200.0/21 maxlen: 21
190.124.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876998 (0xd61c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef02a6151d23f223914a8f6eed9802b4dfd2a0b
Validity
Not Before: Mar 24 14:42:13 2021 GMT
Not After : Mar 24 14:42:13 2026 GMT
Subject: CN=aa661374929dece15b8da041808c9830f9a103b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4e:54:70:bf:9f:88:1e:c1:59:e2:ec:df:46:
ae:f3:61:9e:17:f3:67:6e:0f:15:1e:54:d2:64:37:
a1:26:8d:3d:00:73:4e:49:40:48:0a:62:5a:c9:c5:
85:38:cf:7f:6c:d8:36:05:72:6c:d7:f0:06:ea:94:
04:9e:f6:96:2d:35:5f:5b:d2:a7:31:10:72:c4:01:
ba:87:90:41:e8:d3:42:f5:2f:1d:1d:06:f5:8f:f3:
90:a3:eb:23:1e:e9:2c:43:16:63:cb:02:14:d4:4a:
13:1a:65:cd:e6:85:f6:04:27:e9:7c:ab:c9:79:71:
53:88:94:d5:39:1d:89:f7:e8:11:c9:97:6b:fe:dc:
c7:aa:f5:a8:89:69:51:dc:c1:e7:51:c2:f9:32:e4:
c5:8f:88:5d:21:fb:02:64:31:3f:b2:ed:a1:8f:8d:
49:21:6d:96:ff:00:21:59:60:eb:0d:db:22:c3:22:
0c:1e:28:a4:2c:4d:c5:81:3e:31:35:dc:0e:bc:12:
49:d6:b7:4e:74:fc:65:36:c0:df:9a:36:16:6a:6a:
c5:53:47:82:da:e3:b9:97:47:ae:20:73:e0:c2:fd:
d1:e9:70:69:a5:41:66:0c:39:de:a9:97:e8:8a:bf:
79:ab:2e:f2:ef:6e:a0:bf:c1:a7:18:ad:86:a7:98:
01:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:57:7F:19:32:A8:1E:D6:FE:75:C2:E5:4C:03:8B:0C:66:D3:43:E6
X509v3 Authority Key Identifier:
keyid:9C:CA:11:0B:7A:6F:04:CB:57:4B:44:E4:67:33:30:7D:DC:D8:3C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/aa661374929dece15b8da041808c9830f9a103b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.108.196.0-190.108.207.255
190.124.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:39:4e:2f:76:98:f4:01:e7:86:1a:4b:c1:d4:b9:a9:18:46:
2a:5e:8b:0d:57:d1:c9:59:76:d8:2e:cc:5a:a6:97:7e:f6:a6:
d7:53:d8:bc:a0:92:85:d4:7d:f5:79:d2:e3:99:c3:95:18:1c:
90:c5:1e:f9:b1:ca:77:7c:de:ff:52:d3:9c:4c:31:10:f6:97:
88:af:47:fa:2e:14:d8:f9:dc:0e:87:8a:23:9b:3d:2e:d2:d3:
c8:bf:65:c3:d4:ac:3e:8c:1e:26:af:37:cb:ea:74:c1:76:dc:
cc:d7:e2:84:f1:ed:4c:f4:1b:8e:65:28:e3:39:b7:98:94:a8:
57:d0:ac:07:19:72:3c:b9:89:33:3f:b8:06:9b:b8:79:c8:23:
27:47:55:d4:7b:8f:27:ba:95:39:8f:11:4b:a0:39:93:69:7b:
17:37:b0:ba:e4:c3:a8:05:60:38:75:68:03:aa:9b:b3:eb:a6:
3d:ee:a0:0b:d7:f3:4f:72:f6:d0:b2:2f:c6:6e:27:3d:ff:c0:
89:7d:83:b0:43:d1:47:41:95:5a:ef:aa:cf:18:46:02:dc:07:
fa:57:95:88:7a:12:7b:71:bd:31:33:1c:cb:36:35:26:95:cd:
50:b2:e6:db:63:7e:c9:8e:49:7c:16:2e:9e:95:32:16:88:7d:
84:02:bb:a3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDDWHGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJl
ZjAyYTYxNTFkMjNmMjIzOTE0YThmNmVlZDk4MDJiNGRmZDJhMGIwHhcNMjEwMzI0
MTQ0MjEzWhcNMjYwMzI0MTQ0MjEzWjAzMTEwLwYDVQQDEyhhYTY2MTM3NDkyOWRl
Y2UxNWI4ZGEwNDE4MDhjOTgzMGY5YTEwM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgE5UcL+fiB7BWeLs30au82GeF/Nnbg8VHlTSZDehJo09AHNO
SUBICmJaycWFOM9/bNg2BXJs1/AG6pQEnvaWLTVfW9KnMRByxAG6h5BB6NNC9S8d
HQb1j/OQo+sjHuksQxZjywIU1EoTGmXN5oX2BCfpfKvJeXFTiJTVOR2J9+gRyZdr
/tzHqvWoiWlR3MHnUcL5MuTFj4hdIfsCZDE/su2hj41JIW2W/wAhWWDrDdsiwyIM
HiikLE3FgT4xNdwOvBJJ1rdOdPxlNsDfmjYWamrFU0eC2uO5l0euIHPgwv3R6XBp
pUFmDDneqZfoir95qy7y726gv8GnGK2Gp5gBAwIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFB1XfxkyqB7W/nXC5UwDiwxm00PmMB8GA1UdIwQYMBaAFJzKEQt6bwTLV0tE
5GczMH3c2DwtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmVmMDJh
NjE1MWQyM2YyMjM5MTRhOGY2ZWVkOTgwMmI0ZGZkMmEwYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzY1MzQ3MmYtYjhkNC00NjRlLTllNDYtOGNmZGMw
MDFjOWIwL2FhNjYxMzc0OTI5ZGVjZTE1YjhkYTA0MTgwOGM5ODMwZjlhMTAzYjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83NjUzNDcyZi1iOGQ0LTQ2NGUtOWU0Ni04Y2Zk
YzAwMWM5YjAvYmVmMDJhNjE1MWQyM2YyMjM5MTRhOGY2ZWVkOTgwMmI0ZGZkMmEw
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAEwFDAMAwQCvmzEAwQEvmzAAwQCvnzcMA0GCSqGSIb3DQEBCwUAA4IB
AQCKOU4vdpj0AeeGGkvB1LmpGEYqXosNV9HJWXbYLsxappd+9qbXU9i8oJKF1H31
edLjmcOVGByQxR75scp3fN7/UtOcTDEQ9peIr0f6LhTY+dwOh4ojmz0u0tPIv2XD
1Kw+jB4mrzfL6nTBdtzM1+KE8e1M9BuOZSjjObeYlKhX0KwHGXI8uYkzP7gGm7h5
yCMnR1XUe48nupU5jxFLoDmTaXsXN7C65MOoBWA4dWgDqpuz66Y97qAL1/NPcvbQ
si/Gbic9/8CJfYOwQ9FHQZVa76rPGEYC3Af6V5WIehJ7cb0xMxzLNjUmlc1Qsubb
Y37Jjkl8Fi6elTIWiH2EAruj
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org