Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/90c589a95d640a819290763d6503305b46a97843.roa
File: 90c589a95d640a819290763d6503305b46a97843.roa (raw, json)
Hash identifier: oixTGbJ+rzeCw5P88QhMvjAUQa0dm8NnsuFu6gaevIY=
Subject key identifier: E7:5D:AF:7A:9C:85:76:B5:42:76:8E:AA:7B:C9:88:DE:39:0C:53:83
Certificate issuer: /CN=0346440b241d40bd970699e1c0567cf9a1f8b922
Certificate serial: 0BFF7E
Authority key identifier: 30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/90c589a95d640a819290763d6503305b46a97843.roa
Signing time: Wed 24 Mar 2021 14:44:35 +0000
ROA not before: Wed 24 Mar 2021 14:44:33 +0000
ROA not after: Tue 24 Mar 2026 14:44:33 +0000
asID: 8151
IP address blocks: 192.100.232.0/23 maxlen: 24
189.132.192.0/19 maxlen: 24
189.132.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 786302 (0xbff7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0346440b241d40bd970699e1c0567cf9a1f8b922
Validity
Not Before: Mar 24 14:44:33 2021 GMT
Not After : Mar 24 14:44:33 2026 GMT
Subject: CN=90c589a95d640a819290763d6503305b46a97843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:2c:31:d6:60:0a:65:d4:f0:59:18:c9:a8:
f9:2d:41:70:00:7a:26:b8:0c:87:17:48:69:b9:db:
b9:a6:d3:ce:df:57:61:24:57:8a:90:e3:6a:be:24:
ae:7e:da:65:d4:53:86:40:d9:1d:a9:f6:ee:d2:7a:
61:d5:39:7c:66:73:f2:7b:a1:37:e2:06:4f:60:4c:
ce:72:b3:5c:14:84:53:11:37:7d:3d:b3:08:9d:80:
e3:e9:d3:3e:70:ba:28:e7:d5:73:56:10:45:8b:2f:
33:7c:fc:a6:77:e3:1d:e4:69:9d:e6:72:d1:7c:cc:
6f:29:74:5a:ed:2c:71:2f:9e:61:51:83:79:ed:0a:
3c:60:ca:b4:fb:5b:07:7f:9f:c1:bb:e8:01:fc:92:
ce:3a:fc:89:2e:de:59:59:c6:2f:11:b7:25:fa:de:
ff:d4:77:46:41:d0:22:d0:0d:69:7b:7b:7f:ea:bf:
86:92:2b:5e:3b:db:c0:fc:3d:06:72:fd:5b:85:97:
6a:e2:b9:33:d0:3a:69:c2:b0:0e:95:c6:4a:42:21:
a9:38:66:76:4e:a8:02:64:af:52:65:39:24:84:94:
53:df:93:07:e9:0d:d0:6d:7c:be:31:ca:08:b3:d9:
99:a0:b3:92:f9:25:68:69:5d:93:e9:46:73:00:c2:
60:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5D:AF:7A:9C:85:76:B5:42:76:8E:AA:7B:C9:88:DE:39:0C:53:83
X509v3 Authority Key Identifier:
keyid:30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/90c589a95d640a819290763d6503305b46a97843.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/0346440b241d40bd970699e1c0567cf9a1f8b922.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.132.192.0/18
192.100.232.0/23
Signature Algorithm: sha256WithRSAEncryption
83:bb:27:fe:a5:f5:77:28:c6:29:ad:d3:08:38:b2:80:62:78:
f6:9b:2d:2f:4f:6f:45:92:64:24:2f:59:08:e7:be:2a:a7:4d:
d7:4f:d4:12:07:88:5e:08:1b:1a:c6:24:01:24:4b:31:cd:c6:
b8:cb:bd:50:51:31:18:1b:e7:51:cf:cc:33:d7:26:24:71:db:
29:02:46:97:64:61:f7:b6:61:ec:21:84:9c:f2:55:ae:5b:db:
ad:18:09:94:4a:f1:c0:51:2b:23:f2:5f:47:64:27:c6:84:a6:
c5:0d:12:5a:b0:ce:20:e5:c1:1c:6f:38:7d:de:06:28:7b:92:
8d:8a:9f:bd:6a:93:d5:6d:0a:a8:ba:54:96:6e:bd:53:c3:21:
ca:7d:93:93:13:8b:97:ab:ec:f4:26:c9:df:79:92:70:4e:67:
24:6c:d6:6c:82:40:f7:c0:3a:49:93:b1:3b:da:bd:07:cc:9b:
72:be:e5:c6:64:7f:d4:6c:8c:85:4e:4d:2f:c5:8b:1a:95:62:
6c:3d:d3:a7:66:9e:72:27:5c:c8:21:d9:4f:a8:52:26:84:b6:
20:73:2f:a1:9c:f8:5c:e4:5d:3b:92:b2:f2:d5:07:a3:94:2d:
cf:ad:79:9e:8e:07:70:e7:21:64:35:19:5a:2f:b6:d3:2b:7b:
40:d9:6b:56
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDC/9+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAz
NDY0NDBiMjQxZDQwYmQ5NzA2OTllMWMwNTY3Y2Y5YTFmOGI5MjIwHhcNMjEwMzI0
MTQ0NDMzWhcNMjYwMzI0MTQ0NDMzWjAzMTEwLwYDVQQDEyg5MGM1ODlhOTVkNjQw
YTgxOTI5MDc2M2Q2NTAzMzA1YjQ2YTk3ODQzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApbosMdZgCmXU8FkYyaj5LUFwAHomuAyHF0hpudu5ptPO31dh
JFeKkONqviSuftpl1FOGQNkdqfbu0nph1Tl8ZnPye6E34gZPYEzOcrNcFIRTETd9
PbMInYDj6dM+cLoo59VzVhBFiy8zfPymd+Md5Gmd5nLRfMxvKXRa7SxxL55hUYN5
7Qo8YMq0+1sHf5/Bu+gB/JLOOvyJLt5ZWcYvEbcl+t7/1HdGQdAi0A1pe3t/6r+G
kiteO9vA/D0Gcv1bhZdq4rkz0DppwrAOlcZKQiGpOGZ2TqgCZK9SZTkkhJRT35MH
6Q3QbXy+McoIs9mZoLOS+SVoaV2T6UZzAMJgVQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFOddr3qchXa1QnaOqnvJiN45DFODMB8GA1UdIwQYMBaAFDBKlObd/bEFp5Qr
ntbrAIJlYl+RMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDM0NjQ0
MGIyNDFkNDBiZDk3MDY5OWUxYzA1NjdjZjlhMWY4YjkyMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTU0OTBlYzMtMzZhZi00ZDYzLTliMzgtYzRkODNk
OGZkODUzLzkwYzU4OWE5NWQ2NDBhODE5MjkwNzYzZDY1MDMzMDViNDZhOTc4NDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NTQ5MGVjMy0zNmFmLTRkNjMtOWIzOC1jNGQ4
M2Q4ZmQ4NTMvMDM0NjQ0MGIyNDFkNDBiZDk3MDY5OWUxYzA1NjdjZjlhMWY4Yjky
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEBr2EwAMEAcBk6DANBgkqhkiG9w0BAQsFAAOCAQEAg7sn/qX1
dyjGKa3TCDiygGJ49pstL09vRZJkJC9ZCOe+KqdN10/UEgeIXggbGsYkASRLMc3G
uMu9UFExGBvnUc/MM9cmJHHbKQJGl2Rh97Zh7CGEnPJVrlvbrRgJlErxwFErI/Jf
R2QnxoSmxQ0SWrDOIOXBHG84fd4GKHuSjYqfvWqT1W0KqLpUlm69U8Mhyn2TkxOL
l6vs9CbJ33mScE5nJGzWbIJA98A6SZOxO9q9B8ybcr7lxmR/1GyMhU5NL8WLGpVi
bD3Tp2aecidcyCHZT6hSJoS2IHMvoZz4XORdO5Ky8tUHo5Qtz615no4HcOchZDUZ
Wi+20yt7QNlrVg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org