Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/f05d9c66ffac9c5afed02a40ee47a2718171a481.roa
File: f05d9c66ffac9c5afed02a40ee47a2718171a481.roa (raw, json)
Hash identifier: XzUnPOr3l8QmlarXHFvFl5UoEswH8PCjpgKsnHqtTMs=
Subject key identifier: 11:4C:1A:F5:F3:48:9B:31:64:54:71:A8:23:CF:1D:85:F6:80:D6:7F
Certificate issuer: /CN=ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8
Certificate serial: 1A5470
Authority key identifier: 89:45:5B:B7:4F:80:8D:EB:D1:D4:05:DA:C8:34:E4:27:DC:2B:30:54
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/f05d9c66ffac9c5afed02a40ee47a2718171a481.roa
Signing time: Wed 31 Aug 2022 15:56:15 +0000
ROA not before: Wed 03 Nov 2021 21:00:23 +0000
ROA not after: Tue 03 Nov 2026 21:00:23 +0000
asID: 265696
IP address blocks: 131.196.210.0/23 maxlen: 23
131.196.210.0/24 maxlen: 24
131.196.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1725552 (0x1a5470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8
Validity
Not Before: Nov 3 21:00:23 2021 GMT
Not After : Nov 3 21:00:23 2026 GMT
Subject: CN=f05d9c66ffac9c5afed02a40ee47a2718171a481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:37:d4:50:4f:f5:6e:b4:64:ec:0d:dc:5a:76:
4c:d4:23:90:fd:1f:e8:0d:08:ea:36:ab:7e:eb:68:
90:76:58:a2:ff:8f:78:1f:3f:df:6e:a7:df:a3:5e:
8c:fd:d9:5f:c3:14:10:c6:f1:e7:e0:b8:c4:7a:5b:
73:2e:90:14:cb:35:81:09:08:26:f4:f2:ef:fb:60:
84:fa:03:b4:11:1c:00:20:7c:43:18:f5:93:b1:cc:
a8:e9:cd:26:47:84:93:92:b4:5f:5f:f2:cc:b7:19:
50:23:06:6a:a1:2b:44:45:b1:54:b7:b1:3a:1a:0b:
c4:4c:d1:f6:95:76:c5:20:66:c4:e5:c9:a0:80:6c:
d2:2a:99:8b:99:d3:39:72:23:52:fd:b5:e9:76:f6:
31:2b:c8:9d:f1:3d:37:27:e9:42:14:ae:4e:e9:fb:
a7:97:28:a9:83:11:0d:a3:56:65:d6:5a:88:fd:c9:
dd:23:77:22:66:00:d6:43:0a:e6:40:7d:93:c1:ec:
6a:7f:25:b4:b8:50:bc:86:3e:7d:81:46:c4:c1:72:
9f:33:42:1f:aa:a9:eb:95:2b:26:39:ba:a2:87:6f:
39:26:fb:1a:ee:2e:00:0e:7b:50:bf:e5:5a:99:67:
ff:d7:6e:1c:df:08:a3:37:48:fd:0f:31:3a:54:62:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4C:1A:F5:F3:48:9B:31:64:54:71:A8:23:CF:1D:85:F6:80:D6:7F
X509v3 Authority Key Identifier:
keyid:89:45:5B:B7:4F:80:8D:EB:D1:D4:05:DA:C8:34:E4:27:DC:2B:30:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/f05d9c66ffac9c5afed02a40ee47a2718171a481.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.210.0/23
Signature Algorithm: sha256WithRSAEncryption
21:44:3d:8e:fe:4c:c2:0d:f9:06:b7:78:d1:4b:f5:85:e1:54:
8f:96:ea:87:cd:d6:ff:12:5c:56:3c:7d:c0:45:cc:91:b1:20:
d4:0f:13:e1:6f:fd:35:81:a2:0e:7f:65:93:40:76:26:5f:c2:
3b:ad:37:0a:29:6b:4f:4f:fe:bf:93:74:29:ea:e8:44:9d:4f:
5d:b7:45:a1:7e:d6:31:44:02:8e:a3:0d:4a:95:ef:50:bc:f8:
d6:cd:9a:c8:68:c5:9d:66:4a:d7:3d:33:be:f1:30:f5:94:00:
01:d5:8c:ea:dd:a3:8c:9f:f8:1a:ae:e9:27:49:0b:a0:e4:0b:
94:dd:12:20:f7:d7:72:9d:ed:37:36:bd:29:d5:9e:b5:39:95:
13:b1:d6:7e:40:cc:eb:db:c9:80:5f:4a:a9:4f:c5:04:18:e7:
fa:a7:36:46:44:69:ec:76:9e:0a:3b:33:70:34:ca:46:86:70:
b7:73:5a:3d:12:e8:7a:34:f3:3d:5b:fb:80:7a:5c:4c:2a:d3:
ed:f4:fc:79:a8:1e:1b:05:85:42:99:12:af:54:7a:81:8f:c7:
ba:99:cb:c9:27:ee:e7:1e:4d:59:89:e5:18:07:30:46:80:e3:
97:66:78:0a:6a:01:23:99:b9:85:c8:4b:24:80:5d:f2:42:ad:
ea:b5:7e:26
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGlRwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFk
YTBhOGIxYjQ2MTIxZDhkY2EwN2I0ZTVlMWVmZDIwYjUwZDYwZDgwHhcNMjExMTAz
MjEwMDIzWhcNMjYxMTAzMjEwMDIzWjAzMTEwLwYDVQQDEyhmMDVkOWM2NmZmYWM5
YzVhZmVkMDJhNDBlZTQ3YTI3MTgxNzFhNDgxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhjfUUE/1brRk7A3cWnZM1COQ/R/oDQjqNqt+62iQdlii/494
Hz/fbqffo16M/dlfwxQQxvHn4LjEeltzLpAUyzWBCQgm9PLv+2CE+gO0ERwAIHxD
GPWTscyo6c0mR4STkrRfX/LMtxlQIwZqoStERbFUt7E6GgvETNH2lXbFIGbE5cmg
gGzSKpmLmdM5ciNS/bXpdvYxK8id8T03J+lCFK5O6funlyipgxENo1Zl1lqI/cnd
I3ciZgDWQwrmQH2TwexqfyW0uFC8hj59gUbEwXKfM0IfqqnrlSsmObqih285Jvsa
7i4ADntQv+VamWf/124c3wijN0j9DzE6VGI42wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBFMGvXzSJsxZFRxqCPPHYX2gNZ/MB8GA1UdIwQYMBaAFIlFW7dPgI3r0dQF
2sg05CfcKzBUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWRhMGE4
YjFiNDYxMjFkOGRjYTA3YjRlNWUxZWZkMjBiNTBkNjBkOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTQ0ODZlY2YtNTU5MC00ZTczLWEyOWQtMjgwODMy
NzJiYTVhL2YwNWQ5YzY2ZmZhYzljNWFmZWQwMmE0MGVlNDdhMjcxODE3MWE0ODEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNDQ4NmVjZi01NTkwLTRlNzMtYTI5ZC0yODA4
MzI3MmJhNWEvYWRhMGE4YjFiNDYxMjFkOGRjYTA3YjRlNWUxZWZkMjBiNTBkNjBk
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAYPE0jANBgkqhkiG9w0BAQsFAAOCAQEAIUQ9jv5Mwg35Brd4
0Uv1heFUj5bqh83W/xJcVjx9wEXMkbEg1A8T4W/9NYGiDn9lk0B2Jl/CO603Cilr
T0/+v5N0KeroRJ1PXbdFoX7WMUQCjqMNSpXvULz41s2ayGjFnWZK1z0zvvEw9ZQA
AdWM6t2jjJ/4Gq7pJ0kLoOQLlN0SIPfXcp3tNza9KdWetTmVE7HWfkDM69vJgF9K
qU/FBBjn+qc2RkRp7HaeCjszcDTKRoZwt3NaPRLoejTzPVv7gHpcTCrT7fT8eage
GwWFQpkSr1R6gY/HupnLySfu5x5NWYnlGAcwRoDjl2Z4CmoBI5m5hchLJIBd8kKt
6rV+Jg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org