Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/301e2b5cda89375ff601810cf57744fda186f4af.roa
File: 301e2b5cda89375ff601810cf57744fda186f4af.roa (raw, json)
Hash identifier: Aa3VWJ37Kh79vF4NU8mv/o2kO+xV/0fOFln9oREZe3U=
Subject key identifier: E2:C9:A3:63:48:EC:CB:99:7A:43:66:5C:27:7B:95:20:F4:81:67:F4
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 2583F9
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/301e2b5cda89375ff601810cf57744fda186f4af.roa
Signing time: Wed 28 Jun 2023 22:29:52 +0000
ROA not before: Tue 27 Jun 2023 22:29:52 +0000
ROA not after: Sat 28 Jun 2025 22:29:52 +0000
asID: 264646
IP address blocks: 190.90.224.0/24 maxlen: 24
190.90.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2458617 (0x2583f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Jun 27 22:29:52 2023 GMT
Not After : Jun 28 22:29:52 2025 GMT
Subject: CN=301e2b5cda89375ff601810cf57744fda186f4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:90:38:b6:49:c8:73:fb:9e:cb:c7:7a:3b:07:
0b:a0:8a:26:8c:d6:4e:16:c0:8f:96:15:51:2a:0f:
5b:58:58:4c:00:34:22:5d:07:9c:d9:c6:b7:11:e8:
a9:c0:ee:e3:f5:8a:ec:9f:84:d6:86:34:18:1c:92:
60:62:ae:f2:a7:c3:8e:c6:c8:0d:0d:89:32:10:a5:
dc:04:dd:aa:4e:c3:8e:54:1c:34:e3:f9:26:8d:52:
5f:30:48:08:60:c8:57:2c:92:98:89:d5:21:13:7a:
27:73:1b:1c:26:55:bd:73:67:f0:6e:c2:74:52:32:
b2:34:3f:2b:ba:b8:9c:be:99:55:72:ec:ff:2c:40:
d9:f0:20:29:f0:09:f8:fd:d2:dd:b8:a6:81:ce:ac:
35:25:1b:ea:c5:7d:86:d3:29:39:ac:d0:79:30:ed:
7d:f9:3d:02:04:33:27:2c:8c:07:19:1c:ab:4d:c3:
ff:ff:23:ec:b6:61:5b:c5:b2:d9:5f:f0:81:60:6f:
17:82:12:d3:ce:82:97:9c:b2:ff:8c:d1:0e:5c:cb:
f2:fa:56:f9:87:47:38:0f:75:d8:6b:22:da:af:31:
2a:a3:65:70:9b:e4:74:41:6f:7e:81:ae:e2:36:a3:
3d:eb:8a:60:f8:36:df:68:5b:81:62:48:29:1d:85:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C9:A3:63:48:EC:CB:99:7A:43:66:5C:27:7B:95:20:F4:81:67:F4
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/301e2b5cda89375ff601810cf57744fda186f4af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.138.0/24
190.90.224.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:50:66:81:45:3c:3f:ee:51:a4:32:be:7e:cb:cf:80:9f:d8:
5f:3d:6f:10:93:ab:a3:61:da:7b:91:0d:b5:fc:3d:0e:87:7c:
8e:83:19:85:51:33:5c:55:82:f3:d6:8a:c8:9c:7b:b5:7f:ca:
67:3e:ca:46:17:66:dd:4a:d4:ed:ea:e2:60:90:7f:47:54:71:
83:99:96:bd:55:27:b1:4f:9b:7d:5f:65:a3:90:0e:0e:c5:71:
97:28:0f:d1:d4:fb:c5:de:b3:59:c5:cc:98:48:5d:f1:6b:9b:
50:0c:18:1e:18:e4:94:d2:7d:07:fa:43:a2:2e:be:58:10:ad:
af:1b:1f:67:e9:74:6e:e0:67:ed:f9:33:89:e2:cf:05:77:f2:
66:87:ae:6e:8f:96:cb:f3:d0:4b:08:49:05:8e:66:af:77:c3:
49:62:dd:ad:ca:43:b9:42:7d:25:3a:ea:1f:37:9b:f0:da:5e:
d4:02:69:01:d8:cd:36:68:63:2d:63:57:ea:a2:f7:30:a5:b6:
3c:12:74:99:35:40:70:7b:0c:ab:38:e0:4f:c0:c9:0e:09:d4:
07:cc:ef:63:17:bf:56:25:26:62:33:aa:2e:50:52:e0:c2:c0:
bc:75:3a:0d:bb:b4:11:3a:7f:3f:8c:55:fd:12:35:61:b7:08:
72:6a:b5:7f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDJYP5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjMwNjI3
MjIyOTUyWhcNMjUwNjI4MjIyOTUyWjAzMTEwLwYDVQQDEygzMDFlMmI1Y2RhODkz
NzVmZjYwMTgxMGNmNTc3NDRmZGExODZmNGFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk5A4tknIc/uey8d6OwcLoIomjNZOFsCPlhVRKg9bWFhMADQi
XQec2ca3EeipwO7j9Yrsn4TWhjQYHJJgYq7yp8OOxsgNDYkyEKXcBN2qTsOOVBw0
4/kmjVJfMEgIYMhXLJKYidUhE3oncxscJlW9c2fwbsJ0UjKyND8ruricvplVcuz/
LEDZ8CAp8An4/dLduKaBzqw1JRvqxX2G0yk5rNB5MO19+T0CBDMnLIwHGRyrTcP/
/yPstmFbxbLZX/CBYG8XghLTzoKXnLL/jNEOXMvy+lb5h0c4D3XYayLarzEqo2Vw
m+R0QW9+ga7iNqM964pg+DbfaFuBYkgpHYUKDQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFOLJo2NI7MuZekNmXCd7lSD0gWf0MB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5LzMwMWUyYjVjZGE4OTM3NWZmNjAxODEwY2Y1Nzc0NGZkYTE4NmY0YWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAL5aigMEAL5a4DANBgkqhkiG9w0BAQsFAAOCAQEAK1BmgUU8
P+5RpDK+fsvPgJ/YXz1vEJOro2Hae5ENtfw9Dod8joMZhVEzXFWC89aKyJx7tX/K
Zz7KRhdm3UrU7eriYJB/R1Rxg5mWvVUnsU+bfV9lo5AODsVxlygP0dT7xd6zWcXM
mEhd8WubUAwYHhjklNJ9B/pDoi6+WBCtrxsfZ+l0buBn7fkzieLPBXfyZoeubo+W
y/PQSwhJBY5mr3fDSWLdrcpDuUJ9JTrqHzeb8Npe1AJpAdjNNmhjLWNX6qL3MKW2
PBJ0mTVAcHsMqzjgT8DJDgnUB8zvYxe/ViUmYjOqLlBS4MLAvHU6Dbu0ETp/P4xV
/RI1YbcIcmq1fw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org