Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/3e3af12cea7483a5eaf68b3eafdfd7f788aa6c32.roa
File: 3e3af12cea7483a5eaf68b3eafdfd7f788aa6c32.roa (raw, json)
Hash identifier: eyk0GPhup3nExopNzcijePcZdP/LuMOT42ZfbAPig9s=
Subject key identifier: 54:B6:BF:32:DD:CD:B9:A1:B3:E5:7B:42:4F:90:16:E8:C2:C6:33:88
Certificate issuer: /CN=0c4557be1a84f05a56a15cb22513acd961fb70fa
Certificate serial: 20A933
Authority key identifier: 6A:F8:BD:09:59:77:BC:67:70:C2:C2:34:20:F9:8A:39:EC:B6:12:16
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c4557be1a84f05a56a15cb22513acd961fb70fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/3e3af12cea7483a5eaf68b3eafdfd7f788aa6c32.roa
Signing time: Wed 22 Nov 2023 07:30:00 +0000
ROA not before: Wed 22 Nov 2023 07:30:00 +0000
ROA not after: Fri 21 Nov 2025 07:30:00 +0000
asID: 269936
IP address blocks: 190.83.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140467 (0x20a933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4557be1a84f05a56a15cb22513acd961fb70fa
Validity
Not Before: Nov 22 07:30:00 2023 GMT
Not After : Nov 21 07:30:00 2025 GMT
Subject: CN=3e3af12cea7483a5eaf68b3eafdfd7f788aa6c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:37:4d:06:24:f5:ff:72:4a:47:ad:5a:71:
42:e5:9e:03:69:a8:3d:48:75:b6:68:9e:ff:37:be:
d8:a8:96:20:9a:7b:c3:a9:41:94:bf:81:0a:42:2a:
63:dd:30:04:28:41:18:51:03:99:d6:fd:9a:e7:dc:
c9:0a:15:42:e1:65:4a:83:c1:61:c6:ed:57:b2:f9:
9b:45:5b:27:39:f6:94:75:4c:72:e5:03:1f:da:01:
ae:14:94:b4:24:9b:00:4c:06:ec:7b:f1:37:5d:81:
60:d3:39:d2:44:b8:3e:12:db:20:76:83:f1:ff:43:
2d:9e:a3:75:03:05:be:43:ec:8b:3a:2f:19:62:00:
36:a0:89:ed:68:8f:5d:f1:5d:d5:a1:3a:92:3b:cf:
a3:d4:2f:5e:43:2a:9d:16:7c:68:10:d6:3b:5d:b1:
5b:37:d7:d6:a5:fd:6a:20:8e:02:11:76:02:4e:4a:
6d:a2:c1:38:29:f9:dc:02:86:5f:8f:31:fe:5e:07:
03:48:8c:bb:c2:91:b7:34:53:71:81:34:51:cf:7c:
8e:3e:af:46:69:07:d1:dc:9d:02:d2:86:a5:14:47:
02:20:b8:cd:de:23:c2:0e:b5:48:0b:d6:e6:31:42:
3d:aa:33:0a:58:29:fb:90:9c:db:0a:48:25:ca:c2:
4a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B6:BF:32:DD:CD:B9:A1:B3:E5:7B:42:4F:90:16:E8:C2:C6:33:88
X509v3 Authority Key Identifier:
keyid:6A:F8:BD:09:59:77:BC:67:70:C2:C2:34:20:F9:8A:39:EC:B6:12:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c4557be1a84f05a56a15cb22513acd961fb70fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/3e3af12cea7483a5eaf68b3eafdfd7f788aa6c32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/0c4557be1a84f05a56a15cb22513acd961fb70fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.83.104.0/22
Signature Algorithm: sha256WithRSAEncryption
52:bb:11:98:1d:ea:27:fc:e3:8b:af:05:25:0f:3e:57:1b:82:
a9:44:0b:02:12:fd:dc:17:d4:ce:4a:e0:08:d5:3a:64:79:81:
51:1a:8f:c4:af:b5:28:7a:6e:41:12:63:48:8d:a2:e3:9a:22:
80:3a:f4:db:02:d4:06:b2:ab:97:29:a3:1f:f6:0e:4b:f4:22:
d7:9b:f9:b6:d7:40:41:df:6b:87:e5:df:34:35:6c:da:ed:2d:
c9:68:82:e1:e2:65:77:52:e3:25:c3:f7:a1:8a:4d:78:78:33:
c4:e8:42:d6:cb:d0:ed:8b:8f:5f:4a:dd:bb:4c:bb:f7:0a:c2:
22:8a:a4:88:8f:95:ec:04:15:9c:71:0b:d6:39:d6:43:03:3c:
e2:a6:b4:27:0c:08:05:9c:bc:37:61:41:9b:44:7a:bc:64:0c:
ca:1c:70:a0:76:e0:2a:7b:b4:d9:e2:34:94:24:69:3e:38:64:
1a:8c:a4:3b:c1:07:26:7b:01:03:15:9e:de:fe:ad:8b:c4:2a:
08:b7:ae:0d:cb:7d:56:46:26:9f:1f:ab:be:92:47:72:54:17:
43:dd:18:3a:6c:9a:76:e5:e6:de:d0:c3:50:9e:08:f5:ca:f0:
95:46:9b:3c:6c:65:77:67:24:1f:44:f2:cb:17:c0:e6:4a:ae:
e3:b5:f5:9d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIKkzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBj
NDU1N2JlMWE4NGYwNWE1NmExNWNiMjI1MTNhY2Q5NjFmYjcwZmEwHhcNMjMxMTIy
MDczMDAwWhcNMjUxMTIxMDczMDAwWjAzMTEwLwYDVQQDEygzZTNhZjEyY2VhNzQ4
M2E1ZWFmNjhiM2VhZmRmZDdmNzg4YWE2YzMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsa83TQYk9f9ySketWnFC5Z4Daag9SHW2aJ7/N77YqJYgmnvD
qUGUv4EKQipj3TAEKEEYUQOZ1v2a59zJChVC4WVKg8Fhxu1XsvmbRVsnOfaUdUxy
5QMf2gGuFJS0JJsATAbse/E3XYFg0znSRLg+EtsgdoPx/0MtnqN1AwW+Q+yLOi8Z
YgA2oIntaI9d8V3VoTqSO8+j1C9eQyqdFnxoENY7XbFbN9fWpf1qII4CEXYCTkpt
osE4KfncAoZfjzH+XgcDSIy7wpG3NFNxgTRRz3yOPq9GaQfR3J0C0oalFEcCILjN
3iPCDrVIC9bmMUI9qjMKWCn7kJzbCkglysJKRQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFS2vzLdzbmhs+V7Qk+QFujCxjOIMB8GA1UdIwQYMBaAFGr4vQlZd7xncMLC
NCD5ijnsthIWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGM0NTU3
YmUxYTg0ZjA1YTU2YTE1Y2IyMjUxM2FjZDk2MWZiNzBmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjgzMDBkYjItYTM1Mi00ZGY5LTk3YjItYWMzM2E1
YWUxNGQ4LzNlM2FmMTJjZWE3NDgzYTVlYWY2OGIzZWFmZGZkN2Y3ODhhYTZjMzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iODMwMGRiMi1hMzUyLTRkZjktOTdiMi1hYzMz
YTVhZTE0ZDgvMGM0NTU3YmUxYTg0ZjA1YTU2YTE1Y2IyMjUxM2FjZDk2MWZiNzBm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr5TaDANBgkqhkiG9w0BAQsFAAOCAQEAUrsRmB3qJ/zji68F
JQ8+VxuCqUQLAhL93BfUzkrgCNU6ZHmBURqPxK+1KHpuQRJjSI2i45oigDr02wLU
BrKrlymjH/YOS/Qi15v5ttdAQd9rh+XfNDVs2u0tyWiC4eJld1LjJcP3oYpNeHgz
xOhC1svQ7YuPX0rdu0y79wrCIoqkiI+V7AQVnHEL1jnWQwM84qa0JwwIBZy8N2FB
m0R6vGQMyhxwoHbgKnu02eI0lCRpPjhkGoykO8EHJnsBAxWe3v6ti8QqCLeuDct9
VkYmnx+rvpJHclQXQ90YOmyaduXm3tDDUJ4I9crwlUabPGxld2ckH0TyyxfA5kqu
47X1nQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org