Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/923ab03a9b270d4fe2a42f54fc6929ab0b0956e2.roa
File: 923ab03a9b270d4fe2a42f54fc6929ab0b0956e2.roa (raw, json)
Hash identifier: Cm/DczuV+UQikmtLCuHcUtulLQyFJnI3MHyhC1vs3O0=
Subject key identifier: 59:5D:F2:0A:B9:BB:48:99:3E:73:07:31:87:9A:03:BE:44:FE:61:7D
Certificate issuer: /CN=c4935075ec435dbda09406df9fa324ff802f1d14
Certificate serial: 21ED12
Authority key identifier: 76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/923ab03a9b270d4fe2a42f54fc6929ab0b0956e2.roa
Signing time: Sat 24 Jun 2023 01:42:01 +0000
ROA not before: Fri 23 Jun 2023 01:42:01 +0000
ROA not after: Tue 24 Jun 2025 01:42:01 +0000
asID: 23243
IP address blocks: 190.14.7.0/24 maxlen: 24
190.14.8.0/24 maxlen: 24
190.14.9.0/24 maxlen: 24
190.14.10.0/24 maxlen: 24
190.14.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2223378 (0x21ed12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4935075ec435dbda09406df9fa324ff802f1d14
Validity
Not Before: Jun 23 01:42:01 2023 GMT
Not After : Jun 24 01:42:01 2025 GMT
Subject: CN=923ab03a9b270d4fe2a42f54fc6929ab0b0956e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:aa:18:86:f3:90:72:d3:9e:1f:a5:cc:4f:
70:d7:79:cc:6c:22:5e:ef:73:42:97:92:26:0d:10:
40:31:1a:20:67:e4:47:82:77:ee:6b:12:9b:38:43:
9a:15:a2:d1:f7:b4:71:88:d9:f9:b7:95:1a:96:34:
6a:99:1b:82:12:40:b9:74:2c:4e:e5:92:10:5f:95:
8d:4b:92:3a:10:56:a7:b1:39:a7:7f:e4:61:32:1a:
a1:b3:d1:1e:9a:c5:2d:7d:af:14:00:81:57:87:4e:
60:2b:7c:02:9a:d5:73:ba:41:6d:31:e8:b4:d1:f4:
97:dd:8a:5c:af:18:17:07:f8:27:e7:1d:52:8a:8b:
2b:2d:82:8b:ee:e1:24:45:6e:ef:fe:e6:d3:a1:04:
e2:4b:2a:0a:41:63:a8:29:3d:df:72:2c:38:cd:ea:
16:2c:b1:c5:e2:82:a5:3f:ba:fb:48:4f:b3:eb:1e:
4a:b7:5f:92:12:d7:f6:b1:7e:10:b9:22:c8:65:23:
fc:66:8a:ac:8b:d5:4c:31:fb:40:19:67:9d:83:01:
cc:f7:e9:61:3b:75:06:d9:5b:5f:8b:e3:0c:bf:03:
ec:ab:25:6a:a0:b7:07:64:d5:97:e7:81:36:d9:4f:
c5:20:61:bd:5c:ed:14:be:1f:d8:cd:46:24:b4:30:
ad:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5D:F2:0A:B9:BB:48:99:3E:73:07:31:87:9A:03:BE:44:FE:61:7D
X509v3 Authority Key Identifier:
keyid:76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/923ab03a9b270d4fe2a42f54fc6929ab0b0956e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c4935075ec435dbda09406df9fa324ff802f1d14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.14.7.0-190.14.11.255
Signature Algorithm: sha256WithRSAEncryption
34:85:fa:2d:da:95:f0:84:bf:f9:e3:61:d8:ed:e9:0b:ad:d6:
f0:44:b2:61:c5:bc:67:fc:65:6f:4c:0b:de:d7:c3:74:b3:1e:
e4:ee:e7:cc:c7:1e:16:64:94:02:3c:a7:a9:2a:b7:5d:e7:25:
cd:f8:09:63:f6:78:12:f8:d4:b3:18:0c:a0:5b:b0:96:3c:f0:
00:dd:de:18:d8:53:27:d5:3a:69:44:59:5a:00:99:be:a3:5b:
88:12:97:31:2c:76:47:40:11:4d:a7:aa:98:53:25:96:81:2e:
93:88:9a:0a:9b:9e:68:d4:fd:c1:17:e6:c0:14:f1:73:f5:9b:
39:e3:de:04:17:b8:7c:b5:70:c9:9d:1a:98:8f:98:b1:60:e8:
47:77:da:fb:49:8d:eb:30:49:1a:d8:1b:86:e8:31:b0:7c:fc:
9f:01:68:02:28:b0:88:a8:5a:ce:4c:16:7d:86:e3:ce:72:55:
44:6d:60:83:db:3d:71:cf:77:54:7c:c8:fd:c6:48:45:d0:99:
2e:2f:94:10:bb:d1:dc:8f:28:e8:0d:c3:1c:69:ef:ce:46:25:
37:31:ac:c4:d9:70:48:ef:64:aa:43:a8:6f:b6:b7:92:64:67:
22:3f:ac:81:80:49:2d:85:a7:bd:23:d9:87:a3:14:fd:75:9f:
74:51:95:5a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDIe0SMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM0
OTM1MDc1ZWM0MzVkYmRhMDk0MDZkZjlmYTMyNGZmODAyZjFkMTQwHhcNMjMwNjIz
MDE0MjAxWhcNMjUwNjI0MDE0MjAxWjAzMTEwLwYDVQQDEyg5MjNhYjAzYTliMjcw
ZDRmZTJhNDJmNTRmYzY5MjlhYjBiMDk1NmUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtC2qGIbzkHLTnh+lzE9w13nMbCJe73NCl5ImDRBAMRogZ+RH
gnfuaxKbOEOaFaLR97RxiNn5t5UaljRqmRuCEkC5dCxO5ZIQX5WNS5I6EFansTmn
f+RhMhqhs9EemsUtfa8UAIFXh05gK3wCmtVzukFtMei00fSX3YpcrxgXB/gn5x1S
iosrLYKL7uEkRW7v/ubToQTiSyoKQWOoKT3fciw4zeoWLLHF4oKlP7r7SE+z6x5K
t1+SEtf2sX4QuSLIZSP8Zoqsi9VMMftAGWedgwHM9+lhO3UG2Vtfi+MMvwPsqyVq
oLcHZNWX54E22U/FIGG9XO0Uvh/YzUYktDCt/QIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFFld8gq5u0iZPnMHMYeaA75E/mF9MB8GA1UdIwQYMBaAFHaDFvCIXb+9If/1
Le0rh77RU9ftMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzQ5MzUw
NzVlYzQzNWRiZGEwOTQwNmRmOWZhMzI0ZmY4MDJmMWQxNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmVmOTFlZTEtNDIyNC00YzFjLWFlZTYtNWNlMTM4
NjQxYzQ4LzkyM2FiMDNhOWIyNzBkNGZlMmE0MmY1NGZjNjkyOWFiMGIwOTU2ZTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZWY5MWVlMS00MjI0LTRjMWMtYWVlNi01Y2Ux
Mzg2NDFjNDgvYzQ5MzUwNzVlYzQzNWRiZGEwOTQwNmRmOWZhMzI0ZmY4MDJmMWQx
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAvg4HAwQCvg4IMA0GCSqGSIb3DQEBCwUAA4IBAQA0hfot
2pXwhL/542HY7ekLrdbwRLJhxbxn/GVvTAve18N0sx7k7ufMxx4WZJQCPKepKrdd
5yXN+Alj9ngS+NSzGAygW7CWPPAA3d4Y2FMn1TppRFlaAJm+o1uIEpcxLHZHQBFN
p6qYUyWWgS6TiJoKm55o1P3BF+bAFPFz9Zs5494EF7h8tXDJnRqYj5ixYOhHd9r7
SY3rMEka2BuG6DGwfPyfAWgCKLCIqFrOTBZ9huPOclVEbWCD2z1xz3dUfMj9xkhF
0JkuL5QQu9HcjyjoDcMcae/ORiU3MazE2XBI72SqQ6hvtreSZGciP6yBgEkthae9
I9mHoxT9dZ90UZVa
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-ams.rpki-client.org