Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/90b522c723fa59f0f86bf9a2a0d2d90a8d4ef5e1.roa
File: 90b522c723fa59f0f86bf9a2a0d2d90a8d4ef5e1.roa (raw, json)
Hash identifier: h4Y7dTp903Qdv8Kxx84ACDOui1liy9+gaVwHjqfS6/E=
Subject key identifier: A1:47:87:6F:EB:0B:31:8F:5B:D2:C9:4E:4F:C4:3F:84:46:07:FE:59
Certificate issuer: /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial: 20F5FA
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/90b522c723fa59f0f86bf9a2a0d2d90a8d4ef5e1.roa
Signing time: Mon 12 Jun 2023 15:09:35 +0000
ROA not before: Sun 11 Jun 2023 15:09:34 +0000
ROA not after: Thu 12 Jun 2025 15:09:34 +0000
asID: 27789
IP address blocks: 190.93.64.0/18 maxlen: 24
201.221.69.0/24 maxlen: 24
201.221.72.0/21 maxlen: 24
201.221.80.0/22 maxlen: 24
201.221.84.0/23 maxlen: 24
200.12.240.0/21 maxlen: 24
201.221.93.0/24 maxlen: 24
201.221.94.0/24 maxlen: 24
190.93.0.0/19 maxlen: 24
201.221.64.0/22 maxlen: 24
2800:70::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160122 (0x20f5fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Validity
Not Before: Jun 11 15:09:34 2023 GMT
Not After : Jun 12 15:09:34 2025 GMT
Subject: CN=90b522c723fa59f0f86bf9a2a0d2d90a8d4ef5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:40:24:60:35:d5:41:c1:2f:08:03:c4:f0:
65:6e:7b:78:bd:a7:53:b2:0c:35:1d:3d:7f:d8:c9:
67:dd:be:a4:13:65:29:49:de:cd:63:9f:5f:f1:c3:
63:21:e8:05:c4:2f:f7:1c:c2:92:64:ae:d2:6d:7f:
3a:4d:9c:24:88:e8:6d:a5:dc:4c:7b:8f:61:54:bc:
f4:e2:a0:bf:a9:ee:69:3e:25:17:bd:5d:da:fa:f6:
e6:54:fc:7d:a8:02:75:af:55:e8:ce:5c:84:f1:1b:
00:58:a9:9b:47:7b:a0:38:9e:92:27:bb:e1:68:cf:
49:b2:2a:2c:4c:16:ab:80:f6:83:c9:05:86:12:d7:
e1:24:a6:be:55:30:d9:17:55:08:77:6b:fc:2f:7d:
d9:a7:95:c5:ae:83:55:79:5d:62:4c:80:e3:4c:48:
a3:a3:d9:de:82:a4:7e:96:85:25:e2:89:48:01:9f:
36:d5:87:b2:ee:b6:48:76:e7:dc:0f:f3:0f:c5:ab:
7a:50:38:f8:36:e9:b6:ab:18:e4:32:db:d8:5f:9d:
45:62:6d:76:90:9e:4a:c5:70:ea:94:b5:c4:87:b1:
22:d4:86:ed:89:ed:e7:a0:c7:8e:15:4e:bc:2d:ca:
28:50:b1:45:87:81:f5:80:58:ed:b1:d6:ca:61:1c:
8c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:47:87:6F:EB:0B:31:8F:5B:D2:C9:4E:4F:C4:3F:84:46:07:FE:59
X509v3 Authority Key Identifier:
keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/90b522c723fa59f0f86bf9a2a0d2d90a8d4ef5e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.0.0/19
190.93.64.0/18
200.12.240.0/21
201.221.64.0/22
201.221.69.0/24
201.221.72.0-201.221.85.255
201.221.93.0-201.221.94.255
IPv6:
2800:70::/32
Signature Algorithm: sha256WithRSAEncryption
39:02:2c:b4:8e:2a:cb:77:7e:a6:3c:20:e7:d0:fc:bc:79:af:
f0:70:c9:fc:a5:0d:ef:21:18:cb:78:2c:24:a4:c5:2b:29:1f:
ea:0a:48:5e:02:42:be:21:62:15:a5:7c:2b:91:e3:0e:73:8f:
64:55:7d:42:7e:cd:16:7e:83:14:65:14:13:54:76:4d:d3:0e:
3d:1c:63:b6:f6:a1:08:f0:a1:c5:7b:20:78:eb:d1:13:f5:b6:
c6:e1:9b:73:35:dc:6c:ae:0a:45:c8:13:77:83:ec:4b:21:ed:
a2:6a:e0:d5:f1:ad:72:9e:77:44:13:cc:66:6e:75:4f:e1:3c:
85:2c:be:c3:92:cd:1d:93:e5:bf:b9:79:72:53:dd:46:f5:9e:
52:fd:de:4f:3b:0f:60:58:af:04:46:1e:d9:4a:92:02:e9:b3:
23:01:f9:72:40:a6:bd:4b:8a:fb:de:3c:c5:3f:ee:62:ae:f9:
6d:c6:0f:11:b4:8d:39:b2:6e:55:02:84:d3:cd:86:7a:b8:d2:
fa:4d:f4:4c:1b:5e:d7:9d:63:b6:9a:0a:0d:95:6c:ba:94:59:
a7:21:89:90:2e:02:32:f3:43:72:60:00:89:c6:76:e1:f4:bd:
9a:e6:4e:65:de:2d:79:75:ac:4c:36:c7:34:f5:a3:79:ec:6f:
42:48:b2:cc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIDIPX6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZi
MmMzM2ZhMDE5MDFmNzAzZTM3MzBlMjhlOTllYjhiYzRjYmE2MmEwHhcNMjMwNjEx
MTUwOTM0WhcNMjUwNjEyMTUwOTM0WjAzMTEwLwYDVQQDEyg5MGI1MjJjNzIzZmE1
OWYwZjg2YmY5YTJhMGQyZDkwYThkNGVmNWUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkTJAJGA11UHBLwgDxPBlbnt4vadTsgw1HT1/2Mln3b6kE2Up
Sd7NY59f8cNjIegFxC/3HMKSZK7SbX86TZwkiOhtpdxMe49hVLz04qC/qe5pPiUX
vV3a+vbmVPx9qAJ1r1XozlyE8RsAWKmbR3ugOJ6SJ7vhaM9JsiosTBargPaDyQWG
EtfhJKa+VTDZF1UId2v8L33Zp5XFroNVeV1iTIDjTEijo9negqR+loUl4olIAZ82
1Yey7rZIdufcD/MPxat6UDj4Num2qxjkMtvYX51FYm12kJ5KxXDqlLXEh7Ei1Ibt
ie3noMeOFU68LcooULFFh4H1gFjtsdbKYRyMDwIDAQABo4ICnjCCApowHQYDVR0O
BBYEFKFHh2/rCzGPW9LJTk/EP4RGB/5ZMB8GA1UdIwQYMBaAFH4HMs9XSoQiKTbT
qOxlLvM30lKkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmIyYzMz
ZmEwMTkwMWY3MDNlMzczMGUyOGU5OWViOGJjNGNiYTYyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2LzkwYjUyMmM3MjNmYTU5ZjBmODZiZjlhMmEwZDJkOTBhOGQ0ZWY1ZTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvNmIyYzMzZmEwMTkwMWY3MDNlMzczMGUyOGU5OWViOGJjNGNiYTYy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBggrBgEFBQcBBwEB/wRT
MFEwQAQCAAEwOgMEBb5dAAMEBr5dQAMEA8gM8AMEAsndQAMEAMndRTAMAwQDyd1I
AwQByd1UMAwDBADJ3V0DBADJ3V4wDQQCAAIwBwMFACgAAHAwDQYJKoZIhvcNAQEL
BQADggEBADkCLLSOKst3fqY8IOfQ/Lx5r/BwyfylDe8hGMt4LCSkxSspH+oKSF4C
Qr4hYhWlfCuR4w5zj2RVfUJ+zRZ+gxRlFBNUdk3TDj0cY7b2oQjwocV7IHjr0RP1
tsbhm3M13GyuCkXIE3eD7Esh7aJq4NXxrXKed0QTzGZudU/hPIUsvsOSzR2T5b+5
eXJT3Ub1nlL93k87D2BYrwRGHtlKkgLpsyMB+XJApr1LivvePMU/7mKu+W3GDxG0
jTmyblUChNPNhnq40vpN9EwbXtedY7aaCg2VbLqUWachiZAuAjLzQ3JgAInGduH0
vZrmTmXeLXl1rEw2xzT1o3nsb0JIssw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org