Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cf65b593-2cd9-4000-b340-da05ada22033/a68e31dec81bb84e694657f7854ee2074fd053ff.roa
File: a68e31dec81bb84e694657f7854ee2074fd053ff.roa (raw, json)
Hash identifier: se/UxJQerhT4WTJBTJOQbN9JPmMIsQRSfb5G5GGV8RQ=
Subject key identifier: 59:51:E8:7F:0A:D7:06:CD:23:9B:73:A9:4F:CC:9C:BA:47:3E:40:2F
Certificate issuer: /CN=4d943c86c06bd73da9f8d91bfbf531a137485900
Certificate serial: 1F54B0
Authority key identifier: A9:7B:B6:5D:77:0E:09:E9:53:2E:81:FD:31:58:A2:0B:1C:02:98:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d943c86c06bd73da9f8d91bfbf531a137485900.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cf65b593-2cd9-4000-b340-da05ada22033/a68e31dec81bb84e694657f7854ee2074fd053ff.roa
Signing time: Fri 24 Mar 2023 08:31:23 +0000
ROA not before: Thu 23 Mar 2023 08:31:23 +0000
ROA not after: Sat 22 Mar 2025 08:31:23 +0000
asID: 263245
IP address blocks: 190.107.232.0/24 maxlen: 24
190.107.233.0/24 maxlen: 24
190.107.234.0/24 maxlen: 24
190.107.235.0/24 maxlen: 24
190.107.236.0/24 maxlen: 24
190.107.237.0/24 maxlen: 24
190.107.238.0/24 maxlen: 24
2803:d180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053296 (0x1f54b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d943c86c06bd73da9f8d91bfbf531a137485900
Validity
Not Before: Mar 23 08:31:23 2023 GMT
Not After : Mar 22 08:31:23 2025 GMT
Subject: CN=a68e31dec81bb84e694657f7854ee2074fd053ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:49:99:50:92:03:2c:a0:71:24:47:2a:f0:be:
c4:36:7e:41:32:a7:cd:4a:06:76:0a:22:66:65:dc:
9c:b8:e3:74:87:31:12:88:90:3d:e8:1a:76:61:1a:
62:ed:57:ba:f0:59:1b:a0:27:36:48:27:a8:3b:3b:
ab:e8:27:84:f7:05:5e:20:33:22:7e:63:5f:5f:16:
01:9b:ad:0c:36:e1:0c:60:81:a0:3a:2e:48:e2:9d:
b6:dc:cf:8b:80:02:57:4a:30:10:b3:f9:20:27:d5:
16:9b:a0:00:af:59:02:b3:d2:f8:71:62:d7:3c:38:
7d:c3:fd:da:f9:73:28:5f:a0:47:e0:04:0b:e2:90:
d4:f6:dc:5d:58:e6:93:ef:4a:31:46:f6:62:36:87:
db:00:20:98:cd:9d:1d:37:c3:5e:20:42:28:0d:60:
20:f6:c5:77:c1:57:56:c2:17:f1:8e:4b:9a:e5:47:
e8:2b:28:52:49:99:9e:fc:87:8c:de:b6:7e:eb:40:
9a:fa:81:c6:3a:77:48:82:c3:ba:6e:7f:68:91:56:
6e:4c:d3:cf:c3:64:c8:26:06:56:07:8b:68:ca:8a:
c6:29:a4:93:03:23:a0:b3:3f:08:a9:c1:fd:8b:6a:
82:23:42:15:aa:3c:5b:b8:c6:56:ad:26:a5:bd:4f:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:51:E8:7F:0A:D7:06:CD:23:9B:73:A9:4F:CC:9C:BA:47:3E:40:2F
X509v3 Authority Key Identifier:
keyid:A9:7B:B6:5D:77:0E:09:E9:53:2E:81:FD:31:58:A2:0B:1C:02:98:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d943c86c06bd73da9f8d91bfbf531a137485900.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cf65b593-2cd9-4000-b340-da05ada22033/a68e31dec81bb84e694657f7854ee2074fd053ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cf65b593-2cd9-4000-b340-da05ada22033/4d943c86c06bd73da9f8d91bfbf531a137485900.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.107.232.0-190.107.238.255
IPv6:
2803:d180::/32
Signature Algorithm: sha256WithRSAEncryption
17:64:32:b3:10:da:ce:53:8e:bf:39:c3:56:c4:3b:96:da:0c:
58:8e:d9:a6:82:ec:43:5f:1e:1d:4a:00:29:ce:90:09:f8:15:
84:de:e3:1d:4b:33:98:dc:09:40:e8:dc:d4:96:d1:dd:a8:91:
37:a2:3a:f1:1d:17:51:8b:b3:bd:0c:16:9c:13:bf:5d:44:f6:
60:82:53:93:ff:e5:9c:37:c0:fe:ac:3d:cb:84:2a:59:e9:28:
bf:f4:fb:5f:0e:71:82:ce:2e:9e:d9:54:2c:7f:6e:f7:26:fd:
bf:d9:54:9e:15:29:6c:bd:51:04:63:80:c4:39:09:5b:3a:a1:
75:48:51:3d:68:c3:e6:31:3d:4f:f5:bd:f7:cf:15:c1:09:3b:
50:2f:ba:4b:d4:46:22:1f:a1:8d:6b:78:58:3e:2d:cc:91:2b:
a0:85:b4:a8:0a:d0:0c:fe:29:36:eb:d0:cc:5e:5b:d1:e4:60:
12:89:6b:03:85:b7:66:a8:d2:49:cc:13:01:d0:eb:63:61:af:
fd:46:30:43:18:9e:ea:46:58:b9:46:31:43:39:25:8a:cb:95:
38:c6:72:69:b2:f2:00:c3:2f:62:bd:8c:19:92:f8:be:8c:9f:
10:8b:8e:32:14:e9:15:2c:e4:3e:86:6a:f4:b7:c7:9a:58:38:
16:a5:8c:c4
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDH1SwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRk
OTQzYzg2YzA2YmQ3M2RhOWY4ZDkxYmZiZjUzMWExMzc0ODU5MDAwHhcNMjMwMzIz
MDgzMTIzWhcNMjUwMzIyMDgzMTIzWjAzMTEwLwYDVQQDEyhhNjhlMzFkZWM4MWJi
ODRlNjk0NjU3Zjc4NTRlZTIwNzRmZDA1M2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmUmZUJIDLKBxJEcq8L7ENn5BMqfNSgZ2CiJmZdycuON0hzES
iJA96Bp2YRpi7Ve68FkboCc2SCeoOzur6CeE9wVeIDMifmNfXxYBm60MNuEMYIGg
Oi5I4p223M+LgAJXSjAQs/kgJ9UWm6AAr1kCs9L4cWLXPDh9w/3a+XMoX6BH4AQL
4pDU9txdWOaT70oxRvZiNofbACCYzZ0dN8NeIEIoDWAg9sV3wVdWwhfxjkua5Ufo
KyhSSZme/IeM3rZ+60Ca+oHGOndIgsO6bn9okVZuTNPPw2TIJgZWB4toyorGKaST
AyOgsz8IqcH9i2qCI0IVqjxbuMZWrSalvU+omQIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFFlR6H8K1wbNI5tzqU/MnLpHPkAvMB8GA1UdIwQYMBaAFKl7tl13DgnpUy6B
/TFYogscApgLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGQ5NDNj
ODZjMDZiZDczZGE5ZjhkOTFiZmJmNTMxYTEzNzQ4NTkwMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2Y2NWI1OTMtMmNkOS00MDAwLWIzNDAtZGEwNWFk
YTIyMDMzL2E2OGUzMWRlYzgxYmI4NGU2OTQ2NTdmNzg1NGVlMjA3NGZkMDUzZmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZjY1YjU5My0yY2Q5LTQwMDAtYjM0MC1kYTA1
YWRhMjIwMzMvNGQ5NDNjODZjMDZiZDczZGE5ZjhkOTFiZmJmNTMxYTEzNzQ4NTkw
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwFAQCAAEwDjAMAwQDvmvoAwQAvmvuMA0EAgACMAcDBQAoA9GAMA0GCSqGSIb3
DQEBCwUAA4IBAQAXZDKzENrOU46/OcNWxDuW2gxYjtmmguxDXx4dSgApzpAJ+BWE
3uMdSzOY3AlA6NzUltHdqJE3ojrxHRdRi7O9DBacE79dRPZgglOT/+WcN8D+rD3L
hCpZ6Si/9PtfDnGCzi6e2VQsf273Jv2/2VSeFSlsvVEEY4DEOQlbOqF1SFE9aMPm
MT1P9b33zxXBCTtQL7pL1EYiH6GNa3hYPi3MkSughbSoCtAM/ik269DMXlvR5GAS
iWsDhbdmqNJJzBMB0OtjYa/9RjBDGJ7qRli5RjFDOSWKy5U4xnJpsvIAwy9ivYwZ
kvi+jJ8Qi44yFOkVLOQ+hmr0t8eaWDgWpYzE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org