Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/ce6de64bf9a36d3754edf1437dee208ec4c5e9c3.roa
File: ce6de64bf9a36d3754edf1437dee208ec4c5e9c3.roa (raw, json)
Hash identifier: qj3foR1dKRTnQHURoshbAUesecO07AzKYKO5mWjVxCA=
Subject key identifier: 9D:DD:B8:01:29:97:63:FC:0A:DC:90:BF:4D:52:27:A0:15:8D:73:21
Certificate issuer: /CN=a1e706ce8128add2b25ca400a695dc4620ac6e0f
Certificate serial: 12D8F8
Authority key identifier: 5E:D1:5A:C7:56:2D:40:AA:73:65:03:62:76:86:9E:A5:01:69:A5:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1e706ce8128add2b25ca400a695dc4620ac6e0f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/ce6de64bf9a36d3754edf1437dee208ec4c5e9c3.roa
Signing time: Sat 04 Nov 2023 07:30:02 +0000
ROA not before: Sat 04 Nov 2023 07:30:02 +0000
ROA not after: Mon 03 Nov 2025 07:30:02 +0000
asID: 13585
IP address blocks: 190.1.96.0/19 maxlen: 24
190.11.128.0/19 maxlen: 24
190.11.160.0/19 maxlen: 24
2800:220::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1235192 (0x12d8f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e706ce8128add2b25ca400a695dc4620ac6e0f
Validity
Not Before: Nov 4 07:30:02 2023 GMT
Not After : Nov 3 07:30:02 2025 GMT
Subject: CN=ce6de64bf9a36d3754edf1437dee208ec4c5e9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:fc:73:eb:56:63:79:32:f7:24:07:7a:fe:
16:c7:a6:b5:ae:8a:ea:37:c7:9c:fd:d7:11:31:66:
45:bb:f3:9e:28:8a:ac:1a:0d:74:0f:8b:cb:d0:0b:
f8:b4:ef:cd:50:4f:46:e1:a9:b5:93:bb:cf:69:6d:
be:1a:e5:6e:5b:d6:2a:21:a4:7a:b0:5a:87:e6:5e:
36:79:df:ff:ce:24:0f:67:3f:ac:a0:4c:67:16:9a:
8f:8e:c4:a0:e3:24:d3:d4:52:98:6f:52:cb:6d:27:
0a:b9:b8:c9:c8:57:56:60:7c:df:4f:a5:ea:77:8b:
5f:33:f3:90:f6:fe:ec:aa:0d:cc:87:c5:9e:56:a3:
41:6b:ac:95:84:e6:f9:1d:12:a6:eb:33:19:88:1e:
f9:5c:52:ce:56:f2:82:b3:c3:71:39:28:e7:9c:eb:
04:69:92:63:5b:cc:ed:f4:19:f5:2b:f0:a4:0b:d7:
6b:e6:d3:28:78:e8:51:a2:32:d2:59:24:9c:0e:1c:
42:6f:ac:f8:9e:a2:5d:d1:c5:57:fc:8e:a5:4c:05:
60:93:b2:78:de:ae:63:39:c1:d3:23:ae:2a:67:56:
f4:bd:a4:c6:64:65:7f:b4:91:25:39:08:cc:75:f2:
2e:6e:ef:65:91:32:a6:fe:ad:5d:ae:43:b5:f9:85:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DD:B8:01:29:97:63:FC:0A:DC:90:BF:4D:52:27:A0:15:8D:73:21
X509v3 Authority Key Identifier:
keyid:5E:D1:5A:C7:56:2D:40:AA:73:65:03:62:76:86:9E:A5:01:69:A5:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1e706ce8128add2b25ca400a695dc4620ac6e0f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/ce6de64bf9a36d3754edf1437dee208ec4c5e9c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/a1e706ce8128add2b25ca400a695dc4620ac6e0f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.1.96.0/19
190.11.128.0/18
IPv6:
2800:220::/32
Signature Algorithm: sha256WithRSAEncryption
01:0e:aa:04:b4:e6:a3:58:82:02:b7:c2:ea:0f:bd:e4:32:68:
b6:9e:af:fd:5b:34:53:1d:7c:ce:d5:af:78:ad:2c:44:19:29:
68:06:07:55:8a:a9:c0:03:b7:ce:43:f4:25:b6:72:5c:37:90:
53:4f:9f:15:e4:ad:2b:d7:5c:7f:19:27:d6:fd:e1:08:20:55:
61:4f:1e:bc:f3:91:bf:3d:85:ac:8c:bb:95:55:b3:cb:09:b2:
97:59:34:30:86:76:bd:2d:0f:fa:0c:76:6d:9e:81:c6:05:8a:
45:59:98:06:a3:ad:48:3d:7e:f6:e4:eb:12:d7:fe:05:b8:42:
3c:ef:78:60:17:86:a9:20:4e:5d:9f:78:fa:48:c3:d2:bb:a1:
bb:41:67:c6:83:0c:52:d8:76:2a:27:3d:ec:91:9b:97:b4:25:
f9:4d:e3:7e:7c:f9:0f:bb:74:96:17:dd:41:4f:23:4d:c7:09:
1b:50:0b:f9:17:a3:41:77:70:98:bf:16:ef:f8:e0:68:1a:12:
54:74:0b:72:cc:55:d0:42:57:ac:f2:22:46:83:9c:af:11:46:
6b:a4:9e:00:10:a7:fb:bd:3f:f8:bb:2b:22:80:38:72:d9:12:
cb:5b:47:df:97:7b:df:17:bb:ff:cc:0a:b9:a7:96:b3:d1:ba:
35:6f:c9:0e
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDEtj4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEx
ZTcwNmNlODEyOGFkZDJiMjVjYTQwMGE2OTVkYzQ2MjBhYzZlMGYwHhcNMjMxMTA0
MDczMDAyWhcNMjUxMTAzMDczMDAyWjAzMTEwLwYDVQQDEyhjZTZkZTY0YmY5YTM2
ZDM3NTRlZGYxNDM3ZGVlMjA4ZWM0YzVlOWMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArID8c+tWY3ky9yQHev4Wx6a1rorqN8ec/dcRMWZFu/OeKIqs
Gg10D4vL0Av4tO/NUE9G4am1k7vPaW2+GuVuW9YqIaR6sFqH5l42ed//ziQPZz+s
oExnFpqPjsSg4yTT1FKYb1LLbScKubjJyFdWYHzfT6Xqd4tfM/OQ9v7sqg3Mh8We
VqNBa6yVhOb5HRKm6zMZiB75XFLOVvKCs8NxOSjnnOsEaZJjW8zt9Bn1K/CkC9dr
5tMoeOhRojLSWSScDhxCb6z4nqJd0cVX/I6lTAVgk7J43q5jOcHTI64qZ1b0vaTG
ZGV/tJElOQjMdfIubu9lkTKm/q1drkO1+YVEfwIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFJ3duAEpl2P8CtyQv01SJ6AVjXMhMB8GA1UdIwQYMBaAFF7RWsdWLUCqc2UD
YnaGnqUBaaW2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTFlNzA2
Y2U4MTI4YWRkMmIyNWNhNDAwYTY5NWRjNDYyMGFjNmUwZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2Y3MWM1NTktNTE4MS00M2QzLThkNWItNjZjZWQz
MmIxZWFlL2NlNmRlNjRiZjlhMzZkMzc1NGVkZjE0MzdkZWUyMDhlYzRjNWU5YzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZjcxYzU1OS01MTgxLTQzZDMtOGQ1Yi02NmNl
ZDMyYjFlYWUvYTFlNzA2Y2U4MTI4YWRkMmIyNWNhNDAwYTY5NWRjNDYyMGFjNmUw
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEBb4BYAMEBr4LgDANBAIAAjAHAwUAKAACIDANBgkqhkiG9w0B
AQsFAAOCAQEAAQ6qBLTmo1iCArfC6g+95DJotp6v/Vs0Ux18ztWveK0sRBkpaAYH
VYqpwAO3zkP0JbZyXDeQU0+fFeStK9dcfxkn1v3hCCBVYU8evPORvz2FrIy7lVWz
ywmyl1k0MIZ2vS0P+gx2bZ6BxgWKRVmYBqOtSD1+9uTrEtf+BbhCPO94YBeGqSBO
XZ94+kjD0ruhu0FnxoMMUth2Kic97JGbl7Ql+U3jfnz5D7t0lhfdQU8jTccJG1AL
+RejQXdwmL8W7/jgaBoSVHQLcsxV0EJXrPIiRoOcrxFGa6SeABCn+70/+LsrIoA4
ctkSy1tH35d73xe7/8wKuaeWs9G6NW/JDg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org