Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/7f13974a7f4428a028e93ceb9dd78eb30cc4e0e1.roa
File: 7f13974a7f4428a028e93ceb9dd78eb30cc4e0e1.roa (raw, json)
Hash identifier: 7i/hOtt1YlrrsSuyQ2yswWCf9yI28E1DJBEeQnybves=
Subject key identifier: 9F:B7:32:F4:F1:12:87:C2:9E:ED:88:99:87:0C:63:DD:C1:C9:51:30
Certificate issuer: /CN=419e23f1fa27160195e5e3ab407b2d1b2f418f98
Certificate serial: 211BE8
Authority key identifier: 2E:4A:34:D5:A8:74:62:61:36:DB:18:55:57:9C:12:AE:4F:1B:9C:1A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/419e23f1fa27160195e5e3ab407b2d1b2f418f98.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/7f13974a7f4428a028e93ceb9dd78eb30cc4e0e1.roa
Signing time: Fri 23 Jun 2023 18:01:59 +0000
ROA not before: Thu 22 Jun 2023 18:01:59 +0000
ROA not after: Mon 23 Jun 2025 18:01:59 +0000
asID: 267801
IP address blocks: 190.122.86.24/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2169832 (0x211be8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419e23f1fa27160195e5e3ab407b2d1b2f418f98
Validity
Not Before: Jun 22 18:01:59 2023 GMT
Not After : Jun 23 18:01:59 2025 GMT
Subject: CN=7f13974a7f4428a028e93ceb9dd78eb30cc4e0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d5:3f:57:d8:d6:f8:61:12:aa:71:1a:7d:d4:
eb:d1:91:20:9c:b2:71:19:06:0d:d7:f0:6b:3a:1e:
17:2a:1d:5d:f5:9f:b4:e8:f4:01:3a:6b:98:f7:1d:
53:2b:69:73:ad:44:79:a9:dd:ca:bf:14:b2:aa:85:
9e:c6:12:0f:11:66:37:63:ed:ea:82:c8:46:69:09:
dd:a8:d3:e1:43:5d:69:ac:d7:a1:b9:03:49:89:66:
d9:6c:04:31:92:14:b6:fe:93:78:44:90:d4:ec:2e:
57:b5:5b:c1:f5:6e:95:b4:23:46:b5:64:56:7d:3a:
7e:65:97:79:ee:e8:d2:2b:bd:ec:a6:dd:00:2b:7d:
3f:92:6a:62:4e:95:b9:a7:66:29:89:c2:d4:c0:77:
39:da:fc:bf:28:0f:bd:3a:67:8e:9e:62:cf:82:f5:
bb:28:41:ba:73:9d:9c:99:28:8f:6a:37:ff:e0:16:
62:f2:c8:06:d7:4e:4c:b4:66:b8:e3:9b:ef:ea:5e:
9b:0b:62:7c:fa:54:bb:82:34:59:f3:dc:f0:2e:1b:
a0:fb:cf:d0:f5:78:13:85:a5:28:c4:ea:3c:9f:31:
a6:49:65:3f:82:f1:31:12:f9:d9:76:d6:ab:9f:ee:
c4:01:50:b1:04:59:e5:3e:e0:3f:65:d7:08:fd:56:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B7:32:F4:F1:12:87:C2:9E:ED:88:99:87:0C:63:DD:C1:C9:51:30
X509v3 Authority Key Identifier:
keyid:2E:4A:34:D5:A8:74:62:61:36:DB:18:55:57:9C:12:AE:4F:1B:9C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/419e23f1fa27160195e5e3ab407b2d1b2f418f98.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/7f13974a7f4428a028e93ceb9dd78eb30cc4e0e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/419e23f1fa27160195e5e3ab407b2d1b2f418f98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.122.86.24/29
Signature Algorithm: sha256WithRSAEncryption
5b:57:8b:d5:58:90:e3:79:ec:e1:f8:a3:cc:84:90:5c:d9:30:
88:c9:ce:42:06:39:5e:1c:20:b7:4c:37:a0:f7:ca:53:37:2e:
a6:46:ad:46:1a:96:ee:e0:02:6a:83:73:cc:d8:96:19:63:f1:
a3:47:3a:c0:5e:c1:14:8c:c1:ce:09:27:e7:9a:01:7a:0a:4f:
14:4d:4e:d2:4b:80:8b:ce:e1:94:06:5b:3f:a3:7a:2f:e4:d5:
cc:2b:39:86:09:12:cb:59:81:73:3f:0a:15:99:f9:67:bd:2e:
37:b8:f1:fc:c3:13:58:71:96:d0:33:a8:36:f3:87:71:96:eb:
ed:de:95:7f:4e:f1:e7:20:17:af:0c:f9:3f:2a:02:d3:d4:46:
61:f1:ea:ba:af:1a:fa:10:75:cc:13:89:2f:37:84:e1:44:de:
b9:7e:4d:83:47:38:c9:5b:88:13:06:d3:b8:66:d2:5c:a5:e6:
ea:dd:64:07:e5:c7:5e:03:68:f5:7f:91:a6:c5:5b:5e:e6:07:
d1:f1:aa:1b:af:da:60:5d:51:c4:b5:57:bb:d2:49:9e:56:e7:
2c:1a:9c:f4:53:42:4f:c8:12:23:bd:4d:5e:82:a8:fb:10:37:
66:6a:55:49:06:bb:de:34:dd:d8:2f:2f:06:6f:7c:5c:bb:0a:
6c:03:4b:55
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDIRvoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQx
OWUyM2YxZmEyNzE2MDE5NWU1ZTNhYjQwN2IyZDFiMmY0MThmOTgwHhcNMjMwNjIy
MTgwMTU5WhcNMjUwNjIzMTgwMTU5WjAzMTEwLwYDVQQDEyg3ZjEzOTc0YTdmNDQy
OGEwMjhlOTNjZWI5ZGQ3OGViMzBjYzRlMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiNU/V9jW+GESqnEafdTr0ZEgnLJxGQYN1/BrOh4XKh1d9Z+0
6PQBOmuY9x1TK2lzrUR5qd3KvxSyqoWexhIPEWY3Y+3qgshGaQndqNPhQ11prNeh
uQNJiWbZbAQxkhS2/pN4RJDU7C5XtVvB9W6VtCNGtWRWfTp+ZZd57ujSK73spt0A
K30/kmpiTpW5p2YpicLUwHc52vy/KA+9OmeOnmLPgvW7KEG6c52cmSiPajf/4BZi
8sgG105MtGa445vv6l6bC2J8+lS7gjRZ89zwLhug+8/Q9XgThaUoxOo8nzGmSWU/
gvExEvnZdtarn+7EAVCxBFnlPuA/ZdcI/VaT7wIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFJ+3MvTxEofCnu2ImYcMY93ByVEwMB8GA1UdIwQYMBaAFC5KNNWodGJhNtsY
VVecEq5PG5waMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDE5ZTIz
ZjFmYTI3MTYwMTk1ZTVlM2FiNDA3YjJkMWIyZjQxOGY5OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGJhNTJkODUtMTU0NS00ODFhLWFkNDgtOTI0Mzg5
NmZiZTgwLzdmMTM5NzRhN2Y0NDI4YTAyOGU5M2NlYjlkZDc4ZWIzMGNjNGUwZTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYmE1MmQ4NS0xNTQ1LTQ4MWEtYWQ0OC05MjQz
ODk2ZmJlODAvNDE5ZTIzZjFmYTI3MTYwMTk1ZTVlM2FiNDA3YjJkMWIyZjQxOGY5
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAEwBwMFA756VhgwDQYJKoZIhvcNAQELBQADggEBAFtXi9VYkON57OH4
o8yEkFzZMIjJzkIGOV4cILdMN6D3ylM3LqZGrUYalu7gAmqDc8zYlhlj8aNHOsBe
wRSMwc4JJ+eaAXoKTxRNTtJLgIvO4ZQGWz+jei/k1cwrOYYJEstZgXM/ChWZ+We9
Lje48fzDE1hxltAzqDbzh3GW6+3elX9O8ecgF68M+T8qAtPURmHx6rqvGvoQdcwT
iS83hOFE3rl+TYNHOMlbiBMG07hm0lyl5urdZAflx14DaPV/kabFW17mB9Hxqhuv
2mBdUcS1V7vSSZ5W5ywanPRTQk/IEiO9TV6CqPsQN2ZqVUkGu9403dgvLwZvfFy7
CmwDS1U=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:17:58 2025 by rpki-client