Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/4c837fb69626cc592756eae36fc1ed13653cb0ce.roa
File: 4c837fb69626cc592756eae36fc1ed13653cb0ce.roa (raw, json)
Hash identifier: d9unCVzDgmW4mOwWkvkudCRBQwR6YMXzV/A/4KnowUo=
Subject key identifier: D8:00:16:EB:72:58:3F:C5:7E:E2:51:65:0B:6F:3D:08:D1:90:5F:26
Certificate issuer: /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial: 0DFA7F
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/4c837fb69626cc592756eae36fc1ed13653cb0ce.roa
Signing time: Wed 24 Mar 2021 14:29:00 +0000
ROA not before: Wed 24 Mar 2021 14:28:59 +0000
ROA not after: Tue 24 Mar 2026 14:28:59 +0000
asID: 28075
IP address blocks: 168.90.9.0/24 maxlen: 24
190.113.186.0/23 maxlen: 23
190.113.188.0/24 maxlen: 24
190.113.189.0/24 maxlen: 24
190.113.190.0/24 maxlen: 24
201.190.230.0/24 maxlen: 24
201.190.231.0/24 maxlen: 24
201.190.232.0/23 maxlen: 23
201.190.234.0/23 maxlen: 23
201.190.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 916095 (0xdfa7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Validity
Not Before: Mar 24 14:28:59 2021 GMT
Not After : Mar 24 14:28:59 2026 GMT
Subject: CN=4c837fb69626cc592756eae36fc1ed13653cb0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e6:f8:81:f2:1f:48:be:b4:00:c6:40:ac:38:
e3:c4:ae:39:24:81:9e:78:49:1b:f9:f4:11:01:b3:
37:60:2f:64:3e:26:2d:67:b1:22:dd:f5:dd:79:20:
4c:c1:11:7a:84:aa:e5:ae:67:c3:5b:e5:99:8b:e0:
ed:d1:a9:b7:4d:34:34:a4:54:7b:f3:e4:40:3a:13:
86:3d:f6:54:f0:68:f8:7e:ef:b6:14:9e:fc:01:38:
1c:b4:be:4f:dd:7c:a8:52:34:94:b0:2c:68:3d:43:
ab:29:2b:35:d9:38:88:30:68:04:aa:cf:ff:a2:56:
70:68:33:1e:12:b7:ee:c0:1e:31:3b:73:33:c0:d2:
01:6a:24:5b:f7:1a:c8:dd:a2:14:d8:47:54:e2:8b:
83:42:60:51:b4:1c:94:2a:d6:23:90:cd:f8:50:0f:
59:74:82:91:f3:07:92:12:65:f0:7b:88:7a:7b:bc:
4d:25:d4:b1:22:8b:a5:95:b6:6f:39:28:c6:4a:9d:
ba:61:dd:41:11:13:d2:08:da:16:24:35:ef:78:56:
8c:84:c7:77:fb:af:37:1e:7f:36:73:9a:78:db:a3:
a9:30:68:0f:87:ee:94:7e:f4:d3:87:4a:6d:a7:ce:
66:79:7b:7b:e3:ff:d4:e2:41:a3:4b:bb:30:df:00:
36:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:00:16:EB:72:58:3F:C5:7E:E2:51:65:0B:6F:3D:08:D1:90:5F:26
X509v3 Authority Key Identifier:
keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/4c837fb69626cc592756eae36fc1ed13653cb0ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.9.0/24
190.113.186.0-190.113.190.255
201.190.230.0-201.190.235.255
201.190.240.0/23
Signature Algorithm: sha256WithRSAEncryption
62:4e:5f:2f:79:5b:59:23:49:82:5b:98:ba:6b:8b:4f:d3:04:
f1:5a:a8:3a:87:78:31:9a:72:65:3b:60:6d:7a:5e:32:c4:7a:
2b:e8:01:6b:5d:5b:4d:a4:91:91:95:07:b5:86:1c:01:85:0b:
84:0d:41:fd:7e:2d:15:73:66:44:72:34:15:f6:aa:3a:46:a5:
28:42:e1:b3:14:83:93:66:bf:ac:d2:77:24:40:ca:bf:9d:43:
76:15:f2:d8:cc:7d:61:b6:d6:70:e3:d9:b5:32:84:cc:12:98:
7c:ca:93:38:cd:c6:fe:4f:81:eb:a2:d8:a2:60:ae:26:3a:f8:
f5:1d:5e:3f:4b:e9:75:a8:ac:9f:3b:17:46:d4:88:13:ca:49:
fa:b4:81:c3:49:d5:ee:8c:98:de:41:56:0c:33:6b:af:23:81:
14:bd:6a:27:58:2d:a7:e9:5f:84:88:9f:3e:34:ca:05:67:cc:
6e:99:df:57:3d:b0:a5:3d:76:be:51:66:4c:3f:e9:dc:b5:5b:
4d:21:48:c1:14:cb:7c:2f:4f:20:e5:72:5c:ba:91:c6:3f:4d:
0d:8f:93:03:44:ea:f5:1d:e7:97:35:a8:44:00:a6:5c:a0:13:
cf:9c:88:bb:82:40:34:0a:99:e1:a9:7f:ad:94:a3:42:ab:b0:
0b:22:eb:68
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgIDDfp/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg4
ZDNiMzhmYjliZmNlZDU3YzZhZDVlYjE2MGMxMzBhY2YzMjY0MWMwHhcNMjEwMzI0
MTQyODU5WhcNMjYwMzI0MTQyODU5WjAzMTEwLwYDVQQDEyg0YzgzN2ZiNjk2MjZj
YzU5Mjc1NmVhZTM2ZmMxZWQxMzY1M2NiMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAneb4gfIfSL60AMZArDjjxK45JIGeeEkb+fQRAbM3YC9kPiYt
Z7Ei3fXdeSBMwRF6hKrlrmfDW+WZi+Dt0am3TTQ0pFR78+RAOhOGPfZU8Gj4fu+2
FJ78ATgctL5P3XyoUjSUsCxoPUOrKSs12TiIMGgEqs//olZwaDMeErfuwB4xO3Mz
wNIBaiRb9xrI3aIU2EdU4ouDQmBRtByUKtYjkM34UA9ZdIKR8weSEmXwe4h6e7xN
JdSxIoullbZvOSjGSp26Yd1BERPSCNoWJDXveFaMhMd3+683Hn82c5p426OpMGgP
h+6UfvTTh0ptp85meXt74//U4kGjS7sw3wA27wIDAQABo4ICfTCCAnkwHQYDVR0O
BBYEFNgAFutyWD/FfuJRZQtvPQjRkF8mMB8GA1UdIwQYMBaAFPsbKsFJ3WU0RJWG
NPmzt6e3aen4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODhkM2Iz
OGZiOWJmY2VkNTdjNmFkNWViMTYwYzEzMGFjZjMyNjQxYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjAxNWM0NmItMTU0MC00OWViLWI5NjktMGYzYzQw
ZTAwMTQwLzRjODM3ZmI2OTYyNmNjNTkyNzU2ZWFlMzZmYzFlZDEzNjUzY2IwY2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMDE1YzQ2Yi0xNTQwLTQ5ZWItYjk2OS0wZjNj
NDBlMDAxNDAvODhkM2IzOGZiOWJmY2VkNTdjNmFkNWViMTYwYzEzMGFjZjMyNjQx
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBBBggrBgEFBQcBBwEB/wQy
MDAwLgQCAAEwKAMEAKhaCTAMAwQBvnG6AwQAvnG+MAwDBAHJvuYDBALJvugDBAHJ
vvAwDQYJKoZIhvcNAQELBQADggEBAGJOXy95W1kjSYJbmLpri0/TBPFaqDqHeDGa
cmU7YG16XjLEeivoAWtdW02kkZGVB7WGHAGFC4QNQf1+LRVzZkRyNBX2qjpGpShC
4bMUg5Nmv6zSdyRAyr+dQ3YV8tjMfWG21nDj2bUyhMwSmHzKkzjNxv5Pgeui2KJg
riY6+PUdXj9L6XWorJ87F0bUiBPKSfq0gcNJ1e6MmN5BVgwza68jgRS9aidYLafp
X4SInz40ygVnzG6Z31c9sKU9dr5RZkw/6dy1W00hSMEUy3wvTyDlcly6kcY/TQ2P
kwNE6vUd55c1qEQAplygE8+ciLuCQDQKmeGpf62Uo0KrsAsi62g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org