Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/07463780d92fd6056544dad765f7a0e6c8f73cab.roa
File: 07463780d92fd6056544dad765f7a0e6c8f73cab.roa (raw, json)
Hash identifier: V9MDBeRH9qPYIEMo2tv6F1wN84lD3c5tZ+pMpcHZr6s=
Subject key identifier: AB:F0:FA:A5:F7:A4:B0:AF:6E:10:92:79:89:D4:08:9C:CD:3D:AF:52
Certificate issuer: /CN=513674dcb37b91021affeddf80ef34c924423627
Certificate serial: 238BB7
Authority key identifier: 9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/07463780d92fd6056544dad765f7a0e6c8f73cab.roa
Signing time: Thu 12 Oct 2023 14:02:00 +0000
ROA not before: Wed 11 Oct 2023 14:01:59 +0000
ROA not after: Sun 12 Oct 2025 14:01:59 +0000
asID: 52392
IP address blocks: 190.99.120.0/24 maxlen: 24
190.99.121.0/24 maxlen: 24
190.99.122.0/24 maxlen: 24
190.99.123.0/24 maxlen: 24
190.99.124.0/24 maxlen: 24
190.99.125.0/24 maxlen: 24
190.99.126.0/24 maxlen: 24
190.99.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2329527 (0x238bb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=513674dcb37b91021affeddf80ef34c924423627
Validity
Not Before: Oct 11 14:01:59 2023 GMT
Not After : Oct 12 14:01:59 2025 GMT
Subject: CN=07463780d92fd6056544dad765f7a0e6c8f73cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:a7:0f:2b:6c:ff:a2:ad:1f:9d:d5:d1:74:
22:ee:9c:ed:2c:b0:b0:d7:06:4b:8c:34:41:3d:76:
90:db:33:bd:f2:b0:bf:fe:93:0b:bb:04:2f:29:5f:
f2:6f:2e:02:bb:ba:72:7e:36:d4:bf:37:7f:e0:5f:
88:c1:4b:a6:76:bc:a6:45:40:08:7e:00:66:6e:03:
d4:cc:39:88:b8:87:fc:67:2d:33:3d:ca:bd:ac:30:
a4:bd:ef:88:1d:ca:73:b4:19:d7:1c:9a:63:03:bb:
80:76:5e:ef:67:77:ab:8f:df:2a:46:0c:fd:a6:48:
37:c9:0a:5c:7f:bf:d9:e1:8f:3b:5b:68:81:07:6a:
06:5c:84:bc:d9:94:7e:28:cc:d1:96:65:8a:62:d8:
7c:65:f2:5c:70:ce:fc:ad:eb:ce:c6:11:48:6f:ed:
9d:fd:18:58:ac:fa:86:e7:00:7a:75:f3:4c:f2:85:
6e:12:75:96:6b:d2:f5:6b:e1:22:73:a7:ba:92:29:
a5:c6:79:5f:b0:76:66:bf:cd:a0:ed:83:3d:c4:9b:
3d:6e:4b:13:87:3c:87:d2:17:ca:6e:76:0e:bc:b8:
fd:9b:8e:9b:3e:f4:cb:c1:ef:55:30:71:44:04:49:
cb:52:ef:94:97:c9:c6:a9:5a:7e:f4:ed:2e:c5:b6:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F0:FA:A5:F7:A4:B0:AF:6E:10:92:79:89:D4:08:9C:CD:3D:AF:52
X509v3 Authority Key Identifier:
keyid:9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/07463780d92fd6056544dad765f7a0e6c8f73cab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/513674dcb37b91021affeddf80ef34c924423627.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.99.120.0/21
Signature Algorithm: sha256WithRSAEncryption
47:3e:a5:3f:7f:19:8e:11:7e:a3:49:b4:72:1a:82:f5:70:9d:
86:2a:da:ce:1f:cd:8b:ef:57:75:44:ca:96:01:01:1a:d6:32:
64:1b:5c:34:ca:76:20:5a:5d:2a:53:15:86:58:2e:d1:b3:d4:
8b:11:39:41:46:5b:5f:d6:53:1f:59:57:58:cf:72:39:92:52:
70:80:c4:e7:6d:0d:19:cb:fc:b0:db:a3:ba:3f:7e:a9:2b:cb:
56:83:ce:6e:14:6c:16:48:e4:c8:21:0b:89:f2:aa:be:4e:dd:
85:77:03:9d:d4:df:cf:54:45:04:ff:ef:b8:b1:63:f5:50:b7:
6a:0d:a5:8a:9a:fd:92:82:52:dd:76:ae:99:00:79:2f:26:d9:
69:7b:f5:a3:2b:28:fd:dc:50:36:1a:4e:45:7d:2a:ef:26:18:
62:77:f9:1d:70:cb:25:1d:5b:e7:bc:74:7b:2b:c7:39:9f:98:
33:52:7b:3a:f0:90:0e:3f:f9:87:e2:9b:83:1a:4f:72:5f:a1:
d2:d4:d5:56:1a:73:64:e4:f4:37:7a:91:ac:d8:66:8c:c5:00:
d4:7f:d4:3a:55:2c:0d:65:40:12:02:8e:94:56:e6:f0:cb:d2:
81:be:a3:a9:0b:ab:bf:ca:82:d2:93:2c:2b:b9:ca:58:8b:97:
9c:76:55:4a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI4u3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
MzY3NGRjYjM3YjkxMDIxYWZmZWRkZjgwZWYzNGM5MjQ0MjM2MjcwHhcNMjMxMDEx
MTQwMTU5WhcNMjUxMDEyMTQwMTU5WjAzMTEwLwYDVQQDEygwNzQ2Mzc4MGQ5MmZk
NjA1NjU0NGRhZDc2NWY3YTBlNmM4ZjczY2FiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjVynDyts/6KtH53V0XQi7pztLLCw1wZLjDRBPXaQ2zO98rC/
/pMLuwQvKV/yby4Cu7pyfjbUvzd/4F+IwUumdrymRUAIfgBmbgPUzDmIuIf8Zy0z
Pcq9rDCkve+IHcpztBnXHJpjA7uAdl7vZ3erj98qRgz9pkg3yQpcf7/Z4Y87W2iB
B2oGXIS82ZR+KMzRlmWKYth8ZfJccM78revOxhFIb+2d/RhYrPqG5wB6dfNM8oVu
EnWWa9L1a+Eic6e6kimlxnlfsHZmv82g7YM9xJs9bksThzyH0hfKbnYOvLj9m46b
PvTLwe9VMHFEBEnLUu+Ul8nGqVp+9O0uxbZb2wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKvw+qX3pLCvbhCSeYnUCJzNPa9SMB8GA1UdIwQYMBaAFJ/mwOD42sLEHIxL
66NQ5S8YJXBAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzNjc0
ZGNiMzdiOTEwMjFhZmZlZGRmODBlZjM0YzkyNDQyMzYyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjljY2RjMmItMDZmZC00YTI0LWJkMzYtOTU0NTZm
ODA5NTFjLzA3NDYzNzgwZDkyZmQ2MDU2NTQ0ZGFkNzY1ZjdhMGU2YzhmNzNjYWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mOWNjZGMyYi0wNmZkLTRhMjQtYmQzNi05NTQ1
NmY4MDk1MWMvNTEzNjc0ZGNiMzdiOTEwMjFhZmZlZGRmODBlZjM0YzkyNDQyMzYy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA75jeDANBgkqhkiG9w0BAQsFAAOCAQEARz6lP38ZjhF+o0m0
chqC9XCdhirazh/Ni+9XdUTKlgEBGtYyZBtcNMp2IFpdKlMVhlgu0bPUixE5QUZb
X9ZTH1lXWM9yOZJScIDE520NGcv8sNujuj9+qSvLVoPObhRsFkjkyCELifKqvk7d
hXcDndTfz1RFBP/vuLFj9VC3ag2lipr9koJS3XaumQB5LybZaXv1oyso/dxQNhpO
RX0q7yYYYnf5HXDLJR1b57x0eyvHOZ+YM1J7OvCQDj/5h+KbgxpPcl+h0tTVVhpz
ZOT0N3qRrNhmjMUA1H/UOlUsDWVAEgKOlFbm8MvSgb6jqQurv8qC0pMsK7nKWIuX
nHZVSg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org