Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/810ae4dcf5e181bc220f0710a46195642f190f1b.roa
File: 810ae4dcf5e181bc220f0710a46195642f190f1b.roa (raw, json)
Hash identifier: K3VmU8mIAvMZhQaKolX1x3vsarhKAnPWAufyx6K5QqY=
Subject key identifier: E2:26:5E:AC:02:E3:D9:4F:6C:01:F2:78:95:48:E0:E7:80:F7:B4:64
Certificate issuer: /CN=a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f
Certificate serial: 211F89
Authority key identifier: DB:EE:7B:EC:56:4F:90:5D:60:8E:8A:D7:C2:54:C5:D8:32:57:10:50
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/810ae4dcf5e181bc220f0710a46195642f190f1b.roa
Signing time: Wed 06 Dec 2023 19:00:29 +0000
ROA not before: Wed 06 Dec 2023 19:00:29 +0000
ROA not after: Sat 06 Dec 2025 19:00:29 +0000
asID: 264688
IP address blocks: 190.107.240.0/21 maxlen: 24
190.196.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2170761 (0x211f89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f
Validity
Not Before: Dec 6 19:00:29 2023 GMT
Not After : Dec 6 19:00:29 2025 GMT
Subject: CN=810ae4dcf5e181bc220f0710a46195642f190f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5c:44:04:75:02:c7:52:a5:30:78:6e:cd:dd:
cc:66:28:a4:b6:08:26:ad:dc:f2:59:83:4e:c0:e1:
10:ef:e4:fa:68:3e:b5:c2:7f:6b:2c:ba:27:2e:b8:
00:b0:58:a9:f1:80:87:60:cb:d4:72:93:a3:78:98:
77:cd:8c:0c:e3:9a:27:69:53:75:82:12:95:90:d0:
c8:9d:5e:85:dd:1a:4e:f4:7d:01:0b:a9:2d:6f:f7:
5c:95:23:bc:f9:d1:a6:a5:e5:e8:a3:0a:8b:17:a8:
45:e8:d3:23:31:5c:b4:27:3d:a6:4e:ed:4e:74:34:
69:ee:fc:63:40:d9:82:96:09:4f:f5:1d:1e:bd:b3:
3f:af:40:1a:7f:60:bf:4a:d0:0f:24:89:30:2b:9b:
61:53:df:13:27:6e:f7:3d:88:18:8f:50:d1:5c:90:
b4:e0:d7:fe:f3:44:32:ab:da:ad:44:87:0c:82:2d:
f7:74:68:2e:4a:49:5d:6b:3f:45:3a:96:62:ec:b4:
09:d8:7e:b8:e2:a5:58:1a:f1:be:b7:3a:d8:9f:c0:
21:1f:79:9b:9d:32:c8:74:cb:ef:df:c8:36:da:ad:
33:b7:60:0f:de:2c:3e:e3:62:92:af:53:68:d8:76:
01:b4:77:75:ac:06:d5:5d:1b:0c:1c:d4:f4:b4:62:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:26:5E:AC:02:E3:D9:4F:6C:01:F2:78:95:48:E0:E7:80:F7:B4:64
X509v3 Authority Key Identifier:
keyid:DB:EE:7B:EC:56:4F:90:5D:60:8E:8A:D7:C2:54:C5:D8:32:57:10:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/810ae4dcf5e181bc220f0710a46195642f190f1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.107.240.0/21
190.196.224.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:9b:b1:00:61:90:1a:cc:92:bb:dd:40:4f:46:27:71:07:07:
e5:ec:81:f0:75:e5:cc:8b:d5:56:ec:4b:9b:a9:f3:ca:46:82:
8f:bc:2c:60:1e:9a:c0:1f:9d:c5:05:51:55:00:3c:37:94:ca:
a5:c1:98:9f:e5:3d:e4:d6:8e:7d:94:5d:49:e7:db:ff:e2:46:
a2:bf:ae:89:cd:63:61:bf:23:d5:1a:8d:2d:50:04:35:31:bd:
5d:f1:df:5e:2a:96:00:6f:4d:eb:5e:f8:a0:f6:bc:22:27:22:
01:16:0b:fd:04:7f:a3:f3:e6:28:f3:a0:e7:e9:9c:ad:b0:4e:
f9:a2:e2:47:e4:26:64:a7:c0:68:4b:de:2c:cc:5f:5c:7b:a0:
3d:3f:6f:8d:89:18:be:c7:d4:f1:f8:51:c4:38:8d:88:84:99:
15:49:01:7e:84:6e:63:6c:dc:b4:ca:fb:5e:73:16:94:b3:b7:
8a:d5:01:9b:1c:13:b5:e4:57:0d:24:fb:b0:41:ff:6c:91:b2:
db:b0:c8:86:86:7b:18:ee:b7:d3:d5:3e:9a:c9:a2:b4:d5:81:
56:4f:67:29:2a:d5:9a:72:a8:fd:d0:13:d9:b9:49:80:7c:47:
0e:b6:04:15:8f:2a:3e:b0:64:63:d8:dd:e2:9a:7b:12:44:8a:
d5:e5:a4:e0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDIR+JMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEz
YTFkNWY5YzNiNDI2NjlmY2U2YjhhZTAzZDMzOGYxZDIxZjk0MmYwHhcNMjMxMjA2
MTkwMDI5WhcNMjUxMjA2MTkwMDI5WjAzMTEwLwYDVQQDEyg4MTBhZTRkY2Y1ZTE4
MWJjMjIwZjA3MTBhNDYxOTU2NDJmMTkwZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj1xEBHUCx1KlMHhuzd3MZiiktggmrdzyWYNOwOEQ7+T6aD61
wn9rLLonLrgAsFip8YCHYMvUcpOjeJh3zYwM45onaVN1ghKVkNDInV6F3RpO9H0B
C6ktb/dclSO8+dGmpeXoowqLF6hF6NMjMVy0Jz2mTu1OdDRp7vxjQNmClglP9R0e
vbM/r0Aaf2C/StAPJIkwK5thU98TJ273PYgYj1DRXJC04Nf+80Qyq9qtRIcMgi33
dGguSkldaz9FOpZi7LQJ2H644qVYGvG+tzrYn8AhH3mbnTLIdMvv38g22q0zt2AP
3iw+42KSr1No2HYBtHd1rAbVXRsMHNT0tGKRCwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFOImXqwC49lPbAHyeJVI4OeA97RkMB8GA1UdIwQYMBaAFNvue+xWT5BdYI6K
18JUxdgyVxBQMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTNhMWQ1
ZjljM2I0MjY2OWZjZTZiOGFlMDNkMzM4ZjFkMjFmOTQyZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWU4OTgyMDItNTUxYy00YTRlLWE2ZDAtY2Y3Mzlj
MzE2Njc4LzgxMGFlNGRjZjVlMTgxYmMyMjBmMDcxMGE0NjE5NTY0MmYxOTBmMWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZTg5ODIwMi01NTFjLTRhNGUtYTZkMC1jZjcz
OWMzMTY2NzgvYTNhMWQ1ZjljM2I0MjY2OWZjZTZiOGFlMDNkMzM4ZjFkMjFmOTQy
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEA75r8AMEBL7E4DANBgkqhkiG9w0BAQsFAAOCAQEArZuxAGGQ
GsySu91AT0YncQcH5eyB8HXlzIvVVuxLm6nzykaCj7wsYB6awB+dxQVRVQA8N5TK
pcGYn+U95NaOfZRdSefb/+JGor+uic1jYb8j1RqNLVAENTG9XfHfXiqWAG9N6174
oPa8IiciARYL/QR/o/PmKPOg5+mcrbBO+aLiR+QmZKfAaEveLMxfXHugPT9vjYkY
vsfU8fhRxDiNiISZFUkBfoRuY2zctMr7XnMWlLO3itUBmxwTteRXDST7sEH/bJGy
27DIhoZ7GO6309U+msmitNWBVk9nKSrVmnKo/dAT2blJgHxHDrYEFY8qPrBkY9jd
4pp7EkSK1eWk4A==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:17 2023 by rpki-client on console.sobornost.net