Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1dc46cf4577c92eeef7faac6f9cb9336d27f79f7.roa
File: 1dc46cf4577c92eeef7faac6f9cb9336d27f79f7.roa (raw, json)
Hash identifier: jSD56vej0+zNaQZjC4ZrSNhLPxkOKCcS1+Dy/JWdkhk=
Subject key identifier: 86:07:5F:FB:D1:AC:43:35:29:17:52:64:CB:B8:E2:C7:06:17:50:A1
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 1622E5
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1dc46cf4577c92eeef7faac6f9cb9336d27f79f7.roa
Signing time: Mon 14 Feb 2022 16:43:48 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 212238
IP address blocks: 191.101.34.0/24 maxlen: 24
191.101.183.0/24 maxlen: 24
191.101.254.0/24 maxlen: 24
191.101.35.0/24 maxlen: 24
179.61.202.0/24 maxlen: 24
181.214.235.0/24 maxlen: 24
179.61.193.0/24 maxlen: 24
191.101.128.0/24 maxlen: 24
191.96.212.0/24 maxlen: 24
181.214.139.0/24 maxlen: 24
191.101.196.0/24 maxlen: 24
191.101.197.0/24 maxlen: 24
181.214.9.0/24 maxlen: 24
181.215.177.0/24 maxlen: 24
181.215.179.0/24 maxlen: 24
181.214.82.0/24 maxlen: 24
181.215.1.0/24 maxlen: 24
181.215.175.0/24 maxlen: 24
181.215.188.0/24 maxlen: 24
181.214.138.0/24 maxlen: 24
191.96.77.0/24 maxlen: 24
191.96.74.0/24 maxlen: 24
191.96.138.0/24 maxlen: 24
181.215.214.0/24 maxlen: 24
181.214.143.0/24 maxlen: 24
191.96.67.0/24 maxlen: 24
181.214.227.0/24 maxlen: 24
191.96.227.0/24 maxlen: 24
191.101.30.0/24 maxlen: 24
191.101.216.0/24 maxlen: 24
181.214.86.0/24 maxlen: 24
181.214.255.0/24 maxlen: 24
191.101.133.0/24 maxlen: 24
181.214.88.0/24 maxlen: 24
179.61.224.0/24 maxlen: 24
191.96.205.0/24 maxlen: 24
181.214.144.0/24 maxlen: 24
181.214.222.0/24 maxlen: 24
181.215.160.0/24 maxlen: 24
181.214.145.0/24 maxlen: 24
181.215.161.0/24 maxlen: 24
181.214.78.0/24 maxlen: 24
181.214.228.0/24 maxlen: 24
179.61.220.0/24 maxlen: 24
181.215.224.0/24 maxlen: 24
181.215.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1450725 (0x1622e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=1dc46cf4577c92eeef7faac6f9cb9336d27f79f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c0:26:d7:9e:72:dd:61:f6:22:16:c6:5a:fb:
e7:65:a9:53:b0:fc:0b:45:2a:b8:e6:23:a6:af:e0:
ba:cf:7f:76:77:55:90:0c:b3:9a:e7:9c:be:5e:51:
3c:19:ee:ff:a7:db:95:cc:40:34:a1:9a:1f:9c:fb:
bf:d7:ca:79:66:f3:06:71:17:00:a3:68:8f:33:c1:
4a:9e:08:c0:a7:7c:e7:63:0a:d8:9c:4a:c4:73:06:
2c:c2:03:a9:93:5a:04:d6:44:8c:00:9d:0c:08:94:
c3:97:36:30:8d:cc:f5:d7:f2:ec:53:cd:84:c9:aa:
f1:88:96:45:2d:f2:a0:0a:80:ab:1b:95:1a:28:b2:
8b:a3:4e:59:b7:cd:77:08:a5:41:70:0e:dc:a5:af:
35:d1:ce:27:43:46:84:bd:80:44:bd:48:0e:3c:43:
3e:f1:08:da:3a:01:75:fd:0d:40:17:60:cf:f1:3b:
17:ba:67:7c:14:ef:91:a7:82:49:28:63:fa:84:29:
aa:c6:c9:b0:1a:a0:84:ff:8b:d1:36:58:2b:55:9f:
eb:c2:0c:e0:7c:ce:fd:84:f8:6a:a6:80:15:d6:f0:
1f:e3:3f:cc:f1:65:88:06:9c:ed:b9:6b:bd:4b:49:
6b:6a:5b:d1:fd:fe:66:19:87:ac:93:d2:c3:f5:85:
6f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:07:5F:FB:D1:AC:43:35:29:17:52:64:CB:B8:E2:C7:06:17:50:A1
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1dc46cf4577c92eeef7faac6f9cb9336d27f79f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.193.0/24
179.61.202.0/24
179.61.220.0/24
179.61.224.0/24
181.214.9.0/24
181.214.78.0/24
181.214.82.0/24
181.214.86.0/24
181.214.88.0/24
181.214.138.0/23
181.214.143.0-181.214.145.255
181.214.222.0/24
181.214.227.0-181.214.228.255
181.214.235.0/24
181.214.255.0/24
181.215.1.0/24
181.215.160.0/23
181.215.167.0/24
181.215.175.0/24
181.215.177.0/24
181.215.179.0/24
181.215.188.0/24
181.215.214.0/24
181.215.224.0/24
191.96.67.0/24
191.96.74.0/24
191.96.77.0/24
191.96.138.0/24
191.96.205.0/24
191.96.212.0/24
191.96.227.0/24
191.101.30.0/24
191.101.34.0/23
191.101.128.0/24
191.101.133.0/24
191.101.183.0/24
191.101.196.0/23
191.101.216.0/24
191.101.254.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:13:99:77:b7:e4:71:c9:e4:0c:86:e8:cb:60:03:77:b8:fb:
b1:75:bb:45:a1:0b:52:d4:4d:55:a5:72:e1:de:6f:f7:6a:5f:
35:7e:8f:c4:7d:cb:a1:0f:22:eb:ec:c0:27:46:ba:30:ed:90:
52:38:9b:28:8f:0f:6b:44:75:08:25:a0:ce:b6:8a:9a:2e:a8:
6a:1d:84:6f:88:b2:bc:a9:0b:8e:83:47:a1:cf:a7:44:81:d3:
9e:3c:4f:0f:84:6b:51:fe:0b:b0:02:e6:c9:71:02:67:81:02:
63:ef:46:93:97:41:8b:aa:c5:d5:68:f4:be:ba:94:03:20:3c:
9f:b4:ac:8c:9f:dd:0e:2c:21:42:9d:04:e7:18:06:a0:94:20:
49:09:ff:a4:32:00:80:d7:ea:76:c2:63:fa:1f:a1:76:33:20:
61:1c:b9:6d:dc:a3:f4:04:3d:88:2f:e5:85:a1:e5:02:61:b2:
3c:c7:b0:7e:43:51:b8:f9:04:57:b6:cb:07:f2:d5:b1:7c:f9:
3a:f9:8d:63:a5:46:3d:01:91:3f:2f:96:fc:44:26:17:d0:c0:
ec:dd:c5:f0:37:31:72:5d:31:62:e6:22:80:fb:9d:68:7a:46:
9b:10:9e:fe:37:ef:5e:46:96:3e:c3:6c:71:6b:4f:63:ee:cf:
24:3f:04:d1
-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgIDFiLlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygxZGM0NmNmNDU3N2M5
MmVlZWY3ZmFhYzZmOWNiOTMzNmQyN2Y3OWY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk8Am155y3WH2IhbGWvvnZalTsPwLRSq45iOmr+C6z392d1WQ
DLOa55y+XlE8Ge7/p9uVzEA0oZofnPu/18p5ZvMGcRcAo2iPM8FKngjAp3znYwrY
nErEcwYswgOpk1oE1kSMAJ0MCJTDlzYwjcz11/LsU82EyarxiJZFLfKgCoCrG5Ua
KLKLo05Zt813CKVBcA7cpa810c4nQ0aEvYBEvUgOPEM+8QjaOgF1/Q1AF2DP8TsX
umd8FO+Rp4JJKGP6hCmqxsmwGqCE/4vRNlgrVZ/rwgzgfM79hPhqpoAV1vAf4z/M
8WWIBpztuWu9S0lralvR/f5mGYesk9LD9YVvPwIDAQABo4IDWDCCA1QwHQYDVR0O
BBYEFIYHX/vRrEM1KRdSZMu44scGF1ChMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzFkYzQ2Y2Y0NTc3YzkyZWVlZjdmYWFjNmY5Y2I5MzM2ZDI3Zjc5Zjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCARoGCCsGAQUFBwEHAQH/
BIIBCTCCAQUwggEBBAIAATCB+gMEALM9wQMEALM9ygMEALM93AMEALM94AMEALXW
CQMEALXWTgMEALXWUgMEALXWVgMEALXWWAMEAbXWijAMAwQAtdaPAwQBtdaQAwQA
tdbeMAwDBAC11uMDBAC11uQDBAC11usDBAC11v8DBAC11wEDBAG116ADBAC116cD
BAC1168DBAC117EDBAC117MDBAC117wDBAC119YDBAC11+ADBAC/YEMDBAC/YEoD
BAC/YE0DBAC/YIoDBAC/YM0DBAC/YNQDBAC/YOMDBAC/ZR4DBAG/ZSIDBAC/ZYAD
BAC/ZYUDBAC/ZbcDBAG/ZcQDBAC/ZdgDBAC/Zf4wDQYJKoZIhvcNAQELBQADggEB
ACsTmXe35HHJ5AyG6MtgA3e4+7F1u0WhC1LUTVWlcuHeb/dqXzV+j8R9y6EPIuvs
wCdGujDtkFI4myiPD2tEdQgloM62ipouqGodhG+IsrypC46DR6HPp0SB0548Tw+E
a1H+C7AC5slxAmeBAmPvRpOXQYuqxdVo9L66lAMgPJ+0rIyf3Q4sIUKdBOcYBqCU
IEkJ/6QyAIDX6nbCY/ofoXYzIGEcuW3co/QEPYgv5YWh5QJhsjzHsH5DUbj5BFe2
ywfy1bF8+Tr5jWOlRj0BkT8vlvxEJhfQwOzdxfA3MXJdMWLmIoD7nWh6RpsQnv43
715Glj7DbHFrT2PuzyQ/BNE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org