Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/dbb8a0a3b0c5ed9ac29f11766705d8577f39da46.roa
File: dbb8a0a3b0c5ed9ac29f11766705d8577f39da46.roa (raw, json)
Hash identifier: /fkC4tochfErXySXjfzP6iluFpztCmK0JOeBN+s4g6Q=
Subject key identifier: 11:8E:F7:95:21:9D:61:B9:58:14:38:7B:14:2C:4E:45:23:C0:F7:07
Certificate issuer: /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial: 1997C8
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/dbb8a0a3b0c5ed9ac29f11766705d8577f39da46.roa
Signing time: Wed 03 Aug 2022 19:16:16 +0000
ROA not before: Mon 18 Jul 2022 03:00:00 +0000
ROA not after: Thu 18 Jul 2024 03:00:00 +0000
asID: 265705
IP address blocks: 186.31.155.0/24 maxlen: 24
190.26.30.0/23 maxlen: 24
186.28.108.0/22 maxlen: 22
186.30.120.0/22 maxlen: 22
190.27.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1677256 (0x1997c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Validity
Not Before: Jul 18 03:00:00 2022 GMT
Not After : Jul 18 03:00:00 2024 GMT
Subject: CN=dbb8a0a3b0c5ed9ac29f11766705d8577f39da46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0f:93:88:8d:36:eb:d3:d7:7b:f6:b6:48:72:
be:5d:b4:e6:a2:f7:19:31:3d:32:d5:b7:28:ec:cd:
d1:63:38:a7:00:f3:68:7e:44:8a:15:4a:ce:3d:0f:
dc:ba:71:01:e8:e6:a3:03:2b:da:a9:1e:26:e8:1a:
90:c1:fa:72:96:8d:fd:27:4e:7f:b1:a4:43:3c:b0:
48:d1:ff:b6:2e:33:aa:89:1e:99:5f:4b:ca:ec:ec:
60:40:da:5a:d4:25:85:3b:01:ac:33:f7:0a:55:5f:
99:22:9d:28:48:48:19:a3:5e:0e:9d:fc:bb:f0:e3:
39:1c:21:69:66:ce:d6:20:55:3d:42:97:ff:ce:af:
03:49:33:46:d0:3a:d5:88:55:75:3e:41:4a:1a:98:
2d:47:64:0d:d7:00:97:5b:7b:3b:02:75:8a:75:d1:
16:8c:af:17:ad:7c:9b:2d:ee:82:b1:62:0f:30:f8:
e9:01:b4:d8:fc:43:1e:55:22:bf:72:58:92:b7:f1:
c0:81:14:9f:4f:6f:d8:f3:b0:8f:f9:98:da:01:76:
6c:e2:38:6f:e7:e9:15:f2:f9:db:50:89:e0:70:f4:
6f:ed:6b:6f:79:ee:f4:44:7e:e0:5f:73:bd:4b:6f:
a1:c1:b4:0f:22:42:4e:35:bb:71:22:cf:c4:63:5a:
e7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8E:F7:95:21:9D:61:B9:58:14:38:7B:14:2C:4E:45:23:C0:F7:07
X509v3 Authority Key Identifier:
keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/dbb8a0a3b0c5ed9ac29f11766705d8577f39da46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.28.108.0/22
186.30.120.0/22
186.31.155.0/24
190.26.30.0/23
190.27.136.0/22
Signature Algorithm: sha256WithRSAEncryption
22:93:a1:2e:33:8b:92:6d:a2:1a:36:38:aa:17:bb:42:ea:17:
b5:93:46:86:85:76:88:4e:6f:39:fe:31:6d:12:ff:43:c8:5e:
ba:dc:7f:05:48:23:0d:15:2d:37:0b:f2:83:94:17:78:16:bb:
ba:51:1c:d1:5d:0b:cf:74:1b:71:72:6e:d4:69:ed:bf:d2:dc:
09:22:eb:d4:5b:7c:8c:58:87:76:9a:1a:8f:30:d3:1d:97:ee:
5a:41:e0:84:b7:77:cd:84:0c:8b:1f:61:6c:f9:bc:ae:d7:18:
01:61:eb:15:59:3a:7b:a6:ce:d9:84:cd:8b:7d:27:1a:06:74:
e3:e0:ae:53:b7:31:b9:7d:ac:96:1c:27:0f:ee:48:15:70:e2:
69:9b:28:4f:f1:77:bb:3c:49:96:dd:97:33:c8:28:42:05:8b:
e5:bc:b8:71:27:74:93:11:d1:72:5a:48:34:ed:88:15:29:1b:
bc:6f:8e:bf:78:44:d7:1c:06:5a:04:9f:ce:1f:7d:0c:ea:80:
02:e6:1c:8e:d5:21:15:a3:0b:8b:13:8c:9d:04:26:09:9d:b0:
b9:97:17:0a:80:0b:1c:17:ed:2d:11:81:b0:11:f9:bc:56:84:
41:7a:f4:94:c8:c7:9e:c1:78:ec:69:2f:8d:9f:9f:39:ac:79:
09:27:3e:74
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDGZfIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc4
NTUxOTdmNTkwZmYyOThiNTJhYjM1OGRhMDhhMGZkYmZlNmE4ODMwHhcNMjIwNzE4
MDMwMDAwWhcNMjQwNzE4MDMwMDAwWjAzMTEwLwYDVQQDEyhkYmI4YTBhM2IwYzVl
ZDlhYzI5ZjExNzY2NzA1ZDg1NzdmMzlkYTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhw+TiI0269PXe/a2SHK+XbTmovcZMT0y1bco7M3RYzinAPNo
fkSKFUrOPQ/cunEB6OajAyvaqR4m6BqQwfpylo39J05/saRDPLBI0f+2LjOqiR6Z
X0vK7OxgQNpa1CWFOwGsM/cKVV+ZIp0oSEgZo14Onfy78OM5HCFpZs7WIFU9Qpf/
zq8DSTNG0DrViFV1PkFKGpgtR2QN1wCXW3s7AnWKddEWjK8XrXybLe6CsWIPMPjp
AbTY/EMeVSK/cliSt/HAgRSfT2/Y87CP+ZjaAXZs4jhv5+kV8vnbUIngcPRv7Wtv
ee70RH7gX3O9S2+hwbQPIkJONbtxIs/EY1rnLwIDAQABo4ICczCCAm8wHQYDVR0O
BBYEFBGO95UhnWG5WBQ4exQsTkUjwPcHMB8GA1UdIwQYMBaAFDzc0eVbXZoW/XX/
IxD889OGilrKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzg1NTE5
N2Y1OTBmZjI5OGI1MmFiMzU4ZGEwOGEwZmRiZmU2YTg4My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTMyYzQyNDAtY2VlYS00NzBlLTk2NGMtNzRkOWJj
MWUzODBhL2RiYjhhMGEzYjBjNWVkOWFjMjlmMTE3NjY3MDVkODU3N2YzOWRhNDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMzJjNDI0MC1jZWVhLTQ3MGUtOTY0Yy03NGQ5
YmMxZTM4MGEvNzg1NTE5N2Y1OTBmZjI5OGI1MmFiMzU4ZGEwOGEwZmRiZmU2YTg4
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQo
MCYwJAQCAAEwHgMEArocbAMEAroeeAMEALofmwMEAb4aHgMEAr4biDANBgkqhkiG
9w0BAQsFAAOCAQEAIpOhLjOLkm2iGjY4qhe7QuoXtZNGhoV2iE5vOf4xbRL/Q8he
utx/BUgjDRUtNwvyg5QXeBa7ulEc0V0Lz3QbcXJu1Gntv9LcCSLr1Ft8jFiHdpoa
jzDTHZfuWkHghLd3zYQMix9hbPm8rtcYAWHrFVk6e6bO2YTNi30nGgZ04+CuU7cx
uX2slhwnD+5IFXDiaZsoT/F3uzxJlt2XM8goQgWL5by4cSd0kxHRclpINO2IFSkb
vG+Ov3hE1xwGWgSfzh99DOqAAuYcjtUhFaMLixOMnQQmCZ2wuZcXCoALHBftLRGB
sBH5vFaEQXr0lMjHnsF47GkvjZ+fOax5CSc+dA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org