Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/c2bde3606eac35fda9bb30a9d348412d056680e7.roa
File: c2bde3606eac35fda9bb30a9d348412d056680e7.roa (raw, json)
Hash identifier: vXll4QUTF7pwQfGdPub91/WeqTcIxizWdblHh2c/zRs=
Subject key identifier: 03:77:B3:2F:4E:AC:39:A4:DD:4C:DC:60:1B:F6:11:4B:98:2A:27:61
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 18115A
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/c2bde3606eac35fda9bb30a9d348412d056680e7.roa
Signing time: Fri 13 May 2022 23:39:37 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Fri 24 Mar 2023 03:00:00 +0000
asID: 262589
IP address blocks: 190.90.209.0/24 maxlen: 24
190.90.19.0/24 maxlen: 24
190.90.140.0/24 maxlen: 24
190.90.141.0/24 maxlen: 24
190.90.224.0/24 maxlen: 24
190.90.242.0/24 maxlen: 24
190.90.225.0/24 maxlen: 24
190.90.37.0/24 maxlen: 24
190.90.233.0/24 maxlen: 24
190.90.250.0/24 maxlen: 24
190.90.251.0/24 maxlen: 24
179.1.6.0/24 maxlen: 24
179.1.8.0/24 maxlen: 24
179.1.9.0/24 maxlen: 24
179.1.10.0/24 maxlen: 24
179.1.14.0/24 maxlen: 24
179.1.80.0/24 maxlen: 24
179.1.81.0/24 maxlen: 24
179.1.82.0/24 maxlen: 24
179.1.127.0/24 maxlen: 24
179.1.128.0/24 maxlen: 24
179.1.246.0/24 maxlen: 24
190.90.20.0/24 maxlen: 24
190.90.28.0/24 maxlen: 24
190.90.60.0/24 maxlen: 24
190.90.81.0/24 maxlen: 24
190.90.95.0/24 maxlen: 24
190.90.142.0/24 maxlen: 24
190.90.147.0/24 maxlen: 24
190.90.154.0/24 maxlen: 24
190.90.136.0/24 maxlen: 24
190.90.62.0/24 maxlen: 24
190.90.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1577306 (0x18115a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2023 GMT
Subject: CN=c2bde3606eac35fda9bb30a9d348412d056680e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ad:12:c7:9e:d3:ab:e6:71:22:b8:ac:10:14:
d5:3a:3d:4f:d5:9c:fc:41:00:91:ed:e2:91:7f:a6:
77:50:85:48:fb:c8:8c:5c:28:d4:64:9f:96:1b:ea:
78:3f:be:c4:db:ba:3b:fc:6a:5c:f9:ea:81:cf:14:
df:78:28:fd:26:bb:e9:06:f8:25:68:e1:fd:17:66:
15:77:64:40:6f:56:d5:b6:28:37:d6:58:bf:6a:87:
8f:e0:08:00:2c:b4:98:cc:fd:d7:2c:b2:c4:8f:f1:
f0:54:3f:93:0d:e2:71:51:5d:6c:d6:a1:53:86:52:
a5:ed:d5:37:7e:ef:2a:22:7d:e7:94:7c:8f:f7:ac:
9e:24:7b:57:77:a7:ab:fd:46:76:43:25:24:5c:94:
fd:69:0e:3e:cb:99:83:75:4e:4b:c8:43:db:05:e3:
f3:e2:db:b6:71:e5:a0:51:9d:1b:57:fa:8e:7b:75:
c7:52:15:46:e8:60:b1:e1:52:b1:69:b7:5a:3c:da:
70:82:4d:26:40:7d:6e:52:88:c5:e6:5f:33:4b:9a:
a7:c4:a3:82:a2:83:e8:da:21:35:4c:9e:79:fe:7a:
4e:87:e6:68:a9:d5:5a:da:b1:5e:4d:fa:c7:8d:32:
42:54:d2:b8:d3:d8:e3:e6:ce:64:b4:47:6d:25:cf:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:77:B3:2F:4E:AC:39:A4:DD:4C:DC:60:1B:F6:11:4B:98:2A:27:61
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/c2bde3606eac35fda9bb30a9d348412d056680e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.1.6.0/24
179.1.8.0-179.1.10.255
179.1.14.0/24
179.1.80.0-179.1.82.255
179.1.127.0-179.1.128.255
179.1.246.0/24
190.90.19.0-190.90.20.255
190.90.28.0/24
190.90.37.0/24
190.90.60.0/24
190.90.62.0/24
190.90.81.0/24
190.90.95.0/24
190.90.102.0/24
190.90.136.0/24
190.90.140.0-190.90.142.255
190.90.147.0/24
190.90.154.0/24
190.90.209.0/24
190.90.224.0/23
190.90.233.0/24
190.90.242.0/24
190.90.250.0/23
Signature Algorithm: sha256WithRSAEncryption
60:3c:92:0e:3f:9b:9f:f6:e0:34:b5:cf:8c:85:b2:f5:5f:22:
3e:9f:07:f7:21:7a:5d:58:4e:52:52:04:1b:7c:58:db:2e:94:
f4:73:92:c1:8f:22:19:36:5a:a0:0a:ae:cd:fc:46:76:a4:29:
e7:fe:8c:51:a2:9f:3a:db:c8:af:b0:7b:09:22:0f:87:55:19:
8f:35:e6:3f:37:d6:cc:95:25:22:37:df:91:08:9f:ca:5f:ff:
81:02:71:f7:cf:2e:e5:1f:d1:3d:5c:3c:43:ff:97:24:d3:9e:
51:54:ab:85:eb:57:d1:73:86:c3:e7:04:4f:2f:b3:ca:4b:bb:
66:e3:94:aa:27:d8:96:60:21:3c:37:b5:be:72:86:43:7f:22:
50:3d:2c:9f:14:51:c9:50:fd:6d:cb:dd:b6:1c:23:ce:fd:e9:
97:24:95:51:37:2b:0b:72:50:5e:00:de:e4:c5:be:21:15:bb:
c1:23:f7:e2:4e:f4:37:d3:60:93:b0:72:ae:b6:fc:2e:ae:e8:
bd:99:92:6c:3f:68:aa:bb:78:f7:95:0c:2e:24:e5:97:fb:24:
ed:fa:4e:a6:3c:30:91:03:3a:a7:91:84:fc:2e:17:09:76:e0:
5c:11:1e:8c:aa:9e:15:26:88:dd:22:f9:2c:fb:2d:1e:4c:50:
ac:9a:03:34
-----BEGIN CERTIFICATE-----
MIIF8TCCBNmgAwIBAgIDGBFaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjEwMzI0
MDMwMDAwWhcNMjMwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhjMmJkZTM2MDZlYWMz
NWZkYTliYjMwYTlkMzQ4NDEyZDA1NjY4MGU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk60Sx57Tq+ZxIrisEBTVOj1P1Zz8QQCR7eKRf6Z3UIVI+8iM
XCjUZJ+WG+p4P77E27o7/Gpc+eqBzxTfeCj9JrvpBvglaOH9F2YVd2RAb1bVtig3
1li/aoeP4AgALLSYzP3XLLLEj/HwVD+TDeJxUV1s1qFThlKl7dU3fu8qIn3nlHyP
96yeJHtXd6er/UZ2QyUkXJT9aQ4+y5mDdU5LyEPbBePz4tu2ceWgUZ0bV/qOe3XH
UhVG6GCx4VKxabdaPNpwgk0mQH1uUojF5l8zS5qnxKOCooPo2iE1TJ55/npOh+Zo
qdVa2rFeTfrHjTJCVNK409jj5s5ktEdtJc9pJwIDAQABo4IDDDCCAwgwHQYDVR0O
BBYEFAN3sy9OrDmk3UzcYBv2EUuYKidhMB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5L2MyYmRlMzYwNmVhYzM1ZmRhOWJiMzBhOWQzNDg0MTJkMDU2NjgwZTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBzwYIKwYBBQUHAQcBAf8E
gb8wgbwwgbkEAgABMIGyAwQAswEGMAwDBAOzAQgDBACzAQoDBACzAQ4wDAMEBLMB
UAMEALMBUjAMAwQAswF/AwQAswGAAwQAswH2MAwDBAC+WhMDBAC+WhQDBAC+WhwD
BAC+WiUDBAC+WjwDBAC+Wj4DBAC+WlEDBAC+Wl8DBAC+WmYDBAC+WogwDAMEAr5a
jAMEAL5ajgMEAL5akwMEAL5amgMEAL5a0QMEAb5a4AMEAL5a6QMEAL5a8gMEAb5a
+jANBgkqhkiG9w0BAQsFAAOCAQEAYDySDj+bn/bgNLXPjIWy9V8iPp8H9yF6XVhO
UlIEG3xY2y6U9HOSwY8iGTZaoAquzfxGdqQp5/6MUaKfOtvIr7B7CSIPh1UZjzXm
PzfWzJUlIjffkQifyl//gQJx988u5R/RPVw8Q/+XJNOeUVSrhetX0XOGw+cETy+z
yku7ZuOUqifYlmAhPDe1vnKGQ38iUD0snxRRyVD9bcvdthwjzv3plySVUTcrC3JQ
XgDe5MW+IRW7wSP34k70N9Ngk7Byrrb8Lq7ovZmSbD9oqrt495UMLiTll/sk7fpO
pjwwkQM6p5GE/C4XCXbgXBEejKqeFSaI3SL5LPstHkxQrJoDNA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org