Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/63fe17856600191e243244383b7337ab1c3f66f0.roa
File: 63fe17856600191e243244383b7337ab1c3f66f0.roa (raw, json)
Hash identifier: jpDl2zvgPsE6xQyCE1v2TS6yp6ZkFzrVJ0TjG4VTm0Q=
Subject key identifier: C5:1B:5A:25:0D:A9:02:42:7F:9F:FA:52:06:28:07:89:44:E9:CD:75
Certificate issuer: /CN=5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed
Certificate serial: 0DAC6D
Authority key identifier: AA:D3:E4:91:DA:FA:6F:0D:36:21:13:B5:B2:84:C7:CD:C9:4E:A0:04
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/63fe17856600191e243244383b7337ab1c3f66f0.roa
Signing time: Wed 24 Mar 2021 14:39:34 +0000
ROA not before: Wed 24 Mar 2021 14:39:33 +0000
ROA not after: Tue 24 Mar 2026 14:39:33 +0000
asID: 27902
IP address blocks: 190.107.64.0/24 maxlen: 24
190.107.65.0/24 maxlen: 24
190.107.66.0/24 maxlen: 24
190.107.67.0/24 maxlen: 24
190.107.70.0/24 maxlen: 24
190.107.71.0/24 maxlen: 24
190.107.72.0/24 maxlen: 24
190.107.73.0/24 maxlen: 24
190.107.74.0/24 maxlen: 24
190.107.75.0/24 maxlen: 24
190.107.76.0/24 maxlen: 24
190.107.77.0/24 maxlen: 24
190.107.78.0/24 maxlen: 24
190.107.79.0/24 maxlen: 24
200.93.248.0/24 maxlen: 24
200.93.249.0/24 maxlen: 24
200.93.250.0/24 maxlen: 24
200.93.251.0/24 maxlen: 24
200.93.252.0/24 maxlen: 24
200.93.253.0/24 maxlen: 24
200.93.254.0/24 maxlen: 24
200.93.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896109 (0xdac6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed
Validity
Not Before: Mar 24 14:39:33 2021 GMT
Not After : Mar 24 14:39:33 2026 GMT
Subject: CN=63fe17856600191e243244383b7337ab1c3f66f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:af:39:f7:60:fa:71:a8:de:7c:7d:18:e9:
ea:55:ba:e7:ef:97:fa:d6:61:1c:d0:80:2e:06:32:
4a:62:52:a3:94:d9:79:2b:3f:7e:bc:7b:e1:a3:6e:
14:7c:1a:f5:ca:6a:eb:02:20:9d:69:fb:91:3a:71:
0d:41:8c:7b:af:3c:0e:1a:9e:1e:77:99:fa:51:ef:
f6:64:e1:aa:8f:4f:67:49:ce:f6:f6:2d:af:89:22:
3f:8f:df:09:c9:e5:19:74:a8:ac:f1:a6:9c:cf:7a:
8d:3a:d7:cb:e7:6b:a9:44:07:83:af:76:f6:fd:ec:
c4:c9:82:6c:e3:cd:be:91:bb:2f:48:9a:a2:67:5d:
10:95:83:bc:21:00:9c:c5:58:a3:da:01:9d:2d:6e:
ff:be:5a:6f:e1:62:1d:7f:f9:ae:5c:7c:9c:16:bc:
62:6b:5c:ce:a2:e4:aa:c3:29:4f:75:a9:b6:a9:fa:
24:b8:e9:c3:d0:04:73:6d:e8:1f:cc:66:cf:1c:48:
fe:2d:8b:3e:40:37:00:d7:42:37:e2:d7:dd:e5:02:
f8:96:13:6c:14:3d:d8:9f:97:7a:ab:91:93:91:6f:
99:f0:98:be:cf:64:23:3a:31:d2:e6:6c:06:2d:81:
22:bb:46:ff:d3:94:66:b0:01:29:ac:3c:2f:63:eb:
0d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1B:5A:25:0D:A9:02:42:7F:9F:FA:52:06:28:07:89:44:E9:CD:75
X509v3 Authority Key Identifier:
keyid:AA:D3:E4:91:DA:FA:6F:0D:36:21:13:B5:B2:84:C7:CD:C9:4E:A0:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/63fe17856600191e243244383b7337ab1c3f66f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d5c07b1f-a5f9-4e03-ab3c-30e993cc1fc7/5d58b8d1fe1a7ec6f16054c5c8e97d1261a255ed.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.107.64.0/22
190.107.70.0-190.107.79.255
200.93.248.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:53:35:9b:bb:bf:e8:5d:23:07:49:88:33:63:a8:1e:9f:95:
fa:78:43:29:80:45:1e:44:ea:db:8f:af:02:ed:83:df:48:00:
c9:42:c1:6b:c7:0c:55:a1:2b:f7:47:bf:5c:a3:cb:f7:9f:df:
7b:b2:88:ac:7f:a9:db:e8:94:4a:c9:18:f8:87:13:9e:91:c4:
a2:91:1f:11:93:74:2f:e2:19:41:fe:92:2d:c3:72:f7:05:8c:
49:84:f2:b5:d0:b4:ac:ca:8d:1b:17:4d:44:df:11:de:ba:dd:
8c:1a:4b:5e:fe:56:e2:2d:54:47:81:d0:e7:de:53:24:15:1f:
2c:28:b8:74:fe:2b:1f:de:7f:b7:6d:e9:d7:82:a2:91:de:94:
61:15:29:54:b3:89:66:4f:1c:34:9f:99:b6:f7:fb:f5:ad:f1:
f3:b0:c2:50:d6:e1:0a:ce:eb:4b:6b:8d:d2:52:fc:95:c5:ee:
da:be:9e:58:10:f2:94:23:ee:ca:b4:33:4d:6c:39:db:8c:e6:
44:8e:0d:42:80:94:1a:bd:9b:2e:51:7c:e4:57:ee:ab:d8:3d:
3f:c4:61:19:fc:1b:16:5c:34:03:92:c7:6d:32:7a:bc:ea:c0:
39:06:53:bc:79:89:70:23:57:25:4d:68:cf:e0:d9:7f:62:b4:
92:12:d1:5d
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIDDaxtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
NThiOGQxZmUxYTdlYzZmMTYwNTRjNWM4ZTk3ZDEyNjFhMjU1ZWQwHhcNMjEwMzI0
MTQzOTMzWhcNMjYwMzI0MTQzOTMzWjAzMTEwLwYDVQQDEyg2M2ZlMTc4NTY2MDAx
OTFlMjQzMjQ0MzgzYjczMzdhYjFjM2Y2NmYwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsjmvOfdg+nGo3nx9GOnqVbrn75f61mEc0IAuBjJKYlKjlNl5
Kz9+vHvho24UfBr1ymrrAiCdafuROnENQYx7rzwOGp4ed5n6Ue/2ZOGqj09nSc72
9i2viSI/j98JyeUZdKis8aacz3qNOtfL52upRAeDr3b2/ezEyYJs482+kbsvSJqi
Z10QlYO8IQCcxVij2gGdLW7/vlpv4WIdf/muXHycFrxia1zOouSqwylPdam2qfok
uOnD0ARzbegfzGbPHEj+LYs+QDcA10I34tfd5QL4lhNsFD3Yn5d6q5GTkW+Z8Ji+
z2QjOjHS5mwGLYEiu0b/05RmsAEprDwvY+sN+wIDAQABo4ICbzCCAmswHQYDVR0O
BBYEFMUbWiUNqQJCf5/6UgYoB4lE6c11MB8GA1UdIwQYMBaAFKrT5JHa+m8NNiET
tbKEx83JTqAEMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWQ1OGI4
ZDFmZTFhN2VjNmYxNjA1NGM1YzhlOTdkMTI2MWEyNTVlZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDVjMDdiMWYtYTVmOS00ZTAzLWFiM2MtMzBlOTkz
Y2MxZmM3LzYzZmUxNzg1NjYwMDE5MWUyNDMyNDQzODNiNzMzN2FiMWMzZjY2ZjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNWMwN2IxZi1hNWY5LTRlMDMtYWIzYy0zMGU5
OTNjYzFmYzcvNWQ1OGI4ZDFmZTFhN2VjNmYxNjA1NGM1YzhlOTdkMTI2MWEyNTVl
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQk
MCIwIAQCAAEwGgMEAr5rQDAMAwQBvmtGAwQEvmtAAwQDyF34MA0GCSqGSIb3DQEB
CwUAA4IBAQC6UzWbu7/oXSMHSYgzY6gen5X6eEMpgEUeROrbj68C7YPfSADJQsFr
xwxVoSv3R79co8v3n997soisf6nb6JRKyRj4hxOekcSikR8Rk3Qv4hlB/pItw3L3
BYxJhPK10LSsyo0bF01E3xHeut2MGkte/lbiLVRHgdDn3lMkFR8sKLh0/isf3n+3
benXgqKR3pRhFSlUs4lmTxw0n5m29/v1rfHzsMJQ1uEKzutLa43SUvyVxe7avp5Y
EPKUI+7KtDNNbDnbjOZEjg1CgJQavZsuUXzkV+6r2D0/xGEZ/BsWXDQDksdtMnq8
6sA5BlO8eYlwI1clTWjP4Nl/YrSSEtFd
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org