Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/20b3ad8da5f94febe885a740f7c8d8c57df06d44.roa
File: 20b3ad8da5f94febe885a740f7c8d8c57df06d44.roa (raw, json)
Hash identifier: mL0MXguF4J+6l00TRlm36xh0lq3z5oZ+I9SmTkcVEjg=
Subject key identifier: 36:FB:C3:47:74:61:2E:FE:C6:0D:2F:62:40:E0:D6:65:7D:B3:77:DC
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 2B54F1
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/20b3ad8da5f94febe885a740f7c8d8c57df06d44.roa
Signing time: Wed 10 Jan 2024 07:30:06 +0000
ROA not before: Wed 10 Jan 2024 07:30:06 +0000
ROA not after: Fri 09 Jan 2026 07:30:06 +0000
asID: 14080
IP address blocks: 181.48.0.0/13 maxlen: 24
190.85.240.0/20 maxlen: 20
200.26.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2839793 (0x2b54f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Jan 10 07:30:06 2024 GMT
Not After : Jan 9 07:30:06 2026 GMT
Subject: CN=20b3ad8da5f94febe885a740f7c8d8c57df06d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:fd:a3:18:51:e5:a3:aa:5b:b6:89:2c:6d:
1c:89:28:8e:33:87:76:87:b7:03:16:d3:fe:b5:09:
fd:7b:cb:ab:99:ae:95:a2:d6:f3:29:ba:70:93:88:
1a:49:bf:94:e2:3f:b6:dd:a4:b7:fe:ce:b8:85:09:
01:36:fe:fe:2b:90:da:6b:ec:01:66:a2:c6:9d:51:
9d:d6:d1:d6:40:2d:c0:d6:b1:e1:6b:e7:6b:43:7e:
a6:2b:83:4b:15:34:db:b5:35:c0:a8:44:9b:38:fd:
aa:f5:3e:06:d1:74:8a:87:41:d5:dd:03:e0:97:03:
d8:8a:7a:51:f7:ca:ce:0d:97:df:a6:fd:91:92:1b:
e8:51:1e:21:2c:cb:f2:f3:46:37:8d:58:ee:73:f8:
50:66:4f:83:90:73:9f:14:fe:8c:85:b7:1e:ed:31:
b1:36:92:8a:73:ce:89:fb:a7:65:82:8a:4f:b6:12:
2a:0a:97:b8:8f:64:01:1f:88:07:9b:13:64:76:90:
6a:df:95:d9:c4:c7:98:09:c0:85:88:ce:c5:36:04:
ca:bd:52:cc:28:45:5d:c5:c9:3d:c7:7d:eb:7d:52:
57:f4:6f:07:e7:dd:7b:b3:d6:a0:01:b3:ca:09:bc:
ca:b1:72:f8:84:6b:bc:44:42:6a:57:93:7e:97:b5:
66:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FB:C3:47:74:61:2E:FE:C6:0D:2F:62:40:E0:D6:65:7D:B3:77:DC
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/20b3ad8da5f94febe885a740f7c8d8c57df06d44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.48.0.0/13
190.85.240.0/20
200.26.128.0/19
Signature Algorithm: sha256WithRSAEncryption
36:92:c4:25:de:23:9e:c2:66:c0:a1:9a:f5:ed:ae:f5:d0:d4:
0a:e9:22:5a:80:d7:e6:2e:f0:2f:74:33:43:84:34:5a:63:0c:
2b:58:cd:8f:a1:bb:f7:44:ff:73:62:85:48:4a:62:35:2b:8c:
af:3f:e0:e3:b7:7a:b7:c6:e8:93:2d:f6:c3:2b:5d:ea:54:7c:
a7:d9:dd:ae:72:6e:35:23:5b:14:c5:41:3a:bc:65:d2:1d:e3:
60:85:bd:e8:9b:30:b0:0e:66:e8:84:2a:6d:d0:1e:0e:16:86:
3e:00:6d:e0:3c:a1:65:72:ec:1c:2c:c8:2c:75:b5:40:c6:69:
09:58:59:dd:e2:5e:74:b8:1c:dd:4b:bc:90:63:4a:27:ac:c3:
0b:a1:a0:8e:0a:b4:2d:67:3f:75:18:45:24:81:2c:62:48:18:
89:0f:25:b7:0c:02:e0:99:d2:9d:ef:87:c1:f0:e1:83:5b:51:
b4:d8:12:35:56:ee:8e:2e:64:15:f6:87:59:28:f5:3a:fb:24:
ec:25:14:fc:9e:05:d6:d9:20:51:89:3a:98:34:19:55:a8:83:
cb:be:93:b3:0d:b1:00:35:95:d3:49:d9:8a:15:b7:9a:34:9e:
aa:62:b8:2f:28:6f:78:f2:81:cd:db:18:93:94:b5:43:c5:03:
2f:ae:f6:af
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIDK1TxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
ZjY4ZWNkMzg5NmIzMjg4ZjgzYzI5YTJjM2RhNDRjODIxYzc2ODQwHhcNMjQwMTEw
MDczMDA2WhcNMjYwMTA5MDczMDA2WjAzMTEwLwYDVQQDEygyMGIzYWQ4ZGE1Zjk0
ZmViZTg4NWE3NDBmN2M4ZDhjNTdkZjA2ZDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArgD9oxhR5aOqW7aJLG0ciSiOM4d2h7cDFtP+tQn9e8urma6V
otbzKbpwk4gaSb+U4j+23aS3/s64hQkBNv7+K5Daa+wBZqLGnVGd1tHWQC3A1rHh
a+drQ36mK4NLFTTbtTXAqESbOP2q9T4G0XSKh0HV3QPglwPYinpR98rODZffpv2R
khvoUR4hLMvy80Y3jVjuc/hQZk+DkHOfFP6Mhbce7TGxNpKKc86J+6dlgopPthIq
Cpe4j2QBH4gHmxNkdpBq35XZxMeYCcCFiM7FNgTKvVLMKEVdxck9x33rfVJX9G8H
5917s9agAbPKCbzKsXL4hGu8REJqV5N+l7VmmQIDAQABo4ICZjCCAmIwHQYDVR0O
BBYEFDb7w0d0YS7+xg0vYkDg1mV9s3fcMB8GA1UdIwQYMBaAFKhzgywDCRS4/QD1
P69G5JXZcRs8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFmNjhl
Y2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhLzIwYjNhZDhkYTVmOTRmZWJlODg1YTc0MGY3YzhkOGM1N2RmMDZkNDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvYzFmNjhlY2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAqBggrBgEFBQcBBwEB/wQb
MBkwFwQCAAEwEQMDA7UwAwQEvlXwAwQFyBqAMA0GCSqGSIb3DQEBCwUAA4IBAQA2
ksQl3iOewmbAoZr17a710NQK6SJagNfmLvAvdDNDhDRaYwwrWM2Pobv3RP9zYoVI
SmI1K4yvP+Djt3q3xuiTLfbDK13qVHyn2d2ucm41I1sUxUE6vGXSHeNghb3omzCw
DmbohCpt0B4OFoY+AG3gPKFlcuwcLMgsdbVAxmkJWFnd4l50uBzdS7yQY0onrMML
oaCOCrQtZz91GEUkgSxiSBiJDyW3DALgmdKd74fB8OGDW1G02BI1Vu6OLmQV9odZ
KPU6+yTsJRT8ngXW2SBRiTqYNBlVqIPLvpOzDbEANZXTSdmKFbeaNJ6qYrgvKG94
8oHN2xiTlLVDxQMvrvav
-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org