Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c5d0b1ab3c8fb0b33f32f1dc660b69ff51b1e8a6.roa
File: c5d0b1ab3c8fb0b33f32f1dc660b69ff51b1e8a6.roa (raw, json)
Hash identifier: 6H8E7lKS1u0YXK6UPqzvMJcAcnuOfXCy+YdNYaslyww=
Subject key identifier: 1E:79:9E:02:2C:35:D6:B7:08:8A:65:BA:B6:39:D5:F7:86:4D:6B:E7
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 2155E8
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c5d0b1ab3c8fb0b33f32f1dc660b69ff51b1e8a6.roa
Signing time: Thu 22 Dec 2022 13:45:57 +0000
ROA not before: Sun 25 Apr 2021 03:00:00 +0000
ROA not after: Thu 27 Apr 2023 03:00:00 +0000
asID: 14080
IP address blocks: 190.144.192.0/19 maxlen: 19
181.49.224.0/19 maxlen: 29
186.85.72.0/22 maxlen: 24
200.118.0.0/16 maxlen: 24
186.145.4.0/22 maxlen: 24
190.84.213.0/24 maxlen: 24
190.84.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2184680 (0x2155e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Apr 25 03:00:00 2021 GMT
Not After : Apr 27 03:00:00 2023 GMT
Subject: CN=c5d0b1ab3c8fb0b33f32f1dc660b69ff51b1e8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:b7:ad:3b:a8:1e:df:a3:1e:77:39:ab:10:
64:bc:9f:d8:e1:b7:82:ad:61:42:98:f0:8c:b5:97:
38:2a:83:1b:eb:83:46:eb:31:0c:a9:cb:e7:59:a6:
b5:ea:a3:55:98:d4:0f:75:a6:28:d6:19:5f:e0:ac:
b4:88:c9:62:68:2f:57:70:ff:1c:e1:4f:8a:cc:05:
dc:d6:13:03:f0:f4:6a:19:3f:cd:01:7d:f5:1b:86:
fd:b8:c1:f0:90:ea:0f:65:68:54:09:73:68:45:4e:
9f:59:4b:5a:40:d2:2b:5c:d3:f7:f4:c7:9c:84:c4:
50:a7:40:b5:20:8e:91:3b:2d:b5:7f:a0:c7:cb:bc:
1a:c8:ab:24:9e:32:a4:85:85:da:9a:25:ac:e1:f7:
78:15:98:dc:d2:c5:e5:97:d7:20:98:0b:bc:f2:7c:
b8:6f:cf:1e:ce:cd:db:4e:5b:74:c7:2f:ec:16:15:
ef:e5:9f:b6:bb:f7:71:10:71:e8:75:29:37:19:99:
83:86:e7:3f:44:e0:21:06:01:75:69:03:f9:2e:9a:
cb:9c:c1:c6:7b:5d:1e:eb:4f:1c:2b:3d:db:0b:cf:
8d:05:6e:39:6d:33:79:ab:53:f8:4f:e2:63:3f:6b:
ca:34:ac:a0:e8:b6:9c:92:c5:7d:ba:fb:e6:13:11:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:79:9E:02:2C:35:D6:B7:08:8A:65:BA:B6:39:D5:F7:86:4D:6B:E7
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c5d0b1ab3c8fb0b33f32f1dc660b69ff51b1e8a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.49.224.0/19
186.85.72.0/22
186.145.4.0/22
190.84.213.0-190.84.214.255
190.144.192.0/19
200.118.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:a1:9f:ab:a8:bb:b6:f3:0b:b9:d4:c2:8f:67:b7:f1:60:a5:
b0:e8:0b:0e:fc:94:1d:1a:bd:b5:50:ec:24:de:56:55:aa:7f:
8e:ea:64:a1:ba:60:75:f2:af:ff:9d:ba:6f:a0:ca:00:76:4b:
bb:52:c7:0b:0b:42:ef:c1:87:1a:95:db:6a:e8:f3:94:b5:50:
9c:b6:b4:28:50:6b:4c:b0:57:99:cc:50:25:5f:27:eb:44:87:
e2:db:86:44:45:3f:9f:67:ce:38:a9:11:f7:0b:c7:6f:44:82:
d0:21:0f:87:dc:bc:bf:78:78:16:5d:8e:a8:13:eb:f1:54:c6:
24:ce:40:87:fd:05:50:ba:00:70:57:53:fa:58:49:1f:6b:2f:
4d:ce:7e:18:c0:5f:21:8e:77:fd:da:b3:e3:db:e1:4a:9b:96:
b1:69:36:5d:e2:16:24:34:b1:aa:75:15:5f:cb:00:bc:fb:e6:
63:5f:45:08:37:ad:30:b7:06:eb:1a:b1:d6:41:6b:81:82:85:
1e:f3:a9:95:fd:18:d6:96:3b:71:71:f6:a0:4f:fc:65:73:88:
21:36:4e:74:94:2f:28:57:62:84:6e:1b:be:6b:bc:fc:3c:f9:
8f:c1:fd:05:f4:99:73:2f:60:53:34:25:2b:82:e7:dc:0d:2d:
ce:2c:e3:f0
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIDIVXoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
ZjY4ZWNkMzg5NmIzMjg4ZjgzYzI5YTJjM2RhNDRjODIxYzc2ODQwHhcNMjEwNDI1
MDMwMDAwWhcNMjMwNDI3MDMwMDAwWjAzMTEwLwYDVQQDEyhjNWQwYjFhYjNjOGZi
MGIzM2YzMmYxZGM2NjBiNjlmZjUxYjFlOGE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnOe3rTuoHt+jHnc5qxBkvJ/Y4beCrWFCmPCMtZc4KoMb64NG
6zEMqcvnWaa16qNVmNQPdaYo1hlf4Ky0iMliaC9XcP8c4U+KzAXc1hMD8PRqGT/N
AX31G4b9uMHwkOoPZWhUCXNoRU6fWUtaQNIrXNP39MechMRQp0C1II6ROy21f6DH
y7wayKsknjKkhYXamiWs4fd4FZjc0sXll9cgmAu88ny4b88ezs3bTlt0xy/sFhXv
5Z+2u/dxEHHodSk3GZmDhuc/ROAhBgF1aQP5LprLnMHGe10e608cKz3bC8+NBW45
bTN5q1P4T+JjP2vKNKyg6LacksV9uvvmExE0CQIDAQABo4ICgDCCAnwwHQYDVR0O
BBYEFB55ngIsNda3CIplurY51feGTWvnMB8GA1UdIwQYMBaAFKhzgywDCRS4/QD1
P69G5JXZcRs8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFmNjhl
Y2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhL2M1ZDBiMWFiM2M4ZmIwYjMzZjMyZjFkYzY2MGI2OWZmNTFiMWU4YTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvYzFmNjhlY2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBEBggrBgEFBQcBBwEB/wQ1
MDMwMQQCAAEwKwMEBbUx4AMEArpVSAMEArqRBDAMAwQAvlTVAwQAvlTWAwQFvpDA
AwMAyHYwDQYJKoZIhvcNAQELBQADggEBAByhn6uou7bzC7nUwo9nt/FgpbDoCw78
lB0avbVQ7CTeVlWqf47qZKG6YHXyr/+dum+gygB2S7tSxwsLQu/BhxqV22ro85S1
UJy2tChQa0ywV5nMUCVfJ+tEh+LbhkRFP59nzjipEfcLx29EgtAhD4fcvL94eBZd
jqgT6/FUxiTOQIf9BVC6AHBXU/pYSR9rL03OfhjAXyGOd/3as+Pb4UqblrFpNl3i
FiQ0sap1FV/LALz75mNfRQg3rTC3BusasdZBa4GChR7zqZX9GNaWO3Fx9qBP/GVz
iCE2TnSULyhXYoRuG75rvPw8+Y/B/QX0mXMvYFM0JSuC59wNLc4s4/A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:55 2024 by rpki-client on console-ams.rpki-client.org