Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e68a090b980bcacf134761bf980ae353f57e899a.roa
File: e68a090b980bcacf134761bf980ae353f57e899a.roa (raw, json)
Hash identifier: 0WIhF3vArZblFYA/bPxjAvDshscsTVAH6zkFDv43CMI=
Subject key identifier: AC:5E:41:72:BE:FA:C8:9F:28:6D:9F:77:1F:20:93:4A:83:A1:25:49
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 0DD982
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e68a090b980bcacf134761bf980ae353f57e899a.roa
Signing time: Wed 24 Mar 2021 14:34:36 +0000
ROA not before: Wed 24 Mar 2021 14:34:35 +0000
ROA not after: Tue 24 Mar 2026 14:34:35 +0000
asID: 14080
IP address blocks: 186.80.44.0/24 maxlen: 24
186.80.45.0/24 maxlen: 24
186.80.46.0/24 maxlen: 24
186.80.47.0/24 maxlen: 24
186.86.255.0/24 maxlen: 24
186.147.142.0/24 maxlen: 24
186.147.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 907650 (0xdd982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Mar 24 14:34:35 2021 GMT
Not After : Mar 24 14:34:35 2026 GMT
Subject: CN=e68a090b980bcacf134761bf980ae353f57e899a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bc:c8:20:e5:7d:5a:15:3f:5f:ba:83:a9:f6:
3b:68:7a:a2:05:4e:08:8c:a3:f6:98:4d:b1:d9:01:
1c:a0:5d:9a:48:17:f6:c9:6c:42:3c:51:58:21:ce:
4c:1f:1a:37:63:bb:a0:ab:d4:6b:7a:72:c1:eb:fb:
2b:18:4a:5c:4f:ae:c4:81:bd:80:ff:63:a0:56:85:
06:46:d6:90:ed:5f:6b:1a:75:d3:09:88:94:46:77:
b7:fb:e3:01:98:f5:03:ea:e3:88:e5:8c:44:20:7f:
7d:70:4d:5f:98:76:5b:01:79:5f:c1:9b:c6:84:62:
c5:58:f4:16:7e:a6:05:9b:f1:a4:b1:87:8a:2c:7c:
cf:50:ea:77:a4:58:40:fb:8a:c2:8e:a9:cd:ce:c9:
61:bc:c5:31:ec:69:ca:ab:a8:69:3f:64:66:84:8e:
a0:5a:94:72:df:0c:09:68:ae:eb:e0:a7:b8:f9:8f:
a7:40:aa:1d:f9:42:d1:56:39:36:ff:35:c6:b1:cf:
a3:bf:4a:9c:07:10:d5:4b:31:35:d9:4d:6c:87:b1:
2f:4f:05:ad:28:10:96:29:9b:7b:0f:3c:d6:ba:4d:
f8:80:20:6c:76:a5:20:dd:d6:bb:e6:66:f0:1f:23:
7c:8d:e4:2f:6b:5e:bc:bb:d6:cb:b5:81:c5:a5:9b:
73:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5E:41:72:BE:FA:C8:9F:28:6D:9F:77:1F:20:93:4A:83:A1:25:49
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e68a090b980bcacf134761bf980ae353f57e899a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.80.44.0/22
186.86.255.0/24
186.147.142.0/23
Signature Algorithm: sha256WithRSAEncryption
76:a6:f4:ce:71:4e:64:4f:bd:04:e3:b0:97:8b:73:cc:37:80:
3c:91:75:79:58:b9:fd:13:a8:43:ba:a9:b0:86:4f:08:a2:c9:
47:f7:71:4f:91:50:c5:92:db:59:90:2c:c0:21:1b:fc:df:cd:
38:50:8e:3c:ab:0b:4c:1a:59:af:e7:8d:c7:5e:31:01:2e:49:
89:d7:93:d8:9b:30:9e:a9:06:73:0a:24:11:58:2a:65:1e:e6:
ee:8e:13:77:ec:87:50:c1:f6:3d:0b:ba:f0:0f:4e:5a:39:21:
4e:8f:43:51:7d:e5:a0:16:25:38:fd:a6:54:09:6e:5c:5b:99:
b2:9a:98:af:9f:e7:53:ca:43:6b:b7:69:e1:57:74:f5:3c:58:
b1:86:aa:33:be:2d:7f:db:1c:3e:0a:7d:c1:19:f2:82:18:7c:
3b:bf:17:1d:23:78:ec:f1:a7:4b:29:84:3a:64:c9:12:7c:fd:
e5:45:ac:c6:da:4d:5c:37:b9:0e:c9:3e:73:2d:3a:5d:1e:ee:
80:5a:d4:19:0c:a2:11:25:2b:cb:1c:4e:bc:83:1f:ab:cd:77:
1b:b7:b6:fc:56:2c:fb:64:e8:8d:e2:90:b9:9e:29:48:70:4d:
75:83:69:d2:85:f5:d8:52:ab:a4:83:12:db:89:06:5b:fa:88:
6c:90:98:03
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDDdmCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
ZjY4ZWNkMzg5NmIzMjg4ZjgzYzI5YTJjM2RhNDRjODIxYzc2ODQwHhcNMjEwMzI0
MTQzNDM1WhcNMjYwMzI0MTQzNDM1WjAzMTEwLwYDVQQDEyhlNjhhMDkwYjk4MGJj
YWNmMTM0NzYxYmY5ODBhZTM1M2Y1N2U4OTlhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk7zIIOV9WhU/X7qDqfY7aHqiBU4IjKP2mE2x2QEcoF2aSBf2
yWxCPFFYIc5MHxo3Y7ugq9RrenLB6/srGEpcT67Egb2A/2OgVoUGRtaQ7V9rGnXT
CYiURne3++MBmPUD6uOI5YxEIH99cE1fmHZbAXlfwZvGhGLFWPQWfqYFm/GksYeK
LHzPUOp3pFhA+4rCjqnNzslhvMUx7GnKq6hpP2RmhI6gWpRy3wwJaK7r4Ke4+Y+n
QKod+ULRVjk2/zXGsc+jv0qcBxDVSzE12U1sh7EvTwWtKBCWKZt7DzzWuk34gCBs
dqUg3da75mbwHyN8jeQva168u9bLtYHFpZtzfQIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFKxeQXK++sifKG2fdx8gk0qDoSVJMB8GA1UdIwQYMBaAFKhzgywDCRS4/QD1
P69G5JXZcRs8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFmNjhl
Y2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhL2U2OGEwOTBiOTgwYmNhY2YxMzQ3NjFiZjk4MGFlMzUzZjU3ZTg5OWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvYzFmNjhlY2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEArpQLAMEALpW/wMEAbqTjjANBgkqhkiG9w0BAQsFAAOCAQEA
dqb0znFOZE+9BOOwl4tzzDeAPJF1eVi5/ROoQ7qpsIZPCKLJR/dxT5FQxZLbWZAs
wCEb/N/NOFCOPKsLTBpZr+eNx14xAS5JideT2JswnqkGcwokEVgqZR7m7o4Td+yH
UMH2PQu68A9OWjkhTo9DUX3loBYlOP2mVAluXFuZspqYr5/nU8pDa7dp4Vd09TxY
sYaqM74tf9scPgp9wRnyghh8O78XHSN47PGnSymEOmTJEnz95UWsxtpNXDe5Dsk+
cy06XR7ugFrUGQyiESUryxxOvIMfq813G7e2/FYs+2TojeKQuZ4pSHBNdYNp0oX1
2FKrpIMS24kGW/qIbJCYAw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:55 2024 by rpki-client on console-ams.rpki-client.org