Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/089e197f-8382-4e8e-8029-12083966c90e/c70779300dbe157318ddd824bd7e05a6bf9b9286.roa
File: c70779300dbe157318ddd824bd7e05a6bf9b9286.roa (raw, json)
Hash identifier: HHz3j1BMfJ1q+bGsL8xpUtaLJWM4esBbZlzS59Wil0w=
Subject key identifier: C2:09:A1:B5:F5:B7:5A:05:C8:88:F1:8A:85:19:09:87:F2:08:96:9F
Certificate issuer: /CN=85b3896c526901b5ef8601c8920a18798a6a04a9
Certificate serial: 0D5726
Authority key identifier: 2C:C3:5B:33:C3:16:C4:7D:4C:4D:DA:59:0C:9F:FE:84:D7:90:F0:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85b3896c526901b5ef8601c8920a18798a6a04a9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/089e197f-8382-4e8e-8029-12083966c90e/c70779300dbe157318ddd824bd7e05a6bf9b9286.roa
Signing time: Wed 24 Mar 2021 14:43:04 +0000
ROA not before: Wed 24 Mar 2021 14:43:03 +0000
ROA not after: Tue 24 Mar 2026 14:43:03 +0000
asID: 28539
IP address blocks: 138.186.200.0/22 maxlen: 24
170.247.172.0/22 maxlen: 24
201.150.0.0/21 maxlen: 24
201.150.8.0/22 maxlen: 24
201.159.96.0/21 maxlen: 24
201.159.104.0/22 maxlen: 24
201.159.108.0/22 maxlen: 24
201.159.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874278 (0xd5726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b3896c526901b5ef8601c8920a18798a6a04a9
Validity
Not Before: Mar 24 14:43:03 2021 GMT
Not After : Mar 24 14:43:03 2026 GMT
Subject: CN=c70779300dbe157318ddd824bd7e05a6bf9b9286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:17:c0:58:80:ab:7f:97:f0:75:7b:ae:eb:3f:
32:e6:30:c6:b8:6e:c2:9f:de:1d:5b:82:73:10:12:
f8:b4:cd:0b:1b:71:0d:d1:f6:43:ae:bc:14:b9:0c:
51:e3:df:06:f3:99:22:5d:74:29:e8:99:a2:de:46:
a2:39:0e:75:52:61:06:a1:47:c2:e7:dd:83:55:d6:
d4:ed:18:f3:74:89:f8:43:2a:51:1f:30:63:60:36:
b1:02:c3:57:a5:3f:7e:9c:cf:f0:d2:9b:1d:5d:9e:
9b:b9:c3:db:c6:94:03:93:8f:ad:32:6d:4b:86:d1:
54:f8:20:08:34:2a:ca:79:48:85:e8:4a:ee:a8:db:
d8:60:b1:6a:2c:d6:30:9f:5b:a0:63:81:21:53:04:
a3:5f:56:17:38:d5:52:b4:66:84:8a:d9:14:01:10:
09:ea:60:64:33:35:9c:95:19:6d:0f:e3:ca:43:54:
b4:1f:9b:74:a3:c3:86:b6:50:e1:ca:b6:2c:c2:88:
ad:30:ca:4f:c3:f6:8c:2e:fd:59:8c:81:85:cc:8d:
cb:3c:ad:c3:bd:c5:62:e5:a1:33:06:ed:93:96:0d:
39:6e:8e:09:2c:e4:5b:97:88:39:e8:15:8a:6b:7c:
b7:dd:79:05:03:69:e6:77:43:06:c3:ef:ba:bc:98:
35:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:09:A1:B5:F5:B7:5A:05:C8:88:F1:8A:85:19:09:87:F2:08:96:9F
X509v3 Authority Key Identifier:
keyid:2C:C3:5B:33:C3:16:C4:7D:4C:4D:DA:59:0C:9F:FE:84:D7:90:F0:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85b3896c526901b5ef8601c8920a18798a6a04a9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/089e197f-8382-4e8e-8029-12083966c90e/c70779300dbe157318ddd824bd7e05a6bf9b9286.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/089e197f-8382-4e8e-8029-12083966c90e/85b3896c526901b5ef8601c8920a18798a6a04a9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.200.0/22
170.247.172.0/22
201.150.0.0-201.150.11.255
201.159.96.0/20
201.159.124.0/22
Signature Algorithm: sha256WithRSAEncryption
31:35:80:94:cf:f9:e9:3f:b7:b1:b6:75:b4:b3:4e:f0:23:c4:
57:cd:15:0a:83:3d:82:03:71:96:db:c0:3c:39:8e:cc:5f:83:
c4:d4:59:f5:6b:82:53:50:c3:15:bc:ce:e0:27:2b:81:6f:38:
8e:ce:62:c7:4a:65:d4:b5:b4:ac:cd:6e:f1:93:29:79:c4:86:
0c:38:06:c4:b3:63:a0:77:ff:40:2b:76:5c:08:61:56:82:db:
5f:d5:6c:c8:95:5f:cf:43:33:59:49:cd:c5:3c:1c:90:9a:28:
b5:30:3d:28:a9:91:09:98:a4:48:eb:ab:e1:c9:da:50:96:69:
9c:39:6e:68:d9:25:85:44:a6:21:25:29:0d:01:f6:b3:18:82:
04:f4:79:8c:98:46:49:f3:fd:77:80:40:c7:b5:24:52:c9:15:
6c:32:d2:47:4b:a8:06:d5:be:6f:d1:ba:86:64:ef:b0:16:ef:
2f:d9:21:7a:83:53:2e:df:23:22:80:94:a1:96:d8:fa:65:3a:
ab:04:9a:2e:15:b8:98:fe:37:3c:ea:aa:c1:83:5d:44:a3:70:
b8:d3:dd:97:6a:d5:4c:e5:2a:55:da:08:df:e3:f1:0e:51:61:
02:18:9b:7b:14:42:ba:11:70:bf:cf:cd:07:2d:66:64:7b:03:
21:4e:ab:0e
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIDDVcmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg1
YjM4OTZjNTI2OTAxYjVlZjg2MDFjODkyMGExODc5OGE2YTA0YTkwHhcNMjEwMzI0
MTQ0MzAzWhcNMjYwMzI0MTQ0MzAzWjAzMTEwLwYDVQQDEyhjNzA3NzkzMDBkYmUx
NTczMThkZGQ4MjRiZDdlMDVhNmJmOWI5Mjg2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiBfAWICrf5fwdXuu6z8y5jDGuG7Cn94dW4JzEBL4tM0LG3EN
0fZDrrwUuQxR498G85kiXXQp6Jmi3kaiOQ51UmEGoUfC592DVdbU7RjzdIn4QypR
HzBjYDaxAsNXpT9+nM/w0psdXZ6bucPbxpQDk4+tMm1LhtFU+CAINCrKeUiF6Eru
qNvYYLFqLNYwn1ugY4EhUwSjX1YXONVStGaEitkUARAJ6mBkMzWclRltD+PKQ1S0
H5t0o8OGtlDhyrYswoitMMpPw/aMLv1ZjIGFzI3LPK3DvcVi5aEzBu2Tlg05bo4J
LORbl4g56BWKa3y33XkFA2nmd0MGw++6vJg1zQIDAQABo4ICejCCAnYwHQYDVR0O
BBYEFMIJobX1t1oFyIjxioUZCYfyCJafMB8GA1UdIwQYMBaAFCzDWzPDFsR9TE3a
WQyf/oTXkPDKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODViMzg5
NmM1MjY5MDFiNWVmODYwMWM4OTIwYTE4Nzk4YTZhMDRhOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDg5ZTE5N2YtODM4Mi00ZThlLTgwMjktMTIwODM5
NjZjOTBlL2M3MDc3OTMwMGRiZTE1NzMxOGRkZDgyNGJkN2UwNWE2YmY5YjkyODYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wODllMTk3Zi04MzgyLTRlOGUtODAyOS0xMjA4
Mzk2NmM5MGUvODViMzg5NmM1MjY5MDFiNWVmODYwMWM4OTIwYTE4Nzk4YTZhMDRh
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA+BggrBgEFBQcBBwEB/wQv
MC0wKwQCAAEwJQMEAoq6yAMEAqr3rDALAwMByZYDBALJlggDBATJn2ADBALJn3ww
DQYJKoZIhvcNAQELBQADggEBADE1gJTP+ek/t7G2dbSzTvAjxFfNFQqDPYIDcZbb
wDw5jsxfg8TUWfVrglNQwxW8zuAnK4FvOI7OYsdKZdS1tKzNbvGTKXnEhgw4BsSz
Y6B3/0ArdlwIYVaC21/VbMiVX89DM1lJzcU8HJCaKLUwPSipkQmYpEjrq+HJ2lCW
aZw5bmjZJYVEpiElKQ0B9rMYggT0eYyYRknz/XeAQMe1JFLJFWwy0kdLqAbVvm/R
uoZk77AW7y/ZIXqDUy7fIyKAlKGW2PplOqsEmi4VuJj+NzzqqsGDXUSjcLjT3Zdq
1UzlKlXaCN/j8Q5RYQIYm3sUQroRcL/PzQctZmR7AyFOqw4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org