Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/210c535701ea43f414a664d31b016dabb0779a11.roa
File: 210c535701ea43f414a664d31b016dabb0779a11.roa (raw, json)
Hash identifier: 4KnaYkeyyxKGG28GQ7yMgYMNSKhCNeC/67EZsotxE0c=
Subject key identifier: 88:AF:00:99:54:6B:57:4B:B8:BD:10:27:12:32:9A:05:1E:F4:87:3B
Certificate issuer: /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial: 13D15F
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/210c535701ea43f414a664d31b016dabb0779a11.roa
Signing time: Thu 28 Sep 2023 20:52:51 +0000
ROA not before: Wed 27 Sep 2023 20:52:51 +0000
ROA not after: Sun 28 Sep 2025 20:52:51 +0000
asID: 26617
IP address blocks: 200.12.36.0/22 maxlen: 24
200.12.40.0/22 maxlen: 24
200.12.44.0/23 maxlen: 24
200.12.46.0/24 maxlen: 24
200.12.48.0/24 maxlen: 24
200.12.56.0/24 maxlen: 24
190.104.113.0/24 maxlen: 24
190.104.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1298783 (0x13d15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Validity
Not Before: Sep 27 20:52:51 2023 GMT
Not After : Sep 28 20:52:51 2025 GMT
Subject: CN=210c535701ea43f414a664d31b016dabb0779a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:87:31:b4:08:f3:4f:a4:7a:c6:a2:77:c4:
3b:ae:b2:06:93:58:5a:15:2a:69:55:77:d0:b1:6b:
20:17:c1:39:ed:fd:a3:e0:0d:4f:1d:c9:ae:76:84:
79:f9:47:8a:52:2f:49:65:8e:ec:8f:fc:46:29:78:
da:09:34:7f:3b:a7:a6:f5:a4:01:11:5f:cf:14:a0:
be:51:c8:ae:bc:df:ca:8d:66:72:f8:05:05:76:61:
5f:5f:c6:72:ac:04:20:95:1f:a8:4d:f2:79:83:bb:
00:52:b7:80:e5:4d:b4:33:ae:64:e3:24:8d:ae:de:
e6:2b:26:ed:db:31:d9:e5:fc:17:53:c6:27:25:ca:
e3:2f:e9:57:54:bc:4c:cf:02:b7:3b:70:0f:f3:f9:
87:2b:01:a4:f7:66:dc:70:48:ec:b3:09:a3:db:0a:
d1:4d:9c:80:dd:8d:0d:e2:06:08:a2:3c:8d:60:f0:
48:b2:45:cb:8e:78:e2:53:12:90:63:31:a3:92:47:
c2:53:90:30:f3:3f:84:d1:66:51:49:4f:9f:38:2a:
30:f7:b3:be:5e:a3:16:f7:2b:6b:a2:f7:58:90:a7:
92:2a:c4:7d:02:f6:2b:95:73:fb:e5:e1:67:0c:a2:
a2:f3:b7:c1:fc:9f:80:4a:61:ce:71:a7:55:27:72:
96:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AF:00:99:54:6B:57:4B:B8:BD:10:27:12:32:9A:05:1E:F4:87:3B
X509v3 Authority Key Identifier:
keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/210c535701ea43f414a664d31b016dabb0779a11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.104.113.0/24
190.104.117.0/24
200.12.36.0-200.12.46.255
200.12.48.0/24
200.12.56.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a8:8c:7f:89:6c:b3:04:30:50:d6:81:76:b4:39:5a:bc:be:
6b:7d:52:84:3d:b1:c0:f3:71:8f:07:4f:4f:3e:07:e8:64:0e:
e3:88:a9:88:d2:38:d9:60:96:0c:9a:ee:3d:cd:af:11:00:ff:
4a:70:1c:1b:0d:de:ea:fb:77:de:8c:e4:ae:92:ee:32:a6:86:
fc:20:45:b7:dc:8e:63:24:6c:24:35:73:8e:c0:17:b9:97:3f:
f7:0a:2c:db:ca:52:1c:30:2a:b7:98:61:aa:83:2a:8a:22:6f:
e5:5a:ac:70:07:3e:31:6f:8e:2b:7e:57:b5:59:31:a3:e5:a7:
d2:9d:2f:42:c7:70:49:18:63:3e:98:6b:cc:a2:64:40:03:b3:
b5:ee:ca:21:6d:74:34:00:0d:a5:11:27:70:cb:e1:82:82:19:
ea:bd:e1:1e:7f:4c:25:2d:c1:7f:20:9a:2b:40:70:51:a2:57:
ea:9e:db:ab:95:6e:90:09:3f:72:92:d7:b7:20:bd:44:fb:0d:
55:f7:c1:32:1e:47:b5:be:5b:30:7d:74:30:6b:38:c6:6d:3d:
95:ac:59:84:3d:1a:72:c8:a8:9a:04:ed:bf:13:c1:b7:bf:06:
b2:5b:09:68:46:5a:f0:b7:3b:dc:6a:3a:a4:9f:39:a1:ae:ed:
22:62:5d:a8
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIDE9FfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRh
YzVlYTE2YWQwN2QyOWQyZDI5ZGI4ZmJkNWIzODkzNTcxYmI2MzEwHhcNMjMwOTI3
MjA1MjUxWhcNMjUwOTI4MjA1MjUxWjAzMTEwLwYDVQQDEygyMTBjNTM1NzAxZWE0
M2Y0MTRhNjY0ZDMxYjAxNmRhYmIwNzc5YTExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmaqHMbQI80+kesaid8Q7rrIGk1haFSppVXfQsWsgF8E57f2j
4A1PHcmudoR5+UeKUi9JZY7sj/xGKXjaCTR/O6em9aQBEV/PFKC+UciuvN/KjWZy
+AUFdmFfX8ZyrAQglR+oTfJ5g7sAUreA5U20M65k4ySNrt7mKybt2zHZ5fwXU8Yn
JcrjL+lXVLxMzwK3O3AP8/mHKwGk92bccEjsswmj2wrRTZyA3Y0N4gYIojyNYPBI
skXLjnjiUxKQYzGjkkfCU5Aw8z+E0WZRSU+fOCow97O+XqMW9ytrovdYkKeSKsR9
AvYrlXP75eFnDKKi87fB/J+ASmHOcadVJ3KWnQIDAQABo4ICezCCAncwHQYDVR0O
BBYEFIivAJlUa1dLuL0QJxIymgUe9Ic7MB8GA1UdIwQYMBaAFDrG5K+IVuzPEeu+
ylyOUFpcGREmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGFjNWVh
MTZhZDA3ZDI5ZDJkMjlkYjhmYmQ1YjM4OTM1NzFiYjYzMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTJjNWE0NGMtZjIzZi00NDg4LTk3NmUtZjNiN2Q3
ODI4ZWJkLzIxMGM1MzU3MDFlYTQzZjQxNGE2NjRkMzFiMDE2ZGFiYjA3NzlhMTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMmM1YTQ0Yy1mMjNmLTQ0ODgtOTc2ZS1mM2I3
ZDc4MjhlYmQvNGFjNWVhMTZhZDA3ZDI5ZDJkMjlkYjhmYmQ1YjM4OTM1NzFiYjYz
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQw
MC4wLAQCAAEwJgMEAL5ocQMEAL5odTAMAwQCyAwkAwQAyAwuAwQAyAwwAwQAyAw4
MA0GCSqGSIb3DQEBCwUAA4IBAQBVqIx/iWyzBDBQ1oF2tDlavL5rfVKEPbHA83GP
B09PPgfoZA7jiKmI0jjZYJYMmu49za8RAP9KcBwbDd7q+3fejOSuku4ypob8IEW3
3I5jJGwkNXOOwBe5lz/3CizbylIcMCq3mGGqgyqKIm/lWqxwBz4xb44rfle1WTGj
5afSnS9Cx3BJGGM+mGvMomRAA7O17sohbXQ0AA2lESdwy+GCghnqveEef0wlLcF/
IJorQHBRolfqnturlW6QCT9ykte3IL1E+w1V98EyHke1vlswfXQwazjGbT2VrFmE
PRpyyKiaBO2/E8G3vwayWwloRlrwtzvcajqknzmhru0iYl2o
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org