Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/e801397a175bbe076c9713795250ecdcc47d66b7.roa
File: e801397a175bbe076c9713795250ecdcc47d66b7.roa (raw, json)
Hash identifier: m+MIfCOs5jf9id2rq1Ggf8N1rv08vh2GbR3P/ZiX60k=
Subject key identifier: 2A:C3:8D:E6:42:8B:AC:3C:B1:19:E6:81:73:D7:40:86:F1:92:5B:D5
Certificate issuer: /CN=93e1045f9f659b040e2833d32618d562a29ac1fd
Certificate serial: 1F4519
Authority key identifier: 35:E8:10:82:8A:1C:42:6C:F7:05:78:05:76:89:34:30:47:56:00:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93e1045f9f659b040e2833d32618d562a29ac1fd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/e801397a175bbe076c9713795250ecdcc47d66b7.roa
Signing time: Fri 24 Mar 2023 08:31:48 +0000
ROA not before: Thu 23 Mar 2023 08:31:48 +0000
ROA not after: Sat 22 Mar 2025 08:31:48 +0000
asID: 22122
IP address blocks: 148.209.103.0/24 maxlen: 24
148.209.104.0/24 maxlen: 24
148.209.111.0/24 maxlen: 24
148.209.112.0/21 maxlen: 21
148.209.120.0/22 maxlen: 22
148.209.123.0/24 maxlen: 24
148.209.126.0/24 maxlen: 24
148.209.131.0/24 maxlen: 24
148.209.132.0/24 maxlen: 24
148.209.136.0/24 maxlen: 24
148.209.138.0/24 maxlen: 24
148.209.140.0/24 maxlen: 24
148.209.144.0/22 maxlen: 22
148.209.148.0/23 maxlen: 23
148.209.15.0/24 maxlen: 24
148.209.16.0/20 maxlen: 20
148.209.175.0/24 maxlen: 24
148.209.176.0/20 maxlen: 20
148.209.192.0/23 maxlen: 23
148.209.200.0/22 maxlen: 22
148.209.204.0/23 maxlen: 23
148.209.206.0/24 maxlen: 24
148.209.208.0/24 maxlen: 24
148.209.210.0/23 maxlen: 23
148.209.212.0/22 maxlen: 22
148.209.218.0/23 maxlen: 23
148.209.220.0/24 maxlen: 24
148.209.228.0/22 maxlen: 22
148.209.231.0/24 maxlen: 24
148.209.232.0/22 maxlen: 22
148.209.236.0/24 maxlen: 24
148.209.238.0/23 maxlen: 23
148.209.240.0/22 maxlen: 22
148.209.244.0/23 maxlen: 23
148.209.246.0/24 maxlen: 24
148.209.32.0/20 maxlen: 20
148.209.48.0/20 maxlen: 20
148.209.5.0/24 maxlen: 24
148.209.56.0/22 maxlen: 22
148.209.60.0/23 maxlen: 23
148.209.62.0/24 maxlen: 24
148.209.73.0/24 maxlen: 24
148.209.75.0/24 maxlen: 24
148.209.76.0/24 maxlen: 24
148.209.8.0/22 maxlen: 22
148.209.81.0/24 maxlen: 24
148.209.82.0/23 maxlen: 23
148.209.84.0/22 maxlen: 22
148.209.88.0/23 maxlen: 23
148.209.93.0/24 maxlen: 24
148.209.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2049305 (0x1f4519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e1045f9f659b040e2833d32618d562a29ac1fd
Validity
Not Before: Mar 23 08:31:48 2023 GMT
Not After : Mar 22 08:31:48 2025 GMT
Subject: CN=e801397a175bbe076c9713795250ecdcc47d66b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4f:aa:a5:e9:d7:a8:d6:e9:5a:9d:ee:c9:33:
3b:96:45:1b:38:b9:d8:68:a0:0f:ac:84:73:1e:98:
6b:b1:ba:77:8e:91:53:a8:23:27:8d:09:dd:7d:dd:
e9:90:e0:3b:98:29:2f:bd:ed:cb:6d:95:a1:5a:53:
07:c8:ed:0d:f9:1c:78:f5:dc:fe:a4:9d:ba:98:e4:
15:05:6b:23:8a:ea:ab:03:70:86:31:3d:49:bc:ae:
8d:aa:d5:02:79:d3:fe:8f:21:21:46:75:42:52:a2:
01:cf:c1:e2:82:f1:3b:c2:c8:10:a9:2f:24:83:fc:
c0:72:6d:d6:59:62:c8:dd:50:b9:1a:53:77:ed:bb:
8e:bd:e5:c8:d5:cc:f4:37:12:5d:0a:de:b0:3a:01:
e3:cf:79:5e:ff:5f:dc:c2:61:ab:f4:86:84:33:dc:
97:4c:17:63:73:e5:40:9f:30:47:9a:86:48:e5:98:
60:7c:34:a6:67:b1:64:52:9c:e4:fa:6e:3b:74:6a:
6a:bf:bc:4e:f0:22:3b:3b:77:74:25:a4:3e:43:51:
26:b7:dc:7d:b1:86:c1:ab:54:92:1c:0f:da:62:16:
85:1b:9e:6d:c0:94:e7:1c:ae:9b:82:33:64:01:f9:
58:bd:26:56:f0:dd:0d:1b:ba:3e:e0:c1:c9:ff:0f:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C3:8D:E6:42:8B:AC:3C:B1:19:E6:81:73:D7:40:86:F1:92:5B:D5
X509v3 Authority Key Identifier:
keyid:35:E8:10:82:8A:1C:42:6C:F7:05:78:05:76:89:34:30:47:56:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93e1045f9f659b040e2833d32618d562a29ac1fd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/e801397a175bbe076c9713795250ecdcc47d66b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/93e1045f9f659b040e2833d32618d562a29ac1fd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.5.0/24
148.209.8.0/22
148.209.15.0-148.209.63.255
148.209.73.0/24
148.209.75.0-148.209.76.255
148.209.81.0-148.209.89.255
148.209.93.0-148.209.94.255
148.209.103.0-148.209.104.255
148.209.111.0-148.209.123.255
148.209.126.0/24
148.209.131.0-148.209.132.255
148.209.136.0/24
148.209.138.0/24
148.209.140.0/24
148.209.144.0-148.209.149.255
148.209.175.0-148.209.193.255
148.209.200.0-148.209.206.255
148.209.208.0/24
148.209.210.0-148.209.215.255
148.209.218.0-148.209.220.255
148.209.228.0-148.209.236.255
148.209.238.0-148.209.246.255
Signature Algorithm: sha256WithRSAEncryption
8c:17:b9:45:5e:7a:93:f5:71:72:8f:ae:8d:3e:82:92:00:93:
ff:28:ea:5c:40:77:ab:80:48:7a:d8:14:fa:69:3b:03:4d:98:
f2:5e:db:66:2b:e9:6c:98:5e:61:4d:49:83:9a:d1:41:9c:fa:
b4:62:04:df:32:e5:69:cb:67:14:31:11:3a:a9:f3:b2:4c:f3:
d3:f4:21:64:c3:b0:c8:dd:d0:27:02:0e:22:79:55:f3:e0:fd:
54:79:3c:4e:54:9d:9b:cf:1e:eb:20:7e:15:13:e0:c5:de:a1:
3d:7c:2f:23:b5:4a:a6:3f:45:d7:96:9a:ea:ee:cb:9a:9b:1b:
9c:4f:e3:ae:46:27:d3:78:9e:a8:20:bb:df:f2:32:4b:9f:38:
b7:11:db:1c:16:2d:8b:51:87:6e:c1:af:1f:1a:b7:89:82:f6:
e8:7e:43:4f:77:1c:25:df:00:de:6a:1e:91:25:48:58:ad:7d:
8f:92:ca:82:ed:cd:87:f7:04:0d:f0:f0:3e:c8:f6:ae:48:76:
d3:e9:a2:26:a3:56:83:c0:76:52:ff:e4:96:d4:13:1a:75:ce:
e9:f2:6f:01:19:34:53:ce:3c:24:7b:1f:a5:52:46:93:8f:d5:
a6:53:70:44:b0:78:14:e4:5a:da:51:e8:33:3c:f8:13:0e:8e:
fc:9d:f9:5f
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIDH0UZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkz
ZTEwNDVmOWY2NTliMDQwZTI4MzNkMzI2MThkNTYyYTI5YWMxZmQwHhcNMjMwMzIz
MDgzMTQ4WhcNMjUwMzIyMDgzMTQ4WjAzMTEwLwYDVQQDEyhlODAxMzk3YTE3NWJi
ZTA3NmM5NzEzNzk1MjUwZWNkY2M0N2Q2NmI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgU+qpenXqNbpWp3uyTM7lkUbOLnYaKAPrIRzHphrsbp3jpFT
qCMnjQndfd3pkOA7mCkvve3LbZWhWlMHyO0N+Rx49dz+pJ26mOQVBWsjiuqrA3CG
MT1JvK6NqtUCedP+jyEhRnVCUqIBz8HigvE7wsgQqS8kg/zAcm3WWWLI3VC5GlN3
7buOveXI1cz0NxJdCt6wOgHjz3le/1/cwmGr9IaEM9yXTBdjc+VAnzBHmoZI5Zhg
fDSmZ7FkUpzk+m47dGpqv7xO8CI7O3d0JaQ+Q1Emt9x9sYbBq1SSHA/aYhaFG55t
wJTnHK6bgjNkAflYvSZW8N0NG7o+4MHJ/w+mqwIDAQABo4IDUDCCA0wwHQYDVR0O
BBYEFCrDjeZCi6w8sRnmgXPXQIbxklvVMB8GA1UdIwQYMBaAFDXoEIKKHEJs9wV4
BXaJNDBHVgBvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTNlMTA0
NWY5ZjY1OWIwNDBlMjgzM2QzMjYxOGQ1NjJhMjlhYzFmZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTMzZTM1MDctNzA1NS00ZDNmLWJiOTAtYjlhNWUx
ZWU0ZjVlL2U4MDEzOTdhMTc1YmJlMDc2Yzk3MTM3OTUyNTBlY2RjYzQ3ZDY2Yjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMzNlMzUwNy03MDU1LTRkM2YtYmI5MC1iOWE1
ZTFlZTRmNWUvOTNlMTA0NWY5ZjY1OWIwNDBlMjgzM2QzMjYxOGQ1NjJhMjlhYzFm
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCARIGCCsGAQUFBwEHAQH/
BIIBATCB/jCB+wQCAAEwgfQDBACU0QUDBAKU0QgwDAMEAJTRDwMEBpTRAAMEAJTR
STAMAwQAlNFLAwQAlNFMMAwDBACU0VEDBAGU0VgwDAMEAJTRXQMEAJTRXjAMAwQA
lNFnAwQAlNFoMAwDBACU0W8DBAKU0XgDBACU0X4wDAMEAJTRgwMEAJTRhAMEAJTR
iAMEAJTRigMEAJTRjDAMAwQElNGQAwQBlNGUMAwDBACU0a8DBAGU0cAwDAMEA5TR
yAMEAJTRzgMEAJTR0DAMAwQBlNHSAwQDlNHQMAwDBAGU0doDBACU0dwwDAMEApTR
5AMEAJTR7DAMAwQBlNHuAwQAlNH2MA0GCSqGSIb3DQEBCwUAA4IBAQCMF7lFXnqT
9XFyj66NPoKSAJP/KOpcQHergEh62BT6aTsDTZjyXttmK+lsmF5hTUmDmtFBnPq0
YgTfMuVpy2cUMRE6qfOyTPPT9CFkw7DI3dAnAg4ieVXz4P1UeTxOVJ2bzx7rIH4V
E+DF3qE9fC8jtUqmP0XXlprq7suamxucT+OuRifTeJ6oILvf8jJLnzi3EdscFi2L
UYduwa8fGreJgvbofkNPdxwl3wDeah6RJUhYrX2PksqC7c2H9wQN8PA+yPauSHbT
6aImo1aDwHZS/+SW1BMadc7p8m8BGTRTzjwkex+lUkaTj9WmU3BEsHgU5FraUegz
PPgTDo78nflf
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org