Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/8d75f39e86f946e58a919aace756a9d5a558470b.roa
File: 8d75f39e86f946e58a919aace756a9d5a558470b.roa (raw, json)
Hash identifier: 3ec+amxbhXYdDEBHpLqiUs4sUfB7LfUCkSd/dX6vFEo=
Subject key identifier: F1:14:DD:D7:83:B4:E2:6F:65:9C:B1:40:95:50:70:27:88:77:08:B1
Certificate issuer: /CN=ef50a919c38d29bb33866e24d668a0b386609323
Certificate serial: 196068
Authority key identifier: A2:7E:F9:12:D9:A3:A0:AE:2C:D2:E1:59:04:73:E0:80:98:E6:0D:DF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef50a919c38d29bb33866e24d668a0b386609323.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/8d75f39e86f946e58a919aace756a9d5a558470b.roa
Signing time: Fri 27 May 2022 13:49:07 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 269827
IP address blocks: 190.97.227.0/24 maxlen: 24
190.97.229.0/24 maxlen: 24
190.97.232.0/24 maxlen: 24
190.97.237.0/24 maxlen: 24
190.97.238.0/23 maxlen: 24
190.97.243.0/24 maxlen: 24
190.97.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1663080 (0x196068)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef50a919c38d29bb33866e24d668a0b386609323
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=8d75f39e86f946e58a919aace756a9d5a558470b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:53:23:01:0f:bb:d3:33:d9:63:5b:22:44:c5:
d7:a7:1c:a3:69:a8:85:ac:78:2b:20:8d:2e:a2:55:
36:e2:75:aa:21:45:ef:31:d1:4a:04:16:00:0e:c5:
75:29:b1:b9:85:6a:46:b1:57:b6:50:d2:e4:26:f3:
c4:d9:32:ad:d1:e7:b0:d4:db:f0:0b:29:23:c9:21:
7d:cf:ce:c2:b2:57:c1:c6:66:e5:55:49:c2:36:cd:
0c:89:25:46:58:77:77:9f:3b:5d:09:01:ce:d3:22:
cd:b8:93:34:aa:93:41:ec:b8:bc:5f:96:22:b3:bf:
c4:4f:37:bc:35:ae:9a:93:3c:66:18:93:93:87:ed:
60:3a:8c:7f:05:60:2a:e4:a9:0d:99:96:7c:87:7c:
bc:5b:a2:73:35:b3:07:0a:17:26:9a:72:42:a4:a8:
fd:36:df:22:07:e2:21:6e:f8:53:16:ee:65:12:62:
a1:48:88:50:5a:68:de:36:99:cf:af:ae:e2:ee:7a:
9b:2a:eb:5f:80:50:93:29:33:63:4c:9c:83:55:19:
34:b5:8b:89:74:c2:2f:9f:bb:e5:39:e7:c0:a4:a3:
9c:8b:d3:34:fa:e2:ba:d2:67:1c:7f:47:f3:63:f8:
09:0b:a5:69:0c:34:67:a0:50:48:c1:03:0e:7d:d9:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:14:DD:D7:83:B4:E2:6F:65:9C:B1:40:95:50:70:27:88:77:08:B1
X509v3 Authority Key Identifier:
keyid:A2:7E:F9:12:D9:A3:A0:AE:2C:D2:E1:59:04:73:E0:80:98:E6:0D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef50a919c38d29bb33866e24d668a0b386609323.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/8d75f39e86f946e58a919aace756a9d5a558470b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/ef50a919c38d29bb33866e24d668a0b386609323.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.97.227.0/24
190.97.229.0/24
190.97.232.0/24
190.97.237.0-190.97.239.255
190.97.243.0/24
190.97.245.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ae:14:83:c8:23:fd:b4:91:0a:44:cf:b9:7c:fa:58:1c:74:
44:5d:3d:e4:30:a7:f9:04:77:d7:c1:2b:fe:42:7d:20:bc:92:
c2:f4:df:55:b2:84:4a:c1:93:16:e7:4b:a7:0e:5b:5c:3b:83:
0a:38:23:30:76:67:83:17:cd:c3:57:a8:98:4a:9d:99:f0:ae:
aa:b1:23:6f:a6:8b:5a:17:cb:d4:3c:11:95:b3:34:2f:d0:2b:
19:57:7f:b0:c9:ce:b9:35:7c:4e:45:06:34:a4:3e:fb:99:e9:
32:b3:10:43:4e:7e:6e:38:9b:00:33:ff:dc:2a:f7:b8:0b:f6:
f1:89:33:ba:f8:bd:3e:c6:80:7c:30:b3:fd:da:59:70:7e:8f:
fc:c7:04:10:10:2f:e5:53:87:25:b8:77:77:ab:7d:0e:4a:6c:
dd:19:0c:ff:12:3b:a0:c9:01:a6:88:1b:3e:43:22:14:ef:ca:
c8:2e:b5:1d:77:57:1f:8d:16:86:83:1e:45:9b:e6:88:52:00:
75:f8:80:1c:c3:d3:ee:62:3a:32:6f:ca:ee:37:25:d1:b1:82:
38:1e:8f:32:7c:b0:d2:1b:dc:51:ba:60:76:dd:fa:59:cf:eb:
20:73:8b:ad:0f:a9:d0:d2:b3:24:f3:55:e3:11:33:4e:f5:82:
e7:3b:ad:4b
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIDGWBoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVm
NTBhOTE5YzM4ZDI5YmIzMzg2NmUyNGQ2NjhhMGIzODY2MDkzMjMwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg4ZDc1ZjM5ZTg2Zjk0
NmU1OGE5MTlhYWNlNzU2YTlkNWE1NTg0NzBiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgVMjAQ+70zPZY1siRMXXpxyjaaiFrHgrII0uolU24nWqIUXv
MdFKBBYADsV1KbG5hWpGsVe2UNLkJvPE2TKt0eew1NvwCykjySF9z87CslfBxmbl
VUnCNs0MiSVGWHd3nztdCQHO0yLNuJM0qpNB7Li8X5Yis7/ETze8Na6akzxmGJOT
h+1gOox/BWAq5KkNmZZ8h3y8W6JzNbMHChcmmnJCpKj9Nt8iB+IhbvhTFu5lEmKh
SIhQWmjeNpnPr67i7nqbKutfgFCTKTNjTJyDVRk0tYuJdMIvn7vlOefApKOci9M0
+uK60mccf0fzY/gJC6VpDDRnoFBIwQMOfdkUFwIDAQABo4ICgTCCAn0wHQYDVR0O
BBYEFPEU3deDtOJvZZyxQJVQcCeIdwixMB8GA1UdIwQYMBaAFKJ++RLZo6CuLNLh
WQRz4ICY5g3fMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWY1MGE5
MTljMzhkMjliYjMzODY2ZTI0ZDY2OGEwYjM4NjYwOTMyMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVkMjRiNTctNTYzNy00ZDA0LWExYTItYjU1ZjFi
N2QwN2E3LzhkNzVmMzllODZmOTQ2ZTU4YTkxOWFhY2U3NTZhOWQ1YTU1ODQ3MGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWQyNGI1Ny01NjM3LTRkMDQtYTFhMi1iNTVm
MWI3ZDA3YTcvZWY1MGE5MTljMzhkMjliYjMzODY2ZTI0ZDY2OGEwYjM4NjYwOTMy
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBFBggrBgEFBQcBBwEB/wQ2
MDQwMgQCAAEwLAMEAL5h4wMEAL5h5QMEAL5h6DAMAwQAvmHtAwQEvmHgAwQAvmHz
AwQAvmH1MA0GCSqGSIb3DQEBCwUAA4IBAQB0rhSDyCP9tJEKRM+5fPpYHHREXT3k
MKf5BHfXwSv+Qn0gvJLC9N9VsoRKwZMW50unDltcO4MKOCMwdmeDF83DV6iYSp2Z
8K6qsSNvpotaF8vUPBGVszQv0CsZV3+wyc65NXxORQY0pD77mekysxBDTn5uOJsA
M//cKve4C/bxiTO6+L0+xoB8MLP92llwfo/8xwQQEC/lU4cluHd3q30OSmzdGQz/
EjugyQGmiBs+QyIU78rILrUdd1cfjRaGgx5Fm+aIUgB1+IAcw9PuYjoyb8ruNyXR
sYI4Ho8yfLDSG9xRumB23fpZz+sgc4utD6nQ0rMk81XjETNO9YLnO61L
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org