Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1cd591d4a8a756422bf83456b7269f4bce554a33.roa
File: 1cd591d4a8a756422bf83456b7269f4bce554a33.roa (raw, json)
Hash identifier: l6AEAKOVaaULaiy8sc472lWiZGdcPDmoIqjAeaJyWGQ=
Subject key identifier: 34:6C:EE:15:B6:18:B5:76:9B:66:4E:0D:44:16:8D:A4:DF:FC:75:93
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 06B0DC
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1cd591d4a8a756422bf83456b7269f4bce554a33.roa
Signing time: Wed 24 Mar 2021 14:33:37 +0000
ROA not before: Wed 24 Mar 2021 14:33:29 +0000
ROA not after: Tue 24 Mar 2026 14:33:29 +0000
asID: 23470
IP address blocks: 179.61.208.0/24 maxlen: 24
181.214.71.0/24 maxlen: 24
191.96.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438492 (0x6b0dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 14:33:29 2021 GMT
Not After : Mar 24 14:33:29 2026 GMT
Subject: CN=1cd591d4a8a756422bf83456b7269f4bce554a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:58:f1:b9:b1:f5:b2:f9:3d:70:e6:14:7a:8e:
a9:88:a6:8c:ac:21:a2:2b:38:48:82:a8:f3:00:96:
3b:28:1b:78:91:82:55:6d:9c:5c:b3:be:a5:05:4f:
fa:a2:50:c4:42:bf:cf:5f:96:17:c2:24:8f:54:29:
db:e1:23:b5:fb:c4:1f:04:e7:9e:7f:b4:73:e8:65:
ef:52:69:57:76:ba:cd:72:3b:a1:9f:e8:b2:0c:14:
d0:4d:40:c1:e1:9c:ff:d2:78:20:55:91:d8:e8:60:
ed:26:de:e2:a4:26:0c:83:a5:39:45:7a:8c:e1:66:
33:1b:c5:2b:99:5f:be:f6:a4:a8:08:1b:5a:6b:49:
05:f5:6e:82:de:96:b2:5f:8a:1f:d3:11:a6:4a:fd:
00:46:8b:f6:9d:0f:c6:b2:69:d2:e8:08:99:26:50:
27:b1:91:13:11:c0:e8:79:80:e6:57:fd:11:c7:22:
b2:41:a1:bf:b6:80:77:c5:84:be:13:bf:dc:6d:c9:
80:56:5d:d7:88:0d:fc:ec:6f:5b:be:7e:1a:89:69:
ef:ca:5c:30:bd:da:eb:99:83:5d:cd:7f:98:c2:f4:
10:a2:40:dd:40:33:23:83:61:e3:30:d4:91:9f:b8:
be:35:91:e7:63:12:42:5c:e5:3d:e3:81:5d:69:a7:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6C:EE:15:B6:18:B5:76:9B:66:4E:0D:44:16:8D:A4:DF:FC:75:93
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1cd591d4a8a756422bf83456b7269f4bce554a33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.208.0/24
181.214.71.0/24
191.96.172.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d1:75:02:32:15:a5:f6:4a:69:a8:23:62:65:a5:81:f1:e0:
09:e2:b6:53:8a:4e:19:4d:36:18:0d:00:f2:59:88:50:dd:85:
29:d8:c7:59:23:99:0d:22:53:61:4a:bd:b3:df:c1:a1:ad:07:
aa:a7:89:9a:74:81:9c:9e:60:a7:59:35:e1:2b:83:a2:12:a0:
2e:af:05:87:fc:d3:4d:2d:c3:fe:56:91:ea:83:a6:1f:56:ab:
de:f2:bc:b0:fe:da:34:80:6a:7a:90:0c:2a:a1:90:e1:ad:c0:
c3:d6:4a:60:68:ae:33:95:50:96:92:fe:53:c1:aa:73:b7:7b:
72:86:78:a7:c0:ae:fd:23:66:c3:8f:fe:9f:a6:d8:1d:53:43:
67:79:3e:6d:5f:51:83:3b:78:40:dd:38:b3:0b:84:1a:6a:fc:
99:1c:a6:5c:eb:35:f9:cc:72:d5:bc:c1:68:c8:51:52:cc:7f:
21:64:54:fc:ba:32:28:d1:78:6f:da:8b:5d:77:b4:6b:b2:20:
dd:88:9f:a1:fb:67:d7:42:e0:bd:e6:17:e6:97:9e:5b:24:8b:
d2:9f:ae:13:5b:ec:db:8e:63:4c:35:0e:42:2e:c3:26:50:6c:
0f:ee:00:41:81:6d:3c:bc:db:6b:bf:e7:d8:af:2f:d9:1a:f5:
a1:f2:87:68
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDBrDcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MTQzMzI5WhcNMjYwMzI0MTQzMzI5WjAzMTEwLwYDVQQDEygxY2Q1OTFkNGE4YTc1
NjQyMmJmODM0NTZiNzI2OWY0YmNlNTU0YTMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhFjxubH1svk9cOYUeo6piKaMrCGiKzhIgqjzAJY7KBt4kYJV
bZxcs76lBU/6olDEQr/PX5YXwiSPVCnb4SO1+8QfBOeef7Rz6GXvUmlXdrrNcjuh
n+iyDBTQTUDB4Zz/0nggVZHY6GDtJt7ipCYMg6U5RXqM4WYzG8UrmV++9qSoCBta
a0kF9W6C3payX4of0xGmSv0ARov2nQ/GsmnS6AiZJlAnsZETEcDoeYDmV/0RxyKy
QaG/toB3xYS+E7/cbcmAVl3XiA387G9bvn4aiWnvylwwvdrrmYNdzX+YwvQQokDd
QDMjg2HjMNSRn7i+NZHnYxJCXOU944FdaacfTQIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFDRs7hW2GLV2m2ZODUQWjaTf/HWTMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzFjZDU5MWQ0YThhNzU2NDIyYmY4MzQ1NmI3MjY5ZjRiY2U1NTRhMzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEALM90AMEALXWRwMEAL9grDANBgkqhkiG9w0BAQsFAAOCAQEA
JdF1AjIVpfZKaagjYmWlgfHgCeK2U4pOGU02GA0A8lmIUN2FKdjHWSOZDSJTYUq9
s9/Boa0HqqeJmnSBnJ5gp1k14SuDohKgLq8Fh/zTTS3D/laR6oOmH1ar3vK8sP7a
NIBqepAMKqGQ4a3Aw9ZKYGiuM5VQlpL+U8Gqc7d7coZ4p8Cu/SNmw4/+n6bYHVND
Z3k+bV9Rgzt4QN04swuEGmr8mRymXOs1+cxy1bzBaMhRUsx/IWRU/LoyKNF4b9qL
XXe0a7Ig3Yifoftn10LgveYX5peeWySL0p+uE1vs245jTDUOQi7DJlBsD+4AQYFt
PLzba7/n2K8v2Rr1ofKHaA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org