Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/4f379ab8542675ace1c4bf4ae21d63848a207dde.roa
File: 4f379ab8542675ace1c4bf4ae21d63848a207dde.roa (raw, json)
Hash identifier: E/KpcEh8lxHo91XphCfvjaqAm2D2JUKzJJx3Ebl2ldU=
Subject key identifier: 6F:A2:0F:39:C7:C8:49:9D:3F:0F:6A:06:19:A4:4A:C4:01:A9:2D:62
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 153EBC
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/4f379ab8542675ace1c4bf4ae21d63848a207dde.roa
Signing time: Sun 30 Jan 2022 13:14:55 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 133752
IP address blocks: 181.214.242.0/24 maxlen: 24
191.101.205.0/24 maxlen: 24
191.101.240.0/24 maxlen: 24
191.101.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1392316 (0x153ebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=4f379ab8542675ace1c4bf4ae21d63848a207dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:e0:c4:b5:ca:ce:36:0c:44:f1:49:99:f3:
42:08:78:89:57:27:cd:e2:e2:d4:35:cb:40:ed:f4:
b8:a8:65:41:ea:4a:47:49:7c:35:a3:9d:f9:fe:4a:
07:91:7b:e2:9a:70:8e:bd:0c:88:18:5b:38:25:4a:
49:4d:13:e3:55:e0:17:7e:97:f1:53:34:70:fe:c4:
33:7b:51:ab:45:48:10:a9:f2:dd:60:31:de:f2:ae:
52:e4:20:b7:5c:4b:41:ab:89:ac:a9:db:9f:45:2e:
9d:06:7d:12:c1:7f:d5:d5:c7:ce:53:2a:e2:4f:cc:
a7:47:e8:a3:7b:91:56:ae:f4:46:1e:f0:e9:47:56:
34:39:13:f8:a3:76:f7:6a:3f:fe:6e:25:ee:09:ea:
5a:a6:0e:2a:9d:1c:4a:08:01:61:7c:da:05:86:6d:
f4:79:9c:b4:d1:8d:fe:f6:e4:8f:f0:0e:b5:9d:26:
30:30:04:1f:de:6e:4d:aa:05:af:3b:1e:34:39:50:
83:4a:d0:0b:fb:47:21:d0:3e:33:38:a2:29:1a:44:
b2:ff:d7:b3:da:84:f8:b0:2a:c2:f0:3a:27:c7:ad:
83:37:da:79:fa:62:81:a5:0a:9a:9c:53:a5:1d:24:
af:9e:56:dc:1b:3f:58:aa:9a:c4:18:09:9e:d5:4c:
d2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A2:0F:39:C7:C8:49:9D:3F:0F:6A:06:19:A4:4A:C4:01:A9:2D:62
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/4f379ab8542675ace1c4bf4ae21d63848a207dde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.242.0/24
191.101.205.0/24
191.101.240.0/24
191.101.247.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c3:3e:41:d4:fd:88:a2:18:d8:f8:2d:f6:63:1f:de:b4:b9:
e1:04:0a:a4:81:ed:7c:22:b7:1d:f5:c3:76:a5:40:c3:d7:8b:
46:13:22:1d:6d:ab:54:20:bc:2b:d6:2d:bb:bd:e9:18:3c:99:
72:db:8a:d3:fe:4e:64:07:ea:35:04:49:9e:57:b6:67:cb:0b:
cc:7a:fa:22:aa:fa:f0:30:2a:6f:d8:62:34:69:0c:40:af:8d:
c4:dd:52:96:8d:62:9b:03:66:57:6f:ca:0c:69:71:5b:17:df:
84:2e:c8:87:d1:d8:38:bb:83:22:19:f0:0f:62:5f:93:2c:01:
f5:94:a3:e8:74:56:d3:f9:ee:8b:32:16:13:61:18:ae:5a:c7:
52:3a:d4:72:4c:cb:5d:17:e5:c5:5b:4f:46:a7:47:3b:ab:05:
42:35:85:a0:be:cd:75:a5:b6:89:34:d5:0d:86:90:95:1a:d2:
1e:e2:1d:32:46:cb:09:1f:2a:22:af:ae:1d:e6:1b:dd:84:ae:
69:5a:8e:be:dc:df:1e:f6:3b:5f:ee:09:ae:31:93:66:71:bb:
70:3a:8a:84:7e:cb:9c:3f:47:82:ec:01:95:39:cf:de:66:89:
5f:b4:bf:cc:59:be:6a:4e:12:ed:53:a4:52:04:25:74:de:0e:
ca:ba:98:f0
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIDFT68MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg0ZjM3OWFiODU0MjY3
NWFjZTFjNGJmNGFlMjFkNjM4NDhhMjA3ZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoLLgxLXKzjYMRPFJmfNCCHiJVyfN4uLUNctA7fS4qGVB6kpH
SXw1o535/koHkXvimnCOvQyIGFs4JUpJTRPjVeAXfpfxUzRw/sQze1GrRUgQqfLd
YDHe8q5S5CC3XEtBq4msqdufRS6dBn0SwX/V1cfOUyriT8ynR+ije5FWrvRGHvDp
R1Y0ORP4o3b3aj/+biXuCepapg4qnRxKCAFhfNoFhm30eZy00Y3+9uSP8A61nSYw
MAQf3m5NqgWvOx40OVCDStAL+0ch0D4zOKIpGkSy/9ez2oT4sCrC8Donx62DN9p5
+mKBpQqanFOlHSSvnlbcGz9YqprEGAme1UzSMQIDAQABo4ICbTCCAmkwHQYDVR0O
BBYEFG+iDznHyEmdPw9qBhmkSsQBqS1iMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzRmMzc5YWI4NTQyNjc1YWNlMWM0YmY0YWUyMWQ2Mzg0OGEyMDdkZGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQi
MCAwHgQCAAEwGAMEALXW8gMEAL9lzQMEAL9l8AMEAL9l9zANBgkqhkiG9w0BAQsF
AAOCAQEAWMM+QdT9iKIY2Pgt9mMf3rS54QQKpIHtfCK3HfXDdqVAw9eLRhMiHW2r
VCC8K9Ytu73pGDyZctuK0/5OZAfqNQRJnle2Z8sLzHr6Iqr68DAqb9hiNGkMQK+N
xN1Slo1imwNmV2/KDGlxWxffhC7Ih9HYOLuDIhnwD2JfkywB9ZSj6HRW0/nuizIW
E2EYrlrHUjrUckzLXRflxVtPRqdHO6sFQjWFoL7NdaW2iTTVDYaQlRrSHuIdMkbL
CR8qIq+uHeYb3YSuaVqOvtzfHvY7X+4JrjGTZnG7cDqKhH7LnD9HguwBlTnP3maJ
X7S/zFm+ak4S7VOkUgQldN4OyrqY8A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org