Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/9920a2ee18d8a3b0cd928e1fabfbbeca577d3550.roa
File: 9920a2ee18d8a3b0cd928e1fabfbbeca577d3550.roa (raw, json)
Hash identifier: SVjbg7udDmSOrLbH/VGzi/LYN2tMUvxzPoVQTS1YVGo=
Subject key identifier: F7:2B:4A:A8:E5:79:2F:83:2F:C5:20:4E:BD:F0:2C:A6:17:F4:34:18
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 0E321E
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/9920a2ee18d8a3b0cd928e1fabfbbeca577d3550.roa
Signing time: Tue 21 Sep 2021 08:51:45 +0000
ROA not before: Thu 29 Jul 2021 03:00:00 +0000
ROA not after: Sat 29 Jul 2023 03:00:00 +0000
asID: 22773
IP address blocks: 191.96.187.0/24 maxlen: 24
191.96.18.0/24 maxlen: 24
179.61.226.0/24 maxlen: 24
191.96.140.0/24 maxlen: 24
191.96.149.0/24 maxlen: 24
179.61.203.0/24 maxlen: 24
191.101.181.0/24 maxlen: 24
191.96.207.0/24 maxlen: 24
191.96.245.0/24 maxlen: 24
191.96.118.0/24 maxlen: 24
181.214.244.0/24 maxlen: 24
181.214.122.0/24 maxlen: 24
181.215.9.0/24 maxlen: 24
191.101.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 930334 (0xe321e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Jul 29 03:00:00 2021 GMT
Not After : Jul 29 03:00:00 2023 GMT
Subject: CN=9920a2ee18d8a3b0cd928e1fabfbbeca577d3550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:a3:a5:92:90:6a:fe:35:d4:36:c4:05:6c:
25:e6:b3:5e:c0:d4:84:4f:b9:08:21:b4:78:05:44:
05:33:ee:47:e6:4e:83:74:24:77:93:4b:b7:7c:9e:
4d:a4:a9:09:82:7b:6a:b2:84:23:93:4c:df:ab:2d:
4e:87:df:f1:32:0d:95:6a:b5:ce:4f:5e:43:f2:31:
1b:c5:47:2b:b5:93:3c:34:27:4a:5f:db:e6:14:47:
8b:0c:e3:01:02:2a:b8:be:67:10:0a:bc:01:16:d1:
65:35:65:ea:86:e9:34:1e:75:d5:93:41:0c:ea:d2:
c7:d8:e2:b9:68:5d:50:8f:b5:13:a0:60:0d:23:fc:
8a:54:0e:85:fa:da:f9:0c:b1:e3:d8:c7:1e:ee:62:
c4:aa:55:f7:a6:c7:ad:4d:ae:d6:55:4b:35:f3:05:
d2:e5:5f:83:09:f6:67:6e:5f:d1:a6:89:6c:e6:ff:
86:05:32:86:5b:44:fa:04:0e:fa:ac:87:65:b3:34:
40:1a:d8:0b:c0:5a:3c:61:bc:e5:a5:76:9c:f1:35:
f6:10:3d:a2:0f:a7:6f:b9:c7:fd:a6:57:31:cb:59:
c3:76:af:13:d5:f9:18:a5:19:52:b7:66:12:ec:42:
df:20:d6:68:8a:09:ba:ab:67:f3:41:a5:c5:52:db:
08:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2B:4A:A8:E5:79:2F:83:2F:C5:20:4E:BD:F0:2C:A6:17:F4:34:18
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/9920a2ee18d8a3b0cd928e1fabfbbeca577d3550.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.203.0/24
179.61.226.0/24
181.214.122.0/24
181.214.244.0/24
181.215.9.0/24
191.96.18.0/24
191.96.118.0/24
191.96.140.0/24
191.96.149.0/24
191.96.187.0/24
191.96.207.0/24
191.96.245.0/24
191.101.168.0/24
191.101.181.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7b:c2:9a:ca:aa:8f:f9:6e:ed:4b:63:21:5e:76:5e:38:e3:
4a:de:5c:0a:19:c4:bc:45:94:9d:c2:bb:67:b6:b3:8d:11:ff:
4c:d2:99:27:ad:20:5b:9b:f2:4f:47:4b:d2:18:27:25:55:b8:
5c:39:db:40:d3:c1:d7:7b:72:2f:47:07:a0:ff:18:2a:f7:38:
49:8d:21:46:cf:9c:de:2d:b0:6f:a1:aa:a9:87:24:85:05:02:
cf:b1:07:8e:6e:b5:ca:78:db:4e:94:a0:5b:7e:b8:ab:68:fa:
41:2e:a5:10:82:93:84:80:4a:a5:50:63:e0:3b:a1:d2:51:57:
1c:51:16:b2:21:37:55:8a:4a:7b:a4:b2:95:9c:57:a9:83:d1:
1d:4e:ec:21:ce:8f:a9:1d:96:9c:ff:b8:be:28:f5:42:20:68:
e3:70:25:28:68:f0:7f:41:c5:fe:f1:68:b3:58:b0:88:05:99:
82:04:cf:e1:3d:12:64:95:e9:73:97:88:1f:ba:5b:7c:c4:d8:
74:e2:6d:fc:99:48:72:9c:ae:ab:8c:b7:c7:29:fa:22:9c:7c:
05:dd:29:64:9a:c3:b5:f5:57:59:ab:50:bd:ee:ab:eb:e1:c3:
bf:95:2a:c1:22:bc:d3:a4:0f:a8:fa:57:c6:ed:8b:e3:56:e6:
39:c1:4e:15
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIDDjIeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwNzI5
MDMwMDAwWhcNMjMwNzI5MDMwMDAwWjAzMTEwLwYDVQQDEyg5OTIwYTJlZTE4ZDhh
M2IwY2Q5MjhlMWZhYmZiYmVjYTU3N2QzNTUwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqeGjpZKQav411DbEBWwl5rNewNSET7kIIbR4BUQFM+5H5k6D
dCR3k0u3fJ5NpKkJgntqsoQjk0zfqy1Oh9/xMg2VarXOT15D8jEbxUcrtZM8NCdK
X9vmFEeLDOMBAiq4vmcQCrwBFtFlNWXqhuk0HnXVk0EM6tLH2OK5aF1Qj7UToGAN
I/yKVA6F+tr5DLHj2Mce7mLEqlX3psetTa7WVUs18wXS5V+DCfZnbl/Rpols5v+G
BTKGW0T6BA76rIdlszRAGtgLwFo8YbzlpXac8TX2ED2iD6dvucf9plcxy1nDdq8T
1fkYpRlSt2YS7ELfINZoigm6q2fzQaXFUtsILwIDAQABo4ICqTCCAqUwHQYDVR0O
BBYEFPcrSqjleS+DL8UgTr3wLKYX9DQYMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzk5MjBhMmVlMThkOGEzYjBjZDkyOGUxZmFiZmJiZWNhNTc3ZDM1NTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBtBggrBgEFBQcBBwEB/wRe
MFwwWgQCAAEwVAMEALM9ywMEALM94gMEALXWegMEALXW9AMEALXXCQMEAL9gEgME
AL9gdgMEAL9gjAMEAL9glQMEAL9guwMEAL9gzwMEAL9g9QMEAL9lqAMEAL9ltTAN
BgkqhkiG9w0BAQsFAAOCAQEAmXvCmsqqj/lu7UtjIV52XjjjSt5cChnEvEWUncK7
Z7azjRH/TNKZJ60gW5vyT0dL0hgnJVW4XDnbQNPB13tyL0cHoP8YKvc4SY0hRs+c
3i2wb6GqqYckhQUCz7EHjm61ynjbTpSgW364q2j6QS6lEIKThIBKpVBj4Duh0lFX
HFEWsiE3VYpKe6SylZxXqYPRHU7sIc6PqR2WnP+4vij1QiBo43AlKGjwf0HF/vFo
s1iwiAWZggTP4T0SZJXpc5eIH7pbfMTYdOJt/JlIcpyuq4y3xyn6Ipx8Bd0pZJrD
tfVXWatQve6r6+HDv5UqwSK806QPqPpXxu2L41bmOcFOFQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org