Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a9301625f33ab2b2be130b1c62a9bd234680d4be.roa
File: a9301625f33ab2b2be130b1c62a9bd234680d4be.roa (raw, json)
Hash identifier: Kd+L3XgBvst5tDrTHnTFsXdjYCFbBxnAL21RtmG0Rpw=
Subject key identifier: 9A:1E:F0:4C:01:28:45:5E:C5:21:90:D2:D5:DF:58:D2:30:43:70:50
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 15F5F3
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a9301625f33ab2b2be130b1c62a9bd234680d4be.roa
Signing time: Thu 10 Feb 2022 10:35:42 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 43260
IP address blocks: 191.101.254.0/24 maxlen: 24
191.101.242.0/24 maxlen: 24
179.61.219.0/24 maxlen: 24
179.61.227.0/24 maxlen: 24
191.96.227.0/24 maxlen: 24
181.214.19.0/24 maxlen: 24
181.215.228.0/24 maxlen: 24
181.215.241.0/24 maxlen: 24
181.215.167.0/24 maxlen: 24
181.215.210.0/24 maxlen: 24
181.215.17.0/24 maxlen: 24
181.215.195.0/24 maxlen: 24
191.96.2.0/24 maxlen: 24
191.96.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1439219 (0x15f5f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=a9301625f33ab2b2be130b1c62a9bd234680d4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d5:5e:e5:f1:84:08:ee:a1:c4:a4:20:6c:54:
14:51:ff:19:76:6e:36:3e:4c:df:af:73:4b:bf:39:
ec:b6:bd:51:2e:f9:08:15:c7:93:00:46:7f:aa:26:
16:8a:45:e0:f4:0d:2f:f6:40:49:f5:d0:f0:79:79:
66:82:18:c1:94:96:63:59:5c:ba:44:8d:0f:37:3f:
bb:d8:ff:38:55:4d:89:f3:2e:f3:ed:a8:15:11:1a:
71:52:36:88:0b:b2:b1:fe:d1:07:c7:5f:8c:a5:ec:
a8:22:dc:66:af:2b:ac:58:8e:7f:90:50:42:93:c8:
d4:c4:94:3a:72:d9:7a:80:3a:4d:b3:39:b2:1d:16:
86:bf:c8:b9:de:c1:41:b9:ff:2e:8a:d9:02:20:f1:
40:1a:24:10:79:7b:30:bd:e8:22:db:8d:e8:3b:fe:
1d:5a:8f:92:aa:08:12:aa:27:0f:a6:18:ac:1c:41:
18:a2:04:86:f5:41:c6:92:bd:e1:7a:4e:ef:6e:b0:
46:60:8f:9b:e9:f4:29:18:03:96:31:6c:18:b1:ff:
20:04:d2:31:bc:4c:d2:10:19:5c:e3:72:1b:7f:bc:
7e:f0:2c:b0:e8:19:16:03:ba:00:46:41:08:20:87:
85:88:52:ec:a4:da:ca:36:68:5a:46:af:04:bd:c6:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1E:F0:4C:01:28:45:5E:C5:21:90:D2:D5:DF:58:D2:30:43:70:50
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a9301625f33ab2b2be130b1c62a9bd234680d4be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.219.0/24
179.61.227.0/24
181.214.19.0/24
181.215.17.0/24
181.215.167.0/24
181.215.195.0/24
181.215.210.0/24
181.215.228.0/24
181.215.241.0/24
191.96.2.0/24
191.96.227.0/24
191.96.255.0/24
191.101.242.0/24
191.101.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c2:28:6b:4f:41:82:99:19:4e:81:df:6a:00:77:c7:0f:7c:
dc:f4:45:84:ac:85:0b:c4:74:ea:72:4d:d2:ee:40:a1:61:73:
d3:23:c6:54:9e:02:c1:d0:88:ad:4d:30:85:a7:d7:30:14:eb:
17:0d:e2:c5:07:6a:4e:e9:1f:bc:a0:79:85:59:f3:cd:ac:b6:
11:61:89:96:13:c3:e9:a0:b7:31:6a:0a:69:5e:ea:e3:90:bb:
f1:6e:36:99:1d:dc:aa:9f:b9:b5:03:46:d9:03:59:38:35:be:
ed:eb:c2:f8:93:93:17:2c:f3:0b:35:16:ca:8c:e7:05:f5:40:
8a:17:95:80:2d:dc:59:f8:0c:2e:7a:85:5b:ce:d0:95:eb:b0:
e0:49:a8:b2:ef:da:f2:6f:c3:e6:e2:62:d4:57:d7:a8:a8:88:
f1:3e:4a:52:6c:74:80:f2:b3:ab:08:04:ae:5f:cc:5e:f7:19:
1a:c7:33:d3:85:44:ed:13:bd:22:1d:9c:e7:fe:2c:9e:68:d8:
e0:ee:0e:b0:95:96:4b:3c:a4:a9:25:89:a9:22:fd:83:dd:0f:
a2:e9:16:f4:c6:2a:7f:53:4c:3e:9b:69:81:e6:c9:67:8d:74:
78:10:c2:21:63:71:26:37:f9:46:19:ab:62:8e:84:9a:c0:8f:
9b:b5:7b:d7
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIDFfXzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhhOTMwMTYyNWYzM2Fi
MmIyYmUxMzBiMWM2MmE5YmQyMzQ2ODBkNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAitVe5fGECO6hxKQgbFQUUf8Zdm42Pkzfr3NLvznstr1RLvkI
FceTAEZ/qiYWikXg9A0v9kBJ9dDweXlmghjBlJZjWVy6RI0PNz+72P84VU2J8y7z
7agVERpxUjaIC7Kx/tEHx1+MpeyoItxmryusWI5/kFBCk8jUxJQ6ctl6gDpNszmy
HRaGv8i53sFBuf8uitkCIPFAGiQQeXswvegi243oO/4dWo+SqggSqicPphisHEEY
ogSG9UHGkr3hek7vbrBGYI+b6fQpGAOWMWwYsf8gBNIxvEzSEBlc43Ibf7x+8Cyw
6BkWA7oARkEIIIeFiFLspNrKNmhaRq8EvcZ6zQIDAQABo4ICqTCCAqUwHQYDVR0O
BBYEFJoe8EwBKEVexSGQ0tXfWNIwQ3BQMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiL2E5MzAxNjI1ZjMzYWIyYjJiZTEzMGIxYzYyYTliZDIzNDY4MGQ0YmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBtBggrBgEFBQcBBwEB/wRe
MFwwWgQCAAEwVAMEALM92wMEALM94wMEALXWEwMEALXXEQMEALXXpwMEALXXwwME
ALXX0gMEALXX5AMEALXX8QMEAL9gAgMEAL9g4wMEAL9g/wMEAL9l8gMEAL9l/jAN
BgkqhkiG9w0BAQsFAAOCAQEAH8Ioa09BgpkZToHfagB3xw983PRFhKyFC8R06nJN
0u5AoWFz0yPGVJ4CwdCIrU0whafXMBTrFw3ixQdqTukfvKB5hVnzzay2EWGJlhPD
6aC3MWoKaV7q45C78W42mR3cqp+5tQNG2QNZODW+7evC+JOTFyzzCzUWyoznBfVA
iheVgC3cWfgMLnqFW87Qleuw4Emosu/a8m/D5uJi1FfXqKiI8T5KUmx0gPKzqwgE
rl/MXvcZGscz04VE7RO9Ih2c5/4snmjY4O4OsJWWSzykqSWJqSL9g90PoukW9MYq
f1NMPptpgebJZ410eBDCIWNxJjf5RhmrYo6EmsCPm7V71w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org