Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/baabe91598e02e7c528a2d319dc099bfc6450759.roa
File: baabe91598e02e7c528a2d319dc099bfc6450759.roa (raw, json)
Hash identifier: 1RreiC6gH2bEV2NHlEyqQHpNSaWvv1MGLmfRtUYs2FQ=
Subject key identifier: 2B:EE:E1:77:C5:A4:67:78:E8:7F:70:C8:CC:4F:5E:17:EC:CC:25:88
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 0BD25B
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/baabe91598e02e7c528a2d319dc099bfc6450759.roa
Signing time: Thu 29 Jul 2021 07:32:18 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 133752
IP address blocks: 181.214.240.0/24 maxlen: 24
181.214.242.0/24 maxlen: 24
191.101.205.0/24 maxlen: 24
191.101.240.0/24 maxlen: 24
191.101.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 774747 (0xbd25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=baabe91598e02e7c528a2d319dc099bfc6450759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:63:70:f3:93:35:95:6e:3d:32:7c:a3:37:
5a:31:5c:fd:75:84:9d:de:d0:e9:40:4d:d1:e3:45:
44:7d:52:40:5d:24:af:48:f5:42:dd:bf:59:4b:c7:
68:5d:c2:87:61:64:a1:00:10:ac:4f:3c:4f:d2:46:
aa:c8:b9:95:49:29:3a:ab:f6:79:40:55:23:43:a4:
76:d9:4f:52:6d:92:7b:dc:aa:b2:62:34:70:b6:6f:
32:fc:e8:34:d4:0f:f5:9d:0b:a6:35:a4:6c:43:d2:
0e:87:5a:23:74:d3:c4:da:b5:67:1e:ed:5f:46:a2:
97:59:37:b3:dd:13:e2:e0:ff:c2:57:4f:1c:ab:c5:
f5:c5:fc:f0:bd:af:c9:d8:8f:f9:67:4d:f1:22:22:
a6:26:a3:3f:ec:49:ac:13:d4:1f:66:fa:18:5f:b4:
40:c4:80:81:07:a0:03:10:d7:ce:03:d0:ff:cf:ad:
b2:0e:3b:02:38:79:54:81:84:5d:dd:1c:9c:d8:63:
df:35:e3:e9:5d:5e:22:0a:dd:34:94:0d:a5:22:86:
b3:45:e6:7b:32:b1:b1:cb:10:9b:bc:08:99:f4:b3:
8d:ae:12:7d:96:d9:30:b0:6c:a2:09:88:b2:24:93:
ee:b6:79:43:88:34:2a:a2:01:9a:08:9a:97:be:e7:
9c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EE:E1:77:C5:A4:67:78:E8:7F:70:C8:CC:4F:5E:17:EC:CC:25:88
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/baabe91598e02e7c528a2d319dc099bfc6450759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.240.0/24
181.214.242.0/24
191.101.205.0/24
191.101.240.0/24
191.101.247.0/24
Signature Algorithm: sha256WithRSAEncryption
34:9c:49:1a:bc:fd:87:b4:a4:02:84:20:a1:8b:c8:2b:37:50:
06:c9:86:6e:07:55:78:d9:26:8a:71:78:66:85:b4:f8:d2:4a:
7f:c3:3b:2e:2f:d5:2f:18:4e:9f:7b:0a:68:24:5d:3e:df:7a:
7c:25:26:94:56:db:fc:c1:d1:f8:36:f0:d9:cd:da:6f:1e:da:
53:79:7b:0a:f5:65:37:39:0e:17:0e:f3:ff:11:27:ca:98:a0:
0e:1f:96:22:05:0c:05:6b:8e:fc:ec:54:f7:f4:89:0e:1b:bf:
2c:11:cf:a7:ae:1d:ea:56:39:67:2f:b7:02:6d:43:b0:af:7b:
ea:43:67:04:54:60:e3:3e:e7:30:31:c6:93:73:fa:31:33:d5:
08:6b:f0:7f:71:90:2f:6c:9c:1a:b1:d7:35:d9:25:1f:b7:5b:
b2:72:0d:fa:47:86:d6:81:ae:f9:7e:2c:86:0a:cd:7d:38:d3:
89:92:88:41:8e:26:ed:14:c3:cb:1b:18:77:39:62:91:b4:94:
e0:3c:fc:21:78:ec:c2:ae:54:4d:c9:8c:8e:64:0b:22:46:ca:
82:17:a5:56:9f:8b:9b:e1:17:af:d3:cc:e9:e3:35:42:bd:da:
87:95:e6:1e:bd:54:36:32:bf:48:30:eb:f7:91:b4:54:91:fb:
05:64:da:45
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDC9JbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhiYWFiZTkxNTk4ZTAy
ZTdjNTI4YTJkMzE5ZGMwOTliZmM2NDUwNzU5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0OhjcPOTNZVuPTJ8ozdaMVz9dYSd3tDpQE3R40VEfVJAXSSv
SPVC3b9ZS8doXcKHYWShABCsTzxP0kaqyLmVSSk6q/Z5QFUjQ6R22U9SbZJ73Kqy
YjRwtm8y/Og01A/1nQumNaRsQ9IOh1ojdNPE2rVnHu1fRqKXWTez3RPi4P/CV08c
q8X1xfzwva/J2I/5Z03xIiKmJqM/7EmsE9QfZvoYX7RAxICBB6ADENfOA9D/z62y
DjsCOHlUgYRd3Ryc2GPfNePpXV4iCt00lA2lIoazReZ7MrGxyxCbvAiZ9LONrhJ9
ltkwsGyiCYiyJJPutnlDiDQqogGaCJqXvuec0QIDAQABo4ICczCCAm8wHQYDVR0O
BBYEFCvu4XfFpGd46H9wyMxPXhfszCWIMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiL2JhYWJlOTE1OThlMDJlN2M1MjhhMmQzMTlkYzA5OWJmYzY0NTA3NTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQo
MCYwJAQCAAEwHgMEALXW8AMEALXW8gMEAL9lzQMEAL9l8AMEAL9l9zANBgkqhkiG
9w0BAQsFAAOCAQEANJxJGrz9h7SkAoQgoYvIKzdQBsmGbgdVeNkminF4ZoW0+NJK
f8M7Li/VLxhOn3sKaCRdPt96fCUmlFbb/MHR+Dbw2c3abx7aU3l7CvVlNzkOFw7z
/xEnypigDh+WIgUMBWuO/OxU9/SJDhu/LBHPp64d6lY5Zy+3Am1DsK976kNnBFRg
4z7nMDHGk3P6MTPVCGvwf3GQL2ycGrHXNdklH7dbsnIN+keG1oGu+X4shgrNfTjT
iZKIQY4m7RTDyxsYdzlikbSU4Dz8IXjswq5UTcmMjmQLIkbKghelVp+Lm+EXr9PM
6eM1Qr3ah5XmHr1UNjK/SDDr95G0VJH7BWTaRQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org