Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f977398db9c5469dc317d3dc990740a966cb8f3c.roa
File: f977398db9c5469dc317d3dc990740a966cb8f3c.roa (raw, json)
Hash identifier: ROksc/lq96wWv0AzPtOtdBScLHrZPAD0bjwhFHftCmA=
Subject key identifier: 85:D8:24:9F:B3:B9:4D:90:30:1C:2A:E8:74:5A:D9:33:21:9F:C8:11
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 155A23
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f977398db9c5469dc317d3dc990740a966cb8f3c.roa
Signing time: Mon 31 Jan 2022 19:59:53 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 26636
IP address blocks: 181.214.219.0/24 maxlen: 24
181.214.84.0/23 maxlen: 24
181.214.245.0/24 maxlen: 24
181.214.146.0/24 maxlen: 24
191.96.29.0/24 maxlen: 24
191.96.94.0/24 maxlen: 24
191.96.61.0/24 maxlen: 24
191.96.34.0/24 maxlen: 24
181.215.35.0/24 maxlen: 24
181.215.31.0/24 maxlen: 24
191.96.206.0/24 maxlen: 24
191.96.168.0/24 maxlen: 24
191.101.202.0/23 maxlen: 24
181.215.252.0/23 maxlen: 24
181.214.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1399331 (0x155a23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=f977398db9c5469dc317d3dc990740a966cb8f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:6c:b0:ac:9f:4b:f4:02:0c:2d:32:71:65:
22:8f:57:9e:a0:c9:fd:80:72:dc:a2:76:48:b4:6b:
58:3b:7b:f9:77:1a:80:fe:1a:9a:d9:20:30:42:0a:
12:36:0c:ad:f3:5f:b2:30:ae:62:c8:d2:ad:fa:3c:
ed:c2:9b:04:ca:b1:e1:61:df:71:46:84:f4:ab:bc:
07:e6:48:50:8b:f7:f8:90:0b:b0:90:74:7f:89:84:
87:67:e9:81:60:d7:2d:be:3e:4e:43:97:6e:09:15:
35:9b:f8:42:d0:bf:dc:fa:92:46:ff:10:ea:1d:33:
5e:b6:0f:49:96:17:74:09:c1:27:9a:20:16:13:80:
89:73:99:b8:18:8e:48:cc:46:41:5f:8c:41:fc:de:
bc:85:a4:7f:9b:ab:8a:99:ba:fb:48:e3:63:0c:9b:
24:e5:81:1e:f1:63:fb:02:f2:a2:c4:96:6c:83:07:
f0:4d:8c:ab:1c:fb:53:b3:ff:7b:8a:9d:72:cb:02:
f4:8b:04:c4:d9:d3:3e:cf:46:f5:72:b9:8a:cf:cb:
f2:b2:f5:f5:ce:52:fb:4a:80:7f:7a:36:8e:a1:37:
26:67:a0:36:11:dc:e5:91:df:46:68:0a:51:28:91:
95:79:0e:94:82:cc:09:51:5d:c0:ca:67:d0:49:1a:
fd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D8:24:9F:B3:B9:4D:90:30:1C:2A:E8:74:5A:D9:33:21:9F:C8:11
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f977398db9c5469dc317d3dc990740a966cb8f3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.78.0/23
181.214.84.0/23
181.214.146.0/24
181.214.219.0/24
181.214.245.0/24
181.215.31.0/24
181.215.35.0/24
181.215.252.0/23
191.96.29.0/24
191.96.34.0/24
191.96.61.0/24
191.96.94.0/24
191.96.168.0/24
191.96.206.0/24
191.101.202.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:65:0c:b9:f2:21:aa:61:cd:64:f9:1a:99:fd:1b:b7:b7:b6:
57:05:1f:2f:8b:4c:83:1a:77:e3:38:5a:7d:fb:fc:e2:ba:d8:
61:a2:c4:42:6a:39:e8:fe:c6:af:d7:16:29:53:40:32:01:50:
fe:55:76:1e:be:4e:47:3e:1f:3e:8a:09:31:c7:8a:0e:4f:f1:
74:21:03:82:60:27:6e:d2:7a:97:11:a9:e5:ad:e5:c1:77:42:
90:c7:09:8a:90:fa:77:e8:bb:db:73:29:46:7b:3f:79:3c:df:
ca:4b:29:3d:9a:41:46:38:ba:3b:ae:0d:c3:4c:e3:4d:1c:50:
01:f3:e9:1c:5c:bd:39:82:d0:03:c7:68:28:52:75:45:36:bf:
af:3e:1e:cd:97:f9:b3:76:e5:04:48:ef:cc:9b:26:47:37:b0:
c4:3e:98:ae:a1:0d:17:5c:7c:de:03:2d:bc:66:b7:de:91:0e:
1c:57:57:68:6d:c9:06:18:37:0c:d7:34:50:5e:57:8b:8e:80:
fa:be:87:b9:34:32:2e:fa:57:6f:55:0e:39:6e:7c:3a:4b:5e:
f3:d0:67:8f:23:7c:35:f7:ce:eb:83:f9:87:43:db:c2:a1:79:
a8:7f:86:05:80:24:c4:93:a0:39:c8:46:8b:d0:44:04:65:12:
fc:2f:2f:52
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgIDFVojMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhmOTc3Mzk4ZGI5YzU0
NjlkYzMxN2QzZGM5OTA3NDBhOTY2Y2I4ZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmjFssKyfS/QCDC0ycWUij1eeoMn9gHLconZItGtYO3v5dxqA
/hqa2SAwQgoSNgyt81+yMK5iyNKt+jztwpsEyrHhYd9xRoT0q7wH5khQi/f4kAuw
kHR/iYSHZ+mBYNctvj5OQ5duCRU1m/hC0L/c+pJG/xDqHTNetg9Jlhd0CcEnmiAW
E4CJc5m4GI5IzEZBX4xB/N68haR/m6uKmbr7SONjDJsk5YEe8WP7AvKixJZsgwfw
TYyrHPtTs/97ip1yywL0iwTE2dM+z0b1crmKz8vysvX1zlL7SoB/ejaOoTcmZ6A2
Edzlkd9GaApRKJGVeQ6UgswJUV3AymfQSRr91wIDAQABo4ICrzCCAqswHQYDVR0O
BBYEFIXYJJ+zuU2QMBwq6HRa2TMhn8gRMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiL2Y5NzczOThkYjljNTQ2OWRjMzE3ZDNkYzk5MDc0MGE5NjZjYjhmM2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBzBggrBgEFBQcBBwEB/wRk
MGIwYAQCAAEwWgMEAbXWTgMEAbXWVAMEALXWkgMEALXW2wMEALXW9QMEALXXHwME
ALXXIwMEAbXX/AMEAL9gHQMEAL9gIgMEAL9gPQMEAL9gXgMEAL9gqAMEAL9gzgME
Ab9lyjANBgkqhkiG9w0BAQsFAAOCAQEAOmUMufIhqmHNZPkamf0bt7e2VwUfL4tM
gxp34zhaffv84rrYYaLEQmo56P7Gr9cWKVNAMgFQ/lV2Hr5ORz4fPooJMceKDk/x
dCEDgmAnbtJ6lxGp5a3lwXdCkMcJipD6d+i723MpRns/eTzfykspPZpBRji6O64N
w0zjTRxQAfPpHFy9OYLQA8doKFJ1RTa/rz4ezZf5s3blBEjvzJsmRzewxD6YrqEN
F1x83gMtvGa33pEOHFdXaG3JBhg3DNc0UF5Xi46A+r6HuTQyLvpXb1UOOW58Okte
89BnjyN8NffO64P5h0PbwqF5qH+GBYAkxJOgOchGi9BEBGUS/C8vUg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org