Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/8f224744b03bdf0c31c9be05f732c7e1939334dc.roa
File: 8f224744b03bdf0c31c9be05f732c7e1939334dc.roa (raw, json)
Hash identifier: X2k1Jbtahy0E1YmiG/9nVNb0GddrWmkpn7goJ9hc62g=
Subject key identifier: D2:85:7A:A4:F1:8C:DD:7D:99:F8:17:F1:30:30:96:1B:1C:38:AF:52
Certificate issuer: /CN=5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845
Certificate serial: 20E8BE
Authority key identifier: 0A:EC:2A:D9:A6:7E:C1:FC:DC:41:66:E8:0F:84:57:90:EC:13:FE:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/8f224744b03bdf0c31c9be05f732c7e1939334dc.roa
Signing time: Mon 26 Jun 2023 16:09:03 +0000
ROA not before: Sun 25 Jun 2023 16:09:03 +0000
ROA not after: Thu 26 Jun 2025 16:09:03 +0000
asID: 52471
IP address blocks: 168.228.232.0/22 maxlen: 24
179.51.64.0/20 maxlen: 24
103.7.135.0/24 maxlen: 24
170.244.40.0/22 maxlen: 24
201.49.186.0/23 maxlen: 24
138.99.236.0/22 maxlen: 24
186.148.88.0/21 maxlen: 24
191.97.104.0/22 maxlen: 24
2803:ab00::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2156734 (0x20e8be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845
Validity
Not Before: Jun 25 16:09:03 2023 GMT
Not After : Jun 26 16:09:03 2025 GMT
Subject: CN=8f224744b03bdf0c31c9be05f732c7e1939334dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:be:b0:9f:cc:a2:92:b5:69:e1:1d:f3:d3:fc:
64:5b:7e:b8:20:fc:07:2c:3a:67:18:bf:cd:57:92:
83:18:5e:4c:7e:4e:dc:61:de:55:dc:1c:d1:55:42:
94:cd:66:e5:a8:22:3f:82:5d:63:0e:c6:4c:03:ce:
e3:ec:af:4f:f7:87:87:f3:58:9a:d5:61:e0:91:f5:
2e:65:c3:99:5e:3f:06:09:b3:0a:b3:1d:9c:97:4c:
b2:42:75:b3:2d:26:06:e2:dc:09:4d:b5:43:73:81:
01:b3:b8:99:a3:0e:07:e7:77:f8:67:7d:81:fc:4d:
6e:e3:59:81:24:5a:4b:7a:62:a0:74:fd:15:c2:a4:
03:1e:1f:15:38:38:e1:4b:9f:ce:77:cb:53:9b:bc:
0f:1a:cb:74:bd:1e:e3:6d:cf:82:5a:fd:f5:e7:8a:
a8:dc:da:c2:db:50:02:0c:9b:1f:31:b7:ca:54:4e:
c7:69:9c:32:72:42:0c:fb:04:74:f4:33:43:26:a0:
a3:97:7b:75:64:4f:cc:c3:8b:0f:ad:9c:d2:ce:91:
92:06:ad:36:68:2e:dc:2a:c0:24:fe:e9:26:00:31:
71:ed:67:8c:0a:2e:0f:3c:14:6f:52:fe:32:2d:d3:
2a:f0:9b:df:cb:1b:53:9d:23:74:6f:6a:08:b1:9a:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:85:7A:A4:F1:8C:DD:7D:99:F8:17:F1:30:30:96:1B:1C:38:AF:52
X509v3 Authority Key Identifier:
keyid:0A:EC:2A:D9:A6:7E:C1:FC:DC:41:66:E8:0F:84:57:90:EC:13:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/8f224744b03bdf0c31c9be05f732c7e1939334dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.7.135.0/24
138.99.236.0/22
168.228.232.0/22
170.244.40.0/22
179.51.64.0/20
186.148.88.0/21
191.97.104.0/22
201.49.186.0/23
IPv6:
2803:ab00::/32
Signature Algorithm: sha256WithRSAEncryption
4b:a2:49:de:30:59:94:e3:02:4f:23:54:b0:88:ac:c6:1f:4b:
e7:40:2a:fa:ca:63:7f:7b:21:55:7a:24:f5:32:96:a1:b7:e4:
1c:34:00:ea:0c:ea:ba:dd:ab:cf:6d:b5:f4:5a:ca:38:c1:84:
a1:f4:93:81:40:58:bd:14:02:c5:8d:21:0c:7c:b8:d8:3d:cf:
39:d6:7e:e1:5e:f0:24:26:6c:73:1d:6e:07:f8:af:64:ce:2f:
3f:63:28:3b:ea:56:f0:ec:0e:a8:0d:42:f8:32:f9:7d:94:32:
36:4a:b9:be:c3:1c:c5:31:9c:c8:0d:e5:c2:bf:44:f0:2b:d4:
16:80:51:8f:2c:f1:9e:f7:42:eb:00:bb:23:ce:91:f7:34:32:
43:57:27:86:dd:52:53:0a:d9:07:31:75:5b:43:da:d8:f9:39:
81:a3:51:48:ec:6a:25:bd:9a:19:e2:3e:19:f2:d8:c3:0b:1c:
6f:7b:02:63:04:c1:9b:43:14:90:91:2a:39:06:17:ef:98:4e:
db:12:15:7d:f6:cc:ed:c4:88:91:cb:0a:5d:5c:1b:a9:5b:f9:
1a:d1:71:b9:ce:f7:2f:35:10:54:8e:a2:32:43:8a:92:1b:21:
5a:26:9a:35:e1:85:23:49:d2:4e:08:5e:6e:fb:40:90:c8:fc:
b1:ac:c0:3c
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIDIOi+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU2
MDhkNmQxYThmYmJmNWFkNGRiODRlYWYxMDkyNTNiN2VjZjk4NDUwHhcNMjMwNjI1
MTYwOTAzWhcNMjUwNjI2MTYwOTAzWjAzMTEwLwYDVQQDEyg4ZjIyNDc0NGIwM2Jk
ZjBjMzFjOWJlMDVmNzMyYzdlMTkzOTMzNGRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAz76wn8yikrVp4R3z0/xkW364IPwHLDpnGL/NV5KDGF5Mfk7c
Yd5V3BzRVUKUzWblqCI/gl1jDsZMA87j7K9P94eH81ia1WHgkfUuZcOZXj8GCbMK
sx2cl0yyQnWzLSYG4twJTbVDc4EBs7iZow4H53f4Z32B/E1u41mBJFpLemKgdP0V
wqQDHh8VODjhS5/Od8tTm7wPGst0vR7jbc+CWv3154qo3NrC21ACDJsfMbfKVE7H
aZwyckIM+wR09DNDJqCjl3t1ZE/Mw4sPrZzSzpGSBq02aC7cKsAk/ukmADFx7WeM
Ci4PPBRvUv4yLdMq8JvfyxtTnSN0b2oIsZqrswIDAQABo4IClDCCApAwHQYDVR0O
BBYEFNKFeqTxjN19mfgX8TAwlhscOK9SMB8GA1UdIwQYMBaAFArsKtmmfsH83EFm
6A+EV5DsE/6ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTYwOGQ2
ZDFhOGZiYmY1YWQ0ZGI4NGVhZjEwOTI1M2I3ZWNmOTg0NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjM1ZTg3MTAtMWViOS00ZmVjLWI3ZDAtYWJiZDNl
YzcyYTQwLzhmMjI0NzQ0YjAzYmRmMGMzMWM5YmUwNWY3MzJjN2UxOTM5MzM0ZGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMzVlODcxMC0xZWI5LTRmZWMtYjdkMC1hYmJk
M2VjNzJhNDAvNTYwOGQ2ZDFhOGZiYmY1YWQ0ZGI4NGVhZjEwOTI1M2I3ZWNmOTg0
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBYBggrBgEFBQcBBwEB/wRJ
MEcwNgQCAAEwMAMEAGcHhwMEAopj7AMEAqjk6AMEAqr0KAMEBLMzQAMEA7qUWAME
Ar9haAMEAckxujANBAIAAjAHAwUAKAOrADANBgkqhkiG9w0BAQsFAAOCAQEAS6JJ
3jBZlOMCTyNUsIisxh9L50Aq+spjf3shVXok9TKWobfkHDQA6gzqut2rz2219FrK
OMGEofSTgUBYvRQCxY0hDHy42D3POdZ+4V7wJCZscx1uB/ivZM4vP2MoO+pW8OwO
qA1C+DL5fZQyNkq5vsMcxTGcyA3lwr9E8CvUFoBRjyzxnvdC6wC7I86R9zQyQ1cn
ht1SUwrZBzF1W0Pa2Pk5gaNRSOxqJb2aGeI+GfLYwwscb3sCYwTBm0MUkJEqOQYX
75hO2xIVffbM7cSIkcsKXVwbqVv5GtFxuc73LzUQVI6iMkOKkhshWiaaNeGFI0nS
TghebvtAkMj8sazAPA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org