Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/9c67b3183e69dfb7b6230f8ab6cf2b184d7f2623.roa
File: 9c67b3183e69dfb7b6230f8ab6cf2b184d7f2623.roa (raw, json)
Hash identifier: 8CvdfgA/ua6oSy1/AX3KJgRMI8ijiJWgMEIFGyT4svY=
Subject key identifier: 4E:89:58:6F:3B:D2:DA:F4:98:63:39:07:A6:FE:7F:3F:9E:28:9E:9F
Certificate issuer: /CN=5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845
Certificate serial: 16079A
Authority key identifier: 0A:EC:2A:D9:A6:7E:C1:FC:DC:41:66:E8:0F:84:57:90:EC:13:FE:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/9c67b3183e69dfb7b6230f8ab6cf2b184d7f2623.roa
Signing time: Thu 21 Apr 2022 20:58:39 +0000
ROA not before: Thu 21 Apr 2022 03:00:00 +0000
ROA not after: Sun 21 Apr 2024 03:00:00 +0000
asID: 52471
IP address blocks: 138.99.236.0/22 maxlen: 22
168.228.232.0/22 maxlen: 22
170.244.40.0/22 maxlen: 22
179.51.64.0/20 maxlen: 20
186.148.88.0/21 maxlen: 21
191.97.104.0/22 maxlen: 22
201.49.186.0/23 maxlen: 23
2803:ab00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1443738 (0x16079a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845
Validity
Not Before: Apr 21 03:00:00 2022 GMT
Not After : Apr 21 03:00:00 2024 GMT
Subject: CN=9c67b3183e69dfb7b6230f8ab6cf2b184d7f2623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c2:6e:58:f8:b9:9b:e8:da:d4:30:3d:7a:4c:
b4:a6:9d:5e:89:f3:1f:e8:79:0c:bb:85:48:5e:38:
c8:96:a6:c2:5d:cf:72:7a:56:cf:23:45:16:47:aa:
7e:88:c8:03:05:c7:dc:cf:32:76:84:f7:9e:1d:9d:
2c:a2:e9:2a:03:c7:d6:53:79:c1:03:2d:46:67:5b:
55:27:9f:6d:e6:86:a5:e2:f9:93:32:6f:3c:11:ab:
01:71:19:e5:ec:51:1d:5f:a2:cb:75:de:ef:e9:f9:
41:ec:29:34:54:20:1a:48:ad:d4:02:d7:6f:71:63:
ed:14:e9:98:13:03:07:ea:ce:b8:51:97:ee:33:90:
3a:fb:4c:09:1b:5b:f9:14:bc:76:61:a1:ff:cf:86:
37:a9:e2:5f:2c:a8:a5:13:90:77:bf:79:71:77:14:
1f:98:85:87:0e:29:1e:86:37:15:c7:1f:6c:40:d1:
05:5f:69:ee:34:8b:fb:71:22:a9:29:e5:25:57:e1:
b7:69:1e:48:20:40:84:b2:e3:df:03:89:5f:dd:ff:
b1:92:7f:3f:41:f7:83:3c:0d:9f:f5:ae:ef:d7:93:
e5:8a:ba:94:83:87:92:78:59:f2:07:41:c2:e5:77:
e8:ca:52:65:9c:e4:84:9f:73:48:c3:ba:8e:04:70:
de:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:89:58:6F:3B:D2:DA:F4:98:63:39:07:A6:FE:7F:3F:9E:28:9E:9F
X509v3 Authority Key Identifier:
keyid:0A:EC:2A:D9:A6:7E:C1:FC:DC:41:66:E8:0F:84:57:90:EC:13:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/9c67b3183e69dfb7b6230f8ab6cf2b184d7f2623.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.236.0/22
168.228.232.0/22
170.244.40.0/22
179.51.64.0/20
186.148.88.0/21
191.97.104.0/22
201.49.186.0/23
IPv6:
2803:ab00::/32
Signature Algorithm: sha256WithRSAEncryption
b0:66:75:9d:3d:73:0e:64:6c:79:49:41:38:33:14:95:69:7a:
bb:c0:9e:0b:dc:b3:fa:ba:ca:04:37:73:95:9a:74:be:7c:d7:
dd:a9:70:b5:fc:a5:d7:bf:f6:7d:4d:8d:18:7f:79:c4:a7:67:
ad:cc:d7:b9:e3:f3:5a:17:5d:fd:15:76:85:10:7f:8f:2a:ba:
ff:7c:9f:df:30:f4:05:f0:37:1c:4f:f7:5f:c3:31:6d:51:ef:
5c:e6:36:8d:ce:c8:d5:84:87:1d:5d:68:6f:1c:08:ff:95:35:
46:99:49:f2:50:4c:92:d1:97:d7:93:ba:36:87:ba:2c:8f:7b:
02:b7:75:d0:6f:f9:f3:04:12:79:97:30:a6:82:2c:33:70:59:
ed:cf:5d:00:c4:87:51:5a:e3:2e:ff:09:a0:9c:a8:6c:41:a0:
3d:f5:01:ef:83:46:61:67:a6:0c:82:83:44:87:a4:2f:1c:53:
d0:d8:18:0f:63:dc:80:7b:5d:a2:27:fb:43:8b:36:5d:40:59:
f4:1e:13:2b:ae:82:14:ea:39:16:4d:57:63:dc:7a:c8:96:78:
31:aa:f8:8b:c5:51:1d:3e:6e:ca:9f:65:59:2e:e7:83:38:d9:
66:41:b3:b4:29:31:54:1f:24:68:ec:23:58:cb:27:eb:21:18:
50:9d:14:53
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIDFgeaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU2
MDhkNmQxYThmYmJmNWFkNGRiODRlYWYxMDkyNTNiN2VjZjk4NDUwHhcNMjIwNDIx
MDMwMDAwWhcNMjQwNDIxMDMwMDAwWjAzMTEwLwYDVQQDEyg5YzY3YjMxODNlNjlk
ZmI3YjYyMzBmOGFiNmNmMmIxODRkN2YyNjIzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgsJuWPi5m+ja1DA9eky0pp1eifMf6HkMu4VIXjjIlqbCXc9y
elbPI0UWR6p+iMgDBcfczzJ2hPeeHZ0soukqA8fWU3nBAy1GZ1tVJ59t5oal4vmT
Mm88EasBcRnl7FEdX6LLdd7v6flB7Ck0VCAaSK3UAtdvcWPtFOmYEwMH6s64UZfu
M5A6+0wJG1v5FLx2YaH/z4Y3qeJfLKilE5B3v3lxdxQfmIWHDikehjcVxx9sQNEF
X2nuNIv7cSKpKeUlV+G3aR5IIECEsuPfA4lf3f+xkn8/QfeDPA2f9a7v15PlirqU
g4eSeFnyB0HC5XfoylJlnOSEn3NIw7qOBHDeUwIDAQABo4ICjjCCAoowHQYDVR0O
BBYEFE6JWG870tr0mGM5B6b+fz+eKJ6fMB8GA1UdIwQYMBaAFArsKtmmfsH83EFm
6A+EV5DsE/6ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTYwOGQ2
ZDFhOGZiYmY1YWQ0ZGI4NGVhZjEwOTI1M2I3ZWNmOTg0NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjM1ZTg3MTAtMWViOS00ZmVjLWI3ZDAtYWJiZDNl
YzcyYTQwLzljNjdiMzE4M2U2OWRmYjdiNjIzMGY4YWI2Y2YyYjE4NGQ3ZjI2MjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMzVlODcxMC0xZWI5LTRmZWMtYjdkMC1hYmJk
M2VjNzJhNDAvNTYwOGQ2ZDFhOGZiYmY1YWQ0ZGI4NGVhZjEwOTI1M2I3ZWNmOTg0
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBSBggrBgEFBQcBBwEB/wRD
MEEwMAQCAAEwKgMEAopj7AMEAqjk6AMEAqr0KAMEBLMzQAMEA7qUWAMEAr9haAME
AckxujANBAIAAjAHAwUAKAOrADANBgkqhkiG9w0BAQsFAAOCAQEAsGZ1nT1zDmRs
eUlBODMUlWl6u8CeC9yz+rrKBDdzlZp0vnzX3alwtfyl17/2fU2NGH95xKdnrczX
uePzWhdd/RV2hRB/jyq6/3yf3zD0BfA3HE/3X8MxbVHvXOY2jc7I1YSHHV1obxwI
/5U1RplJ8lBMktGX15O6Noe6LI97Ard10G/58wQSeZcwpoIsM3BZ7c9dAMSHUVrj
Lv8JoJyobEGgPfUB74NGYWemDIKDRIekLxxT0NgYD2PcgHtdoif7Q4s2XUBZ9B4T
K66CFOo5Fk1XY9x6yJZ4Mar4i8VRHT5uyp9lWS7ngzjZZkGztCkxVB8kaOwjWMsn
6yEYUJ0UUw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-ams.rpki-client.org