Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37014f58-a454-467f-9887-90d8b47e5ee0/0d6eeb04810d90b5ab442c78758ae8fa01003f36.roa
File: 0d6eeb04810d90b5ab442c78758ae8fa01003f36.roa (raw, json)
Hash identifier: 7Pn9qR0m8jx0iQ1wr/Dz6SVFNVlrMXieyRMZFzp8hQc=
Subject key identifier: B6:34:16:A5:5A:BF:A5:56:FC:25:7C:8B:26:7F:BB:96:7C:8A:9E:BC
Certificate issuer: /CN=5af0c364da44e8d56630ca9491db8bba68bafdeb
Certificate serial: 232287
Authority key identifier: 3A:CD:EC:EC:0C:96:F1:25:C2:1A:2C:6B:E1:E0:D2:E7:78:1F:8A:A6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5af0c364da44e8d56630ca9491db8bba68bafdeb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/37014f58-a454-467f-9887-90d8b47e5ee0/0d6eeb04810d90b5ab442c78758ae8fa01003f36.roa
Signing time: Sun 31 Mar 2024 03:14:09 +0000
ROA not before: Sun 31 Mar 2024 03:14:09 +0000
ROA not after: Tue 31 Mar 2026 03:14:09 +0000
asID: 52369
IP address blocks: 190.184.224.0/20 maxlen: 24
190.110.112.0/21 maxlen: 24
179.42.176.0/20 maxlen: 24
2800:c50::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2302599 (0x232287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af0c364da44e8d56630ca9491db8bba68bafdeb
Validity
Not Before: Mar 31 03:14:09 2024 GMT
Not After : Mar 31 03:14:09 2026 GMT
Subject: CN=0d6eeb04810d90b5ab442c78758ae8fa01003f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:52:48:fe:21:6d:dc:6b:78:62:2a:b5:ef:
00:e4:4a:32:99:f7:ca:29:0e:e0:86:ea:5e:c8:e8:
9b:8b:10:1f:b1:1e:4e:5c:ab:62:a0:9f:35:71:cf:
fb:f4:82:80:7b:70:91:13:9c:db:24:25:32:35:91:
8d:be:46:70:ee:9f:3a:d8:56:03:25:67:bb:fd:d9:
3f:e7:52:e4:fe:12:52:04:2d:59:ed:81:f5:04:e4:
6f:29:0e:2b:c0:c2:0a:bc:a0:ea:1d:9e:bf:38:6f:
a4:5c:4f:7d:c7:88:89:76:52:1b:07:a2:4a:bf:7d:
3c:e4:ed:0f:5a:ad:2e:cb:0e:84:dc:18:90:79:5b:
98:83:2e:59:27:0f:26:81:61:7a:4a:ec:ad:9d:c1:
c3:68:99:18:20:19:63:53:30:8a:c6:d3:e1:e2:d6:
86:e3:2e:e6:9f:c5:bc:f3:5b:55:90:4f:b8:c3:55:
d9:11:31:c5:ab:35:ee:33:b3:0f:e3:3a:e3:80:57:
22:1d:03:c9:b3:32:ff:ec:ce:c6:4f:67:62:75:f2:
15:45:84:29:5c:a9:14:96:45:4f:c8:12:d5:c1:17:
78:38:74:b0:8d:51:46:18:32:82:df:e1:18:40:3c:
9f:70:b3:97:d7:e5:06:4d:c2:4b:b1:47:29:73:0d:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:34:16:A5:5A:BF:A5:56:FC:25:7C:8B:26:7F:BB:96:7C:8A:9E:BC
X509v3 Authority Key Identifier:
keyid:3A:CD:EC:EC:0C:96:F1:25:C2:1A:2C:6B:E1:E0:D2:E7:78:1F:8A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5af0c364da44e8d56630ca9491db8bba68bafdeb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37014f58-a454-467f-9887-90d8b47e5ee0/0d6eeb04810d90b5ab442c78758ae8fa01003f36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/37014f58-a454-467f-9887-90d8b47e5ee0/5af0c364da44e8d56630ca9491db8bba68bafdeb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.42.176.0/20
190.110.112.0/21
190.184.224.0/20
IPv6:
2800:c50::/32
Signature Algorithm: sha256WithRSAEncryption
40:43:79:29:35:e5:0c:18:e9:f8:9a:1b:97:33:c1:61:9b:ca:
89:77:64:26:28:58:97:79:cc:d6:c2:64:01:2a:97:97:2f:cd:
d3:db:e1:23:b2:c8:5f:43:28:3b:01:e5:3f:8c:0a:b3:cc:89:
3e:9c:f0:d8:6a:4f:a9:0c:f2:9d:58:10:0e:dd:df:78:ed:4c:
91:c0:b0:50:9d:db:a5:30:b0:59:48:f7:6a:97:26:e1:94:6a:
2f:b2:fb:93:8c:c0:98:e0:e9:27:46:f6:20:16:c4:52:8f:dc:
96:98:79:38:97:51:74:55:9a:dd:47:6f:32:9e:c1:8e:bf:0a:
27:a8:5a:3d:aa:88:38:21:d8:dc:4a:6c:3d:69:3b:59:4f:f4:
35:9b:0d:06:90:6e:e9:bd:f7:f5:ba:1c:7f:92:50:5a:fd:79:
4f:ff:d4:ad:0c:58:6d:84:cd:fe:4a:ca:62:8c:c5:1c:20:04:
09:54:e0:7e:4f:96:78:96:2c:01:aa:1a:86:f1:0c:10:f6:cf:
b6:ef:a5:ff:a5:b4:23:15:d9:2c:24:3c:c7:40:83:79:9c:e4:
ff:33:f9:d8:db:a0:0e:ae:6d:02:b3:e8:8a:43:1d:4a:2b:87:
00:00:a0:f8:49:2d:d2:3e:5f:a7:75:0a:7d:99:4b:ad:d7:49:
f7:f3:8f:5c
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIDIyKHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVh
ZjBjMzY0ZGE0NGU4ZDU2NjMwY2E5NDkxZGI4YmJhNjhiYWZkZWIwHhcNMjQwMzMx
MDMxNDA5WhcNMjYwMzMxMDMxNDA5WjAzMTEwLwYDVQQDEygwZDZlZWIwNDgxMGQ5
MGI1YWI0NDJjNzg3NThhZThmYTAxMDAzZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxTVSSP4hbdxreGIqte8A5EoymffKKQ7ghupeyOibixAfsR5O
XKtioJ81cc/79IKAe3CRE5zbJCUyNZGNvkZw7p862FYDJWe7/dk/51Lk/hJSBC1Z
7YH1BORvKQ4rwMIKvKDqHZ6/OG+kXE99x4iJdlIbB6JKv3085O0PWq0uyw6E3BiQ
eVuYgy5ZJw8mgWF6SuytncHDaJkYIBljUzCKxtPh4taG4y7mn8W881tVkE+4w1XZ
ETHFqzXuM7MP4zrjgFciHQPJszL/7M7GT2didfIVRYQpXKkUlkVPyBLVwRd4OHSw
jVFGGDKC3+EYQDyfcLOX1+UGTcJLsUcpcw2DnQIDAQABo4ICdjCCAnIwHQYDVR0O
BBYEFLY0FqVav6VW/CV8iyZ/u5Z8ip68MB8GA1UdIwQYMBaAFDrN7OwMlvElwhos
a+Hg0ud4H4qmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWFmMGMz
NjRkYTQ0ZThkNTY2MzBjYTk0OTFkYjhiYmE2OGJhZmRlYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzcwMTRmNTgtYTQ1NC00NjdmLTk4ODctOTBkOGI0
N2U1ZWUwLzBkNmVlYjA0ODEwZDkwYjVhYjQ0MmM3ODc1OGFlOGZhMDEwMDNmMzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNzAxNGY1OC1hNDU0LTQ2N2YtOTg4Ny05MGQ4
YjQ3ZTVlZTAvNWFmMGMzNjRkYTQ0ZThkNTY2MzBjYTk0OTFkYjhiYmE2OGJhZmRl
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQr
MCkwGAQCAAEwEgMEBLMqsAMEA75ucAMEBL644DANBAIAAjAHAwUAKAAMUDANBgkq
hkiG9w0BAQsFAAOCAQEAQEN5KTXlDBjp+JoblzPBYZvKiXdkJihYl3nM1sJkASqX
ly/N09vhI7LIX0MoOwHlP4wKs8yJPpzw2GpPqQzynVgQDt3feO1MkcCwUJ3bpTCw
WUj3apcm4ZRqL7L7k4zAmODpJ0b2IBbEUo/clph5OJdRdFWa3UdvMp7Bjr8KJ6ha
PaqIOCHY3EpsPWk7WU/0NZsNBpBu6b339bocf5JQWv15T//UrQxYbYTN/krKYozF
HCAECVTgfk+WeJYsAaoahvEMEPbPtu+l/6W0IxXZLCQ8x0CDeZzk/zP52NugDq5t
ArPoikMdSiuHAACg+Ekt0j5fp3UKfZlLrddJ9/OPXA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org