Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/215878ca6f08174080186fe11b26a1f8336e36a9.roa
File: 215878ca6f08174080186fe11b26a1f8336e36a9.roa (raw, json)
Hash identifier: g7dMbQJfnCl5X5Dpmco4qiPr+Sz4+iJR1iXGFPyEXtQ=
Subject key identifier: 40:8A:B1:9E:3F:BB:93:54:DF:BD:26:24:70:75:A7:57:FD:FA:48:C1
Certificate issuer: /CN=70c277a3f87d710be660d9c03e8a104a4ea1e4a5
Certificate serial: 2443F7
Authority key identifier: CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/215878ca6f08174080186fe11b26a1f8336e36a9.roa
Signing time: Fri 22 Sep 2023 23:04:47 +0000
ROA not before: Thu 21 Sep 2023 23:04:47 +0000
ROA not after: Mon 22 Sep 2025 23:04:47 +0000
asID: 14754
IP address blocks: 201.247.0.0/17 maxlen: 24
201.247.0.0/20 maxlen: 20
201.247.0.0/16 maxlen: 24
179.5.0.0/16 maxlen: 24
190.62.0.0/16 maxlen: 24
190.86.0.0/15 maxlen: 24
201.247.192.0/20 maxlen: 20
201.247.192.0/18 maxlen: 24
2800:b20::/30 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2376695 (0x2443f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c277a3f87d710be660d9c03e8a104a4ea1e4a5
Validity
Not Before: Sep 21 23:04:47 2023 GMT
Not After : Sep 22 23:04:47 2025 GMT
Subject: CN=215878ca6f08174080186fe11b26a1f8336e36a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:e8:fe:47:34:c3:d2:0d:ad:5e:ff:34:d3:
fb:3b:31:d1:56:99:38:4c:ce:f6:13:16:43:47:80:
8b:a8:77:eb:df:b9:ee:20:ca:db:2a:1a:e8:a1:2e:
d3:1c:c3:d7:78:4a:aa:cd:2d:85:2a:f1:5e:e8:b5:
e9:af:bf:8e:0e:d9:64:f7:a1:da:6d:32:cd:6e:87:
e9:bd:07:c0:70:1d:f7:d4:10:b5:41:51:a6:19:0b:
7f:eb:17:3f:69:45:6d:10:28:b3:63:85:a4:86:23:
f5:a6:34:b5:b7:7e:06:ca:26:c3:8b:a6:e5:5d:ca:
77:ce:49:b9:4a:2e:c0:46:9d:4a:19:e9:5d:12:ab:
f2:72:aa:de:d0:de:db:93:da:6d:a7:8a:b5:8c:ce:
60:a1:44:93:f9:75:a1:4e:71:0b:4c:30:44:77:10:
06:f6:55:c6:a1:da:81:20:9c:5b:43:26:49:07:22:
fe:05:93:bf:18:d0:e6:97:28:ed:88:33:2f:ef:14:
d1:b4:32:cf:e7:4a:ff:0e:14:4f:59:e9:5a:26:33:
1b:e3:9a:ab:ab:d5:c0:ae:fc:e5:72:f1:86:a2:6d:
fd:92:b3:f3:f7:ea:50:28:d7:60:27:ba:09:9d:78:
27:a6:28:69:63:f2:ef:dd:bb:de:9c:2a:9b:f8:70:
c6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8A:B1:9E:3F:BB:93:54:DF:BD:26:24:70:75:A7:57:FD:FA:48:C1
X509v3 Authority Key Identifier:
keyid:CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/215878ca6f08174080186fe11b26a1f8336e36a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.5.0.0/16
190.62.0.0/16
190.86.0.0/15
201.247.0.0/16
IPv6:
2800:b20::/30
Signature Algorithm: sha256WithRSAEncryption
c4:3a:91:a4:f0:82:3d:53:d8:00:c6:e9:09:0b:3e:07:91:75:
17:6b:7f:52:fd:a5:40:64:be:4c:c1:1d:32:dc:58:6b:70:c7:
c6:53:a2:45:64:86:ba:d5:d1:3c:7f:a9:a6:11:de:92:29:9a:
75:09:f6:c0:2a:2e:1c:2e:e4:53:9e:ef:58:4a:cd:2f:82:11:
28:ab:5d:16:56:0c:cb:3e:84:27:5a:23:28:f4:7d:d2:78:28:
55:f8:51:9c:18:67:33:c7:82:64:ea:f4:0f:6b:11:a8:8a:d3:
6a:11:72:b3:ad:29:6c:3d:48:cd:99:7b:44:d7:8f:c9:75:eb:
af:26:11:d9:d2:62:5a:eb:5b:12:53:2e:40:46:01:cd:4a:f4:
03:ce:fe:51:55:31:78:0d:eb:af:5a:c1:f3:5f:f9:d7:4f:61:
47:21:ce:93:01:29:b5:9b:02:ce:34:21:b7:44:36:e6:b4:f6:
f8:1b:be:67:5d:8b:ad:6f:7a:0a:db:52:d1:bc:51:9a:50:74:
dc:e3:4d:40:ee:0b:73:12:9f:ee:ad:52:0f:63:22:7e:b9:26:
91:11:72:71:37:c1:18:a0:82:49:a0:eb:34:52:91:eb:9a:f8:
25:44:69:e0:6e:c8:39:49:38:8f:64:5d:16:fa:3d:ae:79:71:
31:7f:7a:f1
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIDJEP3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcw
YzI3N2EzZjg3ZDcxMGJlNjYwZDljMDNlOGExMDRhNGVhMWU0YTUwHhcNMjMwOTIx
MjMwNDQ3WhcNMjUwOTIyMjMwNDQ3WjAzMTEwLwYDVQQDEygyMTU4NzhjYTZmMDgx
NzQwODAxODZmZTExYjI2YTFmODMzNmUzNmE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvXfo/kc0w9INrV7/NNP7OzHRVpk4TM72ExZDR4CLqHfr37nu
IMrbKhrooS7THMPXeEqqzS2FKvFe6LXpr7+ODtlk96HabTLNbofpvQfAcB331BC1
QVGmGQt/6xc/aUVtECizY4WkhiP1pjS1t34GyibDi6blXcp3zkm5Si7ARp1KGeld
Eqvycqre0N7bk9ptp4q1jM5goUST+XWhTnELTDBEdxAG9lXGodqBIJxbQyZJByL+
BZO/GNDmlyjtiDMv7xTRtDLP50r/DhRPWelaJjMb45qrq9XArvzlcvGGom39krPz
9+pQKNdgJ7oJnXgnpihpY/Lv3bvenCqb+HDGzwIDAQABo4ICeDCCAnQwHQYDVR0O
BBYEFECKsZ4/u5NU370mJHB1p1f9+kjBMB8GA1UdIwQYMBaAFMxd2uPoOoScbd+H
X2Ky+C9u7n1rMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzBjMjc3
YTNmODdkNzEwYmU2NjBkOWMwM2U4YTEwNGE0ZWExZTRhNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDNlZDg1MjItY2M0OC00YmEwLWFkZmYtMzZhNzk5
YWYzYTQ5LzIxNTg3OGNhNmYwODE3NDA4MDE4NmZlMTFiMjZhMWY4MzM2ZTM2YTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80M2VkODUyMi1jYzQ4LTRiYTAtYWRmZi0zNmE3
OTlhZjNhNDkvNzBjMjc3YTNmODdkNzEwYmU2NjBkOWMwM2U4YTEwNGE0ZWExZTRh
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8BggrBgEFBQcBBwEB/wQt
MCswGgQCAAEwFAMDALMFAwMAvj4DAwG+VgMDAMn3MA0EAgACMAcDBQIoAAsgMA0G
CSqGSIb3DQEBCwUAA4IBAQDEOpGk8II9U9gAxukJCz4HkXUXa39S/aVAZL5MwR0y
3FhrcMfGU6JFZIa61dE8f6mmEd6SKZp1CfbAKi4cLuRTnu9YSs0vghEoq10WVgzL
PoQnWiMo9H3SeChV+FGcGGczx4Jk6vQPaxGoitNqEXKzrSlsPUjNmXtE14/Jdeuv
JhHZ0mJa61sSUy5ARgHNSvQDzv5RVTF4DeuvWsHzX/nXT2FHIc6TASm1mwLONCG3
RDbmtPb4G75nXYutb3oK21LRvFGaUHTc401A7gtzEp/urVIPYyJ+uSaREXJxN8EY
oIJJoOs0UpHrmvglRGngbsg5STiPZF0W+j2ueXExf3rx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org