Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/d1d96c15a1081307300cbc5a9ec633378153544b.roa
File: d1d96c15a1081307300cbc5a9ec633378153544b.roa (raw, json)
Hash identifier: 7liqHUYohtcUglXjE+WXVJRbmI7EEV+Pn+iVyC5wlY0=
Subject key identifier: 1A:6E:27:88:C2:B0:BC:56:88:DC:67:9B:3A:D0:36:7E:C1:B6:F6:93
Certificate issuer: /CN=70c277a3f87d710be660d9c03e8a104a4ea1e4a5
Certificate serial: 0D8151
Authority key identifier: CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/d1d96c15a1081307300cbc5a9ec633378153544b.roa
Signing time: Sat 27 Mar 2021 06:34:17 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 14754
IP address blocks: 179.5.0.0/16 maxlen: 16
190.62.0.0/16 maxlen: 16
190.86.0.0/16 maxlen: 20
190.87.0.0/16 maxlen: 20
201.247.0.0/20 maxlen: 20
201.247.128.0/19 maxlen: 20
201.247.160.0/19 maxlen: 24
201.247.192.0/20 maxlen: 20
2800:b20::/30 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 885073 (0xd8151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c277a3f87d710be660d9c03e8a104a4ea1e4a5
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=d1d96c15a1081307300cbc5a9ec633378153544b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d5:78:9a:43:76:ad:8f:d2:48:be:6b:26:3f:
6b:a2:6f:0d:dc:7d:0e:71:9d:3d:a8:0b:66:42:ce:
66:7f:09:b7:6f:43:b7:15:43:67:cb:29:15:05:c1:
e9:8e:63:0a:25:8d:ae:54:80:a8:4a:79:fa:27:7c:
93:fc:4b:e9:c3:04:8b:c3:fc:41:73:86:cc:0b:ad:
dd:94:ae:ef:b9:16:4f:7b:14:de:1c:26:65:04:f3:
c6:76:7b:d6:88:0f:64:ae:7d:ff:f6:00:b9:03:41:
8c:b0:4a:56:77:a9:99:13:4c:7f:40:d6:ef:60:52:
f3:bb:93:5f:6e:e3:3f:72:27:f8:89:ef:79:09:1f:
81:5b:a1:76:5b:e5:4a:d2:af:15:86:79:db:04:60:
b7:2c:44:39:21:78:81:ae:21:3a:84:f0:92:09:77:
cc:6e:dc:0a:ba:bb:6b:73:cc:ee:02:e3:4d:b6:ce:
a8:3d:6b:1f:0b:2c:c5:24:e3:ad:9a:82:b5:9f:6c:
ba:1c:19:90:ab:88:e3:03:b4:92:61:d7:d6:67:12:
7a:89:56:42:98:40:de:22:a6:8b:33:13:57:e0:0c:
f1:eb:36:79:e4:1d:fb:cc:27:e5:68:76:7a:5b:17:
1f:a8:dc:44:89:e9:08:c0:e3:fb:8c:ff:4d:2e:c8:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6E:27:88:C2:B0:BC:56:88:DC:67:9B:3A:D0:36:7E:C1:B6:F6:93
X509v3 Authority Key Identifier:
keyid:CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/d1d96c15a1081307300cbc5a9ec633378153544b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.5.0.0/16
190.62.0.0/16
190.86.0.0/15
201.247.0.0/20
201.247.128.0-201.247.207.255
IPv6:
2800:b20::/30
Signature Algorithm: sha256WithRSAEncryption
ab:a7:e4:56:73:23:61:e8:b9:fb:10:cb:3c:79:58:46:d3:d1:
72:c3:10:48:bd:8e:e8:ab:8d:cc:44:92:38:3c:64:65:3e:b8:
1b:e4:1a:30:dd:66:e7:ec:87:08:f0:df:a5:bd:18:bf:6e:f3:
26:e1:20:3b:35:5c:f2:dc:ee:a5:68:91:dd:d6:14:20:73:10:
b2:cd:41:23:a5:a7:89:e5:37:f7:1c:eb:44:a7:bd:43:80:e2:
1e:fe:aa:ff:79:8a:2f:56:93:31:e7:16:b6:72:6d:e7:c5:01:
10:1f:d5:c3:f8:22:11:6f:9d:55:9d:b9:fc:f9:66:67:30:1a:
0b:cb:18:3c:d0:57:d3:42:e2:0d:2f:43:7d:03:9f:7f:be:14:
cc:9a:2f:a7:02:35:39:84:6c:66:ec:8c:73:3f:c9:d0:1e:73:
39:b3:fd:4d:51:4d:86:67:31:d2:1c:89:d3:2a:a9:ae:03:b7:
42:1e:12:1c:09:05:57:0c:9d:ce:a7:46:38:44:0e:b2:b4:d2:
4a:c8:55:e6:96:1f:09:38:07:06:93:97:12:91:3f:2f:f3:6c:
4a:87:cf:65:04:98:d7:ba:8c:21:a4:90:48:81:94:87:9c:07:
d7:39:6e:33:2c:79:68:07:d6:c9:5a:d9:db:6d:3b:ce:66:68:
a3:90:c6:00
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIDDYFRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcw
YzI3N2EzZjg3ZDcxMGJlNjYwZDljMDNlOGExMDRhNGVhMWU0YTUwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhkMWQ5NmMxNWExMDgx
MzA3MzAwY2JjNWE5ZWM2MzMzNzgxNTM1NDRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn9V4mkN2rY/SSL5rJj9rom8N3H0OcZ09qAtmQs5mfwm3b0O3
FUNnyykVBcHpjmMKJY2uVICoSnn6J3yT/EvpwwSLw/xBc4bMC63dlK7vuRZPexTe
HCZlBPPGdnvWiA9krn3/9gC5A0GMsEpWd6mZE0x/QNbvYFLzu5NfbuM/cif4ie95
CR+BW6F2W+VK0q8VhnnbBGC3LEQ5IXiBriE6hPCSCXfMbtwKurtrc8zuAuNNts6o
PWsfCyzFJOOtmoK1n2y6HBmQq4jjA7SSYdfWZxJ6iVZCmEDeIqaLMxNX4Azx6zZ5
5B37zCflaHZ6WxcfqNxEiekIwOP7jP9NLshsqQIDAQABo4IChzCCAoMwHQYDVR0O
BBYEFBpuJ4jCsLxWiNxnmzrQNn7BtvaTMB8GA1UdIwQYMBaAFMxd2uPoOoScbd+H
X2Ky+C9u7n1rMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzBjMjc3
YTNmODdkNzEwYmU2NjBkOWMwM2U4YTEwNGE0ZWExZTRhNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDNlZDg1MjItY2M0OC00YmEwLWFkZmYtMzZhNzk5
YWYzYTQ5L2QxZDk2YzE1YTEwODEzMDczMDBjYmM1YTllYzYzMzM3ODE1MzU0NGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80M2VkODUyMi1jYzQ4LTRiYTAtYWRmZi0zNmE3
OTlhZjNhNDkvNzBjMjc3YTNmODdkNzEwYmU2NjBkOWMwM2U4YTEwNGE0ZWExZTRh
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBLBggrBgEFBQcBBwEB/wQ8
MDowKQQCAAEwIwMDALMFAwMAvj4DAwG+VgMEBMn3ADAMAwQHyfeAAwQEyffAMA0E
AgACMAcDBQIoAAsgMA0GCSqGSIb3DQEBCwUAA4IBAQCrp+RWcyNh6Ln7EMs8eVhG
09FywxBIvY7oq43MRJI4PGRlPrgb5Bow3Wbn7IcI8N+lvRi/bvMm4SA7NVzy3O6l
aJHd1hQgcxCyzUEjpaeJ5Tf3HOtEp71DgOIe/qr/eYovVpMx5xa2cm3nxQEQH9XD
+CIRb51Vnbn8+WZnMBoLyxg80FfTQuINL0N9A59/vhTMmi+nAjU5hGxm7IxzP8nQ
HnM5s/1NUU2GZzHSHInTKqmuA7dCHhIcCQVXDJ3Op0Y4RA6ytNJKyFXmlh8JOAcG
k5cSkT8v82xKh89lBJjXuowhpJBIgZSHnAfXOW4zLHloB9bJWtnbbTvOZmijkMYA
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org