Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/daa1bfea002b14a68f52f45532942e0bde339d02.roa
File: daa1bfea002b14a68f52f45532942e0bde339d02.roa (raw, json)
Hash identifier: cdmNYk71VWSAc0CtkZIJQlrCRbs6Frh7UlH+av+sBGo=
Subject key identifier: AB:45:8F:8D:02:E9:F8:B4:2F:AF:D2:73:1A:15:5C:76:A7:5E:49:39
Certificate issuer: /CN=d5923739f0d7ae9a00e78bf2f88f635b59afa3c9
Certificate serial: 14A89F
Authority key identifier: C9:39:F0:6A:8E:DC:66:8C:6B:DA:75:FF:F2:30:BC:DE:8A:94:53:72
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5923739f0d7ae9a00e78bf2f88f635b59afa3c9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/daa1bfea002b14a68f52f45532942e0bde339d02.roa
Signing time: Thu 13 Jan 2022 20:13:10 +0000
ROA not before: Wed 10 Nov 2021 03:00:00 +0000
ROA not after: Fri 10 Nov 2023 03:00:00 +0000
asID: 27651
IP address blocks: 152.231.64.0/18 maxlen: 24
186.67.0.0/16 maxlen: 24
190.151.0.0/17 maxlen: 24
200.11.64.0/19 maxlen: 24
200.11.96.0/21 maxlen: 24
200.111.0.0/16 maxlen: 24
200.7.16.0/20 maxlen: 21
200.72.0.0/16 maxlen: 24
2800:300::/32 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1353887 (0x14a89f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5923739f0d7ae9a00e78bf2f88f635b59afa3c9
Validity
Not Before: Nov 10 03:00:00 2021 GMT
Not After : Nov 10 03:00:00 2023 GMT
Subject: CN=daa1bfea002b14a68f52f45532942e0bde339d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d8:a2:30:1b:91:95:38:ec:57:d0:87:b6:46:
17:6f:5d:56:fe:23:06:e7:ac:13:a2:e8:15:68:16:
03:57:21:7e:5f:a7:07:26:5d:34:fe:83:42:0c:43:
52:f1:de:5b:94:13:57:72:6f:a0:dc:b2:b3:1b:85:
83:91:0e:91:86:c6:e5:83:53:42:63:c9:38:9c:b5:
43:f2:59:6d:6b:05:5e:a9:ca:4a:58:f0:83:41:a4:
2f:f6:1c:15:a5:3b:72:6f:0b:6c:00:2f:2c:47:22:
fd:b9:52:b4:35:fc:57:a3:02:8d:95:95:98:79:dd:
80:5c:cc:4d:7d:c5:e4:ac:6e:07:e2:5a:c4:89:03:
17:bc:67:ff:19:a6:57:4d:27:d6:dd:a0:5a:cc:80:
6d:17:ca:c2:89:1a:a3:26:bc:52:2f:ee:d1:43:d7:
db:19:da:e5:22:1b:a9:c1:85:f6:9a:6b:67:a2:ee:
20:59:ea:4f:05:59:fa:48:d5:b7:2a:86:64:4c:dd:
00:55:98:e4:f7:b7:c1:1f:61:bd:51:49:e5:c7:a0:
09:2b:b0:d0:74:59:ac:2b:9c:66:00:52:7d:17:eb:
2d:f2:59:42:d3:88:34:61:11:33:a0:14:d9:ac:16:
6f:f6:84:76:25:f7:49:b4:85:53:6e:1b:7d:d1:14:
f4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:45:8F:8D:02:E9:F8:B4:2F:AF:D2:73:1A:15:5C:76:A7:5E:49:39
X509v3 Authority Key Identifier:
keyid:C9:39:F0:6A:8E:DC:66:8C:6B:DA:75:FF:F2:30:BC:DE:8A:94:53:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5923739f0d7ae9a00e78bf2f88f635b59afa3c9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/daa1bfea002b14a68f52f45532942e0bde339d02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/d5923739f0d7ae9a00e78bf2f88f635b59afa3c9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.231.64.0/18
186.67.0.0/16
190.151.0.0/17
200.7.16.0/20
200.11.64.0-200.11.103.255
200.72.0.0/16
200.111.0.0/16
IPv6:
2800:300::/32
Signature Algorithm: sha256WithRSAEncryption
0e:72:87:6f:2c:76:e2:32:af:7f:21:65:23:ef:f3:79:b9:55:
13:80:6b:9a:0e:c5:7b:49:f2:a8:3d:51:ce:8a:06:ab:f6:32:
f0:dd:da:83:3a:5c:3d:ce:13:93:3d:f6:e3:14:67:a6:c3:30:
8a:7c:fd:e4:5b:23:6e:2a:b4:e3:9f:74:fa:3a:07:d8:10:96:
dd:b0:7f:ca:23:11:2a:2f:43:8a:ac:a1:ae:db:63:4a:7c:2e:
66:26:75:75:e6:3c:a9:b2:4a:cb:ce:de:c9:5d:b1:e2:ac:f1:
76:37:cc:8d:1b:40:35:e6:33:23:34:76:d4:a6:54:21:cb:20:
50:e5:61:59:39:86:c6:86:8f:d9:f2:4d:2f:5f:5b:d2:11:f8:
c7:3b:8d:3c:af:74:d4:32:d8:29:fb:2f:cc:95:67:1a:a2:b2:
85:ef:39:f4:9b:ee:ef:ff:d3:bc:c4:51:af:65:06:58:33:fa:
51:df:e7:83:34:5d:47:39:45:96:6f:35:1a:7a:71:a5:c8:d7:
69:0a:de:80:7b:05:6e:95:4c:06:88:c5:17:e8:cf:ff:af:ae:
08:28:65:bc:50:e8:4d:1d:16:cf:b7:fd:5b:95:9c:7f:12:3d:
49:d1:c2:5a:71:00:98:77:9e:5e:a7:14:d0:1b:e7:98:d3:5d:
07:d7:b2:6b
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIDFKifMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
OTIzNzM5ZjBkN2FlOWEwMGU3OGJmMmY4OGY2MzViNTlhZmEzYzkwHhcNMjExMTEw
MDMwMDAwWhcNMjMxMTEwMDMwMDAwWjAzMTEwLwYDVQQDEyhkYWExYmZlYTAwMmIx
NGE2OGY1MmY0NTUzMjk0MmUwYmRlMzM5ZDAyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkNiiMBuRlTjsV9CHtkYXb11W/iMG56wTougVaBYDVyF+X6cH
Jl00/oNCDENS8d5blBNXcm+g3LKzG4WDkQ6Rhsblg1NCY8k4nLVD8lltawVeqcpK
WPCDQaQv9hwVpTtybwtsAC8sRyL9uVK0NfxXowKNlZWYed2AXMxNfcXkrG4H4lrE
iQMXvGf/GaZXTSfW3aBazIBtF8rCiRqjJrxSL+7RQ9fbGdrlIhupwYX2mmtnou4g
WepPBVn6SNW3KoZkTN0AVZjk97fBH2G9UUnlx6AJK7DQdFmsK5xmAFJ9F+st8llC
04g0YREzoBTZrBZv9oR2JfdJtIVTbht90RT0qQIDAQABo4ICkzCCAo8wHQYDVR0O
BBYEFKtFj40C6fi0L6/ScxoVXHanXkk5MB8GA1UdIwQYMBaAFMk58GqO3GaMa9p1
//IwvN6KlFNyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDU5MjM3
MzlmMGQ3YWU5YTAwZTc4YmYyZjg4ZjYzNWI1OWFmYTNjOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDRhZmQxNzAtMDc1ZS00M2RmLWI0YTEtYzM0Zjc2
YzE4Y2NlL2RhYTFiZmVhMDAyYjE0YTY4ZjUyZjQ1NTMyOTQyZTBiZGUzMzlkMDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NGFmZDE3MC0wNzVlLTQzZGYtYjRhMS1jMzRm
NzZjMThjY2UvZDU5MjM3MzlmMGQ3YWU5YTAwZTc4YmYyZjg4ZjYzNWI1OWFmYTNj
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBXBggrBgEFBQcBBwEB/wRI
MEYwNQQCAAEwLwMEBpjnQAMDALpDAwQHvpcAAwQEyAcQMAwDBAbIC0ADBAPIC2AD
AwDISAMDAMhvMA0EAgACMAcDBQAoAAMAMA0GCSqGSIb3DQEBCwUAA4IBAQAOcodv
LHbiMq9/IWUj7/N5uVUTgGuaDsV7SfKoPVHOigar9jLw3dqDOlw9zhOTPfbjFGem
wzCKfP3kWyNuKrTjn3T6OgfYEJbdsH/KIxEqL0OKrKGu22NKfC5mJnV15jypskrL
zt7JXbHirPF2N8yNG0A15jMjNHbUplQhyyBQ5WFZOYbGho/Z8k0vX1vSEfjHO408
r3TUMtgp+y/MlWcaorKF7zn0m+7v/9O8xFGvZQZYM/pR3+eDNF1HOUWWbzUaenGl
yNdpCt6AewVulUwGiMUX6M//r64IKGW8UOhNHRbPt/1blZx/Ej1J0cJacQCYd55e
pxTQG+eY010H17Jr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org