Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51d52832-f11a-4c90-83bf-7d61455f46fa/3969dd0963cc0fd646764f15c115388b62d09efa.roa
File: 3969dd0963cc0fd646764f15c115388b62d09efa.roa (raw, json)
Hash identifier: M+0JxLnfHNM65VuubdbD5S0ya3qxyr5qD6f/DRUJkQQ=
Subject key identifier: D9:2E:34:1B:83:BE:34:29:ED:8E:BD:85:46:C7:E7:7F:DF:6E:00:19
Certificate issuer: /CN=4cf8a18cf23d9f3cb165b43ba75a772fb0994019
Certificate serial: 03F8CC
Authority key identifier: 92:78:A5:8B:55:DD:86:4B:09:9F:B5:04:5E:F1:A1:AA:92:9C:3D:BA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cf8a18cf23d9f3cb165b43ba75a772fb0994019.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51d52832-f11a-4c90-83bf-7d61455f46fa/3969dd0963cc0fd646764f15c115388b62d09efa.roa
Signing time: Wed 24 Mar 2021 14:47:08 +0000
ROA not before: Wed 24 Mar 2021 14:47:08 +0000
ROA not after: Tue 24 Mar 2026 14:47:08 +0000
asID: 270040
IP address blocks: 186.195.248.0/22 maxlen: 24
2803:35e0::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260300 (0x3f8cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8a18cf23d9f3cb165b43ba75a772fb0994019
Validity
Not Before: Mar 24 14:47:08 2021 GMT
Not After : Mar 24 14:47:08 2026 GMT
Subject: CN=3969dd0963cc0fd646764f15c115388b62d09efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:93:3b:40:4a:ce:4f:46:83:a1:6d:13:d6:
2c:e8:7b:24:bc:55:83:7d:e3:c3:1d:d6:72:d9:0a:
34:1b:1c:74:02:61:2f:4e:aa:fe:86:06:a6:5f:60:
d1:d6:08:57:49:b0:13:98:d3:d6:94:6a:48:71:8d:
6b:80:cd:ed:6a:4f:82:73:cb:3f:c3:f2:a7:1f:6d:
df:f1:af:45:68:12:51:d2:0f:d8:82:b6:e8:71:d3:
59:38:75:c2:61:88:1b:08:a7:db:8c:95:cb:29:42:
f9:51:35:02:cd:b7:f8:1a:76:45:37:12:83:2b:2b:
00:08:df:fe:ee:76:48:82:4b:6c:08:46:6a:d3:d3:
df:6d:92:ae:fe:93:22:f6:92:bd:c1:bf:49:dd:14:
dd:33:c6:d9:a6:22:7a:ad:39:d2:a2:8e:31:89:db:
0b:57:25:d3:fd:39:60:59:13:f4:5c:cc:cf:e3:13:
77:7e:6c:32:25:bf:32:91:fb:6b:81:c1:20:29:d1:
8b:b1:b9:16:83:70:7c:d1:e7:f3:6b:26:0b:23:0f:
f9:5a:67:0b:62:55:bb:3a:f7:78:07:c3:63:f1:b4:
4d:2a:78:80:b4:6d:80:79:04:dd:2d:c5:8b:d0:b7:
7b:cf:a3:ed:c9:72:ad:65:51:69:c1:65:fb:09:a2:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2E:34:1B:83:BE:34:29:ED:8E:BD:85:46:C7:E7:7F:DF:6E:00:19
X509v3 Authority Key Identifier:
keyid:92:78:A5:8B:55:DD:86:4B:09:9F:B5:04:5E:F1:A1:AA:92:9C:3D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cf8a18cf23d9f3cb165b43ba75a772fb0994019.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51d52832-f11a-4c90-83bf-7d61455f46fa/3969dd0963cc0fd646764f15c115388b62d09efa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51d52832-f11a-4c90-83bf-7d61455f46fa/4cf8a18cf23d9f3cb165b43ba75a772fb0994019.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.195.248.0/22
IPv6:
2803:35e0::/32
Signature Algorithm: sha256WithRSAEncryption
5b:f5:cb:8e:82:78:eb:44:5b:ab:80:e1:53:d1:01:c5:33:d7:
21:8d:2e:0f:2b:59:40:ef:e5:a2:17:2c:22:9c:71:c1:a1:4d:
e7:92:5e:6c:82:b6:db:1e:f6:8a:12:2a:1d:de:ce:a9:4b:a3:
b6:95:80:3a:25:ad:73:9f:a2:60:53:a6:23:b6:b1:f2:91:2b:
04:f2:4f:72:9e:f7:3c:4f:c1:b4:24:fd:66:6e:25:2f:de:21:
97:11:92:c4:ff:7a:45:ae:db:be:4f:58:70:50:b4:d1:79:4c:
50:a2:ae:ec:55:55:45:56:49:aa:d5:43:6b:8c:7d:51:dc:67:
7c:a3:63:b2:80:aa:ce:55:3b:97:b1:5a:cb:9c:f4:1d:c7:a8:
f7:08:ab:38:a8:60:42:87:f4:a5:ca:9b:db:dd:67:0c:b8:0e:
81:21:e0:ec:f0:76:ff:f1:19:50:85:04:42:c5:bf:8d:5f:e4:
7b:73:37:92:27:8a:89:39:e4:5f:65:06:e5:be:a8:96:25:c9:
40:ba:a4:28:25:4c:5a:4d:84:c8:10:3e:c5:ce:d8:74:33:16:
06:98:40:eb:2b:48:ec:d7:cf:9d:48:4b:3b:0c:c6:7d:7b:6a:
23:9b:e1:00:8f:40:80:8e:03:63:40:43:60:1d:1f:ff:62:9e:
52:cc:f4:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDA/jMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRj
ZjhhMThjZjIzZDlmM2NiMTY1YjQzYmE3NWE3NzJmYjA5OTQwMTkwHhcNMjEwMzI0
MTQ0NzA4WhcNMjYwMzI0MTQ0NzA4WjAzMTEwLwYDVQQDEygzOTY5ZGQwOTYzY2Mw
ZmQ2NDY3NjRmMTVjMTE1Mzg4YjYyZDA5ZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAu+STO0BKzk9Gg6FtE9Ys6HskvFWDfePDHdZy2Qo0Gxx0AmEv
Tqr+hgamX2DR1ghXSbATmNPWlGpIcY1rgM3tak+Cc8s/w/KnH23f8a9FaBJR0g/Y
grbocdNZOHXCYYgbCKfbjJXLKUL5UTUCzbf4GnZFNxKDKysACN/+7nZIgktsCEZq
09PfbZKu/pMi9pK9wb9J3RTdM8bZpiJ6rTnSoo4xidsLVyXT/TlgWRP0XMzP4xN3
fmwyJb8ykftrgcEgKdGLsbkWg3B80efzayYLIw/5WmcLYlW7Ovd4B8Nj8bRNKniA
tG2AeQTdLcWL0Ld7z6PtyXKtZVFpwWX7CaJoNwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFNkuNBuDvjQp7Y69hUbH53/fbgAZMB8GA1UdIwQYMBaAFJJ4pYtV3YZLCZ+1
BF7xoaqSnD26MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGNmOGEx
OGNmMjNkOWYzY2IxNjViNDNiYTc1YTc3MmZiMDk5NDAxOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTFkNTI4MzItZjExYS00YzkwLTgzYmYtN2Q2MTQ1
NWY0NmZhLzM5NjlkZDA5NjNjYzBmZDY0Njc2NGYxNWMxMTUzODhiNjJkMDllZmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MWQ1MjgzMi1mMTFhLTRjOTAtODNiZi03ZDYx
NDU1ZjQ2ZmEvNGNmOGExOGNmMjNkOWYzY2IxNjViNDNiYTc1YTc3MmZiMDk5NDAx
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEArrD+DANBAIAAjAHAwUAKAM14DANBgkqhkiG9w0BAQsFAAOC
AQEAW/XLjoJ460Rbq4DhU9EBxTPXIY0uDytZQO/lohcsIpxxwaFN55JebIK22x72
ihIqHd7OqUujtpWAOiWtc5+iYFOmI7ax8pErBPJPcp73PE/BtCT9Zm4lL94hlxGS
xP96Ra7bvk9YcFC00XlMUKKu7FVVRVZJqtVDa4x9UdxnfKNjsoCqzlU7l7Fay5z0
Hceo9wirOKhgQof0pcqb291nDLgOgSHg7PB2//EZUIUEQsW/jV/ke3M3kieKiTnk
X2UG5b6oliXJQLqkKCVMWk2EyBA+xc7YdDMWBphA6ytI7NfPnUhLOwzGfXtqI5vh
AI9AgI4DY0BDYB0f/2KeUsz0jw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org