Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3243ab86fb18d31bcf5d97b5a7dbd1f848e527eb.roa
File: 3243ab86fb18d31bcf5d97b5a7dbd1f848e527eb.roa (raw, json)
Hash identifier: mawS/1pNPw/hMQT6OcmDBNPzCpgr0yagcCesiaWNDm4=
Subject key identifier: CC:C0:00:8E:E8:2F:D1:A9:7A:1C:BF:63:02:8E:6E:45:51:CF:F6:91
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 29D1C9
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3243ab86fb18d31bcf5d97b5a7dbd1f848e527eb.roa
Signing time: Mon 10 Jul 2023 17:55:48 +0000
ROA not before: Sun 09 Jul 2023 17:55:48 +0000
ROA not after: Thu 10 Jul 2025 17:55:48 +0000
asID: 7303
IP address blocks: 181.0.0.0/12 maxlen: 24
181.80.0.0/12 maxlen: 24
181.96.0.0/12 maxlen: 24
190.224.0.0/13 maxlen: 24
181.28.0.0/14 maxlen: 24
181.164.0.0/14 maxlen: 24
181.168.0.0/14 maxlen: 24
181.228.0.0/14 maxlen: 24
186.136.0.0/14 maxlen: 24
190.16.0.0/14 maxlen: 24
190.188.0.0/14 maxlen: 24
190.192.0.0/14 maxlen: 24
190.244.0.0/14 maxlen: 24
152.168.0.0/14 maxlen: 24
186.108.0.0/14 maxlen: 24
186.124.0.0/14 maxlen: 24
190.136.0.0/14 maxlen: 24
201.212.0.0/15 maxlen: 24
186.152.0.0/15 maxlen: 24
190.30.0.0/15 maxlen: 24
201.252.0.0/15 maxlen: 24
24.232.0.0/16 maxlen: 24
200.127.0.0/16 maxlen: 24
201.231.0.0/16 maxlen: 24
201.235.0.0/16 maxlen: 24
200.43.0.0/16 maxlen: 24
200.45.0.0/16 maxlen: 24
200.117.0.0/16 maxlen: 24
200.42.0.0/17 maxlen: 24
200.114.128.0/17 maxlen: 24
200.122.0.0/17 maxlen: 24
200.126.128.0/17 maxlen: 24
200.82.0.0/17 maxlen: 24
191.97.128.0/17 maxlen: 24
200.55.64.0/18 maxlen: 24
200.89.128.0/18 maxlen: 24
66.60.0.0/18 maxlen: 24
200.73.128.0/18 maxlen: 24
200.105.0.0/18 maxlen: 24
200.32.0.0/19 maxlen: 24
200.42.128.0/19 maxlen: 24
200.49.128.0/19 maxlen: 24
200.3.32.0/19 maxlen: 24
200.3.64.0/19 maxlen: 24
200.61.192.0/19 maxlen: 24
196.32.64.0/19 maxlen: 24
200.63.0.0/19 maxlen: 24
200.105.64.0/19 maxlen: 24
200.71.224.0/20 maxlen: 24
200.49.96.0/20 maxlen: 24
200.80.64.0/20 maxlen: 24
200.110.224.0/21 maxlen: 24
170.150.196.0/22 maxlen: 24
170.231.136.0/22 maxlen: 24
2001:13d0::/29 maxlen: 48
2800:2000::/20 maxlen: 48
2800:b000::/32 maxlen: 48
2803:da80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2740681 (0x29d1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Jul 9 17:55:48 2023 GMT
Not After : Jul 10 17:55:48 2025 GMT
Subject: CN=3243ab86fb18d31bcf5d97b5a7dbd1f848e527eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:51:3a:5c:be:58:cd:a3:c4:05:6b:f4:96:52:
2b:01:cc:1d:1f:22:c8:e8:b4:9d:77:00:90:ac:10:
a0:da:29:a6:1c:29:67:d9:94:24:a1:15:e8:5a:42:
70:31:36:1e:d2:fe:6e:34:2e:92:ab:61:ea:07:aa:
5e:64:08:42:b5:56:32:91:66:ce:ef:f1:0f:cd:1b:
53:39:f1:4b:1a:0e:7b:d2:53:7c:fd:8c:06:cc:04:
73:07:29:af:70:76:0a:2c:3b:bf:f7:06:92:73:55:
00:90:8f:28:c6:0f:de:44:b9:77:4b:86:6e:8d:47:
4a:01:21:24:7a:73:a3:47:63:82:76:a3:fa:19:9b:
84:6e:3e:ae:d1:b4:f7:60:50:9c:33:da:c4:f8:69:
0c:87:46:6a:ba:f5:e2:12:33:fb:56:d7:81:08:9e:
d8:99:42:f2:ac:99:d0:48:79:47:46:db:eb:20:99:
ec:c3:01:87:85:2e:59:f5:60:8c:0e:fd:9e:38:3f:
74:b9:f6:d7:69:df:95:50:7b:e1:d3:06:4a:51:58:
34:47:d3:d0:d9:b9:de:2d:06:7b:6a:28:05:bc:b5:
17:03:61:a7:73:6a:ed:6d:9b:99:2b:82:6d:0f:8a:
5b:0a:84:f5:a8:66:e5:d5:38:7e:87:9d:4b:02:4d:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C0:00:8E:E8:2F:D1:A9:7A:1C:BF:63:02:8E:6E:45:51:CF:F6:91
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3243ab86fb18d31bcf5d97b5a7dbd1f848e527eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.232.0.0/16
66.60.0.0/18
152.168.0.0/14
170.150.196.0/22
170.231.136.0/22
181.0.0.0/12
181.28.0.0/14
181.80.0.0-181.111.255.255
181.164.0.0-181.171.255.255
181.228.0.0/14
186.108.0.0/14
186.124.0.0/14
186.136.0.0/14
186.152.0.0/15
190.16.0.0/14
190.30.0.0/15
190.136.0.0/14
190.188.0.0-190.195.255.255
190.224.0.0/13
190.244.0.0/14
191.97.128.0/17
196.32.64.0/19
200.3.32.0-200.3.95.255
200.32.0.0/19
200.42.0.0-200.42.159.255
200.43.0.0/16
200.45.0.0/16
200.49.96.0/20
200.49.128.0/19
200.55.64.0/18
200.61.192.0/19
200.63.0.0/19
200.71.224.0/20
200.73.128.0/18
200.80.64.0/20
200.82.0.0/17
200.89.128.0/18
200.105.0.0-200.105.95.255
200.110.224.0/21
200.114.128.0/17
200.117.0.0/16
200.122.0.0/17
200.126.128.0-200.127.255.255
201.212.0.0/15
201.231.0.0/16
201.235.0.0/16
201.252.0.0/15
IPv6:
2001:13d0::/29
2800:2000::/20
2800:b000::/32
2803:da80::/32
Signature Algorithm: sha256WithRSAEncryption
1b:27:fd:f8:7b:2d:03:52:57:f5:bd:90:f2:a7:62:07:eb:0b:
0c:92:eb:02:75:49:5d:ec:17:46:e0:04:1f:2a:df:a3:77:af:
68:26:52:7a:9d:75:46:e7:7e:db:66:06:75:a6:0a:42:2c:ab:
28:9c:6e:ef:c8:53:d6:3d:85:82:5f:c4:87:78:53:6b:48:fd:
36:bb:7c:86:61:5f:12:78:50:ce:84:5b:9e:51:7a:5e:da:85:
fe:9c:7f:90:08:26:ec:38:95:07:4a:ac:d7:97:8e:66:de:ca:
3f:b7:2f:3a:dd:cd:1b:68:bf:50:10:fe:9e:8a:db:09:7b:29:
06:97:f4:72:52:55:88:6e:b7:5e:d0:99:73:59:4b:58:52:72:
93:b6:f6:e0:39:e6:38:7e:1c:ea:d0:4a:93:02:09:62:2c:bb:
55:fa:c9:6c:0a:40:7c:79:36:1b:f6:65:a9:4a:c3:c6:94:cc:
b0:26:8e:34:fb:aa:3c:ae:b1:8d:29:5e:f4:85:f3:93:87:43:
0c:54:e3:15:d1:f3:db:f5:27:cc:93:79:d1:41:08:66:28:ef:
0e:ec:42:dd:b1:3a:42:6c:45:6c:00:a9:f7:08:ba:32:cf:95:
d3:ea:eb:d6:db:df:c1:91:50:3b:a5:f3:ac:45:aa:26:f2:b3:
74:32:9a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:10:27 2023 by rpki-client on console-fra.rpki-client.org