Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/326a2ec1e295ef1f7bae1d3bd58622536c7c461a.roa
File: 326a2ec1e295ef1f7bae1d3bd58622536c7c461a.roa (raw, json)
Hash identifier: dLTf119LxFRhLKurrrP4EX0GoDhvbKCCMj72GvEqegk=
Subject key identifier: D0:98:20:36:FD:86:5D:19:28:99:51:F5:11:9B:85:BE:AA:57:66:D9
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2DE1DE
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/326a2ec1e295ef1f7bae1d3bd58622536c7c461a.roa
Signing time: Thu 07 Dec 2023 12:42:47 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 52444
IP address blocks: 181.15.97.0/24 maxlen: 24
181.15.98.0/23 maxlen: 24
181.15.100.0/24 maxlen: 24
186.153.126.0/23 maxlen: 24
181.10.140.0/23 maxlen: 24
181.10.142.0/24 maxlen: 24
190.136.11.0/24 maxlen: 24
186.125.161.0/24 maxlen: 24
181.15.195.0/24 maxlen: 24
186.125.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3006942 (0x2de1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=326a2ec1e295ef1f7bae1d3bd58622536c7c461a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b5:f4:af:ca:3d:44:68:64:7b:39:78:6e:b7:
f9:36:a8:56:c9:e6:7f:28:70:f3:cb:34:c4:98:00:
94:fb:86:71:dc:e0:64:c0:dd:69:c8:c8:4b:23:1f:
3e:27:1e:db:98:57:d1:15:ad:3e:44:a3:eb:cb:c4:
95:16:f0:15:ea:3c:2e:51:0f:29:d8:2b:02:77:61:
dd:a2:45:0f:f6:c0:67:f8:b4:30:da:30:19:19:f7:
bf:9d:13:e5:b1:dd:66:2d:dd:9c:e5:a4:1d:31:4d:
58:c8:cc:40:3f:7d:a4:18:a1:58:f1:d3:3c:d8:93:
99:ca:be:11:5f:c7:f0:c5:71:98:62:f2:76:60:a5:
11:95:54:a2:03:3a:45:21:d7:ef:69:a0:71:34:a7:
9b:53:bb:73:5a:97:47:a0:8d:34:d8:2c:3c:5d:9d:
4f:dc:a7:11:91:2f:ea:6f:4b:90:6f:c9:aa:e5:9a:
c6:c2:90:14:ee:03:16:5a:1d:c7:85:f1:02:54:fd:
ad:91:d9:26:c1:44:82:82:ce:b5:e8:ab:71:80:99:
38:61:12:0e:3e:b8:95:45:b8:1b:03:2b:7e:ff:27:
d1:05:d2:be:10:39:4e:bb:57:63:73:cf:4f:f7:73:
42:83:d5:e5:fc:88:ea:b9:bd:76:98:54:d6:8c:90:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:98:20:36:FD:86:5D:19:28:99:51:F5:11:9B:85:BE:AA:57:66:D9
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/326a2ec1e295ef1f7bae1d3bd58622536c7c461a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.10.140.0-181.10.142.255
181.15.97.0-181.15.100.255
181.15.195.0/24
186.125.62.0/23
186.125.161.0/24
186.153.126.0/23
190.136.11.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f7:f3:21:a1:98:b3:2f:2b:5d:4b:2d:3a:04:a8:25:a1:fb:
f3:74:b2:0c:24:06:78:89:f0:0e:88:2d:a9:b8:1e:4c:92:ce:
fc:2a:c5:fc:68:69:00:18:b0:3e:64:a5:c4:0c:db:a5:c0:89:
23:d3:8f:2c:6c:f5:92:29:50:84:b2:cf:d0:7b:62:e6:80:e7:
3a:2d:b1:6d:9f:91:9f:b0:58:8b:46:83:58:e6:f2:e3:9a:8f:
0f:86:a3:33:80:db:35:03:34:7c:aa:5b:9c:c2:aa:bf:7e:c6:
1d:f3:f0:bd:f5:cb:f1:9a:7c:f8:4d:db:d9:9d:b2:19:35:38:
ab:f3:ff:ac:c6:6f:77:46:bc:b0:2e:dd:07:2e:9e:9f:ea:2b:
8a:54:95:12:c4:55:1c:f9:73:17:c3:5b:da:31:5c:4c:17:d2:
73:ec:d2:68:d7:4a:5c:7d:63:92:cc:c7:7f:79:b3:65:cc:d1:
1e:26:9d:f0:ba:5d:d9:56:1a:81:27:e8:d4:2a:a9:33:4d:fb:
af:c8:96:26:0d:e4:cc:ce:2f:45:6c:3e:56:06:5d:dc:fe:07:
07:ab:7f:5c:cd:94:af:26:11:3b:c2:99:fd:63:33:1c:83:9c:
52:b3:5d:4f:7e:7d:60:b4:95:37:1f:7f:83:8c:04:c3:2f:2d:
4b:4b:e6:28
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgIDLeHeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
MjYzZjBlYTFiNTYzMjg5MjA1YWQwMjY0NTMwZjhlNmMzMGU1NjkwHhcNMjMxMjA3
MTI0MTU3WhcNMjgxMjA3MTI0MTU3WjAzMTEwLwYDVQQDEygzMjZhMmVjMWUyOTVl
ZjFmN2JhZTFkM2JkNTg2MjI1MzZjN2M0NjFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl7X0r8o9RGhkezl4brf5NqhWyeZ/KHDzyzTEmACU+4Zx3OBk
wN1pyMhLIx8+Jx7bmFfRFa0+RKPry8SVFvAV6jwuUQ8p2CsCd2HdokUP9sBn+LQw
2jAZGfe/nRPlsd1mLd2c5aQdMU1YyMxAP32kGKFY8dM82JOZyr4RX8fwxXGYYvJ2
YKURlVSiAzpFIdfvaaBxNKebU7tzWpdHoI002Cw8XZ1P3KcRkS/qb0uQb8mq5ZrG
wpAU7gMWWh3HhfECVP2tkdkmwUSCgs616KtxgJk4YRIOPriVRbgbAyt+/yfRBdK+
EDlOu1djc89P93NCg9Xl/Ijqub12mFTWjJBhqwIDAQABo4ICjzCCAoswHQYDVR0O
BBYEFNCYIDb9hl0ZKJlR9RGbhb6qV2bZMB8GA1UdIwQYMBaAFMD3ES/X9uODqZpb
XBnhTav8A9wtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjgyNjNm
MGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzMyNmEyZWMxZTI5NWVmMWY3YmFlMWQzYmQ1ODYyMjUzNmM3YzQ2MWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZjgyNjNmMGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBTBggrBgEFBQcBBwEB/wRE
MEIwQAQCAAEwOjAMAwQCtQqMAwQAtQqOMAwDBAC1D2EDBAC1D2QDBAC1D8MDBAG6
fT4DBAC6faEDBAG6mX4DBAC+iAswDQYJKoZIhvcNAQELBQADggEBAHn38yGhmLMv
K11LLToEqCWh+/N0sgwkBniJ8A6ILam4HkySzvwqxfxoaQAYsD5kpcQM26XAiSPT
jyxs9ZIpUISyz9B7YuaA5zotsW2fkZ+wWItGg1jm8uOajw+GozOA2zUDNHyqW5zC
qr9+xh3z8L31y/GafPhN29mdshk1OKvz/6zGb3dGvLAu3Qcunp/qK4pUlRLEVRz5
cxfDW9oxXEwX0nPs0mjXSlx9Y5LMx395s2XM0R4mnfC6XdlWGoEn6NQqqTNN+6/I
liYN5MzOL0VsPlYGXdz+Bwerf1zNlK8mETvCmf1jMxyDnFKzXU9+fWC0lTcff4OM
BMMvLUtL5ig=
-----END CERTIFICATE-----
Generated at Tue Apr 15 17:21:26 2025 by rpki-client