Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a327a8fed3c8e8336fed6cce405a3d93311d45d2.roa
File: a327a8fed3c8e8336fed6cce405a3d93311d45d2.roa (raw, json)
Hash identifier: QFzxWmGMR/fWYIpB0pvbO4PxweC22xM0qnTXCdEvmkk=
Subject key identifier: 63:92:47:C9:2A:A6:D3:BA:F0:11:2E:B1:CE:C6:74:A8:B2:BA:C2:1C
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 1361F1
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a327a8fed3c8e8336fed6cce405a3d93311d45d2.roa
Signing time: Thu 29 Apr 2021 19:08:19 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 7303
IP address blocks: 152.168.0.0/14 maxlen: 24
170.150.196.0/22 maxlen: 24
170.231.136.0/22 maxlen: 24
181.0.0.0/12 maxlen: 24
181.164.0.0/14 maxlen: 24
181.168.0.0/14 maxlen: 24
181.228.0.0/14 maxlen: 24
181.230.0.0/15 maxlen: 24
181.28.0.0/14 maxlen: 24
181.80.0.0/12 maxlen: 24
181.96.0.0/12 maxlen: 24
186.108.0.0/14 maxlen: 24
186.124.0.0/14 maxlen: 24
186.126.0.0/15 maxlen: 24
186.136.0.0/14 maxlen: 24
186.136.0.0/15 maxlen: 24
186.138.0.0/15 maxlen: 24
186.152.0.0/15 maxlen: 24
190.136.0.0/14 maxlen: 24
190.137.0.0/16 maxlen: 24
190.138.0.0/15 maxlen: 24
190.16.0.0/14 maxlen: 24
190.16.0.0/16 maxlen: 24
190.17.0.0/16 maxlen: 24
190.18.0.0/15 maxlen: 24
190.188.0.0/14 maxlen: 24
190.188.0.0/15 maxlen: 24
190.190.0.0/15 maxlen: 24
190.192.0.0/14 maxlen: 24
190.192.0.0/15 maxlen: 24
190.194.0.0/15 maxlen: 24
190.224.0.0/13 maxlen: 24
190.226.0.0/15 maxlen: 24
190.228.0.0/14 maxlen: 24
190.244.0.0/14 maxlen: 24
190.244.0.0/15 maxlen: 24
190.246.0.0/15 maxlen: 24
190.30.0.0/15 maxlen: 24
190.31.0.0/16 maxlen: 24
191.97.128.0/17 maxlen: 24
196.32.64.0/19 maxlen: 24
200.105.0.0/18 maxlen: 24
200.105.64.0/19 maxlen: 24
200.110.224.0/21 maxlen: 24
200.114.128.0/17 maxlen: 24
200.114.128.0/19 maxlen: 24
200.114.160.0/19 maxlen: 24
200.114.192.0/19 maxlen: 24
200.114.224.0/19 maxlen: 24
200.117.0.0/16 maxlen: 24
200.117.128.0/17 maxlen: 24
200.117.64.0/18 maxlen: 24
200.122.0.0/17 maxlen: 24
200.122.32.0/19 maxlen: 24
200.122.64.0/19 maxlen: 24
200.122.96.0/19 maxlen: 24
200.126.128.0/17 maxlen: 24
200.126.160.0/19 maxlen: 24
200.126.192.0/18 maxlen: 24
200.126.192.0/19 maxlen: 24
200.126.224.0/19 maxlen: 24
200.127.0.0/16 maxlen: 24
200.127.128.0/17 maxlen: 24
200.3.32.0/19 maxlen: 24
200.3.64.0/19 maxlen: 24
200.32.0.0/19 maxlen: 24
200.42.0.0/17 maxlen: 24
200.42.128.0/19 maxlen: 24
200.43.0.0/16 maxlen: 24
200.45.0.0/16 maxlen: 24
200.49.128.0/19 maxlen: 24
200.49.96.0/20 maxlen: 24
200.55.64.0/18 maxlen: 24
200.55.64.0/19 maxlen: 24
200.55.96.0/19 maxlen: 24
200.61.192.0/19 maxlen: 24
200.63.0.0/19 maxlen: 24
200.71.224.0/20 maxlen: 24
200.73.128.0/18 maxlen: 24
200.80.64.0/20 maxlen: 24
200.82.0.0/17 maxlen: 24
200.82.64.0/18 maxlen: 24
200.89.128.0/18 maxlen: 24
200.89.128.0/19 maxlen: 24
200.89.160.0/19 maxlen: 24
66.60.0.0/18 maxlen: 24
201.212.0.0/15 maxlen: 24
201.212.128.0/17 maxlen: 24
201.213.0.0/16 maxlen: 24
201.231.0.0/16 maxlen: 24
201.231.0.0/17 maxlen: 24
201.231.128.0/17 maxlen: 24
201.235.0.0/16 maxlen: 24
201.235.0.0/17 maxlen: 24
201.235.128.0/17 maxlen: 24
201.252.0.0/15 maxlen: 24
201.253.0.0/16 maxlen: 24
24.232.0.0/16 maxlen: 24
2800:2000::/20 maxlen: 20
2800:2000::/20 maxlen: 48
2800:b000::/32 maxlen: 48
2803:da80::/32 maxlen: 48
2001:13d0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1270257 (0x1361f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=a327a8fed3c8e8336fed6cce405a3d93311d45d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:cf:18:b1:e7:eb:6a:c9:2f:dc:4a:17:e6:
d9:91:c3:83:c6:c3:3f:a7:04:07:9f:20:b6:d4:45:
9d:e4:fc:9f:02:57:40:f0:4a:c6:dd:7f:16:9a:a5:
62:f8:f0:b0:c2:db:fe:7b:d4:66:de:c7:5b:f1:70:
88:aa:1e:66:a5:47:45:77:c4:12:fe:a5:1e:00:da:
ce:96:d7:c5:4e:a5:f4:08:09:7c:28:a1:0f:05:c3:
15:52:46:50:27:5f:bb:78:7e:c1:ec:12:11:1d:f5:
e1:81:50:ee:fb:71:59:67:e1:fc:37:16:ea:73:a7:
29:87:16:b7:d3:2c:2f:2c:df:11:6c:ed:e2:50:14:
9f:03:07:b7:1f:4b:9b:48:7b:82:b4:36:a6:d2:b7:
eb:aa:c2:b8:91:a9:c8:b2:ec:1f:7f:71:a3:99:57:
57:ef:06:4a:7b:f9:2d:b0:c6:15:26:a4:f2:15:59:
a0:ad:5a:99:70:26:1d:31:8c:90:fb:0e:d0:03:0f:
9c:68:b7:c8:cb:07:14:d4:89:81:34:55:7f:dd:30:
23:58:d3:63:e1:2c:b7:e5:8c:ef:87:19:00:f7:bb:
dc:dd:e1:01:1f:c1:ad:f3:1c:9b:f6:fd:4e:82:af:
96:85:6d:00:57:60:c3:18:c3:4b:bc:07:72:f9:aa:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:92:47:C9:2A:A6:D3:BA:F0:11:2E:B1:CE:C6:74:A8:B2:BA:C2:1C
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a327a8fed3c8e8336fed6cce405a3d93311d45d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.232.0.0/16
66.60.0.0/18
152.168.0.0/14
170.150.196.0/22
170.231.136.0/22
181.0.0.0/12
181.28.0.0/14
181.80.0.0-181.111.255.255
181.164.0.0-181.171.255.255
181.228.0.0/14
186.108.0.0/14
186.124.0.0/14
186.136.0.0/14
186.152.0.0/15
190.16.0.0/14
190.30.0.0/15
190.136.0.0/14
190.188.0.0-190.195.255.255
190.224.0.0/13
190.244.0.0/14
191.97.128.0/17
196.32.64.0/19
200.3.32.0-200.3.95.255
200.32.0.0/19
200.42.0.0-200.42.159.255
200.43.0.0/16
200.45.0.0/16
200.49.96.0/20
200.49.128.0/19
200.55.64.0/18
200.61.192.0/19
200.63.0.0/19
200.71.224.0/20
200.73.128.0/18
200.80.64.0/20
200.82.0.0/17
200.89.128.0/18
200.105.0.0-200.105.95.255
200.110.224.0/21
200.114.128.0/17
200.117.0.0/16
200.122.0.0/17
200.126.128.0-200.127.255.255
201.212.0.0/15
201.231.0.0/16
201.235.0.0/16
201.252.0.0/15
IPv6:
2001:13d0::/29
2800:2000::/20
2800:b000::/32
2803:da80::/32
Signature Algorithm: sha256WithRSAEncryption
8b:77:b7:18:f2:1a:81:23:2f:97:58:aa:44:95:2a:3b:c3:d9:
1f:b4:34:86:64:26:db:6d:f1:ff:04:90:4f:13:0c:ea:fe:84:
7a:b1:6f:f1:47:7c:42:da:79:46:c9:58:f7:1d:77:ed:c0:6f:
64:c4:fe:8b:4f:15:24:03:70:cb:77:9c:53:fc:8b:6f:ad:89:
3e:a8:1d:9f:45:18:c5:33:ea:14:71:70:65:65:4b:cf:14:a0:
4c:b2:f5:87:89:4b:2e:40:f2:a5:d3:a7:c0:f9:f8:cb:ce:57:
ab:48:c8:f6:f0:a6:25:71:f7:04:c7:37:3a:4c:17:e7:51:0f:
3a:6f:c2:bd:8d:f1:db:4e:cf:2f:3b:c7:ed:30:2c:a9:4b:c9:
ee:78:27:2a:0a:16:78:0e:c2:e8:23:a9:f2:f5:38:3e:c7:c2:
0d:41:de:09:26:84:88:7b:ba:90:a6:e7:46:22:43:31:b1:28:
f7:ba:65:0e:a7:b1:34:93:da:f2:32:b5:30:1b:0f:e2:77:cc:
86:23:68:84:e9:21:29:87:a9:e6:7b:88:b6:ab:58:99:fe:98:
52:8c:b2:37:3a:81:91:1f:ac:f5:f7:0f:1f:46:ce:84:df:b3:
d3:51:f6:1d:ff:4f:0e:68:f8:5d:42:e7:d5:d7:e9:86:50:c2:
77:9d:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org