Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d68cfff7677eac4988414e6f4afc25837efaee8a.roa
File: d68cfff7677eac4988414e6f4afc25837efaee8a.roa (raw, json)
Hash identifier: R3j0yg59GrgdIEyuk/EiGeQ46MJcdJGEtf4KkQsD2Dc=
Subject key identifier: 2F:E8:96:3C:C7:B9:18:75:62:6B:CE:50:DE:47:2F:12:27:33:C4:98
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 275E47
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d68cfff7677eac4988414e6f4afc25837efaee8a.roa
Signing time: Mon 17 Apr 2023 13:00:55 +0000
ROA not before: Sun 16 Apr 2023 13:00:28 +0000
ROA not after: Thu 17 Apr 2025 13:00:28 +0000
asID: 52444
IP address blocks: 181.15.97.0/24 maxlen: 24
181.15.98.0/23 maxlen: 24
181.15.100.0/24 maxlen: 24
186.153.126.0/23 maxlen: 24
181.10.140.0/23 maxlen: 24
181.10.142.0/24 maxlen: 24
190.136.11.0/24 maxlen: 24
186.125.161.0/24 maxlen: 24
181.15.195.0/24 maxlen: 24
186.125.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2580039 (0x275e47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Apr 16 13:00:28 2023 GMT
Not After : Apr 17 13:00:28 2025 GMT
Subject: CN=d68cfff7677eac4988414e6f4afc25837efaee8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:49:2e:e1:9e:0b:ae:d9:60:4b:01:92:f6:c8:
1d:65:49:b3:dd:19:7a:14:ac:59:6c:6d:ff:94:8d:
52:30:4f:bb:44:a2:c3:65:1a:71:37:2a:5f:d3:34:
93:51:de:ad:0d:b7:92:46:b4:ac:ee:0a:50:ea:8a:
cf:af:88:e9:98:19:9b:f5:02:de:51:79:b4:ad:00:
57:ce:22:9a:01:58:f9:28:5b:0b:d3:4a:f1:56:72:
ba:db:76:51:5a:93:07:55:f1:eb:f1:e0:20:b5:1a:
b4:6e:55:fe:be:77:cc:6f:65:b3:d1:18:c1:64:54:
c7:88:01:ab:c3:39:cd:65:d3:23:d4:ff:94:00:1f:
c7:30:57:ea:01:20:64:ed:2f:a9:69:a6:f3:76:4b:
cc:a1:03:93:81:33:04:92:8c:cc:15:b0:d9:b7:a8:
f4:ec:5c:89:7a:09:95:7d:de:7b:5b:e2:e9:ef:6c:
52:65:9f:a1:bc:96:ed:d5:c9:40:54:d2:18:b1:20:
24:2a:29:4a:6f:7f:8e:96:c5:65:c4:6e:52:cc:db:
39:9d:e3:ae:73:ab:8b:e5:3b:66:c3:cc:51:e9:ad:
c9:7d:48:a9:23:1f:d8:25:0e:e2:f2:b2:2a:ca:18:
6a:e9:82:e3:6f:b8:52:4e:ff:36:1a:dd:64:3e:39:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E8:96:3C:C7:B9:18:75:62:6B:CE:50:DE:47:2F:12:27:33:C4:98
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d68cfff7677eac4988414e6f4afc25837efaee8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.10.140.0-181.10.142.255
181.15.97.0-181.15.100.255
181.15.195.0/24
186.125.62.0/23
186.125.161.0/24
186.153.126.0/23
190.136.11.0/24
Signature Algorithm: sha256WithRSAEncryption
81:00:38:1f:dc:81:d4:e2:16:dd:f6:d0:52:61:5a:43:b2:eb:
1d:d6:06:13:12:87:9e:3e:ee:d2:2d:c8:32:5a:93:a0:82:b4:
b2:97:6c:9d:7d:75:84:be:10:1a:71:f2:5a:29:ac:58:80:e8:
fc:49:f4:40:34:1f:29:ac:8f:e3:5b:b5:55:e1:ab:da:e6:36:
dd:48:e6:1c:30:37:8c:c2:5b:c5:34:c1:aa:da:37:9b:a3:ac:
bc:1e:b9:b3:07:88:f6:aa:fe:a2:51:e6:01:3b:57:c6:27:3d:
da:f5:95:fa:81:4c:57:cd:78:2a:27:aa:0e:65:4c:73:13:b2:
04:98:41:d9:e2:12:85:77:2e:06:88:86:6d:cd:78:71:0e:56:
66:72:43:b4:7c:40:7e:a9:bd:8b:0c:cf:ea:ad:7f:0c:89:90:
9f:8e:5f:ba:4d:37:1a:1f:b5:ee:81:70:46:9f:54:f3:e0:37:
f2:0c:d6:47:ee:32:27:36:9d:70:21:e8:cf:30:80:b6:77:2c:
5f:55:39:0a:02:ee:7c:c4:96:cd:f7:73:47:bf:5f:94:27:d8:
65:c2:12:a7:c1:e7:c0:02:4c:6a:c4:03:61:e2:c1:c7:0b:e6:
b1:05:eb:44:95:fd:83:32:56:27:c1:e9:52:96:41:7c:53:47:
ba:60:33:e7
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgIDJ15HMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
M2E0NDRkMDYxZmM0ZDkxNGRjNTZkODAzMWE5YzQ1NzRjYTU3YWQwHhcNMjMwNDE2
MTMwMDI4WhcNMjUwNDE3MTMwMDI4WjAzMTEwLwYDVQQDEyhkNjhjZmZmNzY3N2Vh
YzQ5ODg0MTRlNmY0YWZjMjU4MzdlZmFlZThhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj0ku4Z4LrtlgSwGS9sgdZUmz3Rl6FKxZbG3/lI1SME+7RKLD
ZRpxNypf0zSTUd6tDbeSRrSs7gpQ6orPr4jpmBmb9QLeUXm0rQBXziKaAVj5KFsL
00rxVnK623ZRWpMHVfHr8eAgtRq0blX+vnfMb2Wz0RjBZFTHiAGrwznNZdMj1P+U
AB/HMFfqASBk7S+paabzdkvMoQOTgTMEkozMFbDZt6j07FyJegmVfd57W+Lp72xS
ZZ+hvJbt1clAVNIYsSAkKilKb3+OlsVlxG5SzNs5neOuc6uL5Ttmw8xR6a3JfUip
Ix/YJQ7i8rIqyhhq6YLjb7hSTv82Gt1kPjnA8QIDAQABo4ICjzCCAoswHQYDVR0O
BBYEFC/oljzHuRh1YmvOUN5HLxInM8SYMB8GA1UdIwQYMBaAFMmcjKrH/3v04XrK
8I/d1uVu/M2tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkzYTQ0
NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3L2Q2OGNmZmY3Njc3ZWFjNDk4ODQxNGU2ZjRhZmMyNTgzN2VmYWVlOGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZDkzYTQ0NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBTBggrBgEFBQcBBwEB/wRE
MEIwQAQCAAEwOjAMAwQCtQqMAwQAtQqOMAwDBAC1D2EDBAC1D2QDBAC1D8MDBAG6
fT4DBAC6faEDBAG6mX4DBAC+iAswDQYJKoZIhvcNAQELBQADggEBAIEAOB/cgdTi
Ft320FJhWkOy6x3WBhMSh54+7tItyDJak6CCtLKXbJ19dYS+EBpx8loprFiA6PxJ
9EA0Hymsj+NbtVXhq9rmNt1I5hwwN4zCW8U0waraN5ujrLweubMHiPaq/qJR5gE7
V8YnPdr1lfqBTFfNeConqg5lTHMTsgSYQdniEoV3LgaIhm3NeHEOVmZyQ7R8QH6p
vYsMz+qtfwyJkJ+OX7pNNxofte6BcEafVPPgN/IM1kfuMic2nXAh6M8wgLZ3LF9V
OQoC7nzEls33c0e/X5Qn2GXCEqfB58ACTGrEA2HiwccL5rEF60SV/YMyVifB6VKW
QXxTR7pgM+c=
-----END CERTIFICATE-----
Generated at Thu Dec 7 13:04:53 2023 by rpki-client on console-ams.rpki-client.org