Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ddb9f0605ab9992e2c28ba5f7f7f93d2c9731e7d.roa
File: ddb9f0605ab9992e2c28ba5f7f7f93d2c9731e7d.roa (raw, json)
Hash identifier: ZPwpLG9nyUIy+tjxA06241y1fj/nmZjYVvoL/tcCt5o=
Subject key identifier: 86:F3:7F:26:37:F9:6B:DD:97:ED:22:26:33:78:C0:6F:EC:D3:AE:E8
Certificate issuer: /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial: 2E258A
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ddb9f0605ab9992e2c28ba5f7f7f93d2c9731e7d.roa
Signing time: Thu 07 Dec 2023 13:00:51 +0000
ROA not before: Thu 07 Dec 2023 13:00:46 +0000
ROA not after: Thu 07 Dec 2028 13:00:46 +0000
asID: 265686
IP address blocks: 181.105.233.0/24 maxlen: 24
181.94.252.0/22 maxlen: 24
181.105.234.0/23 maxlen: 24
190.228.177.0/24 maxlen: 24
200.43.0.0/22 maxlen: 22
181.105.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3024266 (0x2e258a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Validity
Not Before: Dec 7 13:00:46 2023 GMT
Not After : Dec 7 13:00:46 2028 GMT
Subject: CN=ddb9f0605ab9992e2c28ba5f7f7f93d2c9731e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:1a:2f:61:08:e9:41:e6:b6:87:8c:67:1a:
d9:60:89:61:7b:62:32:82:d1:fc:55:db:48:6c:a2:
c5:75:e3:85:46:88:bd:60:4f:b6:f3:26:b7:5c:71:
f9:5b:66:c6:5c:c1:80:85:1d:83:27:0b:21:d5:97:
4a:90:fb:53:ce:37:98:86:da:bb:f0:1f:8c:49:a5:
ae:7c:99:34:e3:a1:e9:34:f6:95:94:a8:d1:52:ae:
52:60:c7:b3:49:13:1e:19:a1:4c:0e:0a:a4:aa:48:
ca:fe:37:1a:e2:b0:1c:2d:0d:b5:4c:97:07:9e:ec:
b2:fb:9d:84:54:d3:cc:95:fe:aa:57:2a:aa:4c:21:
e7:83:ac:cd:bf:57:e8:16:20:86:28:bc:ba:0e:4c:
5d:83:5f:14:81:dd:dc:5a:e2:29:ab:77:07:cc:8b:
f6:6c:f2:9e:01:7d:ce:78:4c:c1:82:be:98:cb:63:
01:83:82:3e:a0:92:9f:e7:ff:88:25:5f:d1:5d:db:
7c:c4:93:d9:00:49:46:4f:fa:d7:42:87:73:4f:b4:
74:d4:47:5a:66:cf:19:da:76:41:e2:52:d3:48:42:
e5:60:ae:a9:bd:26:05:29:44:a2:15:c6:a5:1d:64:
9f:c7:89:17:80:48:11:7a:9d:23:8b:fc:6c:2d:5b:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F3:7F:26:37:F9:6B:DD:97:ED:22:26:33:78:C0:6F:EC:D3:AE:E8
X509v3 Authority Key Identifier:
keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ddb9f0605ab9992e2c28ba5f7f7f93d2c9731e7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.94.252.0/22
181.105.221.0/24
181.105.233.0-181.105.235.255
190.228.177.0/24
200.43.0.0/22
Signature Algorithm: sha256WithRSAEncryption
84:31:04:82:6e:a1:02:b3:5e:36:0f:20:4b:61:c0:38:f2:03:
00:f2:88:90:a3:e0:3d:39:eb:93:6e:a7:a4:c0:ef:19:0f:f6:
0c:33:2a:17:1e:37:bd:1b:52:e3:bf:d3:d0:3f:ae:f7:4f:e1:
a5:01:25:e9:f1:86:23:99:3f:1b:16:60:85:de:b9:f9:40:48:
d6:95:2c:47:b9:c9:8a:be:1d:7d:b2:5a:e0:40:b4:5e:9f:ae:
36:a9:5e:3a:27:ea:c8:b9:72:d8:7c:fa:2f:34:4b:e2:b1:18:
05:0f:f6:4e:14:c9:12:2f:7d:58:9d:07:e5:c8:86:f8:18:23:
c3:9d:bb:e5:cc:d9:52:90:01:5c:d7:7b:69:80:06:23:03:10:
88:87:b6:4a:4b:d0:43:a0:c9:4f:7a:a0:19:da:e2:f0:af:3d:
ef:64:1e:fa:b6:ad:cb:83:07:b4:19:54:e6:37:e8:7d:de:46:
8a:22:9d:0d:f1:1e:2d:09:7d:76:0a:1e:aa:75:7e:64:40:2d:
d1:ec:54:b6:7e:55:22:b4:92:7a:0b:d0:a2:f8:9f:4d:fc:0d:
62:cb:46:8b:ca:87:13:69:c6:9f:c3:6f:cc:48:b9:4a:b9:6b:
0a:51:fb:31:cf:da:64:fe:97:5d:95:79:a2:ba:84:bb:b1:10:
ab:41:29:43
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIDLiWKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM5
NzQ0MDlkMGMyYTcwYzkyMWRkNjg1ZTg2M2U5ZjAwY2IxZTI2MmEwHhcNMjMxMjA3
MTMwMDQ2WhcNMjgxMjA3MTMwMDQ2WjAzMTEwLwYDVQQDEyhkZGI5ZjA2MDVhYjk5
OTJlMmMyOGJhNWY3ZjdmOTNkMmM5NzMxZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxzAaL2EI6UHmtoeMZxrZYIlhe2IygtH8VdtIbKLFdeOFRoi9
YE+28ya3XHH5W2bGXMGAhR2DJwsh1ZdKkPtTzjeYhtq78B+MSaWufJk046HpNPaV
lKjRUq5SYMezSRMeGaFMDgqkqkjK/jca4rAcLQ21TJcHnuyy+52EVNPMlf6qVyqq
TCHng6zNv1foFiCGKLy6Dkxdg18Ugd3cWuIpq3cHzIv2bPKeAX3OeEzBgr6Yy2MB
g4I+oJKf5/+IJV/RXdt8xJPZAElGT/rXQodzT7R01EdaZs8Z2nZB4lLTSELlYK6p
vSYFKUSiFcalHWSfx4kXgEgRep0ji/xsLVtCcQIDAQABo4ICezCCAncwHQYDVR0O
BBYEFIbzfyY3+Wvdl+0iJjN4wG/s067oMB8GA1UdIwQYMBaAFPuO/GhWAKtj6gJP
ow0fFdW1sMGxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzk3NDQw
OWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3L2RkYjlmMDYwNWFiOTk5MmUyYzI4YmE1ZjdmN2Y5M2QyYzk3MzFlN2Qu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvYzk3NDQwOWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQw
MC4wLAQCAAEwJgMEArVe/AMEALVp3TAMAwQAtWnpAwQCtWnoAwQAvuSxAwQCyCsA
MA0GCSqGSIb3DQEBCwUAA4IBAQCEMQSCbqECs142DyBLYcA48gMA8oiQo+A9OeuT
bqekwO8ZD/YMMyoXHje9G1Ljv9PQP673T+GlASXp8YYjmT8bFmCF3rn5QEjWlSxH
ucmKvh19slrgQLRen642qV46J+rIuXLYfPovNEvisRgFD/ZOFMkSL31YnQflyIb4
GCPDnbvlzNlSkAFc13tpgAYjAxCIh7ZKS9BDoMlPeqAZ2uLwrz3vZB76tq3Lgwe0
GVTmN+h93kaKIp0N8R4tCX12Ch6qdX5kQC3R7FS2flUitJJ6C9Ci+J9N/A1iy0aL
yocTacafw2/MSLlKuWsKUfsxz9pk/pddlXmiuoS7sRCrQSlD
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org