Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/538eba136a5729d7ac7484779ff55ec02049c21f.roa
File: 538eba136a5729d7ac7484779ff55ec02049c21f.roa (raw, json)
Hash identifier: Ssdri0qblMLjOstxN9T620L70rLUp6X/EpMjc+ucseE=
Subject key identifier: 66:AE:44:DC:ED:E1:40:C0:A7:E6:B5:03:15:56:F3:12:F3:B6:9D:D0
Certificate issuer: /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial: 1C759F
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/538eba136a5729d7ac7484779ff55ec02049c21f.roa
Signing time: Fri 14 Oct 2022 12:58:58 +0000
ROA not before: Mon 22 Mar 2021 14:40:23 +0000
ROA not after: Tue 24 Mar 2026 14:40:23 +0000
asID: 264668
IP address blocks: 181.188.202.0/24 maxlen: 24
181.188.203.0/24 maxlen: 24
181.188.215.0/24 maxlen: 24
181.188.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1865119 (0x1c759f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Validity
Not Before: Mar 22 14:40:23 2021 GMT
Not After : Mar 24 14:40:23 2026 GMT
Subject: CN=538eba136a5729d7ac7484779ff55ec02049c21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:df:81:40:b2:ba:ea:62:df:e7:55:36:df:
0b:c8:ee:d7:8d:3a:62:04:0b:01:1e:7d:82:38:8c:
0e:8b:84:d2:55:48:ef:c5:ac:9a:9b:49:ba:8f:14:
c9:df:af:23:0f:ef:e9:ff:aa:22:be:99:03:42:92:
ef:ba:95:99:7c:06:18:0c:ea:56:ec:d7:64:2c:70:
a4:e4:ad:78:89:5c:3b:9f:0a:2e:aa:30:f8:c3:29:
1d:7b:97:54:bf:36:e1:e3:23:4f:1f:e5:16:f5:55:
e0:aa:9c:8f:8a:2e:81:c6:a1:5c:95:80:5c:6d:dc:
d8:7c:7d:e7:5b:bb:f8:8d:b3:52:4d:d1:c0:9d:fb:
8b:3c:42:b5:25:46:73:79:a7:9d:23:ec:7c:04:23:
f5:9c:de:1c:9a:8d:0d:2d:1d:b6:f0:4d:2b:cc:0e:
a1:a7:0d:ad:93:1c:b7:d9:83:b0:2d:83:d2:7b:2b:
8f:79:fc:95:11:95:d2:1a:ea:cc:d1:a5:28:85:55:
1c:76:c7:de:4b:29:9b:a6:26:4f:0d:0c:df:55:f2:
31:d8:47:83:8c:fc:9c:dd:07:83:db:8c:a1:83:a5:
92:e9:d8:23:54:e8:28:ac:d4:cb:71:a8:77:2b:3f:
e4:e1:3d:3b:53:5f:95:e2:d5:40:42:57:7f:a6:82:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AE:44:DC:ED:E1:40:C0:A7:E6:B5:03:15:56:F3:12:F3:B6:9D:D0
X509v3 Authority Key Identifier:
keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/538eba136a5729d7ac7484779ff55ec02049c21f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.188.202.0/23
181.188.215.0-181.188.216.255
Signature Algorithm: sha256WithRSAEncryption
7f:0d:09:33:f2:bb:ba:c4:55:1a:5d:fa:bb:b0:c6:b3:13:43:
6a:7d:8c:ea:85:fb:00:7d:9e:f2:e9:4c:1a:24:02:8d:47:e1:
d7:d2:dc:70:68:56:73:29:79:e0:64:82:79:ab:b4:b9:bd:92:
8b:51:ad:27:56:7e:54:d0:bd:49:c3:04:79:8e:d0:9b:02:d4:
75:e1:0a:69:33:c4:54:11:71:74:40:87:9e:c6:15:f9:25:5c:
41:7c:1b:45:f5:43:06:8a:b9:9d:d1:68:e7:9e:fe:7e:2d:92:
85:8f:43:a2:0c:cf:90:7a:d6:d5:7d:aa:8b:9a:f0:ff:32:d5:
c0:47:c5:f3:75:89:76:82:54:d1:ba:c4:83:18:95:45:f1:c6:
8b:f7:ad:7d:55:a0:77:12:d9:21:e7:00:de:dd:f4:cf:8e:d6:
14:49:00:6f:e4:26:94:b9:20:55:31:52:96:4a:79:d9:fd:a7:
c0:fb:30:4c:44:03:04:10:5b:f4:0b:0b:1e:5c:0c:e2:ef:d9:
7a:71:ab:81:20:40:5f:d8:18:99:e7:35:b8:88:8e:db:fe:8f:
21:53:08:01:00:ed:05:32:54:8c:b3:98:39:7c:7e:59:86:ee:
e1:66:ce:b6:3e:df:b2:aa:29:83:9e:44:0e:88:b2:6a:a4:4c:
ea:0e:7d:49
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDHHWfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
ODEyZWVjZmNjMDFkMzhjNDQ0ZGJlYWU1MzIzNDY1MWFmOGM4NGQwHhcNMjEwMzIy
MTQ0MDIzWhcNMjYwMzI0MTQ0MDIzWjAzMTEwLwYDVQQDEyg1MzhlYmExMzZhNTcy
OWQ3YWM3NDg0Nzc5ZmY1NWVjMDIwNDljMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAudHfgUCyuupi3+dVNt8LyO7XjTpiBAsBHn2COIwOi4TSVUjv
xayam0m6jxTJ368jD+/p/6oivpkDQpLvupWZfAYYDOpW7NdkLHCk5K14iVw7nwou
qjD4wykde5dUvzbh4yNPH+UW9VXgqpyPii6BxqFclYBcbdzYfH3nW7v4jbNSTdHA
nfuLPEK1JUZzeaedI+x8BCP1nN4cmo0NLR228E0rzA6hpw2tkxy32YOwLYPSeyuP
efyVEZXSGurM0aUohVUcdsfeSymbpiZPDQzfVfIx2EeDjPyc3QeD24yhg6WS6dgj
VOgorNTLcah3Kz/k4T07U1+V4tVAQld/poJzRwIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFGauRNzt4UDAp+a1AxVW8xLztp3QMB8GA1UdIwQYMBaAFMVk0AydCQQDZ/TG
yoKXlo/kro9KMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWI4MTJl
ZWNmY2MwMWQzOGM0NDRkYmVhZTUzMjM0NjUxYWY4Yzg0ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThhNzQ1MWYtMjYxNy00ZDBmLTllNzUtNmQyYWU5
Y2NmNTY2LzUzOGViYTEzNmE1NzI5ZDdhYzc0ODQ3NzlmZjU1ZWMwMjA0OWMyMWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGE3NDUxZi0yNjE3LTRkMGYtOWU3NS02ZDJh
ZTljY2Y1NjYvYWI4MTJlZWNmY2MwMWQzOGM0NDRkYmVhZTUzMjM0NjUxYWY4Yzg0
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAEwFAMEAbW8yjAMAwQAtbzXAwQAtbzYMA0GCSqGSIb3DQEBCwUAA4IB
AQB/DQkz8ru6xFUaXfq7sMazE0NqfYzqhfsAfZ7y6UwaJAKNR+HX0txwaFZzKXng
ZIJ5q7S5vZKLUa0nVn5U0L1JwwR5jtCbAtR14QppM8RUEXF0QIeexhX5JVxBfBtF
9UMGirmd0Wjnnv5+LZKFj0OiDM+QetbVfaqLmvD/MtXAR8XzdYl2glTRusSDGJVF
8caL9619VaB3Etkh5wDe3fTPjtYUSQBv5CaUuSBVMVKWSnnZ/afA+zBMRAMEEFv0
CwseXAzi79l6cauBIEBf2BiZ5zW4iI7b/o8hUwgBAO0FMlSMs5g5fH5Zhu7hZs62
Pt+yqimDnkQOiLJqpEzqDn1J
-----END CERTIFICATE-----
Generated at Fri Oct 27 17:04:38 2023 by rpki-client on console-fra.rpki-client.org