Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c28f8a0-7607-4ee7-807a-08a8e3284d14/91367f1ab4c082086640eb85d93eeac7a9b6d325.roa
File: 91367f1ab4c082086640eb85d93eeac7a9b6d325.roa (raw, json)
Hash identifier: kxEhpvMJsqtSrorBuUYtnEecm2HQYlm1s1/S23JnePg=
Subject key identifier: 8E:40:74:35:61:5C:15:D0:D6:C1:54:BE:CE:37:FA:4D:7B:C5:95:89
Certificate issuer: /CN=c29986287f685f9081ace4b62c221822c6408fc1
Certificate serial: 0D9606
Authority key identifier: C4:4D:2B:96:0A:8F:CC:13:50:1C:C5:84:81:B1:76:47:60:F9:AA:DE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c29986287f685f9081ace4b62c221822c6408fc1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6c28f8a0-7607-4ee7-807a-08a8e3284d14/91367f1ab4c082086640eb85d93eeac7a9b6d325.roa
Signing time: Wed 24 Mar 2021 14:32:49 +0000
ROA not before: Wed 24 Mar 2021 14:32:49 +0000
ROA not after: Tue 24 Mar 2026 14:32:49 +0000
asID: 263769
IP address blocks: 168.90.128.0/24 maxlen: 24
168.90.129.0/24 maxlen: 24
168.90.130.0/24 maxlen: 24
168.90.131.0/24 maxlen: 24
170.238.20.0/24 maxlen: 24
170.238.21.0/24 maxlen: 24
170.238.22.0/24 maxlen: 24
170.238.23.0/24 maxlen: 24
179.60.248.0/24 maxlen: 24
179.60.249.0/24 maxlen: 24
179.60.250.0/24 maxlen: 24
179.60.251.0/24 maxlen: 24
179.60.252.0/24 maxlen: 24
179.60.253.0/24 maxlen: 24
179.60.254.0/24 maxlen: 24
179.60.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890374 (0xd9606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c29986287f685f9081ace4b62c221822c6408fc1
Validity
Not Before: Mar 24 14:32:49 2021 GMT
Not After : Mar 24 14:32:49 2026 GMT
Subject: CN=91367f1ab4c082086640eb85d93eeac7a9b6d325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:35:2e:26:8a:c1:ee:e4:c4:01:be:e7:de:b2:
94:66:0b:38:69:e2:e6:b5:01:d4:ab:ef:8b:19:07:
56:a7:6b:96:9e:ab:40:f6:45:63:61:28:c5:c1:b0:
8a:4d:28:d9:a4:8f:57:ba:6f:ea:c8:d6:fe:cc:32:
a2:b2:39:31:c2:40:72:4f:02:c9:cc:b6:88:f4:09:
79:8e:09:9e:0c:09:85:81:95:f3:a0:61:9a:07:15:
6d:15:dd:79:18:8e:a6:9a:e3:37:60:27:df:f4:ed:
0e:15:57:c6:ea:09:c5:47:16:86:ff:ba:5d:b6:ff:
73:10:46:05:84:a9:59:6b:55:7e:e6:0b:fc:06:0b:
6f:a1:d8:fa:5d:13:4c:6c:e1:fb:fa:ea:3d:05:51:
9b:79:ca:0e:c9:ad:ec:04:91:43:4f:a0:5b:bf:fc:
08:84:0c:2d:0f:16:b6:a9:b1:d8:7c:d9:ef:e5:43:
5c:c1:62:56:9a:4b:ab:9e:c7:9b:30:db:4f:88:d0:
4a:e1:76:cb:7e:2a:62:73:40:e2:7d:0e:ca:f7:c3:
d9:51:6d:60:7f:83:3a:93:31:e7:dd:0c:39:16:c0:
28:62:dd:da:e3:c0:c1:ea:cb:06:8a:d5:dd:df:43:
35:49:5f:d5:94:f0:2a:c7:79:f6:36:de:b8:c2:dc:
49:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:40:74:35:61:5C:15:D0:D6:C1:54:BE:CE:37:FA:4D:7B:C5:95:89
X509v3 Authority Key Identifier:
keyid:C4:4D:2B:96:0A:8F:CC:13:50:1C:C5:84:81:B1:76:47:60:F9:AA:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c29986287f685f9081ace4b62c221822c6408fc1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c28f8a0-7607-4ee7-807a-08a8e3284d14/91367f1ab4c082086640eb85d93eeac7a9b6d325.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6c28f8a0-7607-4ee7-807a-08a8e3284d14/c29986287f685f9081ace4b62c221822c6408fc1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.128.0/22
170.238.20.0/22
179.60.248.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:7a:1f:5f:38:cd:11:83:ab:5a:23:4e:d7:9e:cd:66:06:7c:
5b:83:c4:0e:72:f2:a3:db:8b:65:d1:b7:06:47:41:c7:d9:2e:
8b:4e:7d:60:38:7b:13:48:35:96:ee:1d:4b:d5:a1:1b:a9:d8:
a7:53:cb:26:8d:e8:62:f0:fa:77:a3:69:e9:6c:f3:54:cc:b1:
f1:37:1c:a2:32:61:b0:f7:d9:ad:cb:a8:d3:46:d9:f3:14:ac:
8d:da:17:fe:67:36:0c:27:15:57:3b:b4:38:a5:bc:c0:ee:bb:
8a:fb:69:27:8a:62:0c:ca:6b:a9:fc:ca:93:73:5f:d5:7b:53:
79:08:a0:da:b7:6a:e3:28:64:99:d1:f5:ce:66:7d:b6:4c:f0:
22:39:c9:7b:1a:ce:4b:96:9d:f9:f5:df:ea:36:0f:09:85:cd:
31:ae:68:64:b5:57:e0:c2:6d:fb:a9:7a:45:0a:85:33:4e:fe:
49:79:f3:7e:68:20:18:7a:0d:33:f1:9a:83:c8:c9:94:1d:f6:
d6:d7:a5:16:54:59:62:c1:3f:95:78:89:94:8f:92:f7:68:ba:
fc:21:b5:f3:85:c4:b1:2e:bf:9c:dd:20:c8:f2:69:97:dc:5b:
eb:5a:01:0a:e9:1c:eb:15:f1:e8:66:ae:de:d6:ff:65:63:ff:
23:d6:81:09
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDDZYGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMy
OTk4NjI4N2Y2ODVmOTA4MWFjZTRiNjJjMjIxODIyYzY0MDhmYzEwHhcNMjEwMzI0
MTQzMjQ5WhcNMjYwMzI0MTQzMjQ5WjAzMTEwLwYDVQQDEyg5MTM2N2YxYWI0YzA4
MjA4NjY0MGViODVkOTNlZWFjN2E5YjZkMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkjUuJorB7uTEAb7n3rKUZgs4aeLmtQHUq++LGQdWp2uWnqtA
9kVjYSjFwbCKTSjZpI9Xum/qyNb+zDKisjkxwkByTwLJzLaI9Al5jgmeDAmFgZXz
oGGaBxVtFd15GI6mmuM3YCff9O0OFVfG6gnFRxaG/7pdtv9zEEYFhKlZa1V+5gv8
Bgtvodj6XRNMbOH7+uo9BVGbecoOya3sBJFDT6Bbv/wIhAwtDxa2qbHYfNnv5UNc
wWJWmkurnsebMNtPiNBK4XbLfipic0DifQ7K98PZUW1gf4M6kzHn3Qw5FsAoYt3a
48DB6ssGitXd30M1SV/VlPAqx3n2Nt64wtxJ4QIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFI5AdDVhXBXQ1sFUvs43+k17xZWJMB8GA1UdIwQYMBaAFMRNK5YKj8wTUBzF
hIGxdkdg+areMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzI5OTg2
Mjg3ZjY4NWY5MDgxYWNlNGI2MmMyMjE4MjJjNjQwOGZjMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmMyOGY4YTAtNzYwNy00ZWU3LTgwN2EtMDhhOGUz
Mjg0ZDE0LzkxMzY3ZjFhYjRjMDgyMDg2NjQwZWI4NWQ5M2VlYWM3YTliNmQzMjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YzI4ZjhhMC03NjA3LTRlZTctODA3YS0wOGE4
ZTMyODRkMTQvYzI5OTg2Mjg3ZjY4NWY5MDgxYWNlNGI2MmMyMjE4MjJjNjQwOGZj
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAqhagAMEAqruFAMEA7M8+DANBgkqhkiG9w0BAQsFAAOCAQEA
enofXzjNEYOrWiNO157NZgZ8W4PEDnLyo9uLZdG3BkdBx9kui059YDh7E0g1lu4d
S9WhG6nYp1PLJo3oYvD6d6Np6WzzVMyx8TccojJhsPfZrcuo00bZ8xSsjdoX/mc2
DCcVVzu0OKW8wO67ivtpJ4piDMprqfzKk3Nf1XtTeQig2rdq4yhkmdH1zmZ9tkzw
IjnJexrOS5ad+fXf6jYPCYXNMa5oZLVX4MJt+6l6RQqFM07+SXnzfmggGHoNM/Ga
g8jJlB321telFlRZYsE/lXiJlI+S92i6/CG184XEsS6/nN0gyPJpl9xb61oBCukc
6xXx6Gau3tb/ZWP/I9aBCQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org