Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/94d3d32fc0233bd4bd86d5d5bd6d9992cd8d775a.roa
File: 94d3d32fc0233bd4bd86d5d5bd6d9992cd8d775a.roa (raw, json)
Hash identifier: xgMdngJl4BZthN7aBd9LTIF0ckDBB2ixEs1PTs+ipr8=
Subject key identifier: E8:B4:E3:54:69:76:79:A6:88:11:15:C0:F4:31:A8:E0:53:8D:84:7D
Certificate issuer: /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial: 0C0E66
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/94d3d32fc0233bd4bd86d5d5bd6d9992cd8d775a.roa
Signing time: Wed 24 Mar 2021 14:34:31 +0000
ROA not before: Wed 24 Mar 2021 14:34:31 +0000
ROA not after: Tue 24 Mar 2026 14:34:31 +0000
asID: 52439
IP address blocks: 132.255.236.0/22 maxlen: 24
138.185.12.0/22 maxlen: 24
168.90.156.0/22 maxlen: 24
168.194.168.0/22 maxlen: 24
191.98.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 790118 (0xc0e66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Validity
Not Before: Mar 24 14:34:31 2021 GMT
Not After : Mar 24 14:34:31 2026 GMT
Subject: CN=94d3d32fc0233bd4bd86d5d5bd6d9992cd8d775a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:b9:db:7e:7f:f7:54:52:b6:55:05:c2:45:
a3:38:49:ea:ae:49:80:98:dc:08:2c:07:59:f8:98:
84:96:0d:d0:8e:3b:ca:8a:14:45:77:29:ac:e3:4c:
31:d3:64:86:2f:62:f5:48:ff:34:07:3f:f0:e1:c9:
e3:90:07:c5:bc:f0:7a:93:1e:87:0b:34:f4:12:26:
82:e6:55:a4:88:55:13:f1:29:c9:32:7e:e6:af:0d:
e3:be:f4:00:f0:61:7d:d4:2a:01:2c:1a:ce:72:bd:
65:a8:0d:6b:80:05:2e:b3:ae:bf:f6:f4:5f:6f:05:
9d:83:54:17:77:f8:99:4f:cb:3d:87:66:43:d6:76:
cc:34:ba:30:17:90:96:29:11:63:83:f4:9e:44:ca:
1b:96:21:89:25:d1:2f:e1:62:d9:d2:8b:a8:36:d7:
eb:2f:dd:29:6d:5a:1e:94:49:97:e1:0f:52:c3:9d:
1c:a6:5e:64:94:87:e2:14:f4:f2:ce:c8:a5:53:5b:
f8:0e:0f:41:43:fe:a3:a0:da:09:4b:d7:28:1e:25:
e0:97:3c:98:5a:4b:b4:5d:ef:a6:94:3a:64:9e:6a:
9c:bf:5f:44:f3:00:b6:86:34:a5:49:0c:db:de:ab:
82:ba:c9:1c:da:76:ef:47:d8:39:cb:0f:6d:2a:9e:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B4:E3:54:69:76:79:A6:88:11:15:C0:F4:31:A8:E0:53:8D:84:7D
X509v3 Authority Key Identifier:
keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/94d3d32fc0233bd4bd86d5d5bd6d9992cd8d775a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.236.0/22
138.185.12.0/22
168.90.156.0/22
168.194.168.0/22
191.98.200.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:4d:95:d9:98:ca:f5:a7:36:40:24:06:b2:48:77:e5:01:47:
d4:21:d6:f0:b6:b5:98:4d:fa:60:b0:b9:c0:77:1f:9e:8f:9e:
7d:8c:9b:ab:20:ae:ce:c8:26:36:3e:c1:c9:c1:2b:f3:90:f0:
61:17:9d:9a:ba:29:42:d7:d3:47:5c:f9:44:da:32:b3:70:f6:
a5:a9:1b:49:95:53:19:39:84:a9:81:c1:65:59:82:2a:ce:62:
9b:40:f7:2a:38:81:e0:e8:b4:8a:5b:e0:35:06:1b:e6:4e:d3:
c2:9d:9c:56:97:2f:82:f1:62:47:1c:2e:73:a3:16:9a:f2:c2:
2c:10:0a:b0:97:ed:77:61:7b:b5:b0:4f:f7:88:f6:78:ee:1b:
60:3b:c3:2b:86:97:fe:ee:1a:c6:80:4a:53:7f:b3:2c:f1:ed:
61:1b:4e:61:8f:0a:72:f0:15:80:1b:01:ba:3d:0c:b7:e2:b1:
e9:5a:da:53:1d:bf:c3:65:52:f4:e3:3e:2b:ed:93:97:3b:85:
9a:b0:6c:f7:d8:ab:01:37:0f:57:35:ab:6b:c1:ac:a9:0c:1e:
db:fb:2b:dc:15:64:3f:14:35:55:fe:c9:25:07:31:6c:f5:57:
b2:18:ac:45:c2:dc:19:db:8e:9b:de:0e:c4:82:c2:1a:af:d8:
15:f9:c4:4b
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDDA5mMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZi
Y2M4ZGVkNDBiYzI0OTM3YTJhZTRmYjdhNTIxYmQzODhlZTAyNGIwHhcNMjEwMzI0
MTQzNDMxWhcNMjYwMzI0MTQzNDMxWjAzMTEwLwYDVQQDEyg5NGQzZDMyZmMwMjMz
YmQ0YmQ4NmQ1ZDViZDZkOTk5MmNkOGQ3NzVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtx65235/91RStlUFwkWjOEnqrkmAmNwILAdZ+JiElg3QjjvK
ihRFdyms40wx02SGL2L1SP80Bz/w4cnjkAfFvPB6kx6HCzT0EiaC5lWkiFUT8SnJ
Mn7mrw3jvvQA8GF91CoBLBrOcr1lqA1rgAUus66/9vRfbwWdg1QXd/iZT8s9h2ZD
1nbMNLowF5CWKRFjg/SeRMobliGJJdEv4WLZ0ouoNtfrL90pbVoelEmX4Q9Sw50c
pl5klIfiFPTyzsilU1v4Dg9BQ/6joNoJS9coHiXglzyYWku0Xe+mlDpknmqcv19E
8wC2hjSlSQzb3quCuskc2nbvR9g5yw9tKp6KiwIDAQABo4ICczCCAm8wHQYDVR0O
BBYEFOi041RpdnmmiBEVwPQxqOBTjYR9MB8GA1UdIwQYMBaAFIFE0O4gQeqqO3rX
w05lAvlvq/hcMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmJjYzhk
ZWQ0MGJjMjQ5MzdhMmFlNGZiN2E1MjFiZDM4OGVlMDI0Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODRjNjM3YzYtYWE3OS00MTQxLTg5MWUtNjhkYzBh
OTA2YTE0Lzk0ZDNkMzJmYzAyMzNiZDRiZDg2ZDVkNWJkNmQ5OTkyY2Q4ZDc3NWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NGM2MzdjNi1hYTc5LTQxNDEtODkxZS02OGRj
MGE5MDZhMTQvZmJjYzhkZWQ0MGJjMjQ5MzdhMmFlNGZiN2E1MjFiZDM4OGVlMDI0
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQo
MCYwJAQCAAEwHgMEAoT/7AMEAoq5DAMEAqhanAMEAqjCqAMEA79iyDANBgkqhkiG
9w0BAQsFAAOCAQEAqk2V2ZjK9ac2QCQGskh35QFH1CHW8La1mE36YLC5wHcfno+e
fYybqyCuzsgmNj7BycEr85DwYRedmropQtfTR1z5RNoys3D2pakbSZVTGTmEqYHB
ZVmCKs5im0D3KjiB4Oi0ilvgNQYb5k7Twp2cVpcvgvFiRxwuc6MWmvLCLBAKsJft
d2F7tbBP94j2eO4bYDvDK4aX/u4axoBKU3+zLPHtYRtOYY8KcvAVgBsBuj0Mt+Kx
6VraUx2/w2VS9OM+K+2TlzuFmrBs99irATcPVzWra8GsqQwe2/sr3BVkPxQ1Vf7J
JQcxbPVXshisRcLcGduOm94OxILCGq/YFfnESw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org