Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/79b65b2e3be475063934856110872c7cf6e19153.roa
File: 79b65b2e3be475063934856110872c7cf6e19153.roa (raw, json)
Hash identifier: CJgWO8Z2fCsMZdsJK+0x3o7Hu9QiJrtDZtd/Ts9+VUA=
Subject key identifier: 70:F4:F6:77:47:D4:DB:65:89:D5:2D:BA:ED:58:4B:88:C8:BF:59:A6
Certificate issuer: /CN=0346440b241d40bd970699e1c0567cf9a1f8b922
Certificate serial: 0BFC12
Authority key identifier: 30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/79b65b2e3be475063934856110872c7cf6e19153.roa
Signing time: Wed 24 Mar 2021 14:44:35 +0000
ROA not before: Wed 24 Mar 2021 14:44:33 +0000
ROA not after: Tue 24 Mar 2026 14:44:33 +0000
asID: 8151
IP address blocks: 187.153.0.0/19 maxlen: 24
187.153.32.0/19 maxlen: 24
187.153.64.0/19 maxlen: 24
187.153.96.0/19 maxlen: 24
187.153.128.0/19 maxlen: 24
187.153.160.0/19 maxlen: 24
187.153.192.0/19 maxlen: 24
187.153.224.0/19 maxlen: 24
187.229.120.0/21 maxlen: 24
201.122.146.0/24 maxlen: 24
201.122.113.0/24 maxlen: 24
201.122.88.0/24 maxlen: 24
201.155.121.0/24 maxlen: 24
201.155.12.0/24 maxlen: 24
201.155.188.0/24 maxlen: 24
201.155.91.0/24 maxlen: 24
201.155.109.0/24 maxlen: 24
201.122.16.0/24 maxlen: 24
201.122.17.0/24 maxlen: 24
201.122.161.0/24 maxlen: 24
201.122.120.0/24 maxlen: 24
201.122.127.0/24 maxlen: 24
201.122.128.0/24 maxlen: 24
201.122.153.0/24 maxlen: 24
201.122.190.0/24 maxlen: 24
201.122.89.0/24 maxlen: 24
201.122.170.0/24 maxlen: 24
201.122.199.0/24 maxlen: 24
201.122.201.0/24 maxlen: 24
201.122.213.0/24 maxlen: 24
201.122.214.0/24 maxlen: 24
201.99.77.0/24 maxlen: 24
201.122.73.0/24 maxlen: 24
201.122.194.0/24 maxlen: 24
201.122.226.0/24 maxlen: 24
189.149.0.0/19 maxlen: 24
189.149.32.0/19 maxlen: 24
189.149.64.0/19 maxlen: 24
189.149.96.0/19 maxlen: 24
189.149.128.0/19 maxlen: 24
189.149.160.0/19 maxlen: 24
189.149.192.0/19 maxlen: 24
189.149.224.0/19 maxlen: 24
187.136.0.0/19 maxlen: 24
187.136.32.0/19 maxlen: 24
187.136.64.0/19 maxlen: 24
187.136.96.0/19 maxlen: 24
187.136.128.0/19 maxlen: 24
187.136.160.0/19 maxlen: 24
187.136.192.0/19 maxlen: 24
187.136.224.0/19 maxlen: 24
189.150.128.0/17 maxlen: 24
187.155.32.0/19 maxlen: 24
187.155.64.0/19 maxlen: 24
187.155.96.0/19 maxlen: 24
187.155.128.0/19 maxlen: 24
187.155.160.0/19 maxlen: 24
189.150.0.0/17 maxlen: 24
187.150.0.0/19 maxlen: 24
187.150.32.0/19 maxlen: 24
187.150.64.0/19 maxlen: 24
187.150.96.0/19 maxlen: 24
187.150.128.0/19 maxlen: 24
187.150.160.0/19 maxlen: 24
187.150.224.0/19 maxlen: 24
187.229.24.0/21 maxlen: 24
187.229.32.0/22 maxlen: 24
201.99.0.0/16 maxlen: 24
201.155.215.0/24 maxlen: 24
201.155.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 785426 (0xbfc12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0346440b241d40bd970699e1c0567cf9a1f8b922
Validity
Not Before: Mar 24 14:44:33 2021 GMT
Not After : Mar 24 14:44:33 2026 GMT
Subject: CN=79b65b2e3be475063934856110872c7cf6e19153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:6f:86:09:44:fc:6a:ec:55:c9:53:b2:ce:
5b:d5:89:33:31:ce:67:68:19:8e:7d:0b:39:fc:d4:
ca:eb:3c:2e:38:8f:84:c3:20:6f:a2:7f:ae:71:79:
33:dc:36:10:83:bc:cf:67:08:a5:c4:55:b7:63:a7:
f4:29:93:ef:d4:21:e6:9f:03:2c:f6:86:62:3e:55:
6a:3c:1c:4a:07:80:3e:48:3e:b3:9a:12:87:13:27:
c9:79:be:77:60:f0:07:ed:e7:54:80:36:51:36:97:
81:f5:10:0a:46:fa:02:8b:a5:57:45:1c:f7:86:a0:
58:a2:68:f5:4c:32:f6:9a:a6:b6:75:1b:5a:4c:b2:
9a:cf:07:0e:3c:67:3e:f9:c4:86:53:67:4e:dd:08:
96:e8:20:fd:73:8a:72:54:ea:43:d1:69:dc:40:80:
94:1a:55:61:b7:4f:1b:4c:16:91:0f:a5:2c:86:ab:
e0:33:43:38:72:e0:90:bc:19:16:55:3e:dc:8b:ca:
eb:8a:32:9d:a2:a1:a3:7f:f3:09:cb:69:dc:2e:13:
fe:2a:40:73:0a:1f:8f:27:c6:47:19:b1:7b:ee:3c:
e1:52:af:e3:fa:dc:87:33:cf:97:59:a7:a2:33:4b:
58:7f:2a:1e:1e:88:34:18:c7:b5:9f:77:d6:38:54:
41:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F4:F6:77:47:D4:DB:65:89:D5:2D:BA:ED:58:4B:88:C8:BF:59:A6
X509v3 Authority Key Identifier:
keyid:30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/79b65b2e3be475063934856110872c7cf6e19153.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/0346440b241d40bd970699e1c0567cf9a1f8b922.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.136.0.0/16
187.150.0.0-187.150.191.255
187.150.224.0/19
187.153.0.0/16
187.155.32.0-187.155.191.255
187.229.24.0-187.229.35.255
187.229.120.0/21
189.149.0.0-189.150.255.255
201.99.0.0/16
201.122.16.0/23
201.122.73.0/24
201.122.88.0/23
201.122.113.0/24
201.122.120.0/24
201.122.127.0-201.122.128.255
201.122.146.0/24
201.122.153.0/24
201.122.161.0/24
201.122.170.0/24
201.122.190.0/24
201.122.194.0/24
201.122.199.0/24
201.122.201.0/24
201.122.213.0-201.122.214.255
201.122.226.0/24
201.155.12.0/24
201.155.91.0/24
201.155.109.0/24
201.155.121.0/24
201.155.188.0/24
201.155.203.0/24
201.155.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c8:54:34:16:07:71:cf:44:81:c0:6f:58:fd:30:64:54:48:
1a:2d:eb:6d:f2:93:19:8a:c7:fa:06:7a:98:48:b9:01:62:ff:
0f:ab:ca:ec:2c:37:f8:d7:ca:41:8f:10:7b:ba:9e:ec:ba:cf:
8f:0e:b8:ce:c7:cd:0a:7a:d8:70:23:e1:a6:84:26:aa:19:dc:
fc:c9:ee:39:41:b0:32:09:a7:db:d2:2e:3b:ce:4e:5b:c6:1c:
ac:03:89:72:7c:bb:8d:5f:55:ba:b2:95:21:c6:71:98:c0:12:
21:17:dc:eb:87:65:d1:b1:a4:a2:63:5d:e8:23:9d:d9:d0:7f:
48:e7:c7:c3:27:79:a2:a6:bc:17:12:3a:f0:5f:aa:77:c6:17:
e9:a4:bb:a8:3c:82:7c:82:ec:a2:62:fd:25:20:9e:03:21:15:
b1:a0:1f:31:9f:75:b0:cf:ad:bf:58:f9:5b:a3:26:4c:1e:36:
4a:45:85:8c:32:c0:cb:e2:97:64:cc:e3:51:5b:1f:49:ed:12:
a5:04:c9:19:dc:6e:d3:ef:c9:56:88:e7:dc:74:1e:3e:1b:35:
ba:94:1e:53:61:3a:ed:d8:3b:a3:5d:12:48:a3:d8:17:be:2d:
fd:7a:53:5d:93:c4:09:7d:b4:a0:05:5b:77:e1:db:c6:e9:6d:
af:91:7f:d3
-----BEGIN CERTIFICATE-----
MIIGKjCCBRKgAwIBAgIDC/wSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAz
NDY0NDBiMjQxZDQwYmQ5NzA2OTllMWMwNTY3Y2Y5YTFmOGI5MjIwHhcNMjEwMzI0
MTQ0NDMzWhcNMjYwMzI0MTQ0NDMzWjAzMTEwLwYDVQQDEyg3OWI2NWIyZTNiZTQ3
NTA2MzkzNDg1NjExMDg3MmM3Y2Y2ZTE5MTUzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqsJvhglE/GrsVclTss5b1YkzMc5naBmOfQs5/NTK6zwuOI+E
wyBvon+ucXkz3DYQg7zPZwilxFW3Y6f0KZPv1CHmnwMs9oZiPlVqPBxKB4A+SD6z
mhKHEyfJeb53YPAH7edUgDZRNpeB9RAKRvoCi6VXRRz3hqBYomj1TDL2mqa2dRta
TLKazwcOPGc++cSGU2dO3QiW6CD9c4pyVOpD0WncQICUGlVht08bTBaRD6Ushqvg
M0M4cuCQvBkWVT7ci8rrijKdoqGjf/MJy2ncLhP+KkBzCh+PJ8ZHGbF77jzhUq/j
+tyHM8+XWaeiM0tYfyoeHog0GMe1n3fWOFRBIwIDAQABo4IDRTCCA0EwHQYDVR0O
BBYEFHD09ndH1NtlidUtuu1YS4jIv1mmMB8GA1UdIwQYMBaAFDBKlObd/bEFp5Qr
ntbrAIJlYl+RMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDM0NjQ0
MGIyNDFkNDBiZDk3MDY5OWUxYzA1NjdjZjlhMWY4YjkyMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTU0OTBlYzMtMzZhZi00ZDYzLTliMzgtYzRkODNk
OGZkODUzLzc5YjY1YjJlM2JlNDc1MDYzOTM0ODU2MTEwODcyYzdjZjZlMTkxNTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NTQ5MGVjMy0zNmFmLTRkNjMtOWIzOC1jNGQ4
M2Q4ZmQ4NTMvMDM0NjQ0MGIyNDFkNDBiZDk3MDY5OWUxYzA1NjdjZjlhMWY4Yjky
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCAQcGCCsGAQUFBwEHAQH/
BIH3MIH0MIHxBAIAATCB6gMDALuIMAsDAwG7lgMEBruWgAMEBbuW4AMDALuZMAwD
BAW7myADBAa7m4AwDAMEA7vlGAMEArvlIAMEA7vleDAKAwMAvZUDAwC9lgMDAMlj
AwQByXoQAwQAyXpJAwQByXpYAwQAyXpxAwQAyXp4MAwDBADJen8DBADJeoADBADJ
epIDBADJepkDBADJeqEDBADJeqoDBADJer4DBADJesIDBADJescDBADJeskwDAME
AMl61QMEAMl61gMEAMl64gMEAMmbDAMEAMmbWwMEAMmbbQMEAMmbeQMEAMmbvAME
AMmbywMEAMmb1zANBgkqhkiG9w0BAQsFAAOCAQEAPMhUNBYHcc9EgcBvWP0wZFRI
Gi3rbfKTGYrH+gZ6mEi5AWL/D6vK7Cw3+NfKQY8Qe7qe7LrPjw64zsfNCnrYcCPh
poQmqhnc/MnuOUGwMgmn29IuO85OW8YcrAOJcny7jV9VurKVIcZxmMASIRfc64dl
0bGkomNd6COd2dB/SOfHwyd5oqa8FxI68F+qd8YX6aS7qDyCfILsomL9JSCeAyEV
saAfMZ91sM+tv1j5W6MmTB42SkWFjDLAy+KXZMzjUVsfSe0SpQTJGdxu0+/JVojn
3HQePhs1upQeU2E67dg7o10SSKPYF74t/XpTXZPECX20oAVbd+Hbxultr5F/0w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org