Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/c3e6960bf1a3b4be232f4d9a3ac96bd5dc0c4037.roa
File: c3e6960bf1a3b4be232f4d9a3ac96bd5dc0c4037.roa (raw, json)
Hash identifier: A3MuYklFKjUJwYNykM/FodTCJDAZKg4szKrrJWXQPlQ=
Subject key identifier: 8E:7D:35:C3:20:EA:E4:27:03:9E:CB:89:48:43:77:8F:CD:FB:FB:FF
Certificate issuer: /CN=0346440b241d40bd970699e1c0567cf9a1f8b922
Certificate serial: 0C15DC
Authority key identifier: 30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/c3e6960bf1a3b4be232f4d9a3ac96bd5dc0c4037.roa
Signing time: Wed 24 Mar 2021 22:49:57 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 8151
IP address blocks: 187.170.128.0/19 maxlen: 24
187.170.160.0/19 maxlen: 24
187.170.192.0/19 maxlen: 24
187.170.224.0/19 maxlen: 24
187.170.32.0/19 maxlen: 24
187.170.64.0/19 maxlen: 24
187.170.96.0/19 maxlen: 24
189.164.64.0/18 maxlen: 24
189.167.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 792028 (0xc15dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0346440b241d40bd970699e1c0567cf9a1f8b922
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=c3e6960bf1a3b4be232f4d9a3ac96bd5dc0c4037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:07:ce:9d:7e:0f:11:48:61:64:0e:cf:34:
e4:9c:1e:c8:64:40:06:c7:a8:7d:c4:af:42:22:eb:
40:41:eb:92:ca:b3:b8:f9:97:59:a0:f6:30:03:b2:
36:b2:cc:f6:d7:3d:00:da:f4:ac:8c:91:7f:fc:29:
34:ee:68:8d:e5:74:08:ad:f5:22:2e:15:9b:be:1b:
db:2e:39:fd:8d:a2:09:c7:db:20:06:b4:a8:8b:4a:
58:8e:ed:ce:03:4b:cd:45:4b:fd:1d:fb:12:44:cd:
96:0d:75:61:f9:92:a4:ab:5e:3e:b5:0f:01:46:22:
77:4c:7d:fe:9b:fb:e5:da:8f:89:eb:a1:f7:1d:65:
12:bb:27:e9:0d:34:81:c0:c2:9d:9a:0e:8d:68:8a:
b2:d2:d2:76:c6:9c:a3:97:56:f2:ee:db:03:f0:0f:
63:95:69:66:23:4e:dc:ad:08:f4:9f:3e:68:ab:49:
17:2e:93:67:0d:7a:b2:31:bc:88:d3:9a:c0:ea:6e:
aa:bc:c3:64:73:f5:07:4e:79:45:e5:f8:a1:75:48:
be:ee:8a:94:a4:66:07:5d:52:12:76:71:fb:3c:32:
e6:a8:14:42:86:a8:d4:28:6e:75:76:49:a7:e4:39:
e7:83:1f:c5:f3:09:c8:fc:6e:f9:b1:be:e8:ee:63:
61:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7D:35:C3:20:EA:E4:27:03:9E:CB:89:48:43:77:8F:CD:FB:FB:FF
X509v3 Authority Key Identifier:
keyid:30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/c3e6960bf1a3b4be232f4d9a3ac96bd5dc0c4037.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/0346440b241d40bd970699e1c0567cf9a1f8b922.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.170.32.0-187.170.255.255
189.164.64.0/18
189.167.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:b5:75:27:71:f7:cb:44:f9:7f:3c:3b:da:2f:06:8d:9e:c8:
2b:9f:48:14:5a:3f:5a:c6:74:97:25:da:98:92:50:00:e8:e4:
00:19:32:a8:5f:f7:d6:90:fe:de:ba:fd:43:fa:ca:1a:97:08:
22:a2:fe:ee:4b:17:09:33:51:2f:9f:d1:35:31:b1:c5:e6:a1:
1f:8d:9b:81:33:f5:a0:ad:80:4d:f6:18:d0:a7:79:44:d2:f6:
a9:0c:6c:0a:84:9d:2a:2c:4d:f2:92:d8:60:d9:0c:1a:e6:46:
29:56:55:37:68:4f:a9:55:76:9d:ff:a7:f4:87:ff:97:e0:14:
58:29:36:d2:48:f5:a9:93:97:cc:c0:91:3a:1e:95:e4:af:be:
8f:2c:e4:73:22:4e:aa:70:bf:27:73:d3:ff:5b:3d:55:b3:5c:
00:76:29:8f:ef:27:7c:04:d5:a3:c3:17:91:be:d5:a2:b3:ab:
26:6d:18:2b:3c:88:d8:15:7f:c1:60:97:00:54:c5:ed:1a:a6:
04:cf:9c:bc:29:a2:b2:86:60:f9:0c:11:05:b7:58:5c:df:07:
78:be:c2:93:b5:49:16:9a:6c:c3:8a:5e:cb:73:7b:74:f1:38:
c1:e1:d9:cc:84:70:0f:a5:e0:1c:b9:9e:a8:02:9b:ab:51:d8:
9e:e5:4d:c8
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIDDBXcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAz
NDY0NDBiMjQxZDQwYmQ5NzA2OTllMWMwNTY3Y2Y5YTFmOGI5MjIwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEyhjM2U2OTYwYmYxYTNi
NGJlMjMyZjRkOWEzYWM5NmJkNWRjMGM0MDM3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArWMHzp1+DxFIYWQOzzTknB7IZEAGx6h9xK9CIutAQeuSyrO4
+ZdZoPYwA7I2ssz21z0A2vSsjJF//Ck07miN5XQIrfUiLhWbvhvbLjn9jaIJx9sg
BrSoi0pYju3OA0vNRUv9HfsSRM2WDXVh+ZKkq14+tQ8BRiJ3TH3+m/vl2o+J66H3
HWUSuyfpDTSBwMKdmg6NaIqy0tJ2xpyjl1by7tsD8A9jlWlmI07crQj0nz5oq0kX
LpNnDXqyMbyI05rA6m6qvMNkc/UHTnlF5fihdUi+7oqUpGYHXVISdnH7PDLmqBRC
hqjUKG51dkmn5Dnngx/F8wnI/G75sb7o7mNhGwIDAQABo4ICbjCCAmowHQYDVR0O
BBYEFI59NcMg6uQnA57LiUhDd4/N+/v/MB8GA1UdIwQYMBaAFDBKlObd/bEFp5Qr
ntbrAIJlYl+RMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDM0NjQ0
MGIyNDFkNDBiZDk3MDY5OWUxYzA1NjdjZjlhMWY4YjkyMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTU0OTBlYzMtMzZhZi00ZDYzLTliMzgtYzRkODNk
OGZkODUzL2MzZTY5NjBiZjFhM2I0YmUyMzJmNGQ5YTNhYzk2YmQ1ZGMwYzQwMzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NTQ5MGVjMy0zNmFmLTRkNjMtOWIzOC1jNGQ4
M2Q4ZmQ4NTMvMDM0NjQ0MGIyNDFkNDBiZDk3MDY5OWUxYzA1NjdjZjlhMWY4Yjky
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAyBggrBgEFBQcBBwEB/wQj
MCEwHwQCAAEwGTALAwQFu6ogAwMAu6oDBAa9pEADBAW9p8AwDQYJKoZIhvcNAQEL
BQADggEBAB61dSdx98tE+X88O9ovBo2eyCufSBRaP1rGdJcl2piSUADo5AAZMqhf
99aQ/t66/UP6yhqXCCKi/u5LFwkzUS+f0TUxscXmoR+Nm4Ez9aCtgE32GNCneUTS
9qkMbAqEnSosTfKS2GDZDBrmRilWVTdoT6lVdp3/p/SH/5fgFFgpNtJI9amTl8zA
kToeleSvvo8s5HMiTqpwvydz0/9bPVWzXAB2KY/vJ3wE1aPDF5G+1aKzqyZtGCs8
iNgVf8FglwBUxe0apgTPnLwporKGYPkMEQW3WFzfB3i+wpO1SRaabMOKXstze3Tx
OMHh2cyEcA+l4By5nqgCm6tR2J7lTcg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org