Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95768f2d-c858-4ead-b85c-580ee3c53caf/90c57dddc26beed304a129e9ec9e9a903ad13ebd.roa
File: 90c57dddc26beed304a129e9ec9e9a903ad13ebd.roa (raw, json)
Hash identifier: 8EP9SjeboIqG0U6V+i5OST1iB+CyXJcvjPdtLKkeMt0=
Subject key identifier: A0:9F:B9:ED:6E:80:C7:36:98:1E:AF:28:7D:63:6A:A3:9D:01:1D:47
Certificate issuer: /CN=637d8fdc4535b0e4099c644d47106ef014aaaeea
Certificate serial: 2458E4
Authority key identifier: 48:34:2B:6E:D3:2F:1C:9A:0E:26:05:34:12:EA:A7:7F:83:5F:25:F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/637d8fdc4535b0e4099c644d47106ef014aaaeea.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/95768f2d-c858-4ead-b85c-580ee3c53caf/90c57dddc26beed304a129e9ec9e9a903ad13ebd.roa
Signing time: Tue 24 Oct 2023 15:36:43 +0000
ROA not before: Tue 24 Oct 2023 15:36:43 +0000
ROA not after: Fri 24 Oct 2025 15:36:43 +0000
asID: 27792
IP address blocks: 181.189.192.0/19 maxlen: 24
200.2.120.0/21 maxlen: 24
143.202.24.0/22 maxlen: 24
190.6.96.0/20 maxlen: 24
190.6.112.0/21 maxlen: 24
170.84.212.0/22 maxlen: 24
2800:5a0::/32 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2382052 (0x2458e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637d8fdc4535b0e4099c644d47106ef014aaaeea
Validity
Not Before: Oct 24 15:36:43 2023 GMT
Not After : Oct 24 15:36:43 2025 GMT
Subject: CN=90c57dddc26beed304a129e9ec9e9a903ad13ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:e8:5c:aa:3c:bd:2c:81:b1:55:41:d9:de:
78:51:2b:aa:1d:09:42:db:6e:99:8a:38:93:5c:58:
76:d1:52:34:df:d3:8b:1e:17:91:74:08:d6:3f:d9:
70:a1:05:f3:c8:b3:19:6a:27:b3:61:a2:9a:81:3b:
d0:75:c4:97:8e:c4:d2:7f:23:08:8b:d2:0c:51:4d:
83:55:45:e3:a1:a9:c5:e2:cc:6e:56:8f:1d:93:8a:
3d:20:68:fa:33:ae:ef:c0:d0:9f:09:26:90:6e:4c:
2a:d7:8e:19:f9:fb:4a:ff:04:41:5f:5a:0d:a1:1e:
21:39:23:a4:e5:07:12:11:31:af:ca:4f:62:a5:6b:
37:45:c6:96:d5:19:86:d2:94:59:78:4e:e1:74:2a:
50:eb:41:12:d0:41:a5:0d:04:e4:bb:46:ca:3b:66:
c6:82:2b:76:c1:4a:36:31:8f:05:5f:28:90:7e:8c:
fa:a0:5a:86:d5:bd:74:d9:db:85:0e:c4:20:b9:dc:
6b:7f:06:c9:19:54:2c:c2:55:a3:52:30:32:bb:bf:
34:1e:1c:44:22:17:91:ef:90:31:af:39:c3:86:85:
fd:18:70:4b:8e:af:a6:84:6e:01:6d:57:f5:95:dd:
cd:e2:a6:54:25:38:c3:a0:56:13:97:c9:32:81:f5:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9F:B9:ED:6E:80:C7:36:98:1E:AF:28:7D:63:6A:A3:9D:01:1D:47
X509v3 Authority Key Identifier:
keyid:48:34:2B:6E:D3:2F:1C:9A:0E:26:05:34:12:EA:A7:7F:83:5F:25:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/637d8fdc4535b0e4099c644d47106ef014aaaeea.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95768f2d-c858-4ead-b85c-580ee3c53caf/90c57dddc26beed304a129e9ec9e9a903ad13ebd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/95768f2d-c858-4ead-b85c-580ee3c53caf/637d8fdc4535b0e4099c644d47106ef014aaaeea.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.24.0/22
170.84.212.0/22
181.189.192.0/19
190.6.96.0-190.6.119.255
200.2.120.0/21
IPv6:
2800:5a0::/32
Signature Algorithm: sha256WithRSAEncryption
5e:03:cf:87:68:2d:95:84:63:4b:df:15:73:16:df:c6:d3:c5:
dc:88:de:44:b4:1b:bd:99:0f:84:56:b1:9b:7b:c2:fa:d4:4b:
3d:c4:66:9f:3f:7b:c3:de:c2:00:dd:5f:ac:c5:b9:04:19:56:
fd:90:55:29:66:b8:77:1d:14:e6:ce:41:4a:f6:cf:0e:81:63:
eb:60:ac:da:4e:05:4e:f6:3d:a0:16:d5:07:31:c9:a0:55:37:
2f:cb:2e:90:74:81:18:a8:12:72:01:6c:f7:12:4f:88:8c:3d:
6d:2e:68:43:93:ec:96:23:dc:92:4e:0c:dc:6f:41:17:f9:ff:
a7:41:a2:7b:53:3b:42:99:d0:38:7f:aa:8a:95:81:30:87:03:
6d:30:ce:6b:5e:94:3d:35:55:e7:32:d5:a1:7c:c3:66:b3:00:
0d:45:f1:43:c8:63:34:df:40:b2:14:da:2f:e3:ed:f3:30:66:
72:33:5a:31:e3:ca:1b:5a:b3:b4:c1:9a:cd:af:89:76:fc:01:
60:8e:1c:3c:cd:80:50:dc:73:6e:97:b5:4b:b8:1d:6f:d1:6c:
f4:32:81:7c:c5:d6:d2:bd:9f:16:d3:00:fc:6b:97:5d:ef:f7:
46:36:51:6c:3d:96:03:a0:a2:85:38:fc:e8:e5:05:c6:d1:b8:
e5:34:57:cd
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIDJFjkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYz
N2Q4ZmRjNDUzNWIwZTQwOTljNjQ0ZDQ3MTA2ZWYwMTRhYWFlZWEwHhcNMjMxMDI0
MTUzNjQzWhcNMjUxMDI0MTUzNjQzWjAzMTEwLwYDVQQDEyg5MGM1N2RkZGMyNmJl
ZWQzMDRhMTI5ZTllYzllOWE5MDNhZDEzZWJkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuUzoXKo8vSyBsVVB2d54USuqHQlC226ZijiTXFh20VI039OL
HheRdAjWP9lwoQXzyLMZaiezYaKagTvQdcSXjsTSfyMIi9IMUU2DVUXjoanF4sxu
Vo8dk4o9IGj6M67vwNCfCSaQbkwq144Z+ftK/wRBX1oNoR4hOSOk5QcSETGvyk9i
pWs3RcaW1RmG0pRZeE7hdCpQ60ES0EGlDQTku0bKO2bGgit2wUo2MY8FXyiQfoz6
oFqG1b102duFDsQgudxrfwbJGVQswlWjUjAyu780HhxEIheR75AxrznDhoX9GHBL
jq+mhG4BbVf1ld3N4qZUJTjDoFYTl8kygfUf1QIDAQABo4ICijCCAoYwHQYDVR0O
BBYEFKCfue1ugMc2mB6vKH1jaqOdAR1HMB8GA1UdIwQYMBaAFEg0K27TLxyaDiYF
NBLqp3+DXyX2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjM3ZDhm
ZGM0NTM1YjBlNDA5OWM2NDRkNDcxMDZlZjAxNGFhYWVlYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTU3NjhmMmQtYzg1OC00ZWFkLWI4NWMtNTgwZWUz
YzUzY2FmLzkwYzU3ZGRkYzI2YmVlZDMwNGExMjllOWVjOWU5YTkwM2FkMTNlYmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NTc2OGYyZC1jODU4LTRlYWQtYjg1Yy01ODBl
ZTNjNTNjYWYvNjM3ZDhmZGM0NTM1YjBlNDA5OWM2NDRkNDcxMDZlZjAxNGFhYWVl
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBOBggrBgEFBQcBBwEB/wQ/
MD0wLAQCAAEwJgMEAo/KGAMEAqpU1AMEBbW9wDAMAwQFvgZgAwQDvgZwAwQDyAJ4
MA0EAgACMAcDBQAoAAWgMA0GCSqGSIb3DQEBCwUAA4IBAQBeA8+HaC2VhGNL3xVz
Ft/G08XciN5EtBu9mQ+EVrGbe8L61Es9xGafP3vD3sIA3V+sxbkEGVb9kFUpZrh3
HRTmzkFK9s8OgWPrYKzaTgVO9j2gFtUHMcmgVTcvyy6QdIEYqBJyAWz3Ek+IjD1t
LmhDk+yWI9ySTgzcb0EX+f+nQaJ7UztCmdA4f6qKlYEwhwNtMM5rXpQ9NVXnMtWh
fMNmswANRfFDyGM030CyFNov4+3zMGZyM1ox48obWrO0wZrNr4l2/AFgjhw8zYBQ
3HNul7VLuB1v0Wz0MoF8xdbSvZ8W0wD8a5dd7/dGNlFsPZYDoKKFOPzo5QXG0bjl
NFfN
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org