Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/b369848844516ed0d4a2e8e61f9568c9be105754.roa
File: b369848844516ed0d4a2e8e61f9568c9be105754.roa (raw, json)
Hash identifier: +faI4u0tYTxX1TvlRXPJrFlVGb6zO6knyx3ClJ/fdMg=
Subject key identifier: 1F:BF:02:98:18:37:39:91:71:19:1F:EF:E5:D5:45:BF:FF:5A:9D:57
Certificate issuer: /CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
Certificate serial: 0D15C1
Authority key identifier: 72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/b369848844516ed0d4a2e8e61f9568c9be105754.roa
Signing time: Wed 24 Mar 2021 14:47:36 +0000
ROA not before: Wed 24 Mar 2021 14:47:36 +0000
ROA not after: Tue 24 Mar 2026 14:47:36 +0000
asID: 21826
IP address blocks: 181.208.0.0/17 maxlen: 24
181.208.128.0/17 maxlen: 24
186.14.0.0/16 maxlen: 24
186.188.0.0/17 maxlen: 24
190.142.0.0/16 maxlen: 24
200.75.96.0/19 maxlen: 24
200.8.0.0/16 maxlen: 24
200.82.128.0/19 maxlen: 24
200.82.160.0/20 maxlen: 24
200.82.176.0/20 maxlen: 24
200.82.192.0/20 maxlen: 24
200.82.208.0/20 maxlen: 24
200.82.224.0/19 maxlen: 24
2803:8100::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 857537 (0xd15c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
Validity
Not Before: Mar 24 14:47:36 2021 GMT
Not After : Mar 24 14:47:36 2026 GMT
Subject: CN=b369848844516ed0d4a2e8e61f9568c9be105754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4a:d9:96:15:4a:30:42:87:03:b9:a8:a9:73:
47:a0:b0:f7:3c:92:c6:61:a4:44:ef:7e:13:1f:04:
1c:e5:4a:d1:fd:97:6b:d8:6e:24:d2:8b:c2:d6:c5:
86:69:e8:aa:b0:aa:9d:95:d8:8b:1d:55:6c:80:35:
14:af:77:6e:b0:87:c4:f0:a1:e1:59:ad:4e:2e:5c:
ef:84:ed:bf:f2:6e:61:23:f8:97:98:33:76:be:da:
0f:b7:78:24:aa:b0:00:0c:ce:4c:7f:a0:f0:6e:9d:
fa:0e:40:eb:d6:46:1c:be:de:d0:7c:f3:97:70:09:
46:e3:10:b8:f4:d3:7f:ad:71:a4:2b:88:e4:8e:7d:
b1:a9:d6:21:34:97:de:60:bc:58:30:01:c2:12:6d:
c6:7a:91:c3:9f:a8:35:63:2c:10:b4:bf:41:d7:26:
fb:01:28:76:63:74:c3:a1:cf:e4:80:1c:06:2a:b0:
8a:23:ad:54:59:7f:b9:06:e7:65:50:38:69:4b:47:
2f:91:f8:00:58:2d:f2:55:87:bc:cb:4e:d8:ca:2b:
cf:83:73:44:45:71:83:14:b0:eb:8e:78:37:2e:66:
e7:10:80:2b:8c:af:b1:24:d0:6d:0e:26:48:4a:4b:
80:30:6e:bf:a1:42:12:de:37:f5:c7:3e:14:85:c8:
52:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BF:02:98:18:37:39:91:71:19:1F:EF:E5:D5:45:BF:FF:5A:9D:57
X509v3 Authority Key Identifier:
keyid:72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/b369848844516ed0d4a2e8e61f9568c9be105754.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/ef2d0ae672567bf0e707903589365faae1ff0bbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.208.0.0/16
186.14.0.0/16
186.188.0.0/17
190.142.0.0/16
200.8.0.0/16
200.75.96.0/19
200.82.128.0/17
IPv6:
2803:8100::/32
Signature Algorithm: sha256WithRSAEncryption
46:95:2f:47:5f:01:50:6e:81:5c:a0:cc:e3:1b:f3:e3:d0:ad:
54:8d:dc:31:9e:34:e7:35:44:1b:91:f8:06:03:8a:33:fb:cf:
40:86:6d:63:9c:15:58:e0:06:50:05:ed:59:20:fb:ff:00:0f:
56:42:05:95:97:26:f3:ed:34:37:a9:65:6e:74:44:18:b0:e9:
e4:dc:9d:a0:01:cc:05:37:cb:95:2b:ce:b8:3a:ec:f1:c9:e0:
28:07:05:3b:90:1c:1a:d5:03:fc:14:0c:88:92:db:48:dd:5a:
ca:a4:61:11:25:72:52:0a:4d:ca:23:3a:8d:b6:81:b9:ec:10:
1d:66:3a:cc:a9:8e:3b:57:bc:6d:61:bf:3a:b0:39:a3:6b:ff:
f2:67:bd:af:4b:8b:ad:f5:e9:1c:70:2c:d4:0d:f9:50:de:35:
b3:95:84:d9:cf:1f:98:b4:9b:64:41:02:22:8b:e1:51:3c:f7:
42:4a:eb:e9:19:d0:9c:37:b4:ac:6a:0b:4a:64:7f:93:07:41:
fc:e5:44:17:2f:6d:fa:0c:22:d1:c2:e9:57:b7:6c:78:fa:4e:
be:16:d6:20:a5:a8:52:57:eb:e5:f0:08:7f:25:ea:33:ba:4c:
75:56:77:e4:1e:58:ab:5e:e9:2c:c2:e1:bd:7f:39:99:96:bf:
ef:35:2a:a0
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIDDRXBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVm
MmQwYWU2NzI1NjdiZjBlNzA3OTAzNTg5MzY1ZmFhZTFmZjBiYmMwHhcNMjEwMzI0
MTQ0NzM2WhcNMjYwMzI0MTQ0NzM2WjAzMTEwLwYDVQQDEyhiMzY5ODQ4ODQ0NTE2
ZWQwZDRhMmU4ZTYxZjk1NjhjOWJlMTA1NzU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiErZlhVKMEKHA7moqXNHoLD3PJLGYaRE734THwQc5UrR/Zdr
2G4k0ovC1sWGaeiqsKqdldiLHVVsgDUUr3dusIfE8KHhWa1OLlzvhO2/8m5hI/iX
mDN2vtoPt3gkqrAADM5Mf6Dwbp36DkDr1kYcvt7QfPOXcAlG4xC49NN/rXGkK4jk
jn2xqdYhNJfeYLxYMAHCEm3GepHDn6g1YywQtL9B1yb7ASh2Y3TDoc/kgBwGKrCK
I61UWX+5BudlUDhpS0cvkfgAWC3yVYe8y07YyivPg3NERXGDFLDrjng3LmbnEIAr
jK+xJNBtDiZISkuAMG6/oUIS3jf1xz4UhchSHwIDAQABo4ICijCCAoYwHQYDVR0O
BBYEFB+/ApgYNzmRcRkf7+XVRb//Wp1XMB8GA1UdIwQYMBaAFHJjYSAgisbOig/l
mH4OxY10xWnVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWYyZDBh
ZTY3MjU2N2JmMGU3MDc5MDM1ODkzNjVmYWFlMWZmMGJiYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQyZmQ0MWQtZjkyZC00MDQ4LWJlNTMtNzQ4NTQz
NDI2MDAxL2IzNjk4NDg4NDQ1MTZlZDBkNGEyZThlNjFmOTU2OGM5YmUxMDU3NTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDJmZDQxZC1mOTJkLTQwNDgtYmU1My03NDg1
NDM0MjYwMDEvZWYyZDBhZTY3MjU2N2JmMGU3MDc5MDM1ODkzNjVmYWFlMWZmMGJi
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBOBggrBgEFBQcBBwEB/wQ/
MD0wLAQCAAEwJgMDALXQAwMAug4DBAe6vAADAwC+jgMDAMgIAwQFyEtgAwQHyFKA
MA0EAgACMAcDBQAoA4EAMA0GCSqGSIb3DQEBCwUAA4IBAQBGlS9HXwFQboFcoMzj
G/Pj0K1UjdwxnjTnNUQbkfgGA4oz+89Ahm1jnBVY4AZQBe1ZIPv/AA9WQgWVlybz
7TQ3qWVudEQYsOnk3J2gAcwFN8uVK864OuzxyeAoBwU7kBwa1QP8FAyIkttI3VrK
pGERJXJSCk3KIzqNtoG57BAdZjrMqY47V7xtYb86sDmja//yZ72vS4ut9ekccCzU
DflQ3jWzlYTZzx+YtJtkQQIii+FRPPdCSuvpGdCcN7SsagtKZH+TB0H85UQXL236
DCLRwulXt2x4+k6+FtYgpahSV+vl8Ah/Jeozukx1VnfkHlirXukswuG9fzmZlr/v
NSqg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org