Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/28da74e955e972d548ff040c9416d27fbdaa4e94.roa
File: 28da74e955e972d548ff040c9416d27fbdaa4e94.roa (raw, json)
Hash identifier: 4Iw/cRSeAkKS0dpiP7SP8hvcKReh77sT274WbadOSdw=
Subject key identifier: FA:90:42:FB:25:02:67:91:0C:53:90:36:5E:77:1D:C5:E3:C2:D9:AA
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 1AF374
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/28da74e955e972d548ff040c9416d27fbdaa4e94.roa
Signing time: Tue 30 Aug 2022 20:20:40 +0000
ROA not before: Tue 11 May 2021 03:00:00 +0000
ROA not after: Thu 11 May 2023 03:00:00 +0000
asID: 262589
IP address blocks: 179.1.5.0/24 maxlen: 24
179.1.11.0/24 maxlen: 24
179.1.13.0/24 maxlen: 24
179.1.69.0/24 maxlen: 24
179.1.91.0/24 maxlen: 24
179.1.89.0/24 maxlen: 24
179.1.70.0/24 maxlen: 24
179.1.131.0/24 maxlen: 24
179.1.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1766260 (0x1af374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: May 11 03:00:00 2021 GMT
Not After : May 11 03:00:00 2023 GMT
Subject: CN=28da74e955e972d548ff040c9416d27fbdaa4e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:8f:ce:4d:3b:cb:e7:9e:1b:f9:10:9c:1a:
33:dc:3e:ce:76:0d:8c:41:d8:ec:5d:b2:99:d1:e5:
c5:b4:eb:b3:dc:3a:24:77:e9:71:4b:0e:86:b6:af:
60:57:d1:ab:a9:4b:dd:3d:87:18:49:2c:80:ee:b2:
92:16:97:c9:86:8d:73:00:47:00:c4:ec:d3:2e:31:
2b:7b:65:18:26:bf:c4:d8:ba:87:c5:2f:e2:0c:0d:
60:b3:1e:55:40:be:1c:7b:e5:dc:11:1f:8b:c0:aa:
4e:9e:cb:66:ff:11:06:2d:6d:4a:69:0c:6a:a8:89:
3a:2f:5a:8e:66:7a:66:8f:6e:0c:57:d8:29:8b:ec:
79:1e:91:ed:bf:86:3b:dd:c6:f9:22:f3:32:75:40:
16:69:c4:44:50:5e:7c:af:35:2d:6e:e4:45:73:07:
0e:a6:cd:28:ff:16:c2:bc:10:98:5f:57:b7:bb:39:
13:2d:2c:ac:20:5f:d4:32:8e:ec:2d:42:dd:4b:d7:
3d:1c:8b:55:5e:66:fb:93:55:b7:7b:c3:e3:9d:e6:
6e:3a:7f:e1:a5:29:2f:9b:0a:1c:e3:52:0f:32:83:
ab:7e:7e:b0:00:45:10:3a:26:7c:54:8f:5d:eb:a7:
43:69:aa:3f:31:28:40:11:14:ed:64:78:b1:54:2b:
6f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:90:42:FB:25:02:67:91:0C:53:90:36:5E:77:1D:C5:E3:C2:D9:AA
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/28da74e955e972d548ff040c9416d27fbdaa4e94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.1.5.0/24
179.1.11.0/24
179.1.13.0/24
179.1.69.0-179.1.70.255
179.1.89.0/24
179.1.91.0/24
179.1.131.0-179.1.132.255
Signature Algorithm: sha256WithRSAEncryption
73:35:01:b9:b8:01:2b:1b:a6:bb:4d:0e:db:0c:55:1b:9a:b5:
e9:fd:a2:ac:1d:06:55:ca:85:c5:1d:1f:c2:05:e9:59:d5:2a:
ca:64:60:4a:36:b9:3a:d4:21:61:1b:b3:1e:2d:1f:06:7e:df:
85:b0:b9:fe:3b:d1:02:b2:39:44:11:74:ea:f6:70:c0:99:72:
42:10:69:5a:f4:72:41:12:c1:84:c1:ad:5e:1c:36:3e:be:ce:
54:10:13:a4:52:23:bc:6b:27:a8:9c:01:62:f2:bd:8e:94:8b:
83:7a:54:37:70:b3:5e:ae:5c:1c:fc:cb:a4:9d:2e:90:be:8f:
07:68:5c:c8:de:c8:0a:44:ee:45:09:44:bc:e6:c7:99:bb:76:
50:7a:13:50:cf:e4:61:8a:c8:bd:39:f7:2d:48:ea:60:c6:6f:
81:4b:65:89:05:51:dc:a9:42:9b:53:f3:50:c6:50:ce:e0:36:
cf:48:72:a2:df:63:58:ed:c0:33:de:7b:8d:66:42:36:1b:99:
4f:d9:88:cc:7d:3d:e4:2a:63:bf:6d:34:54:f4:1d:ac:55:59:
b0:b4:31:b9:8d:64:02:79:31:dd:bc:6c:09:fa:b7:31:89:ac:
e3:ce:9f:a8:97:d9:05:0d:0d:cd:43:59:45:1c:bb:bc:4c:7c:
50:db:3c:19
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgIDGvN0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjEwNTEx
MDMwMDAwWhcNMjMwNTExMDMwMDAwWjAzMTEwLwYDVQQDEygyOGRhNzRlOTU1ZTk3
MmQ1NDhmZjA0MGM5NDE2ZDI3ZmJkYWE0ZTk0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmHSPzk07y+eeG/kQnBoz3D7Odg2MQdjsXbKZ0eXFtOuz3Dok
d+lxSw6Gtq9gV9GrqUvdPYcYSSyA7rKSFpfJho1zAEcAxOzTLjEre2UYJr/E2LqH
xS/iDA1gsx5VQL4ce+XcER+LwKpOnstm/xEGLW1KaQxqqIk6L1qOZnpmj24MV9gp
i+x5HpHtv4Y73cb5IvMydUAWacREUF58rzUtbuRFcwcOps0o/xbCvBCYX1e3uzkT
LSysIF/UMo7sLULdS9c9HItVXmb7k1W3e8PjneZuOn/hpSkvmwoc41IPMoOrfn6w
AEUQOiZ8VI9d66dDaao/MShAERTtZHixVCtvSQIDAQABo4ICjzCCAoswHQYDVR0O
BBYEFPqQQvslAmeRDFOQNl53HcXjwtmqMB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5LzI4ZGE3NGU5NTVlOTcyZDU0OGZmMDQwYzk0MTZkMjdmYmRhYTRlOTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBTBggrBgEFBQcBBwEB/wRE
MEIwQAQCAAEwOgMEALMBBQMEALMBCwMEALMBDTAMAwQAswFFAwQAswFGAwQAswFZ
AwQAswFbMAwDBACzAYMDBACzAYQwDQYJKoZIhvcNAQELBQADggEBAHM1Abm4ASsb
prtNDtsMVRuaten9oqwdBlXKhcUdH8IF6VnVKspkYEo2uTrUIWEbsx4tHwZ+34Ww
uf470QKyOUQRdOr2cMCZckIQaVr0ckESwYTBrV4cNj6+zlQQE6RSI7xrJ6icAWLy
vY6Ui4N6VDdws16uXBz8y6SdLpC+jwdoXMjeyApE7kUJRLzmx5m7dlB6E1DP5GGK
yL059y1I6mDGb4FLZYkFUdypQptT81DGUM7gNs9IcqLfY1jtwDPee41mQjYbmU/Z
iMx9PeQqY79tNFT0HaxVWbC0MbmNZAJ5Md28bAn6tzGJrOPOn6iX2QUNDc1DWUUc
u7xMfFDbPBk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org