Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/38f8bf7c9ed33183cac2d0e5db7d234a76bd2c40.roa
File: 38f8bf7c9ed33183cac2d0e5db7d234a76bd2c40.roa (raw, json)
Hash identifier: jTkNiiZFnlGO84P4jkx3J341kPk36E3MkKZ854XDcKA=
Subject key identifier: 75:94:F3:AA:4E:9A:78:B5:AB:B6:E5:4D:43:F2:8C:CF:55:9B:1E:A7
Certificate issuer: /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial: 20C744
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/38f8bf7c9ed33183cac2d0e5db7d234a76bd2c40.roa
Signing time: Thu 23 Feb 2023 17:52:24 +0000
ROA not before: Mon 20 Feb 2023 17:44:50 +0000
ROA not after: Sun 23 Feb 2025 17:44:50 +0000
asID: 60725
IP address blocks: 190.214.216.0/24 maxlen: 24
181.196.0.0/22 maxlen: 24
181.211.208.0/21 maxlen: 24
181.211.248.0/22 maxlen: 24
190.214.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148164 (0x20c744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Validity
Not Before: Feb 20 17:44:50 2023 GMT
Not After : Feb 23 17:44:50 2025 GMT
Subject: CN=38f8bf7c9ed33183cac2d0e5db7d234a76bd2c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ae:b8:f6:51:2b:97:63:c1:f2:cd:ef:8e:b5:
69:4d:f2:5e:e8:a1:d9:f4:3a:c1:9d:c4:7a:78:cb:
47:01:a5:64:df:5c:75:fc:0a:ca:38:30:8a:3a:80:
25:49:dc:c2:d1:5e:b8:9d:57:76:02:19:94:cc:e2:
20:f5:8f:5c:3b:95:29:17:9c:c2:71:9c:9b:7b:86:
7e:7a:13:fc:53:bf:8f:99:1b:84:47:92:48:f4:0c:
0b:d2:2b:cb:0d:46:f0:27:e0:1e:9f:94:2b:2b:c3:
26:d7:f6:e3:f9:88:e0:85:c5:65:f5:9e:bc:d4:1d:
8f:f9:e7:e3:86:ea:74:06:f7:68:a4:67:68:87:1c:
3f:29:97:88:85:75:46:d8:52:68:db:d4:ac:f6:20:
df:64:57:d4:19:11:90:60:75:0f:11:a8:16:ec:88:
2e:ea:9f:3b:ca:5f:6b:5f:e5:ce:6b:6f:37:b9:71:
03:52:da:c2:fe:f6:f2:9b:fc:56:8f:f2:9a:c2:e0:
28:a1:60:07:89:90:b3:3b:3b:dd:63:a4:70:be:97:
be:41:e9:f9:45:13:e6:7b:88:56:86:9d:c1:62:9e:
3d:c1:e5:ed:5c:f8:a9:3a:bd:d6:2f:45:28:e5:08:
56:29:77:15:ac:4b:93:3b:26:92:82:d2:08:7c:01:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:94:F3:AA:4E:9A:78:B5:AB:B6:E5:4D:43:F2:8C:CF:55:9B:1E:A7
X509v3 Authority Key Identifier:
keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/38f8bf7c9ed33183cac2d0e5db7d234a76bd2c40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.196.0.0/22
181.211.208.0/21
181.211.248.0/22
190.214.76.0/22
190.214.216.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b6:25:8f:7a:5f:d2:ee:d0:e0:b2:97:dc:0d:d0:c1:f4:5c:
b5:f1:9c:d8:69:85:c6:e3:95:ab:b7:4c:26:a8:8d:a5:b6:a7:
b6:64:44:cc:cb:ae:60:56:01:d3:db:9b:3c:be:de:2c:f5:62:
19:03:f9:16:67:80:35:c1:78:a4:a2:95:ae:af:28:a2:17:4c:
b3:6e:75:36:dd:52:63:ad:8f:20:a3:f5:05:24:d8:3b:19:f4:
40:f1:a0:d7:df:79:c3:2e:8d:78:23:ab:30:eb:ac:0a:07:8b:
03:40:c5:f8:92:c6:2a:2a:ae:05:57:56:a1:43:82:51:b6:4e:
ef:ed:f9:61:57:e2:65:ae:80:59:b3:85:9c:05:47:28:56:4e:
75:1b:b8:2c:93:10:44:0d:87:aa:f7:9a:77:36:bb:4f:b9:41:
c1:a0:f1:bc:47:ef:0b:e1:f6:59:b9:41:8d:82:36:10:07:e1:
3a:d7:91:78:f3:26:08:66:ee:d0:47:89:90:d6:aa:86:65:64:
99:8c:1a:b0:4e:ca:2b:53:59:f5:1d:e0:74:d4:61:57:8e:b7:
78:0b:2a:06:c1:9b:12:e0:43:5e:64:c8:b1:23:9e:7b:ea:49:
0b:b1:ff:6a:81:13:e7:17:99:09:2d:b4:5b:46:ba:a0:a6:14:
de:3c:c3:30
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDIMdEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
NTllMWUzMzE3NzA0NTc1ZjJjMGI3NTBlZTczYjE2NmEzOWNkMzcwHhcNMjMwMjIw
MTc0NDUwWhcNMjUwMjIzMTc0NDUwWjAzMTEwLwYDVQQDEygzOGY4YmY3YzllZDMz
MTgzY2FjMmQwZTVkYjdkMjM0YTc2YmQyYzQwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmq649lErl2PB8s3vjrVpTfJe6KHZ9DrBncR6eMtHAaVk31x1
/ArKODCKOoAlSdzC0V64nVd2AhmUzOIg9Y9cO5UpF5zCcZybe4Z+ehP8U7+PmRuE
R5JI9AwL0ivLDUbwJ+Aen5QrK8Mm1/bj+YjghcVl9Z681B2P+efjhup0BvdopGdo
hxw/KZeIhXVG2FJo29Ss9iDfZFfUGRGQYHUPEagW7Igu6p87yl9rX+XOa283uXED
UtrC/vbym/xWj/KawuAooWAHiZCzOzvdY6Rwvpe+Qen5RRPme4hWhp3BYp49weXt
XPipOr3WL0Uo5QhWKXcVrEuTOyaSgtIIfAHlIQIDAQABo4ICczCCAm8wHQYDVR0O
BBYEFHWU86pOmni1q7blTUPyjM9Vmx6nMB8GA1UdIwQYMBaAFIDwxydPgiTR6Xbz
gObvMs8Q+J3TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTA1OWUx
ZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2QzNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWNhNzEzZjUtNmNhYy00ODZlLWEwMTYtYTNlOGIz
MWJmMDI5LzM4ZjhiZjdjOWVkMzMxODNjYWMyZDBlNWRiN2QyMzRhNzZiZDJjNDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hY2E3MTNmNS02Y2FjLTQ4NmUtYTAxNi1hM2U4
YjMxYmYwMjkvMTA1OWUxZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2Qz
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQo
MCYwJAQCAAEwHgMEArXEAAMEA7XT0AMEArXT+AMEAr7WTAMEAL7W2DANBgkqhkiG
9w0BAQsFAAOCAQEAd7Ylj3pf0u7Q4LKX3A3QwfRctfGc2GmFxuOVq7dMJqiNpban
tmREzMuuYFYB09ubPL7eLPViGQP5FmeANcF4pKKVrq8oohdMs251Nt1SY62PIKP1
BSTYOxn0QPGg1995wy6NeCOrMOusCgeLA0DF+JLGKiquBVdWoUOCUbZO7+35YVfi
Za6AWbOFnAVHKFZOdRu4LJMQRA2Hqveadza7T7lBwaDxvEfvC+H2WblBjYI2EAfh
OteRePMmCGbu0EeJkNaqhmVkmYwasE7KK1NZ9R3gdNRhV463eAsqBsGbEuBDXmTI
sSOee+pJC7H/aoET5xeZCS20W0a6oKYU3jzDMA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org