Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/a2fb96461a3220a6b422f70970309c1f5d0c9adb.roa
File: a2fb96461a3220a6b422f70970309c1f5d0c9adb.roa (raw, json)
Hash identifier: EwrgPgBrAsfmMvOcfGm4cJuNDwV7rXdURzyUpO2ZnUA=
Subject key identifier: AD:AD:57:8D:CD:83:80:23:44:98:87:B2:1A:97:B1:6E:8E:BD:78:26
Certificate issuer: /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial: 0E7B3A
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/a2fb96461a3220a6b422f70970309c1f5d0c9adb.roa
Signing time: Wed 24 Mar 2021 14:38:32 +0000
ROA not before: Wed 24 Mar 2021 14:38:31 +0000
ROA not after: Tue 24 Mar 2026 14:38:31 +0000
asID: 27948
IP address blocks: 181.211.208.0/21 maxlen: 22
181.211.248.0/22 maxlen: 22
190.214.76.0/22 maxlen: 22
181.196.0.0/22 maxlen: 22
190.214.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949050 (0xe7b3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Validity
Not Before: Mar 24 14:38:31 2021 GMT
Not After : Mar 24 14:38:31 2026 GMT
Subject: CN=a2fb96461a3220a6b422f70970309c1f5d0c9adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:5d:76:b7:79:a1:73:8f:a3:54:70:cf:3a:
fe:28:2c:76:ca:cf:8f:67:f3:01:0e:41:98:8a:82:
eb:a7:d2:25:70:91:81:9c:33:76:b8:fd:b9:2b:e2:
84:34:fe:23:b9:2f:5a:35:42:5b:aa:0b:1d:ed:2f:
ac:7f:d4:b9:c6:99:49:6f:c0:69:a0:37:85:cd:bb:
81:29:a8:e5:be:34:99:4e:78:1a:1a:5b:9b:f6:17:
f9:62:0f:fb:a5:26:b2:a2:24:e0:cb:e5:1b:47:92:
c2:10:fb:8c:30:b6:f0:30:12:17:e5:da:af:30:1b:
fe:6a:04:59:78:a3:7c:d1:f7:00:43:44:dc:94:cd:
03:be:e4:f1:31:9f:a7:2d:3f:10:c0:64:f6:f4:c9:
23:ff:bd:16:0c:5d:97:7f:05:95:34:d4:f9:2e:67:
a9:d3:14:81:c0:4f:7c:53:93:89:4c:85:6f:3b:bd:
ae:d9:76:d8:e9:b9:50:9e:77:02:fc:9a:32:f4:18:
34:76:59:4a:a2:38:28:d1:38:53:3b:cd:f9:6d:a8:
81:c6:81:12:aa:43:f9:8a:5a:e6:b8:85:62:18:ca:
a2:c9:2c:36:76:59:56:e1:ad:1c:48:62:de:59:07:
ce:5e:e5:98:28:0b:32:f6:e9:20:0e:3d:af:12:60:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AD:57:8D:CD:83:80:23:44:98:87:B2:1A:97:B1:6E:8E:BD:78:26
X509v3 Authority Key Identifier:
keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/a2fb96461a3220a6b422f70970309c1f5d0c9adb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.196.0.0/22
181.211.208.0/21
181.211.248.0/22
190.214.76.0/22
190.214.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:18:95:6d:ad:8f:92:3e:43:16:b3:62:8a:27:3f:13:db:a8:
f4:c6:1c:1e:c9:e9:5d:7d:0e:5a:e8:98:8f:5a:62:c2:31:95:
71:2a:71:40:e3:b2:34:04:6d:25:83:18:0e:34:db:68:c2:c6:
46:25:5a:4f:b5:f9:15:5f:69:fb:04:9a:6e:f2:98:82:da:dc:
dd:f4:ad:0e:1e:78:be:b9:c9:3c:80:e6:57:81:e0:cd:ec:ca:
67:76:af:22:85:92:36:65:4e:e6:67:9a:56:17:5b:f9:87:c1:
0f:dd:b7:70:e1:fe:84:b7:eb:9e:24:09:d1:76:eb:91:5b:d6:
f0:94:50:58:72:23:e5:a8:0f:4c:53:65:9b:f0:89:0b:88:fd:
2f:6f:79:f5:5a:29:bf:64:1a:53:b5:ed:6f:53:29:08:da:19:
ca:7d:1c:5a:fd:e4:89:b0:e6:03:43:f6:5d:a9:67:c7:8f:d0:
5b:fc:67:e2:34:18:96:a9:7f:f1:9f:5e:b5:27:ae:ed:55:95:
e9:c9:9b:46:70:98:64:ab:11:9e:75:68:b5:4f:ae:4e:bb:8a:
9f:88:d8:87:f8:e1:44:8b:6b:97:8e:67:9c:c8:52:a0:76:f2:
12:77:0f:c6:31:6b:d2:9c:b0:a3:19:c1:5e:f5:ce:76:84:d8:
21:ef:38:89
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDDns6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
NTllMWUzMzE3NzA0NTc1ZjJjMGI3NTBlZTczYjE2NmEzOWNkMzcwHhcNMjEwMzI0
MTQzODMxWhcNMjYwMzI0MTQzODMxWjAzMTEwLwYDVQQDEyhhMmZiOTY0NjFhMzIy
MGE2YjQyMmY3MDk3MDMwOWMxZjVkMGM5YWRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlV9ddrd5oXOPo1Rwzzr+KCx2ys+PZ/MBDkGYioLrp9IlcJGB
nDN2uP25K+KENP4juS9aNUJbqgsd7S+sf9S5xplJb8BpoDeFzbuBKajlvjSZTnga
Glub9hf5Yg/7pSayoiTgy+UbR5LCEPuMMLbwMBIX5dqvMBv+agRZeKN80fcAQ0Tc
lM0DvuTxMZ+nLT8QwGT29Mkj/70WDF2XfwWVNNT5Lmep0xSBwE98U5OJTIVvO72u
2XbY6blQnncC/Joy9Bg0dllKojgo0ThTO835baiBxoESqkP5ilrmuIViGMqiySw2
dllW4a0cSGLeWQfOXuWYKAsy9ukgDj2vEmCDlQIDAQABo4ICczCCAm8wHQYDVR0O
BBYEFK2tV43Ng4AjRJiHshqXsW6OvXgmMB8GA1UdIwQYMBaAFIDwxydPgiTR6Xbz
gObvMs8Q+J3TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTA1OWUx
ZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2QzNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWNhNzEzZjUtNmNhYy00ODZlLWEwMTYtYTNlOGIz
MWJmMDI5L2EyZmI5NjQ2MWEzMjIwYTZiNDIyZjcwOTcwMzA5YzFmNWQwYzlhZGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hY2E3MTNmNS02Y2FjLTQ4NmUtYTAxNi1hM2U4
YjMxYmYwMjkvMTA1OWUxZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2Qz
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQo
MCYwJAQCAAEwHgMEArXEAAMEA7XT0AMEArXT+AMEAr7WTAMEAL7W2DANBgkqhkiG
9w0BAQsFAAOCAQEAsBiVba2Pkj5DFrNiiic/E9uo9MYcHsnpXX0OWuiYj1piwjGV
cSpxQOOyNARtJYMYDjTbaMLGRiVaT7X5FV9p+wSabvKYgtrc3fStDh54vrnJPIDm
V4HgzezKZ3avIoWSNmVO5meaVhdb+YfBD923cOH+hLfrniQJ0XbrkVvW8JRQWHIj
5agPTFNlm/CJC4j9L2959Vopv2QaU7Xtb1MpCNoZyn0cWv3kibDmA0P2Xalnx4/Q
W/xn4jQYlql/8Z9etSeu7VWV6cmbRnCYZKsRnnVotU+uTruKn4jYh/jhRItrl45n
nMhSoHbyEncPxjFr0pywoxnBXvXOdoTYIe84iQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org