Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/1e5361ac22c767cbb37b638b5d198a57ee252180.roa
File: 1e5361ac22c767cbb37b638b5d198a57ee252180.roa (raw, json)
Hash identifier: o7KaqsMc+gqozBLp+7ML6p4w88MmI3fo7EPpzqtYhjk=
Subject key identifier: BF:BA:74:0C:BC:BF:F8:AE:2A:EC:B7:99:51:18:DA:AD:42:FC:A3:22
Certificate issuer: /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Certificate serial: 15C14F
Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/1e5361ac22c767cbb37b638b5d198a57ee252180.roa
Signing time: Tue 04 Jan 2022 18:21:39 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 22368
IP address blocks: 181.174.0.0/18 maxlen: 24
190.13.0.0/20 maxlen: 23
190.13.24.0/21 maxlen: 23
190.13.32.0/21 maxlen: 22
190.13.40.0/21 maxlen: 22
190.96.128.0/21 maxlen: 22
190.96.160.0/20 maxlen: 24
190.96.176.0/21 maxlen: 23
190.96.192.0/21 maxlen: 24
190.96.208.0/20 maxlen: 24
190.124.96.0/19 maxlen: 24
190.184.128.0/18 maxlen: 24
201.221.128.0/20 maxlen: 24
201.221.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1425743 (0x15c14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=1e5361ac22c767cbb37b638b5d198a57ee252180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:7a:68:99:7b:69:11:21:4f:93:f4:18:6e:
5c:da:10:b0:63:b8:d1:bb:a5:aa:7f:16:41:0c:54:
4e:89:fb:40:aa:94:4f:0f:4e:d1:25:f5:55:de:d1:
c4:04:ab:70:1f:1e:49:cc:f0:27:10:b9:c3:82:4f:
5e:5c:ee:d5:44:4f:3c:48:63:e0:81:89:0d:05:fc:
46:9d:8a:82:c6:1f:7b:66:2b:74:33:47:eb:4b:78:
bd:54:65:e3:7b:2e:1a:02:95:98:44:c5:53:09:c9:
f3:6c:72:ed:a3:4c:57:5c:29:d9:3e:13:45:ed:c2:
8b:52:13:17:87:61:b9:69:d1:3c:a7:9c:3f:17:75:
f5:4f:05:0f:f8:57:ab:11:fa:72:d0:cb:d6:ec:70:
1f:c9:c1:c4:36:e0:41:7b:6a:94:28:84:4d:5c:da:
60:5d:27:50:1b:77:be:8c:5e:76:eb:a5:70:e9:4a:
bf:bd:62:1e:80:1d:38:01:76:ab:5f:11:f8:15:15:
fd:ce:1e:db:a8:89:1b:f0:b6:bf:d3:1c:b7:13:bc:
8a:70:0e:a9:a9:e0:ec:37:9c:26:af:5b:f5:52:e5:
0a:8c:bd:67:84:08:90:74:5a:48:4b:b6:6d:3f:c4:
06:11:f1:39:3d:e3:7e:91:fe:1b:72:e2:44:30:00:
23:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BA:74:0C:BC:BF:F8:AE:2A:EC:B7:99:51:18:DA:AD:42:FC:A3:22
X509v3 Authority Key Identifier:
keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/1e5361ac22c767cbb37b638b5d198a57ee252180.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.174.0.0/18
190.13.0.0/20
190.13.24.0-190.13.47.255
190.96.128.0/21
190.96.160.0-190.96.183.255
190.96.192.0/21
190.96.208.0/20
190.124.96.0/19
190.184.128.0/18
201.221.128.0/19
Signature Algorithm: sha256WithRSAEncryption
88:c4:2e:b8:4a:7a:16:6f:dc:ee:2b:36:b9:76:29:6a:3e:4b:
08:e4:79:59:2d:a2:7d:a9:54:63:37:57:b8:be:fd:42:0b:9f:
9c:03:a1:b0:b0:33:e1:ce:ea:b9:e0:4f:c6:b9:7f:bd:4b:7d:
35:6b:88:84:bf:0b:0a:70:51:db:dc:45:37:65:df:89:c2:e7:
ac:b0:a1:9c:94:63:f3:d8:07:71:c6:e3:8e:f5:3e:84:51:d7:
ed:30:fe:58:da:a1:2b:c5:93:78:5e:73:0e:a1:8b:f9:07:bb:
ac:f8:a3:6f:5e:83:03:87:6c:d5:50:32:53:f3:dc:3d:e7:dc:
43:b6:a1:60:9d:0c:c4:3f:7a:aa:97:21:b8:16:24:d3:c3:6f:
d8:34:99:e8:19:d8:e1:32:a7:54:cb:d0:e6:d7:81:4c:2d:b9:
6f:d1:23:4c:35:c9:38:b9:21:cc:43:20:4c:99:56:8d:eb:59:
99:9c:42:79:10:f6:61:d7:ec:51:86:d8:96:5d:74:40:0b:90:
4b:2f:ef:1a:ed:bd:66:3d:e6:da:f5:98:13:af:84:a9:e9:2e:
84:a4:bd:2b:f1:6e:2e:06:17:25:5f:72:4b:f4:e5:16:7f:ea:
d7:f5:ed:fb:48:4c:8e:72:00:4b:46:8d:c1:72:7d:98:4c:84:
f1:0d:0f:5b
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgIDFcFPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
N2QzMzA5NDdkMjY0YzgxYjQ1MDNkZjNiMWVmNjdkNDVjYzJkYzQwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygxZTUzNjFhYzIyYzc2
N2NiYjM3YjYzOGI1ZDE5OGE1N2VlMjUyMTgwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt816aJl7aREhT5P0GG5c2hCwY7jRu6WqfxZBDFROiftAqpRP
D07RJfVV3tHEBKtwHx5JzPAnELnDgk9eXO7VRE88SGPggYkNBfxGnYqCxh97Zit0
M0frS3i9VGXjey4aApWYRMVTCcnzbHLto0xXXCnZPhNF7cKLUhMXh2G5adE8p5w/
F3X1TwUP+FerEfpy0MvW7HAfycHENuBBe2qUKIRNXNpgXSdQG3e+jF5266Vw6Uq/
vWIegB04AXarXxH4FRX9zh7bqIkb8La/0xy3E7yKcA6pqeDsN5wmr1v1UuUKjL1n
hAiQdFpIS7ZtP8QGEfE5PeN+kf4bcuJEMAAjoQIDAQABo4ICoTCCAp0wHQYDVR0O
BBYEFL+6dAy8v/iuKuy3mVEY2q1C/KMiMB8GA1UdIwQYMBaAFGG2jf2H687Wyisk
4qqP9wfaY14ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzM3ZDMz
MDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRjNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjNlNWRkOWUtYmJjYS00YzQ5LTkyZjUtOGM2NzUx
MTY1ZTkyLzFlNTM2MWFjMjJjNzY3Y2JiMzdiNjM4YjVkMTk4YTU3ZWUyNTIxODAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iM2U1ZGQ5ZS1iYmNhLTRjNDktOTJmNS04YzY3
NTExNjVlOTIvMzM3ZDMzMDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRj
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBggrBgEFBQcBBwEB/wRW
MFQwUgQCAAEwTAMEBrWuAAMEBL4NADAMAwQDvg0YAwQEvg0gAwQDvmCAMAwDBAW+
YKADBAO+YLADBAO+YMADBAS+YNADBAW+fGADBAa+uIADBAXJ3YAwDQYJKoZIhvcN
AQELBQADggEBAIjELrhKehZv3O4rNrl2KWo+SwjkeVkton2pVGM3V7i+/UILn5wD
obCwM+HO6rngT8a5f71LfTVriIS/CwpwUdvcRTdl34nC56ywoZyUY/PYB3HG4471
PoRR1+0w/ljaoSvFk3hecw6hi/kHu6z4o29egwOHbNVQMlPz3D3n3EO2oWCdDMQ/
eqqXIbgWJNPDb9g0megZ2OEyp1TL0ObXgUwtuW/RI0w1yTi5IcxDIEyZVo3rWZmc
QnkQ9mHX7FGG2JZddEALkEsv7xrtvWY95tr1mBOvhKnpLoSkvSvxbi4GFyVfckv0
5RZ/6tf17ftITI5yAEtGjcFyfZhMhPEND1s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:23 2024 by rpki-client on console-ams.rpki-client.org