Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4342c21-5813-4eb7-a533-c2047e2eb38c/33c2c13a8a9c84bd81e675ee70a222c6c6a52851.roa
File: 33c2c13a8a9c84bd81e675ee70a222c6c6a52851.roa (raw, json)
Hash identifier: z7NUHiBLakrW1BPJd5kRsZ5onwLnviDjSPa8Vr2eUNU=
Subject key identifier: A9:D8:C5:39:DC:9F:67:B2:C0:BE:31:30:F6:34:DF:9E:AD:34:6E:DA
Certificate issuer: /CN=e17587a4cdec02d0d1592726772c8b9bee90f10a
Certificate serial: 0D5094
Authority key identifier: 98:64:4A:C3:63:0B:C4:C7:12:A9:C5:42:FA:FF:1F:39:AC:5F:34:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e17587a4cdec02d0d1592726772c8b9bee90f10a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b4342c21-5813-4eb7-a533-c2047e2eb38c/33c2c13a8a9c84bd81e675ee70a222c6c6a52851.roa
Signing time: Wed 24 Mar 2021 14:46:04 +0000
ROA not before: Wed 24 Mar 2021 14:46:04 +0000
ROA not after: Tue 24 Mar 2026 14:46:04 +0000
asID: 32034
IP address blocks: 138.36.144.0/24 maxlen: 24
138.36.145.0/24 maxlen: 24
138.36.146.0/24 maxlen: 24
181.199.128.0/20 maxlen: 20
186.64.124.0/22 maxlen: 22
201.158.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 872596 (0xd5094)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17587a4cdec02d0d1592726772c8b9bee90f10a
Validity
Not Before: Mar 24 14:46:04 2021 GMT
Not After : Mar 24 14:46:04 2026 GMT
Subject: CN=33c2c13a8a9c84bd81e675ee70a222c6c6a52851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:84:2f:e5:fd:89:28:95:ac:40:23:3c:ac:
90:ec:63:0f:60:68:7d:92:d5:b4:66:ee:30:f1:29:
c7:aa:50:8a:49:6e:bd:90:78:7b:75:b7:c9:b6:13:
65:74:37:89:e7:f0:ef:41:e0:45:bf:b1:22:4c:25:
9c:1a:ed:ca:83:db:33:da:5a:7b:51:76:6b:c5:48:
46:8d:f2:0f:45:62:2a:17:26:9a:bb:52:0d:d3:01:
e6:0b:67:a6:74:d7:c6:06:41:c3:8a:9f:9f:b6:7c:
cc:2d:dd:fa:a5:51:fd:05:2c:7f:35:35:ff:5d:11:
28:96:47:51:a6:01:43:7a:a9:75:02:68:d8:d6:a5:
2b:7f:b8:79:20:9e:8c:87:81:07:46:5f:fe:66:e8:
c8:a5:93:e5:14:1e:46:3f:3b:e1:76:ba:7e:2f:00:
35:e9:93:28:d8:d3:04:27:ef:5a:14:7c:25:16:49:
6d:95:a6:86:a7:1c:36:03:11:f0:29:41:2e:3e:7d:
78:bd:32:09:86:0c:74:19:76:fc:46:e3:d6:be:8a:
65:61:99:29:49:16:a7:bb:3f:9f:90:96:90:4f:f5:
60:80:93:d5:3d:0a:d3:5b:46:88:f5:f0:b4:49:43:
e4:8d:17:ef:01:41:cd:a3:76:74:dd:4d:a9:87:e7:
b5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D8:C5:39:DC:9F:67:B2:C0:BE:31:30:F6:34:DF:9E:AD:34:6E:DA
X509v3 Authority Key Identifier:
keyid:98:64:4A:C3:63:0B:C4:C7:12:A9:C5:42:FA:FF:1F:39:AC:5F:34:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e17587a4cdec02d0d1592726772c8b9bee90f10a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4342c21-5813-4eb7-a533-c2047e2eb38c/33c2c13a8a9c84bd81e675ee70a222c6c6a52851.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b4342c21-5813-4eb7-a533-c2047e2eb38c/e17587a4cdec02d0d1592726772c8b9bee90f10a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.144.0-138.36.146.255
181.199.128.0/20
186.64.124.0/22
201.158.52.0/22
Signature Algorithm: sha256WithRSAEncryption
89:1f:04:63:44:a1:32:4c:e1:9d:fa:dd:32:0d:31:92:35:bb:
48:bd:25:d1:94:80:31:53:36:eb:08:bd:ce:e1:05:f7:25:2d:
2a:60:5d:32:ea:27:d8:d5:f3:55:c4:ac:a1:19:c4:fb:e9:3c:
7c:d0:49:2d:94:96:e9:80:67:93:88:f1:c2:de:19:ad:bd:be:
9d:b6:1e:51:06:41:28:dd:5b:e9:be:09:c5:64:4f:98:e4:6e:
cd:95:3d:7f:65:11:33:39:74:e6:0f:8a:c1:be:d9:1e:88:c7:
f1:03:76:6a:fd:ae:3c:64:8e:a1:0f:6c:50:f5:59:e6:bd:c7:
da:df:c2:45:ae:04:c6:ed:9c:1b:77:1e:2e:3f:78:43:ef:9c:
59:39:ab:76:b6:6c:c9:e6:7d:6a:d1:c3:fe:33:32:29:01:93:
28:c8:4e:a0:70:d1:c7:e9:0d:73:90:50:e4:96:93:49:9a:64:
58:29:2b:f3:ce:02:b3:92:3a:06:76:c0:5c:7e:cb:ac:65:9b:
4f:04:79:51:6c:9c:de:84:7a:77:64:e2:5e:52:d5:9a:62:bb:
61:a4:e4:ab:65:7e:60:b7:57:0c:15:00:a7:59:58:0a:2e:e0:
fa:14:fb:39:29:33:60:f0:68:9f:88:df:66:2f:bb:ce:64:7a:
22:02:1d:5f
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIDDVCUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGUx
NzU4N2E0Y2RlYzAyZDBkMTU5MjcyNjc3MmM4YjliZWU5MGYxMGEwHhcNMjEwMzI0
MTQ0NjA0WhcNMjYwMzI0MTQ0NjA0WjAzMTEwLwYDVQQDEygzM2MyYzEzYThhOWM4
NGJkODFlNjc1ZWU3MGEyMjJjNmM2YTUyODUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxs+EL+X9iSiVrEAjPKyQ7GMPYGh9ktW0Zu4w8SnHqlCKSW69
kHh7dbfJthNldDeJ5/DvQeBFv7EiTCWcGu3Kg9sz2lp7UXZrxUhGjfIPRWIqFyaa
u1IN0wHmC2emdNfGBkHDip+ftnzMLd36pVH9BSx/NTX/XREolkdRpgFDeql1AmjY
1qUrf7h5IJ6Mh4EHRl/+ZujIpZPlFB5GPzvhdrp+LwA16ZMo2NMEJ+9aFHwlFklt
laaGpxw2AxHwKUEuPn14vTIJhgx0GXb8RuPWvoplYZkpSRanuz+fkJaQT/VggJPV
PQrTW0aI9fC0SUPkjRfvAUHNo3Z03U2ph+e11QIDAQABo4ICdTCCAnEwHQYDVR0O
BBYEFKnYxTncn2eywL4xMPY0356tNG7aMB8GA1UdIwQYMBaAFJhkSsNjC8THEqnF
Qvr/HzmsXzQXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTE3NTg3
YTRjZGVjMDJkMGQxNTkyNzI2NzcyYzhiOWJlZTkwZjEwYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjQzNDJjMjEtNTgxMy00ZWI3LWE1MzMtYzIwNDdl
MmViMzhjLzMzYzJjMTNhOGE5Yzg0YmQ4MWU2NzVlZTcwYTIyMmM2YzZhNTI4NTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNDM0MmMyMS01ODEzLTRlYjctYTUzMy1jMjA0
N2UyZWIzOGMvZTE3NTg3YTRjZGVjMDJkMGQxNTkyNzI2NzcyYzhiOWJlZTkwZjEw
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQq
MCgwJgQCAAEwIDAMAwQEiiSQAwQAiiSSAwQEtceAAwQCukB8AwQCyZ40MA0GCSqG
SIb3DQEBCwUAA4IBAQCJHwRjRKEyTOGd+t0yDTGSNbtIvSXRlIAxUzbrCL3O4QX3
JS0qYF0y6ifY1fNVxKyhGcT76Tx80EktlJbpgGeTiPHC3hmtvb6dth5RBkEo3Vvp
vgnFZE+Y5G7NlT1/ZREzOXTmD4rBvtkeiMfxA3Zq/a48ZI6hD2xQ9Vnmvcfa38JF
rgTG7Zwbdx4uP3hD75xZOat2tmzJ5n1q0cP+MzIpAZMoyE6gcNHH6Q1zkFDklpNJ
mmRYKSvzzgKzkjoGdsBcfsusZZtPBHlRbJzehHp3ZOJeUtWaYrthpOSrZX5gt1cM
FQCnWVgKLuD6FPs5KTNg8GifiN9mL7vOZHoiAh1f
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org