Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/0daa5d903acc44fc53de3d4db5674f406d214ab9.roa
File: 0daa5d903acc44fc53de3d4db5674f406d214ab9.roa (raw, json)
Hash identifier: KebT/gNUX1nbqEFWi6zANGR5msuw6mFOXAYVLyCoHE8=
Subject key identifier: D1:2D:35:71:EA:9E:36:51:9F:44:1D:55:A9:7E:3F:45:07:21:C2:C9
Certificate issuer: /CN=ae85768adef6d4dde1ca45bae430571e45d9370a
Certificate serial: 0C07B3
Authority key identifier: 19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae85768adef6d4dde1ca45bae430571e45d9370a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/0daa5d903acc44fc53de3d4db5674f406d214ab9.roa
Signing time: Wed 24 Mar 2021 14:35:04 +0000
ROA not before: Wed 24 Mar 2021 14:35:04 +0000
ROA not after: Tue 24 Mar 2026 14:35:04 +0000
asID: 27837
IP address blocks: 186.1.160.0/22 maxlen: 24
186.1.165.0/24 maxlen: 24
186.1.166.0/23 maxlen: 24
186.1.170.0/24 maxlen: 24
186.1.172.0/22 maxlen: 24
186.1.176.0/21 maxlen: 24
186.1.184.0/22 maxlen: 24
186.1.188.0/24 maxlen: 24
186.1.190.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 788403 (0xc07b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae85768adef6d4dde1ca45bae430571e45d9370a
Validity
Not Before: Mar 24 14:35:04 2021 GMT
Not After : Mar 24 14:35:04 2026 GMT
Subject: CN=0daa5d903acc44fc53de3d4db5674f406d214ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1d:de:65:35:1c:24:49:5c:ae:54:c1:2d:8f:
51:f8:e6:82:ab:15:f2:3f:f7:9f:0c:ec:81:12:ed:
10:73:0e:e6:55:af:6a:b9:f9:c9:37:3d:d4:cd:5a:
10:0a:58:ca:fb:e3:e2:79:fb:56:39:60:97:07:36:
72:8f:cc:97:54:07:72:f6:7b:7b:ae:fa:fa:72:88:
2e:ae:be:e6:4a:e3:ac:f2:81:6b:01:a3:b7:63:23:
96:cb:c3:86:2d:79:21:5b:0b:38:9d:17:ab:4a:0b:
32:b7:f9:ad:1f:1d:a7:70:4d:0b:43:ae:a3:ef:18:
7b:2a:0d:d4:0e:9a:0e:e4:e4:51:f9:c5:cf:6b:47:
6d:ea:03:37:16:35:fb:3f:c5:66:e3:7a:7e:98:36:
a9:56:90:9c:12:0f:b8:58:14:06:3a:bc:99:c7:c9:
d5:4e:99:f9:2e:2a:7f:3b:b4:ed:50:97:be:c4:01:
e1:13:0f:92:48:3f:ee:8a:67:08:17:09:59:0f:48:
ca:e1:da:d0:3b:3d:ed:6a:3c:df:71:42:49:9e:d9:
3e:8e:64:da:4b:af:01:6a:4f:5d:13:49:b3:e4:71:
0c:a3:4e:04:21:71:78:9c:b4:13:0a:60:44:aa:e7:
f2:33:a2:7d:82:15:6c:6b:c7:4c:69:8d:74:ce:74:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2D:35:71:EA:9E:36:51:9F:44:1D:55:A9:7E:3F:45:07:21:C2:C9
X509v3 Authority Key Identifier:
keyid:19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae85768adef6d4dde1ca45bae430571e45d9370a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/0daa5d903acc44fc53de3d4db5674f406d214ab9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/ae85768adef6d4dde1ca45bae430571e45d9370a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.1.160.0/22
186.1.165.0-186.1.167.255
186.1.170.0/24
186.1.172.0-186.1.188.255
186.1.190.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:2a:d8:bf:df:67:d8:f6:79:2e:a3:ea:1b:2a:50:5a:cd:e4:
5e:12:c1:5d:cc:e6:be:a5:57:e0:c3:c5:f5:b0:8d:01:23:f9:
65:0b:43:2a:5d:12:9b:6b:c8:de:98:83:1a:65:88:19:d2:37:
8f:18:f6:45:37:a9:ad:f6:07:67:72:3a:ff:4f:1c:64:b0:15:
19:73:df:27:f3:b2:68:fb:d4:a4:41:33:68:eb:e5:68:72:07:
52:59:31:9d:52:22:07:80:a2:9b:21:85:95:06:88:07:0f:7d:
f7:84:5c:ba:14:c4:a2:59:77:c5:a0:54:ec:c0:c8:68:0e:8b:
10:3d:ec:09:8b:3e:d2:c1:9d:1c:76:38:dc:3b:5f:c7:e7:f1:
e5:ea:41:e3:d2:65:11:f7:60:47:20:81:33:6a:a7:9c:a9:23:
de:92:4c:cb:ba:7b:ca:c2:ca:4e:da:0f:a4:64:42:49:e1:9a:
42:44:5c:6b:50:7e:9c:0f:ad:81:c2:00:d7:ab:07:c8:13:a1:
4a:1b:a5:b8:ed:5f:89:33:60:00:d0:97:8e:9c:a5:8d:d2:b1:
c9:65:9f:93:e8:88:ce:63:7f:b9:af:72:cf:b1:3c:f6:c3:b8:
0c:d5:40:22:c1:6e:f0:80:79:8e:45:e5:bd:62:13:4c:1e:5c:
dc:c2:30:0f
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgIDDAezMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFl
ODU3NjhhZGVmNmQ0ZGRlMWNhNDViYWU0MzA1NzFlNDVkOTM3MGEwHhcNMjEwMzI0
MTQzNTA0WhcNMjYwMzI0MTQzNTA0WjAzMTEwLwYDVQQDEygwZGFhNWQ5MDNhY2M0
NGZjNTNkZTNkNGRiNTY3NGY0MDZkMjE0YWI5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiR3eZTUcJElcrlTBLY9R+OaCqxXyP/efDOyBEu0Qcw7mVa9q
ufnJNz3UzVoQCljK++PieftWOWCXBzZyj8yXVAdy9nt7rvr6cogurr7mSuOs8oFr
AaO3YyOWy8OGLXkhWws4nRerSgsyt/mtHx2ncE0LQ66j7xh7Kg3UDpoO5ORR+cXP
a0dt6gM3FjX7P8Vm43p+mDapVpCcEg+4WBQGOryZx8nVTpn5Lip/O7TtUJe+xAHh
Ew+SSD/uimcIFwlZD0jK4drQOz3tajzfcUJJntk+jmTaS68Bak9dE0mz5HEMo04E
IXF4nLQTCmBEqufyM6J9ghVsa8dMaY10znSN+wIDAQABo4ICgzCCAn8wHQYDVR0O
BBYEFNEtNXHqnjZRn0QdVal+P0UHIcLJMB8GA1UdIwQYMBaAFBlsB4f4g99vpI8p
SmHQNNI974w2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWU4NTc2
OGFkZWY2ZDRkZGUxY2E0NWJhZTQzMDU3MWU0NWQ5MzcwYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjk3NjM4MGQtMmU5MC00ZTI4LWIwYTYtNGIzZGZl
MWQ4YWQ1LzBkYWE1ZDkwM2FjYzQ0ZmM1M2RlM2Q0ZGI1Njc0ZjQwNmQyMTRhYjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iOTc2MzgwZC0yZTkwLTRlMjgtYjBhNi00YjNk
ZmUxZDhhZDUvYWU4NTc2OGFkZWY2ZDRkZGUxY2E0NWJhZTQzMDU3MWU0NWQ5Mzcw
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBHBggrBgEFBQcBBwEB/wQ4
MDYwNAQCAAEwLgMEAroBoDAMAwQAugGlAwQDugGgAwQAugGqMAwDBAK6AawDBAC6
AbwDBAG6Ab4wDQYJKoZIhvcNAQELBQADggEBALMq2L/fZ9j2eS6j6hsqUFrN5F4S
wV3M5r6lV+DDxfWwjQEj+WULQypdEptryN6YgxpliBnSN48Y9kU3qa32B2dyOv9P
HGSwFRlz3yfzsmj71KRBM2jr5WhyB1JZMZ1SIgeAopshhZUGiAcPffeEXLoUxKJZ
d8WgVOzAyGgOixA97AmLPtLBnRx2ONw7X8fn8eXqQePSZRH3YEcggTNqp5ypI96S
TMu6e8rCyk7aD6RkQknhmkJEXGtQfpwPrYHCANerB8gToUobpbjtX4kzYADQl46c
pY3Ssclln5PoiM5jf7mvcs+xPPbDuAzVQCLBbvCAeY5F5b1iE0weXNzCMA8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org