Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/6b2695475f2b34721e68c0b8ecdb0be2fb7c70f1.roa
File: 6b2695475f2b34721e68c0b8ecdb0be2fb7c70f1.roa (raw, json)
Hash identifier: /5NBvwSIVLlcrOFVCwaVJ9OAKmBJceE/mTv1QxgnXcE=
Subject key identifier: 87:B9:A2:CD:16:BA:95:77:03:31:11:93:ED:F1:1D:70:9A:D4:A4:9D
Certificate issuer: /CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Certificate serial: 238D83
Authority key identifier: A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/6b2695475f2b34721e68c0b8ecdb0be2fb7c70f1.roa
Signing time: Thu 14 Sep 2023 20:19:25 +0000
ROA not before: Wed 13 Sep 2023 20:19:21 +0000
ROA not after: Sun 14 Sep 2025 20:19:21 +0000
asID: 203
IP address blocks: 181.193.0.0/16 maxlen: 24
181.194.0.0/15 maxlen: 24
201.191.0.0/16 maxlen: 24
201.192.0.0/12 maxlen: 24
200.91.64.0/18 maxlen: 24
200.91.128.0/18 maxlen: 24
201.237.0.0/16 maxlen: 24
45.232.116.0/22 maxlen: 24
2803:9b20::/32 maxlen: 64
2800:d300::/29 maxlen: 48
2001:1330::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2329987 (0x238d83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Validity
Not Before: Sep 13 20:19:21 2023 GMT
Not After : Sep 14 20:19:21 2025 GMT
Subject: CN=6b2695475f2b34721e68c0b8ecdb0be2fb7c70f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d0:0f:56:b7:e6:de:91:a0:1d:31:e1:64:0c:
f5:20:d3:10:ff:84:e4:87:4a:5e:81:ed:9e:0d:be:
4c:0f:86:e8:78:5e:ad:9e:08:36:9b:01:13:60:a1:
dd:48:c3:b2:d1:15:aa:7e:b3:71:99:ae:ef:1d:65:
e6:8e:f3:57:7b:fb:f9:4c:1d:31:37:0e:26:5b:60:
45:42:43:d5:7c:4b:67:be:54:2d:37:f7:d6:12:b8:
3e:c8:49:ae:74:85:7e:d3:75:22:28:6f:43:34:36:
b8:26:85:1a:24:d4:b1:ab:14:3a:c2:f7:7e:b0:b8:
a2:21:d9:52:7a:38:7b:53:f1:a7:d7:dd:d7:05:53:
4c:39:17:78:0b:09:ab:79:60:ff:55:ab:f7:0e:ad:
c3:53:1e:f7:7a:23:fb:93:b0:6f:90:9e:18:ef:3e:
6b:ae:21:1a:26:e0:d5:7e:6b:2e:a9:1e:d2:b7:bb:
54:91:9e:c9:38:db:a4:76:50:de:77:ac:0a:1c:32:
b5:21:12:d0:a1:49:2c:2f:2f:ab:aa:ab:76:9b:99:
79:70:73:d2:ce:fa:b0:17:5e:fa:92:15:1c:e7:8c:
5c:b4:86:01:dc:94:59:67:58:df:ea:5d:33:fa:fe:
95:45:ed:e0:fb:ef:7e:55:3e:51:fe:03:27:53:85:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B9:A2:CD:16:BA:95:77:03:31:11:93:ED:F1:1D:70:9A:D4:A4:9D
X509v3 Authority Key Identifier:
keyid:A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/6b2695475f2b34721e68c0b8ecdb0be2fb7c70f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.116.0/22
181.193.0.0-181.195.255.255
200.91.64.0-200.91.191.255
201.191.0.0-201.207.255.255
201.237.0.0/16
IPv6:
2001:1330::/29
2800:d300::/29
2803:9b20::/32
Signature Algorithm: sha256WithRSAEncryption
4d:71:ff:da:ac:22:f3:ee:72:15:73:e4:c2:40:ba:15:77:c6:
7f:1b:8b:b6:cc:8c:5e:ab:aa:b4:77:b5:4e:d4:1c:f2:48:ab:
bc:fb:ad:47:f1:a2:a6:dc:2b:65:e2:a0:1d:77:5d:0d:20:ea:
9c:a8:07:a2:87:26:ed:c2:9f:40:c4:cd:33:bb:84:66:11:db:
fc:ba:46:b1:9f:e2:77:37:b4:26:b3:f6:6e:2a:70:f3:d8:ed:
4e:5f:e5:b0:7c:43:ad:59:c9:6d:22:32:37:d5:84:91:f4:e1:
e2:dc:23:6e:ab:53:6a:c4:4e:d3:b9:ff:19:4c:cd:0d:25:fe:
dd:51:e6:d6:c3:a3:92:06:8c:88:2e:1d:51:ac:09:fb:39:42:
67:20:64:6f:f5:c9:67:79:47:b8:42:77:39:e0:3f:a4:3a:ba:
6f:20:3c:ab:13:ea:cd:a0:b3:b1:ca:bf:18:c6:80:93:f4:6d:
f6:5a:34:4d:c4:86:43:aa:81:45:93:88:de:3a:77:b7:22:de:
b8:a7:45:ec:b8:28:20:ea:df:f7:a0:7e:b4:c2:7d:73:87:c2:
b2:68:78:8c:11:72:2e:69:04:09:4e:9d:61:cb:9d:d0:09:d8:
81:b7:a1:1a:2b:74:12:d4:44:92:49:e8:1b:e7:82:cb:f0:10:
09:c4:0d:d9
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIDI42DMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM3
YzE1ZmFmYTMwYmZjZDc5YmY5OTUxMjYyNTczMTU4ZDk4YTI3NWUwHhcNMjMwOTEz
MjAxOTIxWhcNMjUwOTE0MjAxOTIxWjAzMTEwLwYDVQQDEyg2YjI2OTU0NzVmMmIz
NDcyMWU2OGMwYjhlY2RiMGJlMmZiN2M3MGYxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiNAPVrfm3pGgHTHhZAz1INMQ/4Tkh0pege2eDb5MD4boeF6t
ngg2mwETYKHdSMOy0RWqfrNxma7vHWXmjvNXe/v5TB0xNw4mW2BFQkPVfEtnvlQt
N/fWErg+yEmudIV+03UiKG9DNDa4JoUaJNSxqxQ6wvd+sLiiIdlSejh7U/Gn193X
BVNMORd4CwmreWD/Vav3Dq3DUx73eiP7k7BvkJ4Y7z5rriEaJuDVfmsuqR7St7tU
kZ7JONukdlDed6wKHDK1IRLQoUksLy+rqqt2m5l5cHPSzvqwF176khUc54xctIYB
3JRZZ1jf6l0z+v6VRe3g++9+VT5R/gMnU4UQsQIDAQABo4ICozCCAp8wHQYDVR0O
BBYEFIe5os0WupV3AzERk+3xHXCa1KSdMB8GA1UdIwQYMBaAFKGwewo8koNx/Cou
jrXotarzdPBHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzdjMTVm
YWZhMzBiZmNkNzliZjk5NTEyNjI1NzMxNThkOThhMjc1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmI2YTNhY2MtMmE0Yy00ZmJjLWEyYTYtOTUwZmQx
ZTI2NjdkLzZiMjY5NTQ3NWYyYjM0NzIxZTY4YzBiOGVjZGIwYmUyZmI3YzcwZjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYjZhM2FjYy0yYTRjLTRmYmMtYTJhNi05NTBm
ZDFlMjY2N2QvYzdjMTVmYWZhMzBiZmNkNzliZjk5NTEyNjI1NzMxNThkOThhMjc1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBnBggrBgEFBQcBBwEB/wRY
MFYwNwQCAAEwMQMEAi3odDAKAwMAtcEDAwK1wDAMAwQGyFtAAwQGyFuAMAoDAwDJ
vwMDBMnAAwMAye0wGwQCAAIwFQMFAyABEzADBQMoANMAAwUAKAObIDANBgkqhkiG
9w0BAQsFAAOCAQEATXH/2qwi8+5yFXPkwkC6FXfGfxuLtsyMXquqtHe1TtQc8kir
vPutR/GiptwrZeKgHXddDSDqnKgHoocm7cKfQMTNM7uEZhHb/LpGsZ/idze0JrP2
bipw89jtTl/lsHxDrVnJbSIyN9WEkfTh4twjbqtTasRO07n/GUzNDSX+3VHm1sOj
kgaMiC4dUawJ+zlCZyBkb/XJZ3lHuEJ3OeA/pDq6byA8qxPqzaCzscq/GMaAk/Rt
9lo0TcSGQ6qBRZOI3jp3tyLeuKdF7LgoIOrf96B+tMJ9c4fCsmh4jBFyLmkECU6d
Ycud0AnYgbehGit0EtREkknoG+eCy/AQCcQN2Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org