Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/fd337fda7ac04ab4eb50762358caabfa46639a1b.roa
File: fd337fda7ac04ab4eb50762358caabfa46639a1b.roa (raw, json)
Hash identifier: UPZA0hpzkzalL1a4CMNLfuVIlGJDuARpxwSqtACBcho=
Subject key identifier: 53:22:E8:E3:FB:38:B2:A6:83:83:CA:3F:A8:4E:9F:3E:FF:69:B4:12
Certificate issuer: /CN=296ae134c63fda98feba9ece79438406ecc84f03
Certificate serial: 214261
Authority key identifier: 8C:CF:F6:AD:9A:13:14:73:58:AC:E2:D8:C7:E3:B8:F5:0E:34:30:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/296ae134c63fda98feba9ece79438406ecc84f03.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/fd337fda7ac04ab4eb50762358caabfa46639a1b.roa
Signing time: Mon 12 Jun 2023 23:32:08 +0000
ROA not before: Sun 11 Jun 2023 23:32:07 +0000
ROA not after: Thu 12 Jun 2025 23:32:07 +0000
asID: 17079
IP address blocks: 181.189.176.0/20 maxlen: 24
200.85.0.0/23 maxlen: 24
143.0.104.0/22 maxlen: 24
200.85.4.0/22 maxlen: 24
200.85.8.0/21 maxlen: 24
200.85.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2179681 (0x214261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296ae134c63fda98feba9ece79438406ecc84f03
Validity
Not Before: Jun 11 23:32:07 2023 GMT
Not After : Jun 12 23:32:07 2025 GMT
Subject: CN=fd337fda7ac04ab4eb50762358caabfa46639a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ea:7d:fa:7f:cb:49:cd:ca:2d:bf:0c:59:af:
60:1c:a3:2f:10:31:b1:bf:fb:a3:fb:2c:4c:2d:dc:
95:1c:b8:af:93:1a:92:2e:a6:5a:c6:b5:1e:92:29:
a9:87:db:6a:90:b8:a1:34:c0:33:76:81:e8:55:24:
66:b5:da:8a:e2:3a:53:25:d5:46:54:3d:9f:97:06:
8a:7f:be:c8:77:47:90:9e:88:87:54:4c:e6:ec:49:
f4:85:9e:c1:e3:57:a7:f5:6e:0f:b0:c1:3b:f2:d9:
59:ed:ca:04:8c:9c:b2:3a:99:c0:4e:2a:08:f0:de:
ba:25:2a:8c:0e:54:39:ae:66:89:d1:64:89:29:aa:
6b:7c:06:3b:ac:d6:17:17:8d:99:ab:09:59:b0:af:
75:5d:9c:21:65:24:c0:5e:f3:0d:37:f7:a3:f3:be:
41:eb:fc:54:68:97:5f:a2:4f:6b:a0:0c:67:7f:90:
60:ba:29:2c:6b:68:53:65:8d:9f:e4:a5:e0:5c:ea:
2b:f8:c6:27:2a:e8:3e:c4:f9:3c:3c:04:b0:54:74:
3e:cf:a7:d4:10:2c:a8:4a:03:d9:59:2b:77:f5:ff:
df:e4:75:c2:05:e4:ad:4d:72:41:ec:58:db:5e:64:
87:d5:c2:91:08:63:b1:84:2b:56:39:4e:98:ce:a0:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:22:E8:E3:FB:38:B2:A6:83:83:CA:3F:A8:4E:9F:3E:FF:69:B4:12
X509v3 Authority Key Identifier:
keyid:8C:CF:F6:AD:9A:13:14:73:58:AC:E2:D8:C7:E3:B8:F5:0E:34:30:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/296ae134c63fda98feba9ece79438406ecc84f03.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/fd337fda7ac04ab4eb50762358caabfa46639a1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/296ae134c63fda98feba9ece79438406ecc84f03.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.104.0/22
181.189.176.0/20
200.85.0.0/23
200.85.4.0-200.85.31.255
Signature Algorithm: sha256WithRSAEncryption
0c:e9:c5:d3:cf:49:34:b7:bf:57:2f:e3:61:00:7d:98:4d:0b:
c2:2f:48:0e:0f:9e:ca:9c:cf:6a:78:d4:69:01:9a:72:ca:14:
6a:98:47:18:b6:52:b7:77:ca:2f:e8:fd:fb:5d:7e:d7:22:69:
3b:67:4e:e0:1f:d4:5c:2b:28:c3:a5:40:6e:2b:6f:73:8f:5e:
30:69:11:b9:18:0e:44:cf:66:07:57:59:90:8c:61:05:ba:ee:
b1:5e:7c:4f:c5:ec:3d:f5:44:9c:c2:ba:1a:76:6d:06:d7:d3:
d7:cc:57:22:80:7c:b9:e7:6d:09:e0:ed:b5:e8:73:90:0e:8c:
d5:80:94:75:d0:99:f6:96:e8:d5:0e:23:2c:a5:a8:8e:5c:29:
62:88:8a:97:5f:7a:ec:11:c0:83:03:cb:ba:0b:c8:c2:ac:88:
a0:5f:d3:da:cb:4f:48:22:a8:5f:3c:cf:18:29:9b:cf:e1:43:
0c:12:b3:66:13:e7:e3:e5:1f:5c:1c:c3:80:fa:54:01:1c:b3:
12:b2:eb:a2:c0:e5:3e:7c:2b:23:8f:9e:f1:c1:9b:f8:75:e0:
6c:44:2b:34:f0:89:0e:b9:96:1d:5f:b9:f1:34:d2:44:79:55:
45:64:08:03:fa:0f:65:3d:bd:ae:13:55:1f:9e:37:1c:3d:74:
4a:53:ae:9c
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIDIUJhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
NmFlMTM0YzYzZmRhOThmZWJhOWVjZTc5NDM4NDA2ZWNjODRmMDMwHhcNMjMwNjEx
MjMzMjA3WhcNMjUwNjEyMjMzMjA3WjAzMTEwLwYDVQQDEyhmZDMzN2ZkYTdhYzA0
YWI0ZWI1MDc2MjM1OGNhYWJmYTQ2NjM5YTFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiep9+n/LSc3KLb8MWa9gHKMvEDGxv/uj+yxMLdyVHLivkxqS
LqZaxrUekimph9tqkLihNMAzdoHoVSRmtdqK4jpTJdVGVD2flwaKf77Id0eQnoiH
VEzm7En0hZ7B41en9W4PsME78tlZ7coEjJyyOpnATioI8N66JSqMDlQ5rmaJ0WSJ
KaprfAY7rNYXF42ZqwlZsK91XZwhZSTAXvMNN/ej875B6/xUaJdfok9roAxnf5Bg
uiksa2hTZY2f5KXgXOor+MYnKug+xPk8PASwVHQ+z6fUECyoSgPZWSt39f/f5HXC
BeStTXJB7FjbXmSH1cKRCGOxhCtWOU6YzqCOmwIDAQABo4ICdTCCAnEwHQYDVR0O
BBYEFFMi6OP7OLKmg4PKP6hOnz7/abQSMB8GA1UdIwQYMBaAFIzP9q2aExRzWKzi
2MfjuPUONDASMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjk2YWUx
MzRjNjNmZGE5OGZlYmE5ZWNlNzk0Mzg0MDZlY2M4NGYwMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmY3NzBkMmMtODE1OC00ZWIwLWE1NWMtYjViZTYz
ZWNiODE3L2ZkMzM3ZmRhN2FjMDRhYjRlYjUwNzYyMzU4Y2FhYmZhNDY2MzlhMWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZjc3MGQyYy04MTU4LTRlYjAtYTU1Yy1iNWJl
NjNlY2I4MTcvMjk2YWUxMzRjNjNmZGE5OGZlYmE5ZWNlNzk0Mzg0MDZlY2M4NGYw
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQq
MCgwJgQCAAEwIAMEAo8AaAMEBLW9sAMEAchVADAMAwQCyFUEAwQFyFUAMA0GCSqG
SIb3DQEBCwUAA4IBAQAM6cXTz0k0t79XL+NhAH2YTQvCL0gOD57KnM9qeNRpAZpy
yhRqmEcYtlK3d8ov6P37XX7XImk7Z07gH9RcKyjDpUBuK29zj14waRG5GA5Ez2YH
V1mQjGEFuu6xXnxPxew99UScwroadm0G19PXzFcigHy5520J4O216HOQDozVgJR1
0Jn2lujVDiMspaiOXCliiIqXX3rsEcCDA8u6C8jCrIigX9Pay09IIqhfPM8YKZvP
4UMMErNmE+fj5R9cHMOA+lQBHLMSsuuiwOU+fCsjj57xwZv4deBsRCs08IkOuZYd
X7nxNNJEeVVFZAgD+g9lPb2uE1UfnjccPXRKU66c
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-ams.rpki-client.org