Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5c755a3d14bf9649eb8dd0119045419e63280aa0.roa
File: 5c755a3d14bf9649eb8dd0119045419e63280aa0.roa (raw, json)
Hash identifier: 3OQ9iXRXo90wLzN0kt53KiQcFErai3FbtjOzAES9npM=
Subject key identifier: 13:E8:B0:90:1F:29:E2:FA:9F:83:DE:89:13:94:3B:2C:FB:F4:7E:A9
Certificate issuer: /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial: 20FCE4
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5c755a3d14bf9649eb8dd0119045419e63280aa0.roa
Signing time: Mon 12 Jun 2023 15:18:25 +0000
ROA not before: Sun 11 Jun 2023 15:18:25 +0000
ROA not after: Thu 12 Jun 2025 15:18:25 +0000
asID: 27789
IP address blocks: 201.221.69.0/24 maxlen: 24
201.221.72.0/21 maxlen: 24
201.221.80.0/22 maxlen: 24
201.221.84.0/23 maxlen: 24
200.12.240.0/21 maxlen: 24
201.221.93.0/24 maxlen: 24
201.221.94.0/24 maxlen: 24
190.93.0.0/19 maxlen: 24
201.221.64.0/22 maxlen: 24
2800:70::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161892 (0x20fce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Validity
Not Before: Jun 11 15:18:25 2023 GMT
Not After : Jun 12 15:18:25 2025 GMT
Subject: CN=5c755a3d14bf9649eb8dd0119045419e63280aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:f7:0b:5e:76:3b:72:fd:ae:b5:65:a0:5f:
21:bf:7f:a4:d5:fc:43:93:2f:8d:73:04:46:04:3f:
e6:bf:50:4e:0f:99:c3:40:00:52:97:39:cf:bb:c9:
e3:89:03:de:4b:78:6a:b7:89:75:a6:9c:f8:02:47:
4f:16:b9:11:41:e2:a5:5d:f6:64:16:bd:87:44:76:
36:59:10:06:7f:a9:14:73:85:9b:40:db:fe:8f:63:
91:f1:ac:1d:a2:46:8d:50:7a:5e:73:cc:48:c8:52:
ea:36:44:92:a6:2b:ee:e7:9d:4f:6d:44:8b:36:f5:
8f:6e:c1:3b:b0:f3:47:e9:6b:97:e4:28:47:1d:ff:
90:58:ff:1c:c7:a8:1d:d6:30:21:98:0f:b0:e4:f4:
ef:55:ce:83:18:9e:d8:9d:7f:c6:76:77:ef:27:dd:
11:3f:a9:15:d5:e1:b0:8f:03:87:a3:43:0b:37:c4:
73:0f:61:75:ea:ed:31:4b:97:e7:de:f2:13:1b:55:
ed:d4:28:8e:71:89:cf:16:91:70:e5:a4:c5:28:76:
cb:f3:1d:57:fd:95:e9:cc:83:9a:42:07:e8:95:53:
d2:62:de:ce:a2:7d:83:06:9d:0b:1a:9f:60:88:6b:
a7:f3:21:4c:fa:55:dd:66:fd:c4:7d:56:a3:ac:3c:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E8:B0:90:1F:29:E2:FA:9F:83:DE:89:13:94:3B:2C:FB:F4:7E:A9
X509v3 Authority Key Identifier:
keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5c755a3d14bf9649eb8dd0119045419e63280aa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.0.0/19
200.12.240.0/21
201.221.64.0/22
201.221.69.0/24
201.221.72.0-201.221.85.255
201.221.93.0-201.221.94.255
IPv6:
2800:70::/32
Signature Algorithm: sha256WithRSAEncryption
48:c8:c0:9c:06:2b:b5:8d:3e:90:5a:6e:b9:9b:6f:d5:9e:ec:
49:54:1e:33:df:74:b7:55:68:1a:62:2b:eb:15:08:39:5b:14:
82:5c:20:e4:41:a2:39:45:9b:40:d2:2f:35:4f:8f:3d:02:90:
2e:4e:60:26:75:b9:b8:d6:c2:f2:4e:90:98:4b:1d:c8:9d:d5:
2d:5f:c3:df:ed:fb:01:82:78:e7:3a:be:b8:71:40:d5:f4:9d:
aa:2e:ea:e2:4e:de:45:aa:cc:59:ea:b3:a7:39:3a:66:e5:ea:
65:db:54:9e:19:98:2b:3c:f6:6d:15:36:20:9d:12:ce:74:cb:
a3:fa:25:ce:6b:c5:77:47:27:64:6a:bb:b4:0c:24:cb:83:87:
2b:0b:b8:e3:60:cd:e3:16:8e:e2:11:37:2d:4b:78:bc:2e:cf:
67:e9:e0:c8:f4:a7:be:fb:ee:37:3b:a2:57:f8:c9:4a:9a:50:
01:3a:46:72:fd:70:e0:d1:90:67:1a:f3:89:60:1e:36:d3:e9:
1f:9c:5f:35:d3:5d:8c:eb:5d:0b:0b:c5:97:a7:49:5d:b3:fa:
d1:1a:a9:17:db:20:d4:33:6e:a8:54:44:10:5b:15:c5:b5:07:
07:46:70:2e:ed:01:73:02:dd:7b:c1:19:d3:c8:a8:65:77:01:
b5:2e:4b:f8
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIDIPzkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZi
MmMzM2ZhMDE5MDFmNzAzZTM3MzBlMjhlOTllYjhiYzRjYmE2MmEwHhcNMjMwNjEx
MTUxODI1WhcNMjUwNjEyMTUxODI1WjAzMTEwLwYDVQQDEyg1Yzc1NWEzZDE0YmY5
NjQ5ZWI4ZGQwMTE5MDQ1NDE5ZTYzMjgwYWEwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqSP3C152O3L9rrVloF8hv3+k1fxDky+NcwRGBD/mv1BOD5nD
QABSlznPu8njiQPeS3hqt4l1ppz4AkdPFrkRQeKlXfZkFr2HRHY2WRAGf6kUc4Wb
QNv+j2OR8awdokaNUHpec8xIyFLqNkSSpivu551PbUSLNvWPbsE7sPNH6WuX5ChH
Hf+QWP8cx6gd1jAhmA+w5PTvVc6DGJ7YnX/GdnfvJ90RP6kV1eGwjwOHo0MLN8Rz
D2F16u0xS5fn3vITG1Xt1CiOcYnPFpFw5aTFKHbL8x1X/ZXpzIOaQgfolVPSYt7O
on2DBp0LGp9giGun8yFM+lXdZv3EfVajrDzpowIDAQABo4ICmDCCApQwHQYDVR0O
BBYEFBPosJAfKeL6n4PeiROUOyz79H6pMB8GA1UdIwQYMBaAFH4HMs9XSoQiKTbT
qOxlLvM30lKkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmIyYzMz
ZmEwMTkwMWY3MDNlMzczMGUyOGU5OWViOGJjNGNiYTYyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2LzVjNzU1YTNkMTRiZjk2NDllYjhkZDAxMTkwNDU0MTllNjMyODBhYTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvNmIyYzMzZmEwMTkwMWY3MDNlMzczMGUyOGU5OWViOGJjNGNiYTYy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBggrBgEFBQcBBwEB/wRN
MEswOgQCAAEwNAMEBb5dAAMEA8gM8AMEAsndQAMEAMndRTAMAwQDyd1IAwQByd1U
MAwDBADJ3V0DBADJ3V4wDQQCAAIwBwMFACgAAHAwDQYJKoZIhvcNAQELBQADggEB
AEjIwJwGK7WNPpBabrmbb9We7ElUHjPfdLdVaBpiK+sVCDlbFIJcIORBojlFm0DS
LzVPjz0CkC5OYCZ1ubjWwvJOkJhLHcid1S1fw9/t+wGCeOc6vrhxQNX0naou6uJO
3kWqzFnqs6c5Ombl6mXbVJ4ZmCs89m0VNiCdEs50y6P6Jc5rxXdHJ2Rqu7QMJMuD
hysLuONgzeMWjuIRNy1LeLwuz2fp4Mj0p7777jc7olf4yUqaUAE6RnL9cODRkGca
84lgHjbT6R+cXzXTXYzrXQsLxZenSV2z+tEaqRfbINQzbqhURBBbFcW1BwdGcC7t
AXMC3XvBGdPIqGV3AbUuS/g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org