Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/3214b9e6b19ad14adc59c1086f43ae2b5cec5793.roa
File: 3214b9e6b19ad14adc59c1086f43ae2b5cec5793.roa (raw, json)
Hash identifier: azeBvaHRsUiyjmSqWeb3el/MLOsBM9VvW9GklF6HxCM=
Subject key identifier: 63:13:B6:78:DE:69:C4:B1:92:F8:C3:CD:0E:9F:1C:BF:04:30:A6:FA
Certificate issuer: /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial: 0B3B13
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/3214b9e6b19ad14adc59c1086f43ae2b5cec5793.roa
Signing time: Thu 10 Aug 2023 06:26:15 +0000
ROA not before: Wed 09 Aug 2023 06:26:15 +0000
ROA not after: Sun 10 Aug 2025 06:26:15 +0000
asID: 22884
IP address blocks: 186.96.28.0/24 maxlen: 24
186.96.44.0/24 maxlen: 24
186.96.47.0/24 maxlen: 24
186.96.48.0/24 maxlen: 24
186.96.56.0/24 maxlen: 24
186.96.62.0/24 maxlen: 24
186.96.138.0/24 maxlen: 24
186.96.147.0/24 maxlen: 24
186.96.158.0/24 maxlen: 24
186.96.160.0/24 maxlen: 24
186.96.161.0/24 maxlen: 24
187.188.101.0/24 maxlen: 24
187.188.144.0/24 maxlen: 24
187.188.195.0/24 maxlen: 24
187.188.196.0/24 maxlen: 24
187.188.197.0/24 maxlen: 24
187.188.198.0/24 maxlen: 24
187.188.250.0/24 maxlen: 24
187.189.158.0/24 maxlen: 24
187.189.241.0/24 maxlen: 24
187.190.57.0/24 maxlen: 24
187.190.58.0/24 maxlen: 24
187.190.64.0/24 maxlen: 24
187.190.67.0/24 maxlen: 24
187.190.73.0/24 maxlen: 24
187.190.83.0/24 maxlen: 24
187.190.85.0/24 maxlen: 24
187.190.86.0/24 maxlen: 24
187.190.87.0/24 maxlen: 24
187.190.92.0/24 maxlen: 24
187.190.120.0/24 maxlen: 24
187.190.121.0/24 maxlen: 24
187.190.247.0/24 maxlen: 24
187.191.4.0/24 maxlen: 24
187.191.27.0/24 maxlen: 24
187.191.59.0/24 maxlen: 24
187.251.102.0/24 maxlen: 24
187.251.103.0/24 maxlen: 24
187.251.104.0/24 maxlen: 24
187.251.105.0/24 maxlen: 24
187.251.132.0/24 maxlen: 24
187.251.196.0/24 maxlen: 24
187.251.209.0/24 maxlen: 24
187.251.218.0/24 maxlen: 24
189.203.41.0/24 maxlen: 24
189.203.86.0/24 maxlen: 24
189.203.194.0/24 maxlen: 24
189.203.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 736019 (0xb3b13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Validity
Not Before: Aug 9 06:26:15 2023 GMT
Not After : Aug 10 06:26:15 2025 GMT
Subject: CN=3214b9e6b19ad14adc59c1086f43ae2b5cec5793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:c7:bd:92:59:9e:3c:49:d3:2a:53:fd:27:
54:c4:7e:b7:40:1f:4c:88:2a:61:6e:b7:04:da:39:
e6:ca:f6:62:2e:e6:5a:dd:f3:74:52:00:0d:61:81:
ee:69:df:a7:10:3c:47:bd:59:d6:2d:3c:70:29:d0:
7b:d6:c7:c5:72:2a:27:20:0b:6e:6b:bc:11:25:7b:
05:1e:5f:24:52:bd:9a:be:fd:ef:e2:f6:c3:38:99:
5a:5c:88:e2:d6:4d:b8:ba:cd:ce:d8:03:89:8e:62:
72:1f:26:d2:08:ce:6a:c3:52:f0:43:d0:ce:46:b0:
63:fa:e1:5b:e1:ca:d1:d0:e5:77:64:0e:b8:aa:95:
17:bd:38:f1:8e:34:41:fe:9f:c7:45:86:a6:7e:f7:
83:d0:5f:4f:40:58:5b:77:66:a1:a8:3e:6d:56:4f:
9b:99:7a:d2:65:d5:bc:da:a2:df:88:a9:45:4f:b8:
ed:7a:a3:08:49:a8:37:e9:93:df:70:c4:00:fc:e5:
8e:fb:4c:4f:5e:1c:6b:09:c7:61:a7:07:2b:3f:a5:
01:6f:e4:30:fd:ef:21:fe:8a:b4:37:eb:dd:33:83:
39:f4:41:e6:70:f6:60:0e:af:12:af:17:54:83:70:
8a:77:a7:77:1c:50:bb:95:fd:4d:58:42:0d:e2:4d:
63:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:13:B6:78:DE:69:C4:B1:92:F8:C3:CD:0E:9F:1C:BF:04:30:A6:FA
X509v3 Authority Key Identifier:
keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/3214b9e6b19ad14adc59c1086f43ae2b5cec5793.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.96.28.0/24
186.96.44.0/24
186.96.47.0-186.96.48.255
186.96.56.0/24
186.96.62.0/24
186.96.138.0/24
186.96.147.0/24
186.96.158.0/24
186.96.160.0/23
187.188.101.0/24
187.188.144.0/24
187.188.195.0-187.188.198.255
187.188.250.0/24
187.189.158.0/24
187.189.241.0/24
187.190.57.0-187.190.58.255
187.190.64.0/24
187.190.67.0/24
187.190.73.0/24
187.190.83.0/24
187.190.85.0-187.190.87.255
187.190.92.0/24
187.190.120.0/23
187.190.247.0/24
187.191.4.0/24
187.191.27.0/24
187.191.59.0/24
187.251.102.0-187.251.105.255
187.251.132.0/24
187.251.196.0/24
187.251.209.0/24
187.251.218.0/24
189.203.41.0/24
189.203.86.0/24
189.203.194.0/24
189.203.227.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:fe:99:07:4f:63:23:52:ef:37:a4:0f:fc:0a:a5:78:7b:1d:
5e:50:84:39:16:a5:ed:54:72:8c:00:e8:00:c6:61:4e:be:44:
a9:6d:22:de:cd:58:75:3e:04:25:31:64:d5:8c:86:aa:56:02:
6f:56:1e:76:0d:fc:9b:23:a3:60:63:87:b6:e2:f2:2c:37:4a:
0e:d5:45:35:fb:0e:62:c5:99:f4:90:e6:5f:e1:83:f5:8b:3f:
62:60:e5:09:56:83:45:cc:45:0a:c8:60:a6:8a:15:ac:5a:8b:
d0:8a:c1:0e:cc:0f:60:fc:67:a8:46:e9:87:d6:c5:8e:d2:ae:
aa:d3:86:32:80:47:b8:d3:60:84:62:9b:22:54:0e:bc:a0:8e:
4d:98:ea:d4:a5:50:f8:a5:eb:ac:87:8e:87:63:88:07:c4:d3:
90:c7:3e:9d:80:3c:ea:10:86:e8:82:83:4e:34:a8:ef:69:04:
4f:2c:97:77:6b:86:82:0c:d7:01:b4:ca:91:d3:ef:c6:d5:58:
0b:93:63:6e:54:d1:a9:ac:bb:51:95:95:e1:50:f8:73:d9:b4:
26:b5:94:a8:9f:c9:ca:14:fc:80:c4:f3:55:ac:10:84:55:17:
31:7c:c0:66:de:46:88:10:02:01:9a:29:1f:7d:3c:08:a8:19:
39:fc:98:db
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIDCzsTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
M2Q1Y2RiMTYwNzI2ZGM5MmUwNGVkNDZhNjU4ZWM2YmZjYmJkZDEwHhcNMjMwODA5
MDYyNjE1WhcNMjUwODEwMDYyNjE1WjAzMTEwLwYDVQQDEygzMjE0YjllNmIxOWFk
MTRhZGM1OWMxMDg2ZjQzYWUyYjVjZWM1NzkzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAz+nHvZJZnjxJ0ypT/SdUxH63QB9MiCphbrcE2jnmyvZiLuZa
3fN0UgANYYHuad+nEDxHvVnWLTxwKdB71sfFcionIAtua7wRJXsFHl8kUr2avv3v
4vbDOJlaXIji1k24us3O2AOJjmJyHybSCM5qw1LwQ9DORrBj+uFb4crR0OV3ZA64
qpUXvTjxjjRB/p/HRYamfveD0F9PQFhbd2ahqD5tVk+bmXrSZdW82qLfiKlFT7jt
eqMISag36ZPfcMQA/OWO+0xPXhxrCcdhpwcrP6UBb+Qw/e8h/oq0N+vdM4M59EHm
cPZgDq8SrxdUg3CKd6d3HFC7lf1NWEIN4k1jRwIDAQABo4IDXzCCA1swHQYDVR0O
BBYEFGMTtnjeacSxkvjDzQ6fHL8EMKb6MB8GA1UdIwQYMBaAFI9xTwL31bpGSCLp
2dR7u2DVk6EyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTEzZDVj
ZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRkMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2Q1YWQ2YzAtNDk5Yi00MzgwLTk4NGYtODc0Yzlm
NTFkMmZmLzMyMTRiOWU2YjE5YWQxNGFkYzU5YzEwODZmNDNhZTJiNWNlYzU3OTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZDVhZDZjMC00OTliLTQzODAtOTg0Zi04NzRj
OWY1MWQyZmYvOTEzZDVjZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRk
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCASEGCCsGAQUFBwEHAQH/
BIIBEDCCAQwwggEIBAIAATCCAQADBAC6YBwDBAC6YCwwDAMEALpgLwMEALpgMAME
ALpgOAMEALpgPgMEALpgigMEALpgkwMEALpgngMEAbpgoAMEALu8ZQMEALu8kDAM
AwQAu7zDAwQAu7zGAwQAu7z6AwQAu72eAwQAu73xMAwDBAC7vjkDBAC7vjoDBAC7
vkADBAC7vkMDBAC7vkkDBAC7vlMwDAMEALu+VQMEA7u+UAMEALu+XAMEAbu+eAME
ALu+9wMEALu/BAMEALu/GwMEALu/OzAMAwQBu/tmAwQBu/toAwQAu/uEAwQAu/vE
AwQAu/vRAwQAu/vaAwQAvcspAwQAvctWAwQAvcvCAwQAvcvjMA0GCSqGSIb3DQEB
CwUAA4IBAQBc/pkHT2MjUu83pA/8CqV4ex1eUIQ5FqXtVHKMAOgAxmFOvkSpbSLe
zVh1PgQlMWTVjIaqVgJvVh52DfybI6NgY4e24vIsN0oO1UU1+w5ixZn0kOZf4YP1
iz9iYOUJVoNFzEUKyGCmihWsWovQisEOzA9g/GeoRumH1sWO0q6q04YygEe402CE
YpsiVA68oI5NmOrUpVD4peush46HY4gHxNOQxz6dgDzqEIbogoNONKjvaQRPLJd3
a4aCDNcBtMqR0+/G1VgLk2NuVNGprLtRlZXhUPhz2bQmtZSon8nKFPyAxPNVrBCE
VRcxfMBm3kaIEAIBmikffTwIqBk5/Jjb
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org