Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/7f77916a596fa9c06f5e36d9dc1d9050bc445437.roa
File: 7f77916a596fa9c06f5e36d9dc1d9050bc445437.roa (raw, json)
Hash identifier: 8FhLdWf57fUQBZx4XXJ3f8as7aRdLO6dwPEEnRYxIVc=
Subject key identifier: 02:0D:AA:60:EF:D1:B1:AE:AF:34:91:DC:52:BF:8E:DA:4A:FD:C4:F3
Certificate issuer: /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial: 0B3C70
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/7f77916a596fa9c06f5e36d9dc1d9050bc445437.roa
Signing time: Thu 10 Aug 2023 06:26:38 +0000
ROA not before: Wed 09 Aug 2023 06:26:38 +0000
ROA not after: Sun 10 Aug 2025 06:26:38 +0000
asID: 22884
IP address blocks: 187.188.38.0/24 maxlen: 24
187.188.40.0/24 maxlen: 24
187.189.210.0/24 maxlen: 24
187.189.222.0/24 maxlen: 24
187.190.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 736368 (0xb3c70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Validity
Not Before: Aug 9 06:26:38 2023 GMT
Not After : Aug 10 06:26:38 2025 GMT
Subject: CN=7f77916a596fa9c06f5e36d9dc1d9050bc445437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:30:dc:70:fd:98:e0:f3:62:9c:12:ff:e9:
06:55:bf:5c:33:24:a7:81:db:7b:e8:1d:7b:af:96:
6d:0d:a1:b8:27:b9:fa:0b:4b:60:e8:e3:e2:a5:13:
26:1d:03:29:53:22:5e:6b:7e:98:c0:39:f1:94:31:
86:8a:9f:70:b4:ce:2f:ee:0a:b6:46:7b:15:73:b8:
6c:94:e0:b6:78:51:20:2e:d4:f0:08:c9:10:ae:5d:
b9:3f:d6:4d:c2:ac:0f:92:28:2d:63:1b:5b:5f:2a:
64:be:53:b0:ab:16:0c:b7:43:c1:2d:eb:47:54:ad:
0e:c0:2b:51:7d:a4:61:fb:bc:89:51:31:6d:07:87:
d2:4b:26:a2:06:60:36:a2:74:1a:6c:82:95:26:88:
e3:d1:2a:0d:2a:92:a1:92:ab:dc:82:57:d3:bb:4c:
20:31:3f:af:81:29:4e:cd:14:22:53:b7:1e:73:c9:
22:75:ad:94:ea:a2:b7:3e:4e:fb:0a:83:0e:4f:38:
c3:b9:c2:6e:f5:d3:62:58:bd:f9:de:ca:34:0f:fd:
e7:c0:80:17:39:b5:7a:83:b5:cf:b1:b4:d7:65:db:
10:57:58:f4:3f:4c:81:01:87:b4:35:c8:74:06:c7:
31:e7:7e:4e:32:d1:ab:e9:d6:98:a0:22:88:5a:f6:
e4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0D:AA:60:EF:D1:B1:AE:AF:34:91:DC:52:BF:8E:DA:4A:FD:C4:F3
X509v3 Authority Key Identifier:
keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/7f77916a596fa9c06f5e36d9dc1d9050bc445437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.188.38.0/24
187.188.40.0/24
187.189.210.0/24
187.189.222.0/24
187.190.196.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:13:9b:fb:61:6b:82:b5:c7:76:de:99:45:99:d7:29:32:7c:
ee:aa:0d:fb:e1:9e:a3:a8:e2:2e:71:ef:34:69:d2:4b:f0:bc:
33:5a:46:f3:d7:9e:3a:61:0d:6f:61:3c:6b:5b:39:2e:c6:02:
e0:ce:e3:e4:44:1e:6e:a1:53:0d:f1:8d:8e:b4:ad:e3:62:6b:
fa:ac:d9:63:78:dc:db:5a:ee:87:ec:d5:5b:95:fa:c7:9a:f8:
7a:6f:00:76:58:f9:49:32:63:c0:47:fd:d9:33:a8:c8:fe:99:
be:3e:a9:dc:15:f6:2f:fa:5f:51:1b:e7:22:a3:c8:30:fb:ec:
f5:32:ff:26:01:8b:b8:e6:c7:21:ab:ca:02:da:fe:1c:34:b3:
f1:e5:4d:14:76:ed:ec:80:6e:0c:ea:83:a7:3a:5f:a1:3c:78:
1c:00:27:5f:a0:0c:35:1c:f5:1b:8e:93:8d:a3:a6:5c:51:a6:
1c:0e:31:1e:b7:78:76:6c:e2:3c:ec:fc:8e:76:61:9c:88:eb:
4c:bc:5d:ce:d6:5d:7e:97:55:25:5b:b1:db:25:cb:7f:df:98:
01:e0:0e:f0:65:3a:b6:55:da:d6:73:da:cd:b3:50:f2:bf:4a:
00:fd:af:d7:a0:93:83:2d:ea:bd:b5:1f:dd:16:73:38:b5:e1:
30:e5:51:6a
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDCzxwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
M2Q1Y2RiMTYwNzI2ZGM5MmUwNGVkNDZhNjU4ZWM2YmZjYmJkZDEwHhcNMjMwODA5
MDYyNjM4WhcNMjUwODEwMDYyNjM4WjAzMTEwLwYDVQQDEyg3Zjc3OTE2YTU5NmZh
OWMwNmY1ZTM2ZDlkYzFkOTA1MGJjNDQ1NDM3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzYQw3HD9mODzYpwS/+kGVb9cMySngdt76B17r5ZtDaG4J7n6
C0tg6OPipRMmHQMpUyJea36YwDnxlDGGip9wtM4v7gq2RnsVc7hslOC2eFEgLtTw
CMkQrl25P9ZNwqwPkigtYxtbXypkvlOwqxYMt0PBLetHVK0OwCtRfaRh+7yJUTFt
B4fSSyaiBmA2onQabIKVJojj0SoNKpKhkqvcglfTu0wgMT+vgSlOzRQiU7cec8ki
da2U6qK3Pk77CoMOTzjDucJu9dNiWL353so0D/3nwIAXObV6g7XPsbTXZdsQV1j0
P0yBAYe0Nch0Bscx535OMtGr6daYoCKIWvbkDwIDAQABo4ICczCCAm8wHQYDVR0O
BBYEFAINqmDv0bGurzSR3FK/jtpK/cTzMB8GA1UdIwQYMBaAFI9xTwL31bpGSCLp
2dR7u2DVk6EyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTEzZDVj
ZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRkMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2Q1YWQ2YzAtNDk5Yi00MzgwLTk4NGYtODc0Yzlm
NTFkMmZmLzdmNzc5MTZhNTk2ZmE5YzA2ZjVlMzZkOWRjMWQ5MDUwYmM0NDU0Mzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZDVhZDZjMC00OTliLTQzODAtOTg0Zi04NzRj
OWY1MWQyZmYvOTEzZDVjZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRk
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQo
MCYwJAQCAAEwHgMEALu8JgMEALu8KAMEALu90gMEALu93gMEALu+xDANBgkqhkiG
9w0BAQsFAAOCAQEAThOb+2FrgrXHdt6ZRZnXKTJ87qoN++Geo6jiLnHvNGnSS/C8
M1pG89eeOmENb2E8a1s5LsYC4M7j5EQebqFTDfGNjrSt42Jr+qzZY3jc21ruh+zV
W5X6x5r4em8Adlj5STJjwEf92TOoyP6Zvj6p3BX2L/pfURvnIqPIMPvs9TL/JgGL
uObHIavKAtr+HDSz8eVNFHbt7IBuDOqDpzpfoTx4HAAnX6AMNRz1G46TjaOmXFGm
HA4xHrd4dmziPOz8jnZhnIjrTLxdztZdfpdVJVux2yXLf9+YAeAO8GU6tlXa1nPa
zbNQ8r9KAP2v16CTgy3qvbUf3RZzOLXhMOVRag==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org