Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/8a91aced826391096e2b74f6c62725a3f32998c4.roa
File: 8a91aced826391096e2b74f6c62725a3f32998c4.roa (raw, json)
Hash identifier: Z5yaSYBOF36z+mMkcIYOXEmBtbLVn1ZTPiIWzUy3RjU=
Subject key identifier: C2:BD:54:80:44:B0:30:54:A6:24:A9:8E:C1:43:24:C8:FE:3B:7B:62
Certificate issuer: /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial: 0CC7B1
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/8a91aced826391096e2b74f6c62725a3f32998c4.roa
Signing time: Wed 27 Sep 2023 19:14:13 +0000
ROA not before: Tue 26 Sep 2023 19:14:13 +0000
ROA not after: Sat 27 Sep 2025 19:14:13 +0000
asID: 17072
IP address blocks: 187.190.207.0/24 maxlen: 24
187.190.230.0/24 maxlen: 24
187.190.238.0/24 maxlen: 24
187.191.11.0/24 maxlen: 24
187.191.16.0/24 maxlen: 24
187.191.33.0/24 maxlen: 24
187.191.42.0/24 maxlen: 24
189.203.12.0/24 maxlen: 24
189.203.13.0/24 maxlen: 24
189.203.27.0/24 maxlen: 24
189.203.29.0/24 maxlen: 24
189.203.96.0/24 maxlen: 24
189.203.98.0/24 maxlen: 24
189.203.99.0/24 maxlen: 24
189.203.101.0/24 maxlen: 24
189.203.102.0/24 maxlen: 24
189.203.104.0/24 maxlen: 24
189.203.105.0/24 maxlen: 24
189.203.131.0/24 maxlen: 24
189.203.132.0/24 maxlen: 24
189.203.133.0/24 maxlen: 24
189.203.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 837553 (0xcc7b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Validity
Not Before: Sep 26 19:14:13 2023 GMT
Not After : Sep 27 19:14:13 2025 GMT
Subject: CN=8a91aced826391096e2b74f6c62725a3f32998c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bc:d6:d1:6d:83:54:5d:fe:c8:b9:88:a7:87:
d6:0a:32:4c:ac:a1:ba:e6:52:d9:cf:8e:ec:0a:a7:
a7:cf:69:2c:77:4b:bc:c3:13:88:92:d1:2e:ef:cb:
1a:03:95:e1:7a:c6:dc:58:7b:3d:11:69:1e:c3:4a:
a3:2e:88:74:9c:d4:58:bc:17:86:06:53:20:1f:0f:
23:32:c1:42:c1:32:80:54:4e:7d:c7:30:53:21:81:
64:c6:fe:ac:72:7a:f7:f6:85:5b:30:da:8b:71:1a:
d8:78:34:3e:22:86:0e:89:80:de:b6:ad:86:ab:40:
17:cb:2e:6c:ee:fa:ac:83:dc:91:58:1c:b4:10:e7:
b6:3d:b6:40:33:ed:15:24:4d:bb:6c:97:c5:5b:0e:
99:86:bd:95:9b:53:b9:73:b6:31:c0:64:88:3f:5e:
02:77:ad:04:08:54:24:b7:fd:c3:9c:82:87:84:da:
7d:01:59:ba:4f:7d:20:10:48:85:3f:31:9e:4c:db:
a2:fd:c6:1d:72:e3:58:06:fa:5f:4f:ea:70:75:b8:
e7:64:a8:2a:e4:5b:6c:25:aa:d4:10:01:1d:5a:2c:
4b:b4:76:a1:f6:0b:1e:b2:9d:c1:41:02:69:85:26:
54:03:e9:fc:02:c7:ea:40:44:da:d8:e6:88:d2:07:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BD:54:80:44:B0:30:54:A6:24:A9:8E:C1:43:24:C8:FE:3B:7B:62
X509v3 Authority Key Identifier:
keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/8a91aced826391096e2b74f6c62725a3f32998c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.190.207.0/24
187.190.230.0/24
187.190.238.0/24
187.191.11.0/24
187.191.16.0/24
187.191.33.0/24
187.191.42.0/24
189.203.12.0/23
189.203.27.0/24
189.203.29.0/24
189.203.96.0/24
189.203.98.0/23
189.203.101.0-189.203.102.255
189.203.104.0/23
189.203.131.0-189.203.133.255
189.203.187.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:04:16:c0:46:9d:fe:2c:74:e6:3a:5d:f5:6d:71:24:44:e9:
5b:f4:a6:d1:40:fd:2b:11:9c:92:ff:54:23:44:4b:d9:26:94:
6f:3f:59:5d:f2:f3:48:c3:3c:41:3f:b0:ae:6f:51:55:fb:ac:
1f:cb:09:4a:9f:7f:17:e8:83:8f:bc:d3:65:80:d9:1e:ef:6f:
a6:30:cb:48:27:65:97:36:a6:c7:0b:cf:25:7b:b7:bf:12:10:
55:12:76:52:23:4f:65:b6:f2:70:94:1d:62:86:b1:13:90:b9:
cc:f3:ac:89:35:c1:60:60:ae:42:ff:4f:2b:22:df:a2:36:93:
d3:05:ac:b8:59:66:02:89:f2:ac:92:f1:9e:10:a1:8c:4f:0f:
a7:da:34:ad:6e:47:57:16:21:68:5b:10:6a:d9:a6:5b:79:1d:
53:67:d6:78:65:ae:e4:ef:cf:eb:5f:02:d2:ff:5d:a9:e2:36:
28:5a:da:60:60:98:a2:18:db:9c:08:d3:81:5e:e5:43:06:15:
8f:a7:dc:cd:f1:b0:7a:25:7b:58:a0:4c:de:56:4f:7b:54:27:
ca:12:6d:57:88:c5:0e:2e:b4:19:e7:68:40:f7:04:19:80:26:
a6:b3:f6:e9:b6:8c:b5:66:7e:b7:04:ac:cd:8f:db:39:e4:06:
57:df:9e:e6
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIDDMexMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
M2Q1Y2RiMTYwNzI2ZGM5MmUwNGVkNDZhNjU4ZWM2YmZjYmJkZDEwHhcNMjMwOTI2
MTkxNDEzWhcNMjUwOTI3MTkxNDEzWjAzMTEwLwYDVQQDEyg4YTkxYWNlZDgyNjM5
MTA5NmUyYjc0ZjZjNjI3MjVhM2YzMjk5OGM0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhrzW0W2DVF3+yLmIp4fWCjJMrKG65lLZz47sCqenz2ksd0u8
wxOIktEu78saA5XhesbcWHs9EWkew0qjLoh0nNRYvBeGBlMgHw8jMsFCwTKAVE59
xzBTIYFkxv6scnr39oVbMNqLcRrYeDQ+IoYOiYDetq2Gq0AXyy5s7vqsg9yRWBy0
EOe2PbZAM+0VJE27bJfFWw6Zhr2Vm1O5c7YxwGSIP14Cd60ECFQkt/3DnIKHhNp9
AVm6T30gEEiFPzGeTNui/cYdcuNYBvpfT+pwdbjnZKgq5FtsJarUEAEdWixLtHah
9gsesp3BQQJphSZUA+n8AsfqQETa2OaI0gds/QIDAQABo4ICxjCCAsIwHQYDVR0O
BBYEFMK9VIBEsDBUpiSpjsFDJMj+O3tiMB8GA1UdIwQYMBaAFI9xTwL31bpGSCLp
2dR7u2DVk6EyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTEzZDVj
ZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRkMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2Q1YWQ2YzAtNDk5Yi00MzgwLTk4NGYtODc0Yzlm
NTFkMmZmLzhhOTFhY2VkODI2MzkxMDk2ZTJiNzRmNmM2MjcyNWEzZjMyOTk4YzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZDVhZDZjMC00OTliLTQzODAtOTg0Zi04NzRj
OWY1MWQyZmYvOTEzZDVjZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRk
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBiQYIKwYBBQUHAQcBAf8E
ejB4MHYEAgABMHADBAC7vs8DBAC7vuYDBAC7vu4DBAC7vwsDBAC7vxADBAC7vyED
BAC7vyoDBAG9ywwDBAC9yxsDBAC9yx0DBAC9y2ADBAG9y2IwDAMEAL3LZQMEAL3L
ZgMEAb3LaDAMAwQAvcuDAwQBvcuEAwQAvcu7MA0GCSqGSIb3DQEBCwUAA4IBAQA6
BBbARp3+LHTmOl31bXEkROlb9KbRQP0rEZyS/1QjREvZJpRvP1ld8vNIwzxBP7Cu
b1FV+6wfywlKn38X6IOPvNNlgNke72+mMMtIJ2WXNqbHC88le7e/EhBVEnZSI09l
tvJwlB1ihrETkLnM86yJNcFgYK5C/08rIt+iNpPTBay4WWYCifKskvGeEKGMTw+n
2jStbkdXFiFoWxBq2aZbeR1TZ9Z4Za7k78/rXwLS/12p4jYoWtpgYJiiGNucCNOB
XuVDBhWPp9zN8bB6JXtYoEzeVk97VCfKEm1XiMUOLrQZ52hA9wQZgCams/bptoy1
Zn63BKzNj9s55AZX357m
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org