Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/452dcf1ed110145974dd545ec6e39ecd91a7b994.roa
File: 452dcf1ed110145974dd545ec6e39ecd91a7b994.roa (raw, json)
Hash identifier: daPUvc0Xlbdbrz0oqugCllFzRvNSqYYqrSR4GgtneOs=
Subject key identifier: CC:A0:22:9D:FC:71:FD:19:A0:18:95:92:26:B7:E1:1A:5E:ED:5E:D5
Certificate issuer: /CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
Certificate serial: 0F9DBE
Authority key identifier: 40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/452dcf1ed110145974dd545ec6e39ecd91a7b994.roa
Signing time: Tue 15 Jun 2021 02:43:32 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 28114
IP address blocks: 181.118.0.0/19 maxlen: 24
168.195.108.0/22 maxlen: 24
186.183.0.0/18 maxlen: 24
186.183.64.0/19 maxlen: 24
186.183.96.0/20 maxlen: 24
186.183.120.0/21 maxlen: 24
190.12.160.0/19 maxlen: 24
190.115.32.0/19 maxlen: 24
200.114.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1023422 (0xf9dbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=452dcf1ed110145974dd545ec6e39ecd91a7b994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cf:c5:6b:af:19:bb:93:33:ed:4c:e6:14:6d:
71:e6:c1:cf:11:73:17:56:fc:0f:eb:60:36:6a:93:
66:aa:31:b3:8b:65:00:1a:57:1e:fe:5f:75:70:7f:
19:5e:bb:0f:84:dd:44:17:af:d7:0a:2b:6d:0e:78:
df:0d:fd:c1:d9:c6:fc:37:ef:37:37:1b:d0:c0:fb:
63:d7:02:a2:3c:5c:af:d0:9b:1b:78:e3:b0:11:5e:
27:ae:4d:7e:c8:9c:2d:01:00:84:7a:e6:51:dc:6a:
20:3c:db:25:38:ce:78:fc:cd:96:b5:6a:ff:d7:bf:
e3:5e:9a:8a:b1:a7:db:b1:3b:85:6e:59:7d:f4:c3:
96:47:7c:b3:2e:57:60:ca:6a:7b:ba:61:0f:0e:82:
08:78:4a:f9:f2:17:08:2a:81:42:17:93:1a:b6:dc:
57:6f:aa:d5:2f:01:06:b1:6b:ed:97:52:51:82:ed:
ab:15:0a:c1:9f:df:c1:77:83:1b:a7:14:10:31:e5:
4c:91:15:40:54:af:80:1f:21:8c:58:bf:7f:99:ca:
67:74:ec:9c:02:56:e3:1d:07:e5:7b:5f:e9:db:01:
59:ad:76:43:ca:7d:7b:0a:19:03:4b:9c:8d:15:ae:
c9:75:36:d7:1c:de:bf:23:10:62:21:62:31:80:d2:
8c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A0:22:9D:FC:71:FD:19:A0:18:95:92:26:B7:E1:1A:5E:ED:5E:D5
X509v3 Authority Key Identifier:
keyid:40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/452dcf1ed110145974dd545ec6e39ecd91a7b994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.108.0/22
181.118.0.0/19
186.183.0.0-186.183.111.255
186.183.120.0/21
190.12.160.0/19
190.115.32.0/19
200.114.120.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:e4:81:9b:da:f4:35:8b:f9:e5:42:6e:e2:e2:77:5d:75:cc:
ba:f2:3a:72:15:68:5b:40:6a:a8:2c:c9:49:0d:c9:d2:ad:15:
95:97:13:b8:bf:62:12:91:16:f1:12:bf:d7:fe:43:36:2b:5b:
c0:e5:af:ad:43:30:78:04:22:a3:2e:0e:9b:e7:6a:82:73:30:
06:d6:1d:58:19:8f:4a:86:51:58:f7:c9:d3:da:07:da:f3:88:
84:0b:04:84:70:43:5c:74:18:ad:fa:4f:31:cb:26:41:e7:b3:
34:aa:f0:21:08:dc:ae:9c:70:5f:bc:a0:e4:d8:91:96:2b:b7:
bd:c4:ab:a9:94:b2:70:79:39:53:30:89:ab:1e:cb:6f:fe:be:
74:bb:88:70:34:b9:00:f2:84:49:da:aa:49:54:e8:de:e6:41:
08:6d:9b:8e:c8:e9:bc:a8:e1:48:7a:f3:66:02:ea:77:e4:da:
06:ff:65:06:ab:13:7b:6b:42:d4:6a:c4:eb:93:8b:2e:23:22:
8e:34:c4:ac:c0:38:bd:bb:32:a6:06:39:16:2d:d2:0f:c2:82:
63:8d:61:00:64:14:d8:7a:e5:28:10:d0:9e:65:34:83:5f:9c:
85:3b:38:7e:b7:69:fa:f8:b1:88:40:51:71:71:e7:0d:6d:10:
b4:77:2c:e7
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIDD52+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
Y2IxODVkYzJiNjdmZWE0ZThmY2M5MzAzZGU3NmIyZTZiM2U3NjUwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg0NTJkY2YxZWQxMTAx
NDU5NzRkZDU0NWVjNmUzOWVjZDkxYTdiOTk0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmM/Fa68Zu5Mz7UzmFG1x5sHPEXMXVvwP62A2apNmqjGzi2UA
Glce/l91cH8ZXrsPhN1EF6/XCittDnjfDf3B2cb8N+83NxvQwPtj1wKiPFyv0Jsb
eOOwEV4nrk1+yJwtAQCEeuZR3GogPNslOM54/M2WtWr/17/jXpqKsafbsTuFbll9
9MOWR3yzLldgymp7umEPDoIIeEr58hcIKoFCF5MattxXb6rVLwEGsWvtl1JRgu2r
FQrBn9/Bd4MbpxQQMeVMkRVAVK+AHyGMWL9/mcpndOycAlbjHQfle1/p2wFZrXZD
yn17ChkDS5yNFa7JdTbXHN6/IxBiIWIxgNKMZQIDAQABo4IChjCCAoIwHQYDVR0O
BBYEFMygIp38cf0ZoBiVkia34Rpe7V7VMB8GA1UdIwQYMBaAFEA3K4qkZDF+pWHm
xGPL9wTNlKBjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDhjYjE4
NWRjMmI2N2ZlYTRlOGZjYzkzMDNkZTc2YjJlNmIzZTc2NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2ZmNzZlYzAtN2Q0YS00OWMzLWI0YWUtM2U2YTkx
YjcyM2NiLzQ1MmRjZjFlZDExMDE0NTk3NGRkNTQ1ZWM2ZTM5ZWNkOTFhN2I5OTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZmY3NmVjMC03ZDRhLTQ5YzMtYjRhZS0zZTZh
OTFiNzIzY2IvZDhjYjE4NWRjMmI2N2ZlYTRlOGZjYzkzMDNkZTc2YjJlNmIzZTc2
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBKBggrBgEFBQcBBwEB/wQ7
MDkwNwQCAAEwMQMEAqjDbAMEBbV2ADALAwMAurcDBAS6t2ADBAO6t3gDBAW+DKAD
BAW+cyADBAPIcngwDQYJKoZIhvcNAQELBQADggEBACvkgZva9DWL+eVCbuLid111
zLryOnIVaFtAaqgsyUkNydKtFZWXE7i/YhKRFvESv9f+QzYrW8Dlr61DMHgEIqMu
DpvnaoJzMAbWHVgZj0qGUVj3ydPaB9rziIQLBIRwQ1x0GK36TzHLJkHnszSq8CEI
3K6ccF+8oOTYkZYrt73Eq6mUsnB5OVMwiasey2/+vnS7iHA0uQDyhEnaqklU6N7m
QQhtm47I6byo4Uh682YC6nfk2gb/ZQarE3trQtRqxOuTiy4jIo40xKzAOL27MqYG
ORYt0g/CgmONYQBkFNh65SgQ0J5lNINfnIU7OH63afr4sYhAUXFx5w1tELR3LOc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org