Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/5f52de313150c527664c1b3e553d596062a1ec5a.roa
File: 5f52de313150c527664c1b3e553d596062a1ec5a.roa (raw, json)
Hash identifier: bnqGci59bTjny1i5IRM+dmgutB125KiueANzSPgFXCk=
Subject key identifier: 40:DB:B3:B2:B9:6E:D4:89:D5:B0:A3:56:AD:DF:CF:9E:C9:FD:2F:78
Certificate issuer: /CN=d096404f63772aa8165da1f7e01c34c4e378a916
Certificate serial: 0D43C2
Authority key identifier: AE:84:A6:DF:5E:30:C0:53:10:DA:CC:67:B6:EF:FE:41:4E:74:D2:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d096404f63772aa8165da1f7e01c34c4e378a916.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/5f52de313150c527664c1b3e553d596062a1ec5a.roa
Signing time: Wed 24 Mar 2021 14:38:03 +0000
ROA not before: Wed 24 Mar 2021 14:38:03 +0000
ROA not after: Tue 24 Mar 2026 14:38:03 +0000
asID: 27725
IP address blocks: 181.225.224.0/19 maxlen: 19
190.6.64.0/20 maxlen: 20
190.6.80.0/20 maxlen: 20
190.15.144.0/20 maxlen: 20
190.92.112.0/20 maxlen: 20
200.13.144.0/21 maxlen: 21
200.55.128.0/21 maxlen: 21
200.55.136.0/21 maxlen: 21
200.55.144.0/21 maxlen: 21
200.55.152.0/21 maxlen: 21
200.55.160.0/20 maxlen: 20
200.55.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869314 (0xd43c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d096404f63772aa8165da1f7e01c34c4e378a916
Validity
Not Before: Mar 24 14:38:03 2021 GMT
Not After : Mar 24 14:38:03 2026 GMT
Subject: CN=5f52de313150c527664c1b3e553d596062a1ec5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:38:11:36:c9:10:a1:e3:f0:37:03:ef:26:8c:
ac:db:eb:59:3d:2c:12:fc:cf:ff:94:67:98:ec:63:
fb:61:83:1f:8e:a6:88:09:7b:c6:eb:c6:b4:f3:a7:
b6:b4:c6:8c:05:2f:4a:f6:33:08:c9:f1:85:16:8f:
8a:ce:8a:ac:21:7d:54:37:e2:3e:ad:dd:38:e4:b3:
10:2b:2d:7f:e4:8c:e7:4b:21:70:1d:41:c2:e9:41:
82:24:3b:d1:31:69:9f:19:b0:0e:ab:74:f8:31:de:
9d:c2:49:c7:f9:26:ca:20:16:1e:68:c6:10:74:97:
b7:0e:7d:41:68:99:10:70:ed:40:81:bc:49:f1:b6:
2e:82:6d:60:ce:cf:f7:75:08:81:c1:ed:c4:32:95:
b7:ed:ba:21:8c:30:9e:db:e4:57:72:81:93:8d:ea:
c7:88:7b:da:0c:18:e2:37:cf:09:fb:bb:18:67:91:
86:da:2e:fc:73:29:83:af:bf:bf:fb:b4:8d:25:43:
bc:4e:af:77:cd:80:f3:65:bf:73:bb:c7:43:39:f3:
ec:9b:21:00:24:e0:74:45:25:8a:1a:53:6f:52:f1:
02:99:c7:7a:46:7d:87:0d:b7:da:38:ea:e7:19:b0:
25:24:96:ed:29:54:47:40:2a:00:a4:96:7e:d9:34:
3b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DB:B3:B2:B9:6E:D4:89:D5:B0:A3:56:AD:DF:CF:9E:C9:FD:2F:78
X509v3 Authority Key Identifier:
keyid:AE:84:A6:DF:5E:30:C0:53:10:DA:CC:67:B6:EF:FE:41:4E:74:D2:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d096404f63772aa8165da1f7e01c34c4e378a916.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/5f52de313150c527664c1b3e553d596062a1ec5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/d096404f63772aa8165da1f7e01c34c4e378a916.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.225.224.0/19
190.6.64.0/19
190.15.144.0/20
190.92.112.0/20
200.13.144.0/21
200.55.128.0/18
Signature Algorithm: sha256WithRSAEncryption
ac:ce:5c:52:38:11:97:a3:7d:c0:ac:e8:11:ad:ca:ee:cf:88:
c5:cc:23:b4:42:66:f8:60:07:c5:f2:93:e2:c2:a3:e0:67:40:
f8:35:3b:ff:ac:6e:60:e7:9e:35:ed:73:4a:f4:da:cd:7f:1f:
7f:b5:d1:a1:e5:34:fb:fa:77:3c:9c:26:0f:9b:41:12:af:5d:
39:fc:52:03:92:c9:30:51:51:b8:c7:35:c3:92:90:97:cf:4f:
9d:c1:66:42:f6:df:fd:98:37:45:47:29:69:eb:28:f4:f0:ff:
91:fe:2c:6e:81:cc:90:ca:ee:22:78:e1:c9:2c:e9:53:0b:3d:
a3:08:92:bd:8b:6c:30:42:c6:78:43:48:b4:7e:fc:c1:68:c7:
ba:cb:38:6d:52:26:b3:af:cd:73:05:35:bd:c0:22:13:ab:bb:
30:60:ef:1d:65:8c:04:5e:5b:35:cb:97:fc:5a:40:b6:01:70:
55:f3:75:48:cb:37:db:f3:68:d2:3b:aa:97:35:69:80:4b:57:
94:4e:86:27:22:7a:44:14:99:4e:fa:8e:f1:44:db:5f:57:62:
3b:b1:91:e7:c8:8c:9d:3e:50:c2:99:e2:6a:3e:7f:b6:d1:c1:
fb:2c:20:0d:ed:85:2d:e3:c7:f1:da:04:de:66:5b:ea:d3:2e:
74:ad:1e:11
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIDDUPCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQw
OTY0MDRmNjM3NzJhYTgxNjVkYTFmN2UwMWMzNGM0ZTM3OGE5MTYwHhcNMjEwMzI0
MTQzODAzWhcNMjYwMzI0MTQzODAzWjAzMTEwLwYDVQQDEyg1ZjUyZGUzMTMxNTBj
NTI3NjY0YzFiM2U1NTNkNTk2MDYyYTFlYzVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiTgRNskQoePwNwPvJoys2+tZPSwS/M//lGeY7GP7YYMfjqaI
CXvG68a086e2tMaMBS9K9jMIyfGFFo+KzoqsIX1UN+I+rd045LMQKy1/5IznSyFw
HUHC6UGCJDvRMWmfGbAOq3T4Md6dwknH+SbKIBYeaMYQdJe3Dn1BaJkQcO1AgbxJ
8bYugm1gzs/3dQiBwe3EMpW37bohjDCe2+RXcoGTjerHiHvaDBjiN88J+7sYZ5GG
2i78cymDr7+/+7SNJUO8Tq93zYDzZb9zu8dDOfPsmyEAJOB0RSWKGlNvUvECmcd6
Rn2HDbfaOOrnGbAlJJbtKVRHQCoApJZ+2TQ7gQIDAQABo4ICeTCCAnUwHQYDVR0O
BBYEFEDbs7K5btSJ1bCjVq3fz57J/S94MB8GA1UdIwQYMBaAFK6Ept9eMMBTENrM
Z7bv/kFOdNKVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDA5NjQw
NGY2Mzc3MmFhODE2NWRhMWY3ZTAxYzM0YzRlMzc4YTkxNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDY0ODNjZmItN2FiMS00NTA4LWJmNmYtODk1Mzk1
N2Q4ODg3LzVmNTJkZTMxMzE1MGM1Mjc2NjRjMWIzZTU1M2Q1OTYwNjJhMWVjNWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNjQ4M2NmYi03YWIxLTQ1MDgtYmY2Zi04OTUz
OTU3ZDg4ODcvZDA5NjQwNGY2Mzc3MmFhODE2NWRhMWY3ZTAxYzM0YzRlMzc4YTkx
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQu
MCwwKgQCAAEwJAMEBbXh4AMEBb4GQAMEBL4PkAMEBL5ccAMEA8gNkAMEBsg3gDAN
BgkqhkiG9w0BAQsFAAOCAQEArM5cUjgRl6N9wKzoEa3K7s+IxcwjtEJm+GAHxfKT
4sKj4GdA+DU7/6xuYOeeNe1zSvTazX8ff7XRoeU0+/p3PJwmD5tBEq9dOfxSA5LJ
MFFRuMc1w5KQl89PncFmQvbf/Zg3RUcpaeso9PD/kf4sboHMkMruInjhySzpUws9
owiSvYtsMELGeENItH78wWjHuss4bVIms6/NcwU1vcAiE6u7MGDvHWWMBF5bNcuX
/FpAtgFwVfN1SMs32/No0juqlzVpgEtXlE6GJyJ6RBSZTvqO8UTbX1diO7GR58iM
nT5Qwpniaj5/ttHB+ywgDe2FLePH8doE3mZb6tMudK0eEQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org