Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed3763af-8b75-4a23-9c88-fde96bb99b26/846a3d6d24abbce99ffc597d7731622fc0cdc3bd.roa
File: 846a3d6d24abbce99ffc597d7731622fc0cdc3bd.roa (raw, json)
Hash identifier: dQp/NOMlcD5UZwF2Be/wWSJUw1hW3yZDU2nYxj633C8=
Subject key identifier: 06:58:8C:5F:18:A2:52:34:06:CF:4E:69:34:5C:90:8B:33:D9:DB:38
Certificate issuer: /CN=5c9a685c651c7dbc1b745783be477a3e3d647d2c
Certificate serial: 153B
Authority key identifier: 06:F0:F8:7C:30:B4:36:12:2F:12:23:43:FC:82:A1:80:FD:A7:55:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c9a685c651c7dbc1b745783be477a3e3d647d2c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ed3763af-8b75-4a23-9c88-fde96bb99b26/846a3d6d24abbce99ffc597d7731622fc0cdc3bd.roa
Signing time: Wed 24 Mar 2021 14:32:56 +0000
ROA not before: Wed 24 Mar 2021 14:32:56 +0000
ROA not after: Tue 24 Mar 2026 14:32:56 +0000
asID: 262159
IP address blocks: 138.36.76.0/22 maxlen: 24
143.137.112.0/22 maxlen: 24
168.228.132.0/22 maxlen: 24
170.239.120.0/22 maxlen: 24
179.60.112.0/20 maxlen: 24
190.211.224.0/20 maxlen: 24
2803:2880::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5435 (0x153b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9a685c651c7dbc1b745783be477a3e3d647d2c
Validity
Not Before: Mar 24 14:32:56 2021 GMT
Not After : Mar 24 14:32:56 2026 GMT
Subject: CN=846a3d6d24abbce99ffc597d7731622fc0cdc3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:33:fa:b6:47:11:b6:8a:6b:4a:a5:bc:74:a3:
ee:b1:ad:21:9a:55:0e:0a:6c:69:3d:a0:ac:30:58:
40:8d:40:c9:71:2b:ef:d7:88:2d:dd:89:54:2b:4a:
6e:cc:14:13:5e:2e:07:63:17:47:5a:bd:65:67:1b:
56:9a:8d:da:a7:08:95:7c:85:f4:ee:a2:92:4a:3d:
00:8a:6a:be:75:b9:11:a5:3f:42:dc:c1:d9:73:52:
a0:19:34:2c:85:fa:5e:72:9d:98:87:0d:b4:14:34:
2c:7a:35:06:2c:2a:3f:5a:1e:a9:d1:f9:cb:54:35:
e9:13:2f:92:6d:eb:29:72:e9:1f:2e:e0:8c:06:39:
b4:bb:78:aa:5e:1d:6d:8b:b4:38:2b:65:39:cf:ff:
1d:f4:75:0c:f7:e4:63:34:05:0f:62:05:61:00:35:
99:95:6f:e2:d3:91:62:2b:78:fa:bc:11:3d:ee:0a:
73:45:89:ff:3e:18:b2:e5:cf:ae:f3:06:c1:e8:3e:
b4:9b:a8:db:84:9c:f1:aa:47:83:2a:fa:1c:55:90:
d1:e1:9e:53:3e:f5:57:70:e3:4c:07:10:63:11:67:
61:ba:bb:46:eb:ab:78:05:80:d1:19:e2:35:db:1b:
cf:7b:f4:4e:00:74:9b:c1:4b:cf:e6:be:21:87:e8:
52:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:58:8C:5F:18:A2:52:34:06:CF:4E:69:34:5C:90:8B:33:D9:DB:38
X509v3 Authority Key Identifier:
keyid:06:F0:F8:7C:30:B4:36:12:2F:12:23:43:FC:82:A1:80:FD:A7:55:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c9a685c651c7dbc1b745783be477a3e3d647d2c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed3763af-8b75-4a23-9c88-fde96bb99b26/846a3d6d24abbce99ffc597d7731622fc0cdc3bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ed3763af-8b75-4a23-9c88-fde96bb99b26/5c9a685c651c7dbc1b745783be477a3e3d647d2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.76.0/22
143.137.112.0/22
168.228.132.0/22
170.239.120.0/22
179.60.112.0/20
190.211.224.0/20
IPv6:
2803:2880::/32
Signature Algorithm: sha256WithRSAEncryption
b0:fa:81:cd:73:1a:d5:5a:64:54:21:7d:2a:bd:f1:1b:80:44:
ad:ed:62:70:7c:9f:74:15:52:2b:64:0f:34:0a:f8:1a:20:c0:
38:d7:6b:d2:c9:ff:2a:a4:29:9b:f2:2a:ae:bd:68:c7:10:73:
55:44:05:0f:61:40:62:a2:37:02:ee:f0:ee:3b:4f:50:ee:9e:
2a:b0:df:53:33:70:6a:6f:9d:e1:a3:3c:b9:09:e5:df:29:9d:
6b:4c:24:a0:c7:3e:2f:27:3f:ab:d1:a2:ad:66:d2:b9:24:11:
fb:bd:52:6a:b8:5d:5a:92:92:8b:a2:fb:82:33:bb:f2:12:f2:
b4:4c:54:3b:7a:61:83:15:f3:8b:31:d1:09:c7:30:af:77:f5:
61:e2:63:7b:cb:2f:8f:d7:69:98:26:31:29:c9:08:fc:2e:88:
a6:01:a3:16:26:5c:06:7b:15:48:5a:5c:ff:09:51:be:4d:f2:
b4:f8:e2:17:04:be:d8:f6:ed:f4:dc:81:ca:1a:7a:e2:07:a8:
e4:bf:c4:fa:70:ad:4f:83:f7:35:32:e6:32:f6:d7:af:9a:60:
5f:33:81:c6:0e:85:61:b9:73:53:3c:1d:e0:3a:44:0f:dd:0f:
7a:db:10:7a:b4:cb:9b:d6:24:02:f6:9c:d4:67:0f:21:e5:50:
bc:8b:53:d8
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgICFTswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNWM5
YTY4NWM2NTFjN2RiYzFiNzQ1NzgzYmU0NzdhM2UzZDY0N2QyYzAeFw0yMTAzMjQx
NDMyNTZaFw0yNjAzMjQxNDMyNTZaMDMxMTAvBgNVBAMTKDg0NmEzZDZkMjRhYmJj
ZTk5ZmZjNTk3ZDc3MzE2MjJmYzBjZGMzYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCOM/q2RxG2imtKpbx0o+6xrSGaVQ4KbGk9oKwwWECNQMlxK+/X
iC3diVQrSm7MFBNeLgdjF0davWVnG1aajdqnCJV8hfTuopJKPQCKar51uRGlP0Lc
wdlzUqAZNCyF+l5ynZiHDbQUNCx6NQYsKj9aHqnR+ctUNekTL5Jt6yly6R8u4IwG
ObS7eKpeHW2LtDgrZTnP/x30dQz35GM0BQ9iBWEANZmVb+LTkWIrePq8ET3uCnNF
if8+GLLlz67zBsHoPrSbqNuEnPGqR4Mq+hxVkNHhnlM+9Vdw40wHEGMRZ2G6u0br
q3gFgNEZ4jXbG8979E4AdJvBS8/mviGH6FJ/AgMBAAGjggKIMIIChDAdBgNVHQ4E
FgQUBliMXxiiUjQGz05pNFyQizPZ2zgwHwYDVR0jBBgwFoAUBvD4fDC0NhIvEiND
/IKhgP2nVaowDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS81YzlhNjg1
YzY1MWM3ZGJjMWI3NDU3ODNiZTQ3N2EzZTNkNjQ3ZDJjLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9lZDM3NjNhZi04Yjc1LTRhMjMtOWM4OC1mZGU5NmJi
OTliMjYvODQ2YTNkNmQyNGFiYmNlOTlmZmM1OTdkNzczMTYyMmZjMGNkYzNiZC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2VkMzc2M2FmLThiNzUtNGEyMy05Yzg4LWZkZTk2
YmI5OWIyNi81YzlhNjg1YzY1MWM3ZGJjMWI3NDU3ODNiZTQ3N2EzZTNkNjQ3ZDJj
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0w
OzAqBAIAATAkAwQCiiRMAwQCj4lwAwQCqOSEAwQCqu94AwQEszxwAwQEvtPgMA0E
AgACMAcDBQAoAyiAMA0GCSqGSIb3DQEBCwUAA4IBAQCw+oHNcxrVWmRUIX0qvfEb
gESt7WJwfJ90FVIrZA80CvgaIMA412vSyf8qpCmb8iquvWjHEHNVRAUPYUBiojcC
7vDuO09Q7p4qsN9TM3Bqb53hozy5CeXfKZ1rTCSgxz4vJz+r0aKtZtK5JBH7vVJq
uF1akpKLovuCM7vyEvK0TFQ7emGDFfOLMdEJxzCvd/Vh4mN7yy+P12mYJjEpyQj8
LoimAaMWJlwGexVIWlz/CVG+TfK0+OIXBL7Y9u303IHKGnriB6jkv8T6cK1Pg/c1
MuYy9tevmmBfM4HGDoVhuXNTPB3gOkQP3Q962xB6tMub1iQC9pzUZw8h5VC8i1PY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org