Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/0aead18f171c2ce5e622312e810d74e8cd4911d9.roa
File: 0aead18f171c2ce5e622312e810d74e8cd4911d9.roa (raw, json)
Hash identifier: yv5iOA+7NDRG1mXp4NVPAVTfKUrjok+jJDO6KRQRqVw=
Subject key identifier: 4D:9D:74:D5:2C:3A:97:21:4F:AA:31:93:BE:1D:51:05:37:C5:C9:C2
Certificate issuer: /CN=1579ac51896b95038727e3223b1d7ae2507073b5
Certificate serial: 12F536
Authority key identifier: 98:42:FC:61:A3:71:4E:E3:C0:53:2B:2A:F3:64:92:3B:17:17:D3:92
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1579ac51896b95038727e3223b1d7ae2507073b5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/0aead18f171c2ce5e622312e810d74e8cd4911d9.roa
Signing time: Tue 12 Oct 2021 21:14:44 +0000
ROA not before: Fri 08 Oct 2021 03:00:00 +0000
ROA not after: Thu 08 Oct 2026 03:00:00 +0000
asID: 263812
IP address blocks: 138.186.140.0/22 maxlen: 24
190.103.176.0/22 maxlen: 24
170.80.108.0/22 maxlen: 24
45.228.67.0/24 maxlen: 24
2800:ba0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1242422 (0x12f536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1579ac51896b95038727e3223b1d7ae2507073b5
Validity
Not Before: Oct 8 03:00:00 2021 GMT
Not After : Oct 8 03:00:00 2026 GMT
Subject: CN=0aead18f171c2ce5e622312e810d74e8cd4911d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:19:b5:f1:a3:e6:39:b2:e2:96:49:d3:bc:
9b:61:ce:de:27:d1:ec:82:8c:84:7c:ac:a3:05:0d:
86:94:63:c9:64:4a:25:b0:16:5e:af:ad:f6:76:3c:
ba:97:81:f8:35:46:cb:6f:35:8d:2a:56:9a:83:bd:
2d:43:09:f6:fa:62:68:2b:65:f8:fe:64:76:4b:3f:
1e:7b:f0:41:dd:76:7f:47:dc:73:49:eb:6a:dc:ef:
8f:49:06:8a:09:f7:61:54:6c:61:8b:b3:91:89:45:
b4:72:db:6a:59:8d:b3:5a:90:a9:46:7d:c2:1d:c2:
53:33:64:f4:6e:9b:86:96:d8:7a:15:b2:b8:b4:74:
24:93:eb:97:d2:8f:f6:c7:51:08:ce:cc:79:ee:f7:
89:fc:11:a3:7d:fc:17:41:6b:1c:21:73:80:17:73:
86:8f:16:9b:fb:26:c5:41:80:38:36:bf:b4:b2:f5:
52:c8:d6:58:1d:8b:f5:a0:f7:e5:9c:87:3e:da:63:
c5:62:11:b3:bf:09:8f:66:9d:10:5c:4f:76:fd:e9:
d2:91:ac:fd:e0:eb:88:de:81:1a:f2:47:50:f4:a5:
94:87:ba:f8:36:74:ec:7f:96:e9:54:53:09:34:97:
d8:d2:2b:ac:80:68:57:dd:e3:43:14:28:8e:68:0f:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9D:74:D5:2C:3A:97:21:4F:AA:31:93:BE:1D:51:05:37:C5:C9:C2
X509v3 Authority Key Identifier:
keyid:98:42:FC:61:A3:71:4E:E3:C0:53:2B:2A:F3:64:92:3B:17:17:D3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1579ac51896b95038727e3223b1d7ae2507073b5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/0aead18f171c2ce5e622312e810d74e8cd4911d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/1579ac51896b95038727e3223b1d7ae2507073b5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.67.0/24
138.186.140.0/22
170.80.108.0/22
190.103.176.0/22
IPv6:
2800:ba0::/32
Signature Algorithm: sha256WithRSAEncryption
53:38:36:6c:64:72:f5:6b:0c:aa:95:48:67:32:07:69:3c:91:
c3:f7:02:48:ee:24:1b:e0:83:59:90:50:1e:25:6e:d5:81:10:
08:88:36:b9:12:69:8d:4f:e0:d9:01:b0:05:97:ae:51:c1:de:
23:e3:c7:5d:75:07:31:a0:6e:7b:0e:42:0c:79:7e:1d:fb:34:
1a:13:a4:12:53:b9:35:ac:9b:08:4b:9f:7c:7c:00:57:7f:b6:
e6:36:e0:64:af:9a:09:87:55:60:9e:19:db:59:be:b6:85:9d:
cb:06:32:3b:66:0a:f5:3b:55:10:19:82:82:cf:0c:ff:ff:05:
23:b8:33:38:0c:30:e0:47:12:a1:a2:95:3d:42:de:b8:20:63:
9b:97:5c:0e:ec:32:26:6c:77:17:6a:b3:85:cc:05:a1:60:c6:
4c:33:0e:ff:f2:86:20:58:ad:e5:12:c1:fd:f0:89:9e:5a:9a:
70:a1:62:6e:e7:de:9e:cf:ba:0a:c1:d4:bd:81:4b:82:5e:6a:
21:ea:08:08:62:b9:a4:7f:cc:88:84:50:44:23:f6:cc:88:0b:
e9:f0:7e:f5:39:54:c6:a3:0f:b9:70:a3:ef:eb:65:bc:f7:96:
94:b4:c3:cd:dd:12:fc:2c:35:d8:b6:a2:09:dc:1d:ed:70:84:
3b:f6:95:a1
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIDEvU2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE1
NzlhYzUxODk2Yjk1MDM4NzI3ZTMyMjNiMWQ3YWUyNTA3MDczYjUwHhcNMjExMDA4
MDMwMDAwWhcNMjYxMDA4MDMwMDAwWjAzMTEwLwYDVQQDEygwYWVhZDE4ZjE3MWMy
Y2U1ZTYyMjMxMmU4MTBkNzRlOGNkNDkxMWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuRUZtfGj5jmy4pZJ07ybYc7eJ9HsgoyEfKyjBQ2GlGPJZEol
sBZer632djy6l4H4NUbLbzWNKlaag70tQwn2+mJoK2X4/mR2Sz8ee/BB3XZ/R9xz
Setq3O+PSQaKCfdhVGxhi7ORiUW0cttqWY2zWpCpRn3CHcJTM2T0bpuGlth6FbK4
tHQkk+uX0o/2x1EIzsx57veJ/BGjffwXQWscIXOAF3OGjxab+ybFQYA4Nr+0svVS
yNZYHYv1oPflnIc+2mPFYhGzvwmPZp0QXE92/enSkaz94OuI3oEa8kdQ9KWUh7r4
NnTsf5bpVFMJNJfY0iusgGhX3eNDFCiOaA8vIwIDAQABo4ICfDCCAngwHQYDVR0O
BBYEFE2ddNUsOpchT6oxk74dUQU3xcnCMB8GA1UdIwQYMBaAFJhC/GGjcU7jwFMr
KvNkkjsXF9OSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTU3OWFj
NTE4OTZiOTUwMzg3MjdlMzIyM2IxZDdhZTI1MDcwNzNiNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmZiOWI3ZmUtZThmZi00ZGE4LTkyNTYtZGY1OWYx
NjVmOTFkLzBhZWFkMThmMTcxYzJjZTVlNjIyMzEyZTgxMGQ3NGU4Y2Q0OTExZDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZmI5YjdmZS1lOGZmLTRkYTgtOTI1Ni1kZjU5
ZjE2NWY5MWQvMTU3OWFjNTE4OTZiOTUwMzg3MjdlMzIyM2IxZDdhZTI1MDcwNzNi
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQx
MC8wHgQCAAEwGAMEAC3kQwMEAoq6jAMEAqpQbAMEAr5nsDANBAIAAjAHAwUAKAAL
oDANBgkqhkiG9w0BAQsFAAOCAQEAUzg2bGRy9WsMqpVIZzIHaTyRw/cCSO4kG+CD
WZBQHiVu1YEQCIg2uRJpjU/g2QGwBZeuUcHeI+PHXXUHMaBuew5CDHl+Hfs0GhOk
ElO5NaybCEuffHwAV3+25jbgZK+aCYdVYJ4Z21m+toWdywYyO2YK9TtVEBmCgs8M
//8FI7gzOAww4EcSoaKVPULeuCBjm5dcDuwyJmx3F2qzhcwFoWDGTDMO//KGIFit
5RLB/fCJnlqacKFibufens+6CsHUvYFLgl5qIeoICGK5pH/MiIRQRCP2zIgL6fB+
9TlUxqMPuXCj7+tlvPeWlLTDzd0S/Cw12LaiCdwd7XCEO/aVoQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org