Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/e83bc809b155780c0b3e025edcbbbe00a8f67087.roa
File: e83bc809b155780c0b3e025edcbbbe00a8f67087.roa (raw, json)
Hash identifier: sWpIAe2uRcgqK8DVoEQoQopKwrj9zp/4Qp44jC0zbOU=
Subject key identifier: C9:8E:15:DA:AE:30:AA:F8:7F:78:C9:32:B7:74:42:08:AF:C9:F6:C8
Certificate issuer: /CN=3fd7e91493678e5c49e72c20d07d4a277e63f224
Certificate serial: 20224C
Authority key identifier: 53:47:76:B6:35:82:22:3D:B7:70:E1:E7:C8:FC:AB:13:24:64:75:A5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fd7e91493678e5c49e72c20d07d4a277e63f224.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/e83bc809b155780c0b3e025edcbbbe00a8f67087.roa
Signing time: Wed 12 Apr 2023 15:49:27 +0000
ROA not before: Sun 21 Mar 2021 03:00:00 +0000
ROA not after: Sun 24 Mar 2030 03:00:00 +0000
asID: 27960
IP address blocks: 179.60.96.0/20 maxlen: 23
190.122.32.0/20 maxlen: 23
190.122.48.0/20 maxlen: 23
200.49.120.0/21 maxlen: 23
2803:d080::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105932 (0x20224c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd7e91493678e5c49e72c20d07d4a277e63f224
Validity
Not Before: Mar 21 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2030 GMT
Subject: CN=e83bc809b155780c0b3e025edcbbbe00a8f67087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:72:5d:e6:24:b3:3e:4a:f2:0a:f7:b9:00:
84:a4:38:a2:6f:ef:bb:e9:68:9e:56:90:02:df:5e:
f9:cd:65:0a:ae:ca:2a:d1:5b:3c:8a:03:99:90:d9:
02:47:16:2f:db:be:29:14:2a:4b:97:f1:e5:39:aa:
e1:47:eb:d5:9e:63:ca:af:4b:68:36:67:b1:e0:17:
bc:47:53:8c:90:9c:25:8e:be:73:d3:4a:1d:4e:93:
ad:b4:f1:68:05:31:5d:2e:6e:9b:7b:78:46:00:70:
16:20:c4:05:db:30:05:7b:39:d7:11:d9:e3:4a:e2:
aa:64:56:bc:33:fe:23:49:57:4f:04:9b:34:45:43:
22:df:21:5d:33:c6:a7:8e:b1:0d:c1:ce:79:14:b4:
9f:a2:c8:60:a2:25:d2:e0:e9:0c:b4:1c:53:53:83:
e1:26:73:31:c9:a1:4a:da:a0:1e:c5:37:73:6a:de:
01:1b:48:6e:ce:91:e0:3b:65:30:59:0b:4d:71:9c:
89:65:5a:6f:7c:c6:bc:23:1e:ce:6d:eb:ae:2a:d9:
60:99:1a:35:29:3d:ce:4e:01:aa:63:0d:82:eb:eb:
b8:2c:ee:a1:53:fe:9a:fb:44:3f:67:6b:5e:2b:e8:
a6:36:b3:e8:25:36:42:53:59:3b:1f:0a:e7:a0:6a:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8E:15:DA:AE:30:AA:F8:7F:78:C9:32:B7:74:42:08:AF:C9:F6:C8
X509v3 Authority Key Identifier:
keyid:53:47:76:B6:35:82:22:3D:B7:70:E1:E7:C8:FC:AB:13:24:64:75:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fd7e91493678e5c49e72c20d07d4a277e63f224.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/e83bc809b155780c0b3e025edcbbbe00a8f67087.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/3fd7e91493678e5c49e72c20d07d4a277e63f224.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.96.0/20
190.122.32.0/19
200.49.120.0/21
IPv6:
2803:d080::/32
Signature Algorithm: sha256WithRSAEncryption
25:ee:0c:78:0e:15:bd:de:56:92:56:7f:9e:78:07:d3:3b:4d:
62:5d:2b:15:5b:af:1f:f2:29:85:15:5d:d6:8c:37:9d:31:72:
8e:36:c2:cb:06:b2:3e:95:ff:ea:72:b7:27:0d:af:59:00:1a:
46:17:23:18:cb:79:d1:c1:e4:08:b2:4b:21:82:2b:a1:5b:d6:
0c:05:9a:63:b1:9e:71:23:83:30:93:b1:6f:2f:ee:92:d8:50:
d8:78:fc:5f:96:a4:0b:59:97:f9:ab:37:e7:68:bd:d1:d4:d9:
b0:91:05:cd:62:58:fb:16:d8:eb:99:e8:0b:55:6a:87:46:73:
1e:40:52:6f:65:49:c5:30:c3:d2:e0:e3:3f:f1:a6:c5:18:4a:
6f:43:9d:f4:31:7b:7f:92:13:e7:18:9a:3c:35:3f:26:d4:f9:
c4:f3:8e:24:cc:6b:31:6a:8a:61:61:71:cd:7d:21:74:09:d4:
18:c3:16:01:ad:c5:10:af:16:04:b2:dd:60:84:2a:8c:e5:e1:
bc:1b:60:16:ea:8f:cf:88:04:d5:3d:49:7d:5e:cb:a6:b9:0d:
f8:de:58:a3:2c:27:f7:9b:fa:ee:32:5d:42:50:93:25:a4:d6:
85:24:d6:02:f3:be:ac:1f:04:71:d2:82:ee:64:28:da:01:bd:
8d:1d:0c:9b
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIDICJMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNm
ZDdlOTE0OTM2NzhlNWM0OWU3MmMyMGQwN2Q0YTI3N2U2M2YyMjQwHhcNMjEwMzIx
MDMwMDAwWhcNMzAwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhlODNiYzgwOWIxNTU3
ODBjMGIzZTAyNWVkY2JiYmUwMGE4ZjY3MDg3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo2JyXeYksz5K8gr3uQCEpDiib++76WieVpAC3175zWUKrsoq
0Vs8igOZkNkCRxYv274pFCpLl/HlOarhR+vVnmPKr0toNmex4Be8R1OMkJwljr5z
00odTpOttPFoBTFdLm6be3hGAHAWIMQF2zAFeznXEdnjSuKqZFa8M/4jSVdPBJs0
RUMi3yFdM8anjrENwc55FLSfoshgoiXS4OkMtBxTU4PhJnMxyaFK2qAexTdzat4B
G0huzpHgO2UwWQtNcZyJZVpvfMa8Ix7ObeuuKtlgmRo1KT3OTgGqYw2C6+u4LO6h
U/6a+0Q/Z2teK+imNrPoJTZCU1k7HwrnoGpcJwIDAQABo4ICdjCCAnIwHQYDVR0O
BBYEFMmOFdquMKr4f3jJMrd0QgivyfbIMB8GA1UdIwQYMBaAFFNHdrY1giI9t3Dh
58j8qxMkZHWlMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2ZkN2U5
MTQ5MzY3OGU1YzQ5ZTcyYzIwZDA3ZDRhMjc3ZTYzZjIyNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmI5OGI3OTItM2YwYi00MGFmLWJjMDEtYTUwNGRi
ODg1MzFjL2U4M2JjODA5YjE1NTc4MGMwYjNlMDI1ZWRjYmJiZTAwYThmNjcwODcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYjk4Yjc5Mi0zZjBiLTQwYWYtYmMwMS1hNTA0
ZGI4ODUzMWMvM2ZkN2U5MTQ5MzY3OGU1YzQ5ZTcyYzIwZDA3ZDRhMjc3ZTYzZjIy
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQr
MCkwGAQCAAEwEgMEBLM8YAMEBb56IAMEA8gxeDANBAIAAjAHAwUAKAPQgDANBgkq
hkiG9w0BAQsFAAOCAQEAJe4MeA4Vvd5WklZ/nngH0ztNYl0rFVuvH/IphRVd1ow3
nTFyjjbCywayPpX/6nK3Jw2vWQAaRhcjGMt50cHkCLJLIYIroVvWDAWaY7GecSOD
MJOxby/ukthQ2Hj8X5akC1mX+as352i90dTZsJEFzWJY+xbY65noC1Vqh0ZzHkBS
b2VJxTDD0uDjP/GmxRhKb0Od9DF7f5IT5xiaPDU/JtT5xPOOJMxrMWqKYWFxzX0h
dAnUGMMWAa3FEK8WBLLdYIQqjOXhvBtgFuqPz4gE1T1JfV7LprkN+N5Yoywn95v6
7jJdQlCTJaTWhSTWAvO+rB8EcdKC7mQo2gG9jR0Mmw==
-----END CERTIFICATE-----
Generated at Fri May 2 00:48:50 2025 by rpki-client