Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/392a5059b40fe48046a6521bd5fd6ea61619000b.roa
File: 392a5059b40fe48046a6521bd5fd6ea61619000b.roa (raw, json)
Hash identifier: Cmsk8DXkme79gLymJG3ZLqnMtQwKZR7q+95oE28mQ4Y=
Subject key identifier: 25:DF:0E:69:FD:AD:2B:DA:87:5C:A6:0E:D0:55:FE:74:BB:EB:D5:92
Certificate issuer: /CN=4393f7432846896d18bc47956f7dce0ffc072b54
Certificate serial: 0C395F
Authority key identifier: C5:62:86:91:75:C8:DB:6E:23:A2:5E:89:B8:61:A8:76:6D:95:57:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4393f7432846896d18bc47956f7dce0ffc072b54.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/392a5059b40fe48046a6521bd5fd6ea61619000b.roa
Signing time: Wed 24 Mar 2021 14:45:29 +0000
ROA not before: Wed 24 Mar 2021 14:45:29 +0000
ROA not after: Tue 24 Mar 2026 14:45:29 +0000
asID: 138609
IP address blocks: 131.221.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 801119 (0xc395f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4393f7432846896d18bc47956f7dce0ffc072b54
Validity
Not Before: Mar 24 14:45:29 2021 GMT
Not After : Mar 24 14:45:29 2026 GMT
Subject: CN=392a5059b40fe48046a6521bd5fd6ea61619000b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:67:ed:f9:ab:b5:63:f6:89:24:4a:74:ec:
23:d5:b0:cf:67:d2:2e:58:49:56:87:28:76:b2:5a:
32:f7:f7:45:30:00:e6:3b:6f:da:f5:15:91:08:11:
c7:d9:39:bc:65:88:24:42:87:91:d2:8c:6d:b2:e0:
23:dd:ae:2f:b8:c7:0e:5c:41:51:64:3f:a0:ce:1d:
b7:ae:76:4e:2d:2f:09:b0:9d:4b:c6:68:41:36:cb:
12:b1:c9:54:42:f9:74:23:40:02:ab:3c:b1:1a:9a:
88:09:08:3d:6b:95:82:ef:53:bb:ad:ee:e8:0e:df:
c1:04:f0:5f:01:4c:c4:5b:57:0e:4c:65:d9:75:92:
d7:85:94:34:c2:5e:39:95:51:b3:b1:46:1c:cc:ea:
0f:ee:49:95:87:26:46:4d:b8:86:33:be:03:72:e1:
23:fe:5b:2c:e1:df:64:61:47:cd:fe:2b:9f:90:2a:
79:7d:41:69:1a:f5:bd:b8:f1:5a:a3:7d:0f:8e:9c:
0b:7b:75:ac:c5:c1:7e:2c:6d:b2:41:98:3b:9e:05:
31:73:7e:e0:b5:dd:25:0c:dd:d3:40:76:a4:7c:59:
ac:37:c3:fd:4b:fe:f9:ab:53:3e:e0:3c:ff:7c:2d:
33:ff:38:5d:4e:99:65:75:89:bd:34:46:93:49:00:
c0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DF:0E:69:FD:AD:2B:DA:87:5C:A6:0E:D0:55:FE:74:BB:EB:D5:92
X509v3 Authority Key Identifier:
keyid:C5:62:86:91:75:C8:DB:6E:23:A2:5E:89:B8:61:A8:76:6D:95:57:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4393f7432846896d18bc47956f7dce0ffc072b54.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/392a5059b40fe48046a6521bd5fd6ea61619000b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/4393f7432846896d18bc47956f7dce0ffc072b54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.154.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a8:7c:9c:e2:64:3d:0d:ab:4e:95:bb:e2:cc:ae:13:9c:62:
6f:c7:8b:08:a7:7e:96:5f:50:d0:f5:a2:ca:1a:a1:82:02:08:
84:fb:20:18:3a:f9:4e:24:0e:b3:e4:82:e8:fb:e2:59:ff:14:
d3:2b:8c:3f:36:46:25:f3:0b:03:b6:b7:d2:eb:6e:23:18:3d:
ed:7a:35:f6:dd:d8:09:0e:31:19:5c:62:d0:0d:c5:22:fa:ae:
54:4d:4c:c4:5d:e2:e8:71:5f:51:4d:88:e0:dc:67:19:9b:54:
ee:96:8b:f3:33:9c:9b:2e:9d:c4:ca:d0:6c:fb:a0:53:96:3f:
cb:85:11:32:03:05:fc:89:2f:b7:c5:b2:cc:c6:52:be:ab:6e:
7d:fc:96:35:32:66:38:7f:ed:fb:5a:c6:99:41:36:78:f9:3c:
b4:c6:f6:e7:ee:a4:15:5d:46:91:bb:7d:05:eb:eb:08:93:de:
2b:50:39:49:f1:25:79:28:c6:ff:6c:e2:cb:c8:0a:0b:c4:fc:
33:af:95:e3:c1:27:fd:5a:f2:bf:bd:85:3a:eb:f0:6d:34:5a:
36:2c:07:aa:68:ce:34:18:0b:82:53:81:ee:36:66:3e:ce:06:
0f:d9:85:9d:22:39:7e:bf:92:e5:5a:ea:99:d1:81:c5:03:47:
47:aa:ef:d6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDDlfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQz
OTNmNzQzMjg0Njg5NmQxOGJjNDc5NTZmN2RjZTBmZmMwNzJiNTQwHhcNMjEwMzI0
MTQ0NTI5WhcNMjYwMzI0MTQ0NTI5WjAzMTEwLwYDVQQDEygzOTJhNTA1OWI0MGZl
NDgwNDZhNjUyMWJkNWZkNmVhNjE2MTkwMDBiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAotZn7fmrtWP2iSRKdOwj1bDPZ9IuWElWhyh2sloy9/dFMADm
O2/a9RWRCBHH2Tm8ZYgkQoeR0oxtsuAj3a4vuMcOXEFRZD+gzh23rnZOLS8JsJ1L
xmhBNssSsclUQvl0I0ACqzyxGpqICQg9a5WC71O7re7oDt/BBPBfAUzEW1cOTGXZ
dZLXhZQ0wl45lVGzsUYczOoP7kmVhyZGTbiGM74DcuEj/lss4d9kYUfN/iufkCp5
fUFpGvW9uPFao30PjpwLe3WsxcF+LG2yQZg7ngUxc37gtd0lDN3TQHakfFmsN8P9
S/75q1M+4Dz/fC0z/zhdTplldYm9NEaTSQDAHQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCXfDmn9rSvah1ymDtBV/nS769WSMB8GA1UdIwQYMBaAFMVihpF1yNtuI6Je
ibhhqHZtlVe5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDM5M2Y3
NDMyODQ2ODk2ZDE4YmM0Nzk1NmY3ZGNlMGZmYzA3MmI1NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWQ4MWY2Y2QtZmM4MS00OTFmLWJiOTItMzhkYjcw
ODZjMzIyLzM5MmE1MDU5YjQwZmU0ODA0NmE2NTIxYmQ1ZmQ2ZWE2MTYxOTAwMGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZDgxZjZjZC1mYzgxLTQ5MWYtYmI5Mi0zOGRi
NzA4NmMzMjIvNDM5M2Y3NDMyODQ2ODk2ZDE4YmM0Nzk1NmY3ZGNlMGZmYzA3MmI1
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIPdmjANBgkqhkiG9w0BAQsFAAOCAQEATqh8nOJkPQ2rTpW7
4syuE5xib8eLCKd+ll9Q0PWiyhqhggIIhPsgGDr5TiQOs+SC6PviWf8U0yuMPzZG
JfMLA7a30utuIxg97Xo19t3YCQ4xGVxi0A3FIvquVE1MxF3i6HFfUU2I4NxnGZtU
7paL8zOcmy6dxMrQbPugU5Y/y4URMgMF/Ikvt8WyzMZSvqtuffyWNTJmOH/t+1rG
mUE2ePk8tMb25+6kFV1Gkbt9BevrCJPeK1A5SfEleSjG/2ziy8gKC8T8M6+V48En
/Vryv72FOuvwbTRaNiwHqmjONBgLglOB7jZmPs4GD9mFnSI5fr+S5VrqmdGBxQNH
R6rv1g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org