Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/77422907f1cbc6ff3077a1704f211de5363933df.roa
File: 77422907f1cbc6ff3077a1704f211de5363933df.roa (raw, json)
Hash identifier: sdV3gOFqAVuNiZI1C8TM4dUWyHa210kpSkpt1xhEBCs=
Subject key identifier: B2:0A:D3:91:5A:0E:52:87:7D:AE:73:13:C6:4B:89:B6:0E:82:C6:61
Certificate issuer: /CN=8fd397f8d47b3a369017afd14e695229eb571750
Certificate serial: 1DE7B3
Authority key identifier: 45:DE:A6:A4:AF:83:D7:32:77:E6:5A:49:A7:EC:8A:93:D7:49:ED:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fd397f8d47b3a369017afd14e695229eb571750.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/77422907f1cbc6ff3077a1704f211de5363933df.roa
Signing time: Fri 15 Sep 2023 20:15:25 +0000
ROA not before: Thu 14 Sep 2023 20:15:25 +0000
ROA not after: Mon 15 Sep 2025 20:15:25 +0000
asID: 273005
IP address blocks: 138.117.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1959859 (0x1de7b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd397f8d47b3a369017afd14e695229eb571750
Validity
Not Before: Sep 14 20:15:25 2023 GMT
Not After : Sep 15 20:15:25 2025 GMT
Subject: CN=77422907f1cbc6ff3077a1704f211de5363933df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:09:af:0f:e4:ad:2b:22:00:8b:22:1a:49:36:
71:9b:0a:35:01:0a:81:23:c5:bd:2d:df:03:96:60:
14:03:a4:f1:9b:87:b0:42:8c:96:b2:c5:61:5f:81:
cf:d8:ef:1c:e2:f7:d0:9a:c0:36:9c:74:ed:6c:fc:
d1:46:0f:e0:2d:6f:b8:bf:38:fa:39:42:05:2e:5c:
c4:b8:8b:ac:7a:ba:f4:41:79:3b:a9:45:6d:14:f9:
46:14:c3:0e:9d:e7:8d:74:8e:aa:94:0e:a4:f4:05:
03:9d:10:07:a3:78:0f:b2:c1:c5:8c:9d:82:93:18:
bb:dd:f2:41:56:31:b7:69:2b:df:b2:f6:28:1e:dd:
95:11:64:29:e8:30:3c:84:63:70:56:dd:ff:17:28:
d5:90:a0:ee:f9:7d:54:3c:ba:9d:ff:c1:91:a1:db:
17:4c:f6:03:1b:65:55:1a:cb:11:6d:a2:16:08:82:
73:84:57:6a:c4:b1:17:5f:33:22:1d:05:b7:a2:47:
a4:2e:85:f3:0c:d3:d9:15:a6:6f:55:3b:db:35:29:
ac:3e:2f:97:d2:e3:39:cf:d0:60:d8:b5:d6:aa:5d:
b1:89:7f:a3:7d:d7:84:d7:1b:62:e8:26:e2:73:34:
2b:22:a7:55:7b:b9:46:9d:51:2c:d2:4d:89:8d:45:
62:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0A:D3:91:5A:0E:52:87:7D:AE:73:13:C6:4B:89:B6:0E:82:C6:61
X509v3 Authority Key Identifier:
keyid:45:DE:A6:A4:AF:83:D7:32:77:E6:5A:49:A7:EC:8A:93:D7:49:ED:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fd397f8d47b3a369017afd14e695229eb571750.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/77422907f1cbc6ff3077a1704f211de5363933df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/8fd397f8d47b3a369017afd14e695229eb571750.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.12.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f6:c2:f2:38:a5:e0:8d:34:0c:39:30:72:ac:46:ec:c4:f7:
ec:af:75:3a:3c:9d:cf:c8:27:92:89:36:c3:b1:ef:b6:a0:a5:
2b:9c:37:b2:70:cd:f0:b1:a8:f2:29:10:9e:0b:27:76:f7:9c:
65:03:e9:30:f7:62:81:19:ff:30:23:f8:6e:4b:53:39:9d:3c:
a7:3a:c2:7c:f4:72:36:3f:fc:ea:15:a3:c6:8e:d9:8d:a8:31:
86:73:70:90:02:8f:00:83:51:85:b6:eb:ec:f0:06:7e:46:2e:
af:41:96:1b:63:90:e7:8f:cc:8b:c0:22:cd:b1:39:5f:35:e5:
36:2d:a6:52:b9:4a:ea:d0:26:43:be:44:de:07:e0:35:0d:a6:
15:20:65:4b:3d:4c:db:5d:a9:74:c8:ff:ee:b7:d3:2f:fb:3a:
97:5d:4d:f6:be:32:6d:56:7b:b8:2b:2b:65:c5:ed:62:4d:c2:
0f:b0:a2:c6:e5:43:fd:a9:31:c8:b8:ce:16:cf:6f:ab:ce:3e:
5a:7f:3b:39:3a:f0:9f:34:42:fe:3d:57:bc:dc:78:63:c5:8d:
ce:66:64:9d:8c:a7:f3:e7:78:0a:df:6c:81:dc:08:e5:44:8e:
96:5d:28:b8:42:21:44:a2:b6:f2:9b:c7:cf:f6:de:c7:95:a2:
e5:88:8f:fa
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHeezMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhm
ZDM5N2Y4ZDQ3YjNhMzY5MDE3YWZkMTRlNjk1MjI5ZWI1NzE3NTAwHhcNMjMwOTE0
MjAxNTI1WhcNMjUwOTE1MjAxNTI1WjAzMTEwLwYDVQQDEyg3NzQyMjkwN2YxY2Jj
NmZmMzA3N2ExNzA0ZjIxMWRlNTM2MzkzM2RmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA6AmvD+StKyIAiyIaSTZxmwo1AQqBI8W9Ld8DlmAUA6Txm4ew
QoyWssVhX4HP2O8c4vfQmsA2nHTtbPzRRg/gLW+4vzj6OUIFLlzEuIuserr0QXk7
qUVtFPlGFMMOneeNdI6qlA6k9AUDnRAHo3gPssHFjJ2Ckxi73fJBVjG3aSvfsvYo
Ht2VEWQp6DA8hGNwVt3/FyjVkKDu+X1UPLqd/8GRodsXTPYDG2VVGssRbaIWCIJz
hFdqxLEXXzMiHQW3okekLoXzDNPZFaZvVTvbNSmsPi+X0uM5z9Bg2LXWql2xiX+j
fdeE1xti6CbiczQrIqdVe7lGnVEs0k2JjUVi3QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLIK05FaDlKHfa5zE8ZLibYOgsZhMB8GA1UdIwQYMBaAFEXepqSvg9cyd+Za
SafsipPXSe0kMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGZkMzk3
ZjhkNDdiM2EzNjkwMTdhZmQxNGU2OTUyMjllYjU3MTc1MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDQwZTQzOTctNzU2YS00ODNiLWIyMmEtOGIyM2Fl
ZjQ4OTRhLzc3NDIyOTA3ZjFjYmM2ZmYzMDc3YTE3MDRmMjExZGU1MzYzOTMzZGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wNDBlNDM5Ny03NTZhLTQ4M2ItYjIyYS04YjIz
YWVmNDg5NGEvOGZkMzk3ZjhkNDdiM2EzNjkwMTdhZmQxNGU2OTUyMjllYjU3MTc1
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIp1DDANBgkqhkiG9w0BAQsFAAOCAQEAdfbC8jil4I00DDkw
cqxG7MT37K91Ojydz8gnkok2w7HvtqClK5w3snDN8LGo8ikQngsndvecZQPpMPdi
gRn/MCP4bktTOZ08pzrCfPRyNj/86hWjxo7ZjagxhnNwkAKPAINRhbbr7PAGfkYu
r0GWG2OQ54/Mi8AizbE5XzXlNi2mUrlK6tAmQ75E3gfgNQ2mFSBlSz1M212pdMj/
7rfTL/s6l11N9r4ybVZ7uCsrZcXtYk3CD7CixuVD/akxyLjOFs9vq84+Wn87OTrw
nzRC/j1XvNx4Y8WNzmZknYyn8+d4Ct9sgdwI5USOll0ouEIhRKK28pvHz/bex5Wi
5YiP+g==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org