Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/057c5c83-9b5d-4d32-9498-23d85eb9e3bc/ffa7af1c74d4e77d20c5f8d60aa34a6569aa6078.roa
File: ffa7af1c74d4e77d20c5f8d60aa34a6569aa6078.roa (raw, json)
Hash identifier: qtwBJWY0FIuigjyRIfepO/vJTKwzt4r6yomIo4u3ltM=
Subject key identifier: 06:61:10:1C:9F:57:D3:4C:AD:75:C2:7C:C5:21:9A:D2:2A:AA:19:43
Certificate issuer: /CN=e63bf5f9cd54bbbfef06fccf1fd19e9cee8d2a45
Certificate serial: 253BB8
Authority key identifier: 8F:F3:6E:CD:0E:EB:38:0B:3F:D7:11:4A:2D:32:F0:28:61:ED:6C:FE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e63bf5f9cd54bbbfef06fccf1fd19e9cee8d2a45.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/057c5c83-9b5d-4d32-9498-23d85eb9e3bc/ffa7af1c74d4e77d20c5f8d60aa34a6569aa6078.roa
Signing time: Thu 14 Dec 2023 18:28:20 +0000
ROA not before: Thu 14 Dec 2023 18:28:20 +0000
ROA not after: Sun 14 Dec 2025 18:28:20 +0000
asID: 263786
IP address blocks: 170.78.88.0/22 maxlen: 24
138.122.156.0/22 maxlen: 24
2803:7440::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2440120 (0x253bb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63bf5f9cd54bbbfef06fccf1fd19e9cee8d2a45
Validity
Not Before: Dec 14 18:28:20 2023 GMT
Not After : Dec 14 18:28:20 2025 GMT
Subject: CN=ffa7af1c74d4e77d20c5f8d60aa34a6569aa6078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:29:1c:0d:1a:94:35:22:3b:68:53:e3:e1:
5e:1c:12:95:4b:2d:e3:d6:e6:17:0b:1c:9c:31:61:
60:d8:f2:52:3b:68:50:71:91:fe:1a:40:6a:1a:12:
14:18:ad:65:f4:44:38:c8:52:6a:96:b8:9a:8a:cf:
63:b2:26:86:c4:57:37:68:a1:74:3d:46:8a:65:25:
ca:e3:04:29:d9:cb:01:a0:38:31:ba:8f:2a:bd:de:
b9:77:97:92:82:8c:12:88:bd:40:9f:5f:76:69:ef:
ce:f7:36:dd:23:e9:28:5b:6a:88:b0:3a:b0:b5:a8:
ff:49:45:6d:b9:32:6a:e1:6e:99:45:85:d5:6c:e3:
05:09:31:c8:c4:8c:45:a7:dd:e0:73:07:70:59:f4:
97:2d:85:21:5f:ef:e6:81:97:69:16:e9:d2:8d:9b:
e5:a1:d9:67:34:c2:79:42:28:12:bd:61:1a:4d:5f:
b2:6d:4e:ca:b0:c4:03:09:bc:c5:48:ec:77:07:23:
bf:04:10:9e:7e:f6:2f:da:88:ef:22:73:96:a0:cd:
99:9a:22:d8:50:13:43:f5:84:07:de:a5:b0:04:fe:
a2:76:44:9d:c7:44:6f:3b:c4:fe:ec:d9:14:ec:19:
e4:77:12:38:35:12:52:64:c3:ef:ff:9a:60:9c:ea:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:61:10:1C:9F:57:D3:4C:AD:75:C2:7C:C5:21:9A:D2:2A:AA:19:43
X509v3 Authority Key Identifier:
keyid:8F:F3:6E:CD:0E:EB:38:0B:3F:D7:11:4A:2D:32:F0:28:61:ED:6C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e63bf5f9cd54bbbfef06fccf1fd19e9cee8d2a45.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/057c5c83-9b5d-4d32-9498-23d85eb9e3bc/ffa7af1c74d4e77d20c5f8d60aa34a6569aa6078.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/057c5c83-9b5d-4d32-9498-23d85eb9e3bc/e63bf5f9cd54bbbfef06fccf1fd19e9cee8d2a45.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.156.0/22
170.78.88.0/22
IPv6:
2803:7440::/32
Signature Algorithm: sha256WithRSAEncryption
5a:d1:a4:0f:05:48:36:73:a4:d0:c7:e4:38:7a:9e:aa:9b:78:
2b:9f:c3:bc:3a:95:a4:7e:36:2a:97:69:75:2c:ce:8a:10:b4:
56:d7:9a:2b:22:8a:b4:20:7e:62:8a:5b:de:26:7a:85:09:57:
eb:62:31:a7:ac:a9:69:ec:3f:96:4c:7c:59:ee:84:5d:9d:9f:
fe:b9:cb:07:4c:c3:ea:3d:66:9b:e7:e6:85:c0:79:fe:03:e3:
a1:0b:d5:c2:ef:53:0d:4c:70:86:fc:b0:13:e6:6a:40:e9:e7:
33:19:af:07:2c:c8:f7:02:50:06:9e:1c:a7:ed:ca:c8:b5:5a:
f1:4e:1a:d1:e9:c1:c1:3e:2b:92:7b:0e:bb:48:04:af:45:08:
85:a9:9e:e6:c8:72:3c:e2:0e:95:88:6c:56:12:b7:5b:bd:d7:
19:eb:46:ed:6f:7d:e2:e4:e6:9e:b4:68:ea:be:b8:17:f7:c1:
ea:42:a0:ea:6c:0f:d3:5f:9b:03:05:30:dd:f9:61:5f:ad:53:
18:99:69:a6:8e:06:1e:40:20:88:ae:14:a6:d7:87:3b:36:66:
1b:0d:dc:fe:17:6f:eb:e1:39:14:22:ca:ec:49:9a:12:94:81:
4e:b2:9e:fe:9e:61:80:67:02:7c:7c:82:2d:0e:68:f5:77:42:
f1:72:5f:27
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDJTu4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU2
M2JmNWY5Y2Q1NGJiYmZlZjA2ZmNjZjFmZDE5ZTljZWU4ZDJhNDUwHhcNMjMxMjE0
MTgyODIwWhcNMjUxMjE0MTgyODIwWjAzMTEwLwYDVQQDEyhmZmE3YWYxYzc0ZDRl
NzdkMjBjNWY4ZDYwYWEzNGE2NTY5YWE2MDc4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvpIpHA0alDUiO2hT4+FeHBKVSy3j1uYXCxycMWFg2PJSO2hQ
cZH+GkBqGhIUGK1l9EQ4yFJqlriais9jsiaGxFc3aKF0PUaKZSXK4wQp2csBoDgx
uo8qvd65d5eSgowSiL1An192ae/O9zbdI+koW2qIsDqwtaj/SUVtuTJq4W6ZRYXV
bOMFCTHIxIxFp93gcwdwWfSXLYUhX+/mgZdpFunSjZvlodlnNMJ5QigSvWEaTV+y
bU7KsMQDCbzFSOx3ByO/BBCefvYv2ojvInOWoM2ZmiLYUBND9YQH3qWwBP6idkSd
x0RvO8T+7NkU7BnkdxI4NRJSZMPv/5pgnOqYcwIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFAZhEByfV9NMrXXCfMUhmtIqqhlDMB8GA1UdIwQYMBaAFI/zbs0O6zgLP9cR
Si0y8Chh7Wz+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTYzYmY1
ZjljZDU0YmJiZmVmMDZmY2NmMWZkMTllOWNlZThkMmE0NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDU3YzVjODMtOWI1ZC00ZDMyLTk0OTgtMjNkODVl
YjllM2JjL2ZmYTdhZjFjNzRkNGU3N2QyMGM1ZjhkNjBhYTM0YTY1NjlhYTYwNzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wNTdjNWM4My05YjVkLTRkMzItOTQ5OC0yM2Q4
NWViOWUzYmMvZTYzYmY1ZjljZDU0YmJiZmVmMDZmY2NmMWZkMTllOWNlZThkMmE0
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAop6nAMEAqpOWDANBAIAAjAHAwUAKAN0QDANBgkqhkiG9w0B
AQsFAAOCAQEAWtGkDwVINnOk0MfkOHqeqpt4K5/DvDqVpH42KpdpdSzOihC0Vtea
KyKKtCB+Yopb3iZ6hQlX62Ixp6ypaew/lkx8We6EXZ2f/rnLB0zD6j1mm+fmhcB5
/gPjoQvVwu9TDUxwhvywE+ZqQOnnMxmvByzI9wJQBp4cp+3KyLVa8U4a0enBwT4r
knsOu0gEr0UIhame5shyPOIOlYhsVhK3W73XGetG7W994uTmnrRo6r64F/fB6kKg
6mwP01+bAwUw3flhX61TGJlppo4GHkAgiK4UpteHOzZmGw3c/hdv6+E5FCLK7Ema
EpSBTrKe/p5hgGcCfHyCLQ5o9XdC8XJfJw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org