Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/b6520bd059417c4f4529a1d799b0c96d4779ba5d.roa
File: b6520bd059417c4f4529a1d799b0c96d4779ba5d.roa (raw, json)
Hash identifier: 73jWFxY5GVO73F2OP4NpCJrSjTRqlyimGrbjbn0csWo=
Subject key identifier: 31:FB:65:E2:6D:DC:12:FC:7B:94:4E:BD:1A:3F:AB:B5:5A:2C:C0:28
Certificate issuer: /CN=e338779fd8bf1e94c36b162d8361cfbeb8ad53ed
Certificate serial: 034C
Authority key identifier: CE:01:5A:CA:76:D5:64:F6:7B:6C:9D:E4:1E:DC:F9:AC:4A:80:41:67
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/b6520bd059417c4f4529a1d799b0c96d4779ba5d.roa
Signing time: Tue 12 Mar 2024 23:02:50 +0000
ROA not before: Tue 12 Mar 2024 23:02:50 +0000
ROA not after: Thu 12 Mar 2026 23:02:50 +0000
asID: 262944
IP address blocks: 138.185.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 844 (0x34c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338779fd8bf1e94c36b162d8361cfbeb8ad53ed
Validity
Not Before: Mar 12 23:02:50 2024 GMT
Not After : Mar 12 23:02:50 2026 GMT
Subject: CN=b6520bd059417c4f4529a1d799b0c96d4779ba5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:74:a0:a3:c3:5b:3f:12:eb:91:1b:be:d5:
43:f1:a3:e1:19:10:8b:20:18:b6:fc:2a:d9:74:0a:
3f:9d:ee:cf:40:52:c2:52:27:eb:f7:67:e5:5a:50:
19:05:d0:f7:70:e0:65:fc:0e:95:cb:c7:72:d8:5b:
b5:4c:43:7e:da:d7:b0:51:27:14:f5:13:a8:ee:a1:
e4:60:68:ed:07:39:38:16:d1:d3:6c:3c:32:79:75:
35:18:90:f0:75:16:f7:29:66:42:4f:0f:a7:5b:a5:
29:27:da:21:0e:f5:af:a1:04:a9:46:c3:37:87:25:
cc:35:64:d3:b3:b8:6a:9b:4b:ae:78:3d:ea:7d:3b:
09:9a:73:30:3b:d6:9f:f5:21:60:8b:22:b2:e7:f4:
ff:8e:88:06:2f:d6:cd:95:27:76:2a:c6:f4:9c:64:
a2:cc:93:fe:6c:d6:d8:2e:3b:2b:09:ce:80:e2:15:
bb:52:98:4e:a7:59:7b:65:c3:47:eb:f8:8c:a8:fb:
f2:e9:fa:6d:9b:92:dc:e4:5c:73:3f:84:f6:df:e1:
c0:43:95:cb:2e:04:5a:fc:48:14:8b:c1:8a:06:46:
f3:e1:2f:2f:3e:3b:40:b1:a6:0b:50:c9:77:df:43:
a6:ca:1d:9b:68:cc:37:8a:56:db:7b:d6:d3:a4:99:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FB:65:E2:6D:DC:12:FC:7B:94:4E:BD:1A:3F:AB:B5:5A:2C:C0:28
X509v3 Authority Key Identifier:
keyid:CE:01:5A:CA:76:D5:64:F6:7B:6C:9D:E4:1E:DC:F9:AC:4A:80:41:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/b6520bd059417c4f4529a1d799b0c96d4779ba5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.224.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e0:04:1a:27:26:e7:4d:4b:32:db:f9:72:8b:99:b0:66:13:
8a:78:36:de:a8:7e:06:e7:3a:53:9f:5a:aa:52:55:e9:a4:62:
b7:c4:3a:ab:b0:a7:81:4a:23:fc:84:29:95:37:9c:86:c0:e6:
42:44:52:c9:f8:97:b4:83:b3:3e:19:96:66:a9:74:47:8b:43:
4d:54:24:95:39:c4:04:b7:bd:9e:d2:7c:9c:f0:e4:02:99:f2:
94:13:de:b8:0e:3d:22:29:b1:39:db:a0:86:bd:dd:38:f6:cb:
84:aa:d2:be:34:26:79:86:df:fd:a0:ee:16:ee:b4:3b:b7:3a:
7c:00:30:e0:44:1a:83:80:59:f6:c3:dc:f3:51:ce:d5:dc:22:
83:81:28:ca:d7:d8:c3:47:5e:f8:56:2f:9f:ff:49:7c:d7:95:
c1:c9:cc:0c:5c:93:51:c6:bb:66:8e:6d:2a:d7:92:bd:e2:a0:
8f:fd:96:be:dd:63:96:13:ff:97:70:0e:a2:71:ac:38:e4:00:
ce:0c:b4:b8:3a:bf:0e:2a:5f:1d:84:40:99:28:69:4f:00:a3:
fd:2b:3f:2c:de:cc:e9:69:fd:e3:43:65:40:0e:48:7c:14:d7:
b4:93:3f:d5:4a:41:ae:f5:08:9f:e0:61:0f:ab:d1:a6:1c:b3:
67:89:35:09
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZTMz
ODc3OWZkOGJmMWU5NGMzNmIxNjJkODM2MWNmYmViOGFkNTNlZDAeFw0yNDAzMTIy
MzAyNTBaFw0yNjAzMTIyMzAyNTBaMDMxMTAvBgNVBAMTKGI2NTIwYmQwNTk0MTdj
NGY0NTI5YTFkNzk5YjBjOTZkNDc3OWJhNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZu3Sgo8NbPxLrkRu+1UPxo+EZEIsgGLb8Ktl0Cj+d7s9AUsJS
J+v3Z+VaUBkF0Pdw4GX8DpXLx3LYW7VMQ37a17BRJxT1E6juoeRgaO0HOTgW0dNs
PDJ5dTUYkPB1FvcpZkJPD6dbpSkn2iEO9a+hBKlGwzeHJcw1ZNOzuGqbS654Pep9
OwmaczA71p/1IWCLIrLn9P+OiAYv1s2VJ3YqxvScZKLMk/5s1tguOysJzoDiFbtS
mE6nWXtlw0fr+Iyo+/Lp+m2bktzkXHM/hPbf4cBDlcsuBFr8SBSLwYoGRvPhLy8+
O0CxpgtQyXffQ6bKHZtozDeKVtt71tOkmUZRAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUMftl4m3cEvx7lE69Gj+rtVoswCgwHwYDVR0jBBgwFoAUzgFaynbVZPZ7bJ3k
Htz5rEqAQWcwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9lMzM4Nzc5
ZmQ4YmYxZTk0YzM2YjE2MmQ4MzYxY2ZiZWI4YWQ1M2VkLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wYzc1YjU4OC1iOTkyLTQ5MmUtODJkYi01MjRlZmMx
ZDg5ODEvYjY1MjBiZDA1OTQxN2M0ZjQ1MjlhMWQ3OTliMGM5NmQ0Nzc5YmE1ZC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzBjNzViNTg4LWI5OTItNDkyZS04MmRiLTUyNGVm
YzFkODk4MS9lMzM4Nzc5ZmQ4YmYxZTk0YzM2YjE2MmQ4MzYxY2ZiZWI4YWQ1M2Vk
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAirngMA0GCSqGSIb3DQEBCwUAA4IBAQBr4AQaJybnTUsy2/ly
i5mwZhOKeDbeqH4G5zpTn1qqUlXppGK3xDqrsKeBSiP8hCmVN5yGwOZCRFLJ+Je0
g7M+GZZmqXRHi0NNVCSVOcQEt72e0nyc8OQCmfKUE964Dj0iKbE526CGvd049suE
qtK+NCZ5ht/9oO4W7rQ7tzp8ADDgRBqDgFn2w9zzUc7V3CKDgSjK19jDR174Vi+f
/0l815XBycwMXJNRxrtmjm0q15K94qCP/Za+3WOWE/+XcA6icaw45ADODLS4Or8O
Kl8dhECZKGlPAKP9Kz8s3szpaf3jQ2VADkh8FNe0kz/VSkGu9Qif4GEPq9GmHLNn
iTUJ
-----END CERTIFICATE-----
Generated at Fri May 9 20:07:06 2025 by rpki-client