Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0fc0954e-5cb0-42f8-b8dc-2cce9c708250/ec69b12697bc7fc98736ff9702620123f07715e7.roa
File: ec69b12697bc7fc98736ff9702620123f07715e7.roa (raw, json)
Hash identifier: wjAXyVsSiG8NwY0F87rh0bbqsbEmhkMP58ZwLjSIH00=
Subject key identifier: 82:A1:24:71:30:5B:F5:5B:CB:1D:BE:92:F9:4F:D0:BF:19:72:1A:66
Certificate issuer: /CN=43a5a695c8757b5693d53d5fe2217e2b5f95c77f
Certificate serial: 0D262D
Authority key identifier: 44:EE:22:5F:EE:91:F5:C8:42:FA:95:AF:1E:6F:07:A8:75:9A:61:75
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a5a695c8757b5693d53d5fe2217e2b5f95c77f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0fc0954e-5cb0-42f8-b8dc-2cce9c708250/ec69b12697bc7fc98736ff9702620123f07715e7.roa
Signing time: Wed 24 Mar 2021 14:40:04 +0000
ROA not before: Wed 24 Mar 2021 14:40:04 +0000
ROA not after: Tue 24 Mar 2026 14:40:04 +0000
asID: 263792
IP address blocks: 138.122.108.0/24 maxlen: 24
138.122.109.0/24 maxlen: 24
138.122.110.0/24 maxlen: 24
138.122.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 861741 (0xd262d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5a695c8757b5693d53d5fe2217e2b5f95c77f
Validity
Not Before: Mar 24 14:40:04 2021 GMT
Not After : Mar 24 14:40:04 2026 GMT
Subject: CN=ec69b12697bc7fc98736ff9702620123f07715e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a2:29:81:be:f3:1a:6e:7d:cc:dc:5c:63:97:
b5:66:50:c0:b8:ef:5b:01:31:70:46:87:8f:7b:8e:
90:0b:7f:b3:d5:c7:c9:ca:f4:b7:b7:73:ff:f8:d8:
d5:e5:f0:f7:96:58:de:6e:94:67:ab:c9:86:e6:51:
e4:ab:f2:5e:06:51:84:76:5c:44:dd:71:be:1e:c7:
9c:f3:6d:6a:34:1e:e6:a9:76:e9:c7:d2:9a:a5:69:
40:cc:3c:c2:f8:4c:6d:12:ca:2c:b8:d9:67:08:40:
75:1f:4e:04:55:95:5c:c1:3d:14:fe:fa:79:1c:32:
bd:f9:65:9f:c7:c3:15:55:21:3f:cf:d4:d5:5c:d7:
06:1c:1e:4a:35:95:3c:b1:dc:d8:12:a4:ea:90:5e:
65:d5:00:e3:6b:4d:2f:6a:af:49:f2:e9:27:52:b5:
56:04:09:04:02:a0:40:7a:e0:d2:8e:b4:c0:a6:21:
a7:a3:dd:d6:1f:f7:f8:c2:66:80:c8:14:27:af:7b:
3c:f3:8d:15:58:57:56:01:38:a5:13:f3:72:d5:86:
57:d1:28:cd:e3:a9:67:07:b3:a6:f8:de:52:fb:f6:
7c:a8:58:ca:c2:e5:d3:57:4f:e1:30:37:36:e4:d4:
ee:3b:99:12:ca:b8:e9:ea:e5:0b:25:c1:53:3d:0d:
ac:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A1:24:71:30:5B:F5:5B:CB:1D:BE:92:F9:4F:D0:BF:19:72:1A:66
X509v3 Authority Key Identifier:
keyid:44:EE:22:5F:EE:91:F5:C8:42:FA:95:AF:1E:6F:07:A8:75:9A:61:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a5a695c8757b5693d53d5fe2217e2b5f95c77f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0fc0954e-5cb0-42f8-b8dc-2cce9c708250/ec69b12697bc7fc98736ff9702620123f07715e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0fc0954e-5cb0-42f8-b8dc-2cce9c708250/43a5a695c8757b5693d53d5fe2217e2b5f95c77f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.108.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:3a:1b:c7:17:ed:6f:87:87:66:61:e9:00:05:a9:8e:44:6b:
d9:a4:56:e6:d3:f2:01:01:cc:34:20:77:32:8b:33:09:4b:dd:
c4:b0:eb:fd:c4:3b:4e:43:f3:e7:33:4d:e2:55:fb:a9:b1:9a:
41:b0:73:6d:0a:4a:d9:98:bf:24:a6:ff:05:6c:0a:ef:8e:80:
e5:ff:4c:f8:a8:2c:cc:25:3f:d7:22:34:4a:b5:97:cd:ca:91:
eb:46:d8:78:56:16:b5:2c:db:2c:26:aa:de:ba:e2:93:ae:06:
85:bc:b4:63:1b:00:c4:40:e4:d3:da:73:19:4a:73:90:b6:0e:
8f:82:4d:72:66:7c:a6:44:b9:b2:a9:64:be:4f:99:f5:84:05:
6d:c9:83:2f:2d:89:36:92:f6:e9:7c:bb:4d:59:48:52:c2:9d:
33:eb:cb:70:20:50:6c:96:37:41:e2:30:95:cd:83:99:63:77:
67:0d:91:df:d2:81:45:53:d3:53:40:05:8f:1a:b7:5e:78:de:
d2:4b:71:48:eb:e4:8a:64:e0:44:17:b7:b4:d1:47:a7:f4:17:
ae:c8:cf:65:e1:0a:ba:70:da:44:a1:27:4d:4f:93:f0:2f:86:
0b:7d:14:60:a4:36:ab:27:c2:25:6e:e1:2c:9c:3e:a9:47:1e:
b6:c4:e7:e9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDSYtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQz
YTVhNjk1Yzg3NTdiNTY5M2Q1M2Q1ZmUyMjE3ZTJiNWY5NWM3N2YwHhcNMjEwMzI0
MTQ0MDA0WhcNMjYwMzI0MTQ0MDA0WjAzMTEwLwYDVQQDEyhlYzY5YjEyNjk3YmM3
ZmM5ODczNmZmOTcwMjYyMDEyM2YwNzcxNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkKIpgb7zGm59zNxcY5e1ZlDAuO9bATFwRoePe46QC3+z1cfJ
yvS3t3P/+NjV5fD3lljebpRnq8mG5lHkq/JeBlGEdlxE3XG+Hsec821qNB7mqXbp
x9KapWlAzDzC+ExtEsosuNlnCEB1H04EVZVcwT0U/vp5HDK9+WWfx8MVVSE/z9TV
XNcGHB5KNZU8sdzYEqTqkF5l1QDja00vaq9J8uknUrVWBAkEAqBAeuDSjrTApiGn
o93WH/f4wmaAyBQnr3s8840VWFdWATilE/Ny1YZX0SjN46lnB7Om+N5S+/Z8qFjK
wuXTV0/hMDc25NTuO5kSyrjp6uULJcFTPQ2srwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIKhJHEwW/Vbyx2+kvlP0L8ZchpmMB8GA1UdIwQYMBaAFETuIl/ukfXIQvqV
rx5vB6h1mmF1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDNhNWE2
OTVjODc1N2I1NjkzZDUzZDVmZTIyMTdlMmI1Zjk1Yzc3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGZjMDk1NGUtNWNiMC00MmY4LWI4ZGMtMmNjZTlj
NzA4MjUwL2VjNjliMTI2OTdiYzdmYzk4NzM2ZmY5NzAyNjIwMTIzZjA3NzE1ZTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wZmMwOTU0ZS01Y2IwLTQyZjgtYjhkYy0yY2Nl
OWM3MDgyNTAvNDNhNWE2OTVjODc1N2I1NjkzZDUzZDVmZTIyMTdlMmI1Zjk1Yzc3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAop6bDANBgkqhkiG9w0BAQsFAAOCAQEApTobxxftb4eHZmHp
AAWpjkRr2aRW5tPyAQHMNCB3MoszCUvdxLDr/cQ7TkPz5zNN4lX7qbGaQbBzbQpK
2Zi/JKb/BWwK746A5f9M+KgszCU/1yI0SrWXzcqR60bYeFYWtSzbLCaq3rrik64G
hby0YxsAxEDk09pzGUpzkLYOj4JNcmZ8pkS5sqlkvk+Z9YQFbcmDLy2JNpL26Xy7
TVlIUsKdM+vLcCBQbJY3QeIwlc2DmWN3Zw2R39KBRVPTU0AFjxq3Xnje0ktxSOvk
imTgRBe3tNFHp/QXrsjPZeEKunDaRKEnTU+T8C+GC30UYKQ2qyfCJW7hLJw+qUce
tsTn6Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org