Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/27b5df3568a4d9fe8fc868c18ff9852729834e51.roa
File: 27b5df3568a4d9fe8fc868c18ff9852729834e51.roa (raw, json)
Hash identifier: 9Keu+TO5e9/LyqO5gatqr3uVEJz5zjUCkcTRIq5jBo8=
Subject key identifier: 02:B2:D5:1B:24:18:EA:2F:C7:85:89:55:49:0F:42:27:CD:47:6F:D1
Certificate issuer: /CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
Certificate serial: 117FA4
Authority key identifier: 09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/27b5df3568a4d9fe8fc868c18ff9852729834e51.roa
Signing time: Mon 02 Aug 2021 22:26:16 +0000
ROA not before: Mon 02 Aug 2021 03:00:00 +0000
ROA not after: Sun 02 Aug 2026 03:00:00 +0000
asID: 61449
IP address blocks: 138.186.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1146788 (0x117fa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
Validity
Not Before: Aug 2 03:00:00 2021 GMT
Not After : Aug 2 03:00:00 2026 GMT
Subject: CN=27b5df3568a4d9fe8fc868c18ff9852729834e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:02:51:22:18:ae:ff:15:06:e1:55:c0:90:
3b:fa:fb:80:dc:3a:a8:b1:06:f9:74:fb:01:11:75:
d4:3a:84:55:de:c8:2c:13:14:60:f3:98:94:c9:07:
7d:bf:fd:1c:b0:4e:f9:18:88:aa:f8:3b:f2:dc:5c:
58:4c:43:a5:a3:94:3b:4b:ef:3b:75:18:3c:79:b7:
0c:ce:59:0a:07:52:b4:dc:c8:a2:22:f5:dd:79:89:
79:6b:0e:7e:3e:f1:db:10:29:8b:fd:8d:2a:32:d1:
ac:1f:5d:9d:9b:ca:04:ee:04:68:23:8e:6a:b1:4e:
62:ce:d4:fe:3c:d3:8f:57:2d:31:41:af:06:ef:01:
a1:12:7f:ff:39:12:3c:86:0d:73:5c:d0:f7:c4:ce:
9c:ec:25:80:60:56:06:25:d4:64:05:63:05:8b:a0:
93:d6:24:6e:8c:3f:d3:ce:31:30:51:a9:ad:cc:58:
5f:5d:0b:9d:a5:02:73:c1:fb:02:27:53:92:36:f9:
4e:9d:a0:2f:a1:fc:96:bf:8b:6a:46:6c:0c:aa:37:
ac:45:df:50:97:08:19:f4:0a:96:96:cb:63:27:51:
da:f5:a4:27:93:97:3a:8e:fc:cf:33:36:46:e7:c0:
50:37:14:3d:43:c4:3c:46:cb:f4:76:20:c8:40:d3:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B2:D5:1B:24:18:EA:2F:C7:85:89:55:49:0F:42:27:CD:47:6F:D1
X509v3 Authority Key Identifier:
keyid:09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/27b5df3568a4d9fe8fc868c18ff9852729834e51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.161.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5b:85:5c:5e:41:80:f1:ad:b7:39:40:66:4a:75:49:9f:be:
bb:c8:09:da:59:5c:2b:59:70:33:ca:ad:cb:33:32:13:b8:76:
ca:7f:d8:2b:a6:f1:ed:a1:65:f0:8e:1d:4f:3f:80:b7:e8:9a:
71:c9:16:9f:6e:9b:65:1f:05:1f:e0:9d:30:54:cb:00:ba:fb:
08:0b:94:cf:71:52:5f:5c:c0:36:9b:ea:9e:1e:e2:be:88:6b:
61:e0:e2:ba:60:d6:50:6f:d0:b3:b5:89:91:cf:a4:08:b0:1a:
be:7a:d6:d1:ce:c0:33:ed:25:d3:76:cf:ad:a2:a5:22:31:75:
c9:91:c5:27:41:d4:8e:8f:a4:11:ca:d1:b9:0a:ac:ec:31:20:
c9:fe:4a:17:04:36:b3:81:bd:03:d1:dd:08:f7:be:a7:79:b8:
ae:dd:9f:b0:e2:9c:4b:86:27:67:84:17:8d:5e:f4:64:9c:09:
10:4b:56:89:77:05:85:e7:5d:c0:e7:aa:31:21:a1:75:4c:73:
fa:65:f8:0b:a0:3c:80:4d:d9:c4:6e:2a:66:d1:8d:69:47:d1:
86:8c:72:ff:1b:6a:be:65:08:06:ec:2a:01:a8:08:ef:9e:e5:
0f:00:39:4e:bf:b1:1d:33:05:eb:95:79:af:0d:d0:d4:b2:33:
81:4e:f2:2f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEX+kMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZh
ODc1NTM5ZDQ2YjRmN2IwMjNmZTc0MmE1YjRjZjVmZTQ3ODM4ZjMwHhcNMjEwODAy
MDMwMDAwWhcNMjYwODAyMDMwMDAwWjAzMTEwLwYDVQQDEygyN2I1ZGYzNTY4YTRk
OWZlOGZjODY4YzE4ZmY5ODUyNzI5ODM0ZTUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkNkCUSIYrv8VBuFVwJA7+vuA3DqosQb5dPsBEXXUOoRV3sgs
ExRg85iUyQd9v/0csE75GIiq+Dvy3FxYTEOlo5Q7S+87dRg8ebcMzlkKB1K03Mii
IvXdeYl5aw5+PvHbECmL/Y0qMtGsH12dm8oE7gRoI45qsU5iztT+PNOPVy0xQa8G
7wGhEn//ORI8hg1zXND3xM6c7CWAYFYGJdRkBWMFi6CT1iRujD/TzjEwUamtzFhf
XQudpQJzwfsCJ1OSNvlOnaAvofyWv4tqRmwMqjesRd9QlwgZ9AqWlstjJ1Ha9aQn
k5c6jvzPMzZG58BQNxQ9Q8Q8Rsv0diDIQNNkDwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAKy1RskGOovx4WJVUkPQifNR2/RMB8GA1UdIwQYMBaAFAmR9wF6PIISru18
ZxDJxufwifmsMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmE4NzU1
MzlkNDZiNGY3YjAyM2ZlNzQyYTViNGNmNWZlNDc4MzhmMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWY3ODlhMzYtOWU5YS00NGYwLTk2NDctMzlhMTM5
ZTkyZjdkLzI3YjVkZjM1NjhhNGQ5ZmU4ZmM4NjhjMThmZjk4NTI3Mjk4MzRlNTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZjc4OWEzNi05ZTlhLTQ0ZjAtOTY0Ny0zOWEx
MzllOTJmN2QvNmE4NzU1MzlkNDZiNGY3YjAyM2ZlNzQyYTViNGNmNWZlNDc4Mzhm
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIq6oTANBgkqhkiG9w0BAQsFAAOCAQEAXluFXF5BgPGttzlA
Zkp1SZ++u8gJ2llcK1lwM8qtyzMyE7h2yn/YK6bx7aFl8I4dTz+At+iacckWn26b
ZR8FH+CdMFTLALr7CAuUz3FSX1zANpvqnh7ivohrYeDiumDWUG/Qs7WJkc+kCLAa
vnrW0c7AM+0l03bPraKlIjF1yZHFJ0HUjo+kEcrRuQqs7DEgyf5KFwQ2s4G9A9Hd
CPe+p3m4rt2fsOKcS4YnZ4QXjV70ZJwJEEtWiXcFheddwOeqMSGhdUxz+mX4C6A8
gE3ZxG4qZtGNaUfRhoxy/xtqvmUIBuwqAagI757lDwA5Tr+xHTMF65V5rw3Q1LIz
gU7yLw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-ams.rpki-client.org