Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/4238c2a5d3c191cc86ca4280ea203bd480db78b5.roa
File: 4238c2a5d3c191cc86ca4280ea203bd480db78b5.roa (raw, json)
Hash identifier: eMieeT+Qn7jgj99U2DNySPfm5h8h3fiJDBBH37q8q1g=
Subject key identifier: 9F:42:96:D6:11:41:D0:3F:EB:9D:F8:7C:7D:A1:A1:71:D1:E3:BB:C1
Certificate issuer: /CN=346499a0d70b33b00e436c219a652ef2db03ca4c
Certificate serial: 20825F
Authority key identifier: CC:08:8B:DE:ED:44:CF:D1:B7:12:CD:70:8F:32:5A:A0:CE:70:3A:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/346499a0d70b33b00e436c219a652ef2db03ca4c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/4238c2a5d3c191cc86ca4280ea203bd480db78b5.roa
Signing time: Mon 01 May 2023 08:30:00 +0000
ROA not before: Sun 30 Apr 2023 08:30:00 +0000
ROA not after: Tue 29 Apr 2025 08:30:00 +0000
asID: 271804
IP address blocks: 138.36.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2130527 (0x20825f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346499a0d70b33b00e436c219a652ef2db03ca4c
Validity
Not Before: Apr 30 08:30:00 2023 GMT
Not After : Apr 29 08:30:00 2025 GMT
Subject: CN=4238c2a5d3c191cc86ca4280ea203bd480db78b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:6a:75:84:4d:9a:0a:ea:b1:ac:82:61:22:
b5:d1:35:8d:3d:d9:c5:27:66:23:b5:b4:e8:4e:bf:
09:0f:ab:17:5d:0c:27:1a:27:db:82:f8:a1:1f:b5:
7f:1a:63:15:34:b7:9a:cb:91:79:c9:10:e9:c0:57:
0a:59:1d:d4:42:14:9d:49:4d:a2:59:2b:fa:63:5d:
40:5a:0b:74:5a:11:a6:74:28:17:79:6b:7e:09:c1:
96:ed:5c:d1:71:bd:72:58:6e:34:d5:27:62:7b:29:
a7:38:96:aa:79:cd:68:81:fc:7b:b2:f2:a2:da:1c:
bc:e3:36:52:20:5a:f7:b4:3e:a2:15:44:a1:a1:f8:
ea:6c:e2:11:1e:e5:20:33:17:23:4f:8c:1e:92:a2:
cd:ca:11:74:13:0a:cb:09:65:56:41:94:a1:71:eb:
b9:87:72:3a:9a:8a:00:09:11:a1:08:7c:a0:4b:63:
58:2e:b7:ad:39:4d:9c:4b:04:e2:44:0c:69:5d:c4:
51:4c:9d:a0:11:2d:1f:92:d0:6f:1d:43:84:b3:49:
40:76:af:83:e5:16:2e:40:e9:d1:34:39:36:60:35:
c2:d9:b1:8c:f6:e5:45:9c:42:be:50:aa:77:bc:47:
09:6d:77:c0:e8:17:44:87:16:63:ab:a2:c2:fb:32:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:42:96:D6:11:41:D0:3F:EB:9D:F8:7C:7D:A1:A1:71:D1:E3:BB:C1
X509v3 Authority Key Identifier:
keyid:CC:08:8B:DE:ED:44:CF:D1:B7:12:CD:70:8F:32:5A:A0:CE:70:3A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/346499a0d70b33b00e436c219a652ef2db03ca4c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/4238c2a5d3c191cc86ca4280ea203bd480db78b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/346499a0d70b33b00e436c219a652ef2db03ca4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.24.0/22
Signature Algorithm: sha256WithRSAEncryption
64:b0:30:77:e5:fb:45:ed:b8:97:35:67:2b:19:37:5a:a8:a0:
2d:b2:13:9d:47:87:da:b2:d3:04:75:31:5c:34:e6:1f:5f:e5:
43:80:4b:c7:d4:2a:9c:51:89:54:be:a0:40:3a:6c:e0:e0:eb:
9d:0f:f9:97:34:5a:c2:10:c0:88:34:33:13:d2:4c:32:f8:e5:
c9:17:ad:76:29:6f:aa:8b:46:ba:47:a2:33:91:4c:b3:48:24:
67:4b:3f:c8:0e:72:ac:eb:eb:6a:37:a4:09:70:86:b2:ee:08:
96:dd:58:ba:ec:55:c4:b0:81:c7:0f:18:b8:14:bf:88:f0:2e:
13:c8:a1:a0:3b:be:2f:2a:99:e0:b9:45:62:13:ec:ac:51:14:
26:cc:16:b8:2b:b1:23:54:05:1e:c6:07:41:4f:0a:48:5a:6c:
7a:81:d4:e9:04:cf:3f:d6:b5:85:83:8b:b7:61:03:5c:b7:bd:
97:ed:8b:3a:0a:a6:c7:43:93:60:21:70:f2:d3:7e:52:dd:46:
74:7b:80:0a:f4:1e:34:3e:02:5c:b7:0b:4b:94:d4:f5:80:fd:
2a:7c:ce:61:5e:9a:ef:5c:0d:60:f0:ee:9e:9c:d8:d7:fa:e6:
82:8c:de:31:b7:a7:29:42:4b:a3:96:5c:db:a7:67:1f:fe:c7:
bb:ee:06:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org