Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35edb4a0-d1cc-4489-b575-3c29f055b3c3/4895df96104320fc7844928038d9e122c9250b81.roa
File: 4895df96104320fc7844928038d9e122c9250b81.roa (raw, json)
Hash identifier: AlZc4yb4mGXC8f3XaES+kQ/rq6LWVql6IWjar7J4F9s=
Subject key identifier: FA:C1:D7:FC:A0:02:84:80:16:FC:DC:7C:92:26:F5:0E:06:92:F7:60
Certificate issuer: /CN=191101b10952d6795e5429d39bf676c36c363200
Certificate serial: 19282D
Authority key identifier: 90:A9:19:9B:54:00:46:78:57:F8:5D:B3:CB:74:77:41:AF:95:1F:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/191101b10952d6795e5429d39bf676c36c363200.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/35edb4a0-d1cc-4489-b575-3c29f055b3c3/4895df96104320fc7844928038d9e122c9250b81.roa
Signing time: Tue 05 Jul 2022 19:10:30 +0000
ROA not before: Tue 05 Jul 2022 03:00:00 +0000
ROA not after: Fri 05 Jul 2024 03:00:00 +0000
asID: 263739
IP address blocks: 138.59.0.0/22 maxlen: 24
2803:3f80::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1648685 (0x19282d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191101b10952d6795e5429d39bf676c36c363200
Validity
Not Before: Jul 5 03:00:00 2022 GMT
Not After : Jul 5 03:00:00 2024 GMT
Subject: CN=4895df96104320fc7844928038d9e122c9250b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:69:f9:0c:be:cf:2a:00:19:fa:a4:d9:33:
18:49:c7:49:a9:f2:a6:72:72:c3:89:bb:91:da:41:
93:cc:52:aa:f3:06:17:5b:84:d0:7c:c0:5d:24:78:
14:5b:d4:59:14:f6:30:01:0f:f2:e1:63:1e:20:0b:
17:80:86:1d:ac:51:26:3a:6a:13:d4:82:67:d1:de:
46:2b:8d:b4:26:2e:c1:4e:77:4b:b7:73:94:a8:40:
e3:2b:1d:45:ab:db:10:1c:df:0e:a2:92:94:7e:f5:
d2:a4:3d:9a:cc:cf:15:0c:b6:49:4f:8f:a0:5d:c9:
19:64:a5:96:1c:5a:6a:d8:35:c5:ac:38:de:01:9f:
7d:ac:8f:3c:70:af:cd:c4:20:50:72:e8:4b:0e:3c:
e7:ec:55:d4:03:56:da:1b:1b:f1:a2:93:26:b2:17:
0a:34:20:31:58:29:96:93:69:49:4b:0d:8d:64:db:
1d:ff:6c:33:43:4f:b5:bc:60:62:4d:af:8f:1a:95:
45:ea:55:fb:ee:75:89:5e:75:56:ff:8c:9e:9a:01:
62:2d:eb:c6:90:df:e0:61:bb:6e:57:71:f5:50:89:
d0:17:74:f5:3d:43:90:e3:65:0c:db:f9:b5:e2:6a:
a2:bb:8d:81:e8:bd:da:72:fd:f1:34:0c:4a:38:0b:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C1:D7:FC:A0:02:84:80:16:FC:DC:7C:92:26:F5:0E:06:92:F7:60
X509v3 Authority Key Identifier:
keyid:90:A9:19:9B:54:00:46:78:57:F8:5D:B3:CB:74:77:41:AF:95:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/191101b10952d6795e5429d39bf676c36c363200.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35edb4a0-d1cc-4489-b575-3c29f055b3c3/4895df96104320fc7844928038d9e122c9250b81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/35edb4a0-d1cc-4489-b575-3c29f055b3c3/191101b10952d6795e5429d39bf676c36c363200.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.0.0/22
IPv6:
2803:3f80::/32
Signature Algorithm: sha256WithRSAEncryption
9b:04:1c:31:52:5d:f1:9a:e8:63:0c:af:a5:83:30:d6:ba:af:
eb:8b:b9:4c:e0:d5:6f:4b:12:71:75:d6:10:cb:99:d1:6b:ad:
5f:70:ea:b2:55:8e:df:3d:a1:77:10:04:57:d3:25:90:bc:19:
a0:c1:c4:ff:a4:47:0b:a3:33:45:de:f5:67:29:03:47:6b:bb:
8f:89:88:54:42:29:b4:43:65:5b:00:7e:7b:a7:66:76:8e:d5:
0d:16:e7:48:a1:42:94:6c:26:78:98:67:ec:84:fc:de:e3:74:
fe:bd:b4:d4:6c:c6:d4:af:31:85:bd:b7:34:c9:17:1c:38:23:
29:4b:1b:a3:c3:be:ea:5f:77:1a:4f:79:9a:23:0e:b1:ad:d9:
fd:15:f4:16:71:15:44:91:5c:96:4c:e2:33:8b:1d:74:ec:a2:
9e:93:98:3f:5d:a9:59:88:db:df:05:13:0b:b7:0f:c3:b0:29:
2a:05:64:02:f9:a6:63:b4:10:aa:85:9d:d9:00:6c:83:75:a5:
df:08:3e:32:cb:36:95:41:ab:22:b3:3e:b7:f5:59:66:cb:08:
c0:72:60:db:b6:48:fd:c9:9a:8e:fc:e1:8f:73:0c:63:ec:45:
a5:e0:3f:af:28:9e:f2:4a:e6:53:ce:97:c0:d6:ea:e9:20:72:
fd:53:35:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org