Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/8cc874d870e13b61093dbb95ee9179cf01a95814.roa
File: 8cc874d870e13b61093dbb95ee9179cf01a95814.roa (raw, json)
Hash identifier: rwf6dViJyU5ZEmudzZeZ4cmLhnI2yXuoIMUxLVp+Owc=
Subject key identifier: A8:DC:B3:9C:6A:27:15:C3:F4:AB:A3:D6:10:AD:FC:B8:96:71:DA:23
Certificate issuer: /CN=8c9dca33c362bedd76cf28490675e1556f7d1835
Certificate serial: 1E9709
Authority key identifier: 0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c9dca33c362bedd76cf28490675e1556f7d1835.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/8cc874d870e13b61093dbb95ee9179cf01a95814.roa
Signing time: Thu 07 Mar 2024 16:19:08 +0000
ROA not before: Thu 07 Mar 2024 16:19:08 +0000
ROA not after: Sat 07 Mar 2026 16:19:08 +0000
asID: 28317
IP address blocks: 138.121.140.0/22 maxlen: 24
170.81.32.0/22 maxlen: 24
191.102.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2004745 (0x1e9709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dca33c362bedd76cf28490675e1556f7d1835
Validity
Not Before: Mar 7 16:19:08 2024 GMT
Not After : Mar 7 16:19:08 2026 GMT
Subject: CN=8cc874d870e13b61093dbb95ee9179cf01a95814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:41:9f:9e:59:f0:16:be:1a:34:d8:d2:12:24:
3b:23:4a:2b:58:22:9d:4b:3a:8d:c5:80:59:9c:55:
e9:ac:11:cd:ad:86:4a:a8:54:24:58:71:4c:6f:0a:
59:20:59:6a:f3:d4:da:02:73:a1:05:f3:4c:ee:79:
8f:45:f8:21:5a:5f:de:f5:ee:a6:27:d5:bf:f0:55:
66:70:b8:f5:f8:e3:a0:73:3b:c9:b1:6f:90:9f:89:
a8:86:09:ec:37:95:0a:c7:14:82:fb:f0:1b:b2:01:
9e:8a:d1:fe:1b:32:d1:fa:43:2b:a4:31:ad:44:ee:
f7:89:e3:ba:ed:31:f2:69:b4:d2:a3:7e:0a:2c:69:
dc:3a:eb:c7:86:f7:4e:26:c6:ac:6d:ac:2b:4c:6c:
59:b7:04:22:d7:78:de:b1:d6:e2:c9:96:86:ca:a9:
35:2e:09:ed:4f:d0:6d:96:76:8a:2f:ec:05:57:96:
b3:08:06:5b:a5:80:64:9c:4c:18:a3:55:e5:5f:31:
45:96:6c:56:be:15:5c:35:1b:dd:2b:12:9f:d4:ef:
38:cd:52:16:f7:5b:52:30:ab:d0:1e:e0:95:f0:55:
b3:11:bd:6c:2f:77:c4:8a:bf:e3:c3:59:a8:8b:70:
07:b6:c6:fa:d7:0d:1d:b3:88:1a:d5:d5:4f:51:a4:
1e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DC:B3:9C:6A:27:15:C3:F4:AB:A3:D6:10:AD:FC:B8:96:71:DA:23
X509v3 Authority Key Identifier:
keyid:0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c9dca33c362bedd76cf28490675e1556f7d1835.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/8cc874d870e13b61093dbb95ee9179cf01a95814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/8c9dca33c362bedd76cf28490675e1556f7d1835.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.140.0/22
170.81.32.0/22
191.102.56.0/22
Signature Algorithm: sha256WithRSAEncryption
96:f9:20:58:b2:cc:55:28:a1:24:10:06:55:b2:94:17:2d:51:
95:25:fc:3d:37:06:3a:85:e1:46:64:02:86:ed:54:4c:5b:df:
65:09:76:3b:ca:3a:48:98:9a:e3:43:06:22:62:6d:c7:27:a2:
09:6f:73:bb:31:bb:b8:e8:2a:e9:61:3b:2f:f4:d1:f4:47:88:
ef:9b:db:fd:8e:e9:83:33:6b:4f:a5:2d:2c:40:00:81:5c:ac:
0e:7e:e0:a7:8e:02:6f:3e:2a:1a:f6:6d:62:49:7c:2f:5b:2d:
87:ed:e4:1c:f8:06:2d:07:41:a4:65:5d:fc:e4:a8:33:77:eb:
07:5f:65:29:79:24:54:ab:e2:da:66:43:97:15:c0:79:ad:5f:
64:b0:84:99:aa:71:be:53:f0:ca:d0:fa:67:18:cf:c4:73:c3:
22:2c:74:ef:a8:9c:3e:92:6b:be:20:9f:2d:4d:1c:1e:72:fe:
8a:c4:1d:5c:ee:ec:67:75:7f:32:84:8f:35:ea:65:13:ab:f5:
2c:77:75:bf:6e:55:97:4f:52:38:bb:56:8c:69:eb:ad:a1:6c:
b8:e4:a0:06:11:dc:42:39:84:ca:a8:64:00:eb:92:c7:b8:ca:
12:92:e5:cc:85:b8:d1:2f:b0:43:69:46:47:5e:5a:a2:c1:0f:
14:e6:9f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:41 2024 by rpki-client on console-fra.rpki-client.org