Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e1a2898-5ff4-456c-8898-61d61e8e0fe5/0b04ed4532a9321370c29ba5753fe0aaf90ec7ab.roa
File: 0b04ed4532a9321370c29ba5753fe0aaf90ec7ab.roa (raw, json)
Hash identifier: i7YIVlYidhzUi9AI485W93PY8rWAsN7eaJF4pNvKMBg=
Subject key identifier: 08:FC:02:E5:58:12:54:9F:E4:09:93:34:EB:98:FA:47:D2:6E:CB:7D
Certificate issuer: /CN=aa134f8d8f5b4c61a240144257c6a28362862251
Certificate serial: 0D8FA5
Authority key identifier: 6B:74:19:97:DF:25:D3:EF:E6:CB:6F:D3:D6:58:F8:36:3A:EE:C4:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa134f8d8f5b4c61a240144257c6a28362862251.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4e1a2898-5ff4-456c-8898-61d61e8e0fe5/0b04ed4532a9321370c29ba5753fe0aaf90ec7ab.roa
Signing time: Wed 24 Mar 2021 14:37:17 +0000
ROA not before: Wed 24 Mar 2021 14:37:17 +0000
ROA not after: Tue 24 Mar 2026 14:37:17 +0000
asID: 263785
IP address blocks: 138.122.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888741 (0xd8fa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa134f8d8f5b4c61a240144257c6a28362862251
Validity
Not Before: Mar 24 14:37:17 2021 GMT
Not After : Mar 24 14:37:17 2026 GMT
Subject: CN=0b04ed4532a9321370c29ba5753fe0aaf90ec7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:c6:9a:ad:ba:25:96:f0:56:5b:6d:9c:ee:
d9:8c:37:35:38:7c:15:59:d7:0a:64:06:3d:58:50:
3b:ba:cf:62:99:6a:f7:a7:4e:31:5e:75:42:36:4d:
d3:d2:29:fb:58:59:8a:f8:e1:61:24:70:f8:16:74:
5f:d9:3d:04:a8:17:9b:a4:de:1c:8b:a7:9d:8f:a6:
64:85:ff:0d:0d:61:85:b0:5f:86:10:54:6b:4f:af:
05:6b:62:a8:5e:a5:87:69:18:e6:47:d2:36:42:a6:
91:93:73:77:f8:5f:11:c4:1a:e7:d8:54:e3:39:ce:
cd:cf:68:83:79:79:54:87:e7:e5:72:c0:dd:dc:ac:
26:40:91:d7:c2:be:41:ad:5e:73:bc:77:4f:a9:9e:
ad:fa:94:da:f5:6e:52:41:76:6e:1a:f0:3a:61:8c:
1a:4f:c4:ce:0d:35:98:67:8b:54:59:be:d1:93:56:
77:59:d3:f5:6e:91:80:5e:36:b7:29:f9:9a:a1:ce:
db:dd:30:5a:9d:05:4d:40:b1:c1:98:6a:d6:0d:3a:
9e:1b:93:85:7f:e2:d7:14:94:d0:80:58:ee:1b:40:
30:28:ca:ed:7b:d1:00:36:b0:f0:b0:90:d2:9a:ec:
64:ef:fd:c4:bc:0b:3f:96:9c:91:a3:31:2d:0f:74:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FC:02:E5:58:12:54:9F:E4:09:93:34:EB:98:FA:47:D2:6E:CB:7D
X509v3 Authority Key Identifier:
keyid:6B:74:19:97:DF:25:D3:EF:E6:CB:6F:D3:D6:58:F8:36:3A:EE:C4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa134f8d8f5b4c61a240144257c6a28362862251.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e1a2898-5ff4-456c-8898-61d61e8e0fe5/0b04ed4532a9321370c29ba5753fe0aaf90ec7ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4e1a2898-5ff4-456c-8898-61d61e8e0fe5/aa134f8d8f5b4c61a240144257c6a28362862251.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.24.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:11:1a:e6:3d:55:47:38:cb:0d:c7:aa:ab:65:2c:ba:60:46:
b4:8e:43:2c:41:25:55:12:d1:41:80:f0:3a:e9:48:33:fc:10:
c7:8b:8c:1b:23:ed:ae:4d:43:c5:cd:5a:ec:ca:98:ae:f8:30:
a7:f2:2e:5c:47:69:52:85:eb:c6:3f:cf:14:2f:06:ec:49:67:
ba:f0:07:a9:10:dc:5b:1f:4a:90:6f:99:8a:cc:d9:f8:66:9d:
02:31:d5:38:7d:57:32:57:c1:9e:64:45:3b:a8:7a:c0:56:2b:
13:66:68:74:77:cd:46:3b:b8:26:d8:07:08:6b:12:be:eb:8f:
96:e9:81:e2:e8:73:59:55:6e:55:c7:49:f8:ca:da:80:0d:0c:
c8:7f:63:62:75:74:08:83:ae:b1:40:d1:0b:b1:59:1e:5b:c5:
d0:32:dc:ef:bc:fa:66:e0:7e:cb:26:09:08:d2:07:c3:09:7c:
55:95:bf:eb:9e:f6:5f:fa:16:c9:2e:b2:a5:88:b9:b5:01:6b:
00:3c:a3:2d:ef:5e:3c:ea:36:fa:bf:be:07:ba:81:dd:f2:ac:
87:56:27:70:df:c0:32:57:5d:31:d1:6b:b9:08:e2:96:c5:55:
75:52:22:ab:49:47:1c:04:8c:ae:0f:f9:5a:90:82:3f:79:1b:
ba:3a:19:28
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDY+lMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFh
MTM0ZjhkOGY1YjRjNjFhMjQwMTQ0MjU3YzZhMjgzNjI4NjIyNTEwHhcNMjEwMzI0
MTQzNzE3WhcNMjYwMzI0MTQzNzE3WjAzMTEwLwYDVQQDEygwYjA0ZWQ0NTMyYTkz
MjEzNzBjMjliYTU3NTNmZTBhYWY5MGVjN2FiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlVHGmq26JZbwVlttnO7ZjDc1OHwVWdcKZAY9WFA7us9imWr3
p04xXnVCNk3T0in7WFmK+OFhJHD4FnRf2T0EqBebpN4ci6edj6Zkhf8NDWGFsF+G
EFRrT68Fa2KoXqWHaRjmR9I2QqaRk3N3+F8RxBrn2FTjOc7Nz2iDeXlUh+flcsDd
3KwmQJHXwr5BrV5zvHdPqZ6t+pTa9W5SQXZuGvA6YYwaT8TODTWYZ4tUWb7Rk1Z3
WdP1bpGAXja3Kfmaoc7b3TBanQVNQLHBmGrWDTqeG5OFf+LXFJTQgFjuG0AwKMrt
e9EANrDwsJDSmuxk7/3EvAs/lpyRozEtD3SALwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAj8AuVYElSf5AmTNOuY+kfSbst9MB8GA1UdIwQYMBaAFGt0GZffJdPv5stv
09ZY+DY67sRoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWExMzRm
OGQ4ZjViNGM2MWEyNDAxNDQyNTdjNmEyODM2Mjg2MjI1MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGUxYTI4OTgtNWZmNC00NTZjLTg4OTgtNjFkNjFl
OGUwZmU1LzBiMDRlZDQ1MzJhOTMyMTM3MGMyOWJhNTc1M2ZlMGFhZjkwZWM3YWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZTFhMjg5OC01ZmY0LTQ1NmMtODg5OC02MWQ2
MWU4ZTBmZTUvYWExMzRmOGQ4ZjViNGM2MWEyNDAxNDQyNTdjNmEyODM2Mjg2MjI1
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAop6GDANBgkqhkiG9w0BAQsFAAOCAQEAPhEa5j1VRzjLDceq
q2UsumBGtI5DLEElVRLRQYDwOulIM/wQx4uMGyPtrk1Dxc1a7MqYrvgwp/IuXEdp
UoXrxj/PFC8G7ElnuvAHqRDcWx9KkG+ZiszZ+GadAjHVOH1XMlfBnmRFO6h6wFYr
E2ZodHfNRju4JtgHCGsSvuuPlumB4uhzWVVuVcdJ+MragA0MyH9jYnV0CIOusUDR
C7FZHlvF0DLc77z6ZuB+yyYJCNIHwwl8VZW/6572X/oWyS6ypYi5tQFrADyjLe9e
POo2+r++B7qB3fKsh1YncN/AMlddMdFruQjilsVVdVIiq0lHHASMrg/5WpCCP3kb
ujoZKA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org