Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/480ec73522c7ac93fb8667deefbc0600da280e06.roa
File: 480ec73522c7ac93fb8667deefbc0600da280e06.roa (raw, json)
Hash identifier: KNIf+DoJQEn20gTT2VwLDJuR9lHpxokTan+JrZsbkdw=
Subject key identifier: 62:5B:04:A8:62:35:1F:4A:D1:D8:82:96:E1:28:7E:79:94:77:AF:FC
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 11B2ED
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/480ec73522c7ac93fb8667deefbc0600da280e06.roa
Signing time: Mon 27 Nov 2023 20:12:23 +0000
ROA not before: Mon 27 Nov 2023 20:12:22 +0000
ROA not after: Thu 27 Nov 2025 20:12:22 +0000
asID: 52444
IP address blocks: 186.38.8.0/24 maxlen: 24
186.38.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1159917 (0x11b2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Nov 27 20:12:22 2023 GMT
Not After : Nov 27 20:12:22 2025 GMT
Subject: CN=480ec73522c7ac93fb8667deefbc0600da280e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:33:87:91:fa:dd:94:4b:74:d6:c8:e8:84:6b:
35:90:39:2a:69:22:f5:37:3c:b3:9c:08:74:dd:62:
f0:a3:64:9c:a4:7c:f4:8d:0e:cf:7d:d8:4b:3f:de:
63:d1:28:48:a9:95:37:99:7a:d5:f3:a4:3e:03:67:
39:ba:7c:eb:37:5a:33:23:96:9f:51:b9:93:8f:9c:
49:1b:fb:e7:eb:7e:44:2e:80:23:a0:bf:92:50:9d:
0d:a5:b9:e8:ab:98:c3:a1:2b:71:24:fc:c9:03:f5:
8b:8b:71:78:bb:b8:b9:7c:aa:1e:6f:49:32:d3:e1:
12:a6:79:cc:8c:b2:57:f6:25:52:58:3b:85:b9:36:
90:88:bd:4e:db:df:53:48:14:e8:ca:24:6e:0d:e1:
8a:3d:c5:b6:5b:28:9a:0f:0f:c4:8d:5c:3a:da:46:
74:c3:47:da:19:fe:d8:45:4c:ae:f1:97:c5:0a:5b:
11:f7:42:0c:77:1d:98:3b:96:0b:85:b3:e3:4d:9e:
19:97:6d:69:78:6f:d4:80:f1:67:ec:55:83:92:9c:
fe:9e:8c:c4:bf:94:0f:a5:34:11:83:55:d1:f6:ea:
b5:71:54:75:1b:1d:a9:fb:c6:9e:ed:f6:14:91:b2:
83:6a:63:4e:01:e8:27:27:68:b3:53:5c:fb:eb:5f:
75:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5B:04:A8:62:35:1F:4A:D1:D8:82:96:E1:28:7E:79:94:77:AF:FC
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/480ec73522c7ac93fb8667deefbc0600da280e06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.38.8.0/23
Signature Algorithm: sha256WithRSAEncryption
50:01:1e:da:61:7c:b0:e3:0b:ea:37:20:ce:bc:53:33:5a:f4:
b4:a0:87:6b:b4:9a:99:7e:2b:0c:3e:c6:31:41:07:e1:44:24:
0d:aa:29:93:76:f0:c3:15:83:75:70:25:f9:d8:49:98:6d:eb:
1c:c1:54:49:5a:3f:48:fe:cc:d2:47:01:e4:aa:42:d8:76:0d:
09:cd:65:c2:f4:d3:60:97:bf:b2:26:34:45:68:b2:01:a8:2b:
af:07:06:f1:bc:97:27:dc:c6:03:19:ab:67:47:e4:66:72:e0:
b3:7e:5d:2a:0a:6a:9f:e7:c7:01:21:1a:00:3f:65:7f:e7:04:
39:c0:ff:21:52:3a:01:76:94:ad:1e:63:89:79:9c:76:43:f3:
de:80:4f:a2:b3:b7:a8:53:59:43:a9:c7:30:d6:d4:47:18:47:
01:55:78:9c:fa:1a:6d:c8:94:ca:e0:e7:a5:f2:ce:ed:ba:f6:
c7:a4:3d:86:a4:fb:07:8d:cd:05:77:6b:70:f7:42:92:8c:4b:
d5:23:fe:d9:12:3c:9b:3b:12:ab:43:e2:67:86:28:c6:83:42:
33:bc:31:bb:30:a9:b9:e3:be:6d:45:55:14:d0:e3:f5:9b:d2:
25:7a:24:01:a6:e0:cf:04:94:b6:34:94:67:c9:6c:ac:9e:e5:
6b:d4:34:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org