Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/dfc8d88f61a387c3a0f0c895403dcb8373a2d755.roa
File: dfc8d88f61a387c3a0f0c895403dcb8373a2d755.roa (raw, json)
Hash identifier: Z5V5APKwrpjlDkBdOB9PVYrGWekLdcFwCcHUJdvvFzE=
Subject key identifier: F9:F4:3E:4B:5D:43:15:F8:53:80:22:63:08:39:71:E0:E2:C9:DF:10
Certificate issuer: /CN=63c3a21c71007155e6b7b013a30357703347965c
Certificate serial: 1FB169
Authority key identifier: DC:74:08:38:C2:43:73:AD:EE:0B:26:F9:EB:63:A7:EF:25:80:96:3B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63c3a21c71007155e6b7b013a30357703347965c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/dfc8d88f61a387c3a0f0c895403dcb8373a2d755.roa
Signing time: Sun 16 Apr 2023 08:30:00 +0000
ROA not before: Sat 15 Apr 2023 08:30:00 +0000
ROA not after: Mon 14 Apr 2025 08:30:00 +0000
asID: 52510
IP address blocks: 138.219.56.0/23 maxlen: 23
138.219.58.0/23 maxlen: 23
170.233.192.0/23 maxlen: 23
170.233.194.0/23 maxlen: 23
170.245.48.0/23 maxlen: 23
170.245.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2077033 (0x1fb169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c3a21c71007155e6b7b013a30357703347965c
Validity
Not Before: Apr 15 08:30:00 2023 GMT
Not After : Apr 14 08:30:00 2025 GMT
Subject: CN=dfc8d88f61a387c3a0f0c895403dcb8373a2d755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:42:e4:c6:fa:da:4d:a0:51:2f:b2:bb:87:6d:
72:81:dd:49:a7:b3:e5:27:92:ec:3d:26:23:f2:cc:
05:7d:71:cb:59:01:df:bf:36:a6:f9:6e:2c:0a:f6:
29:f4:5e:5f:db:ea:e7:18:b6:79:07:e1:c1:76:d3:
0c:1e:b1:cf:fd:f6:89:ab:d0:99:5e:c7:5e:dc:3e:
37:b4:f3:66:ea:cf:81:76:b9:8e:66:0c:c2:06:c1:
ba:f0:d2:b9:fb:7d:f6:1d:70:bd:3c:71:1a:ca:59:
4d:a7:45:c4:0d:8f:18:cb:cc:7f:a4:68:8b:13:32:
47:44:5c:7c:bd:eb:7b:d0:00:dd:56:b1:70:e6:ab:
07:2d:d2:c4:48:3c:ce:00:92:95:25:0d:77:fe:87:
17:ec:6f:96:98:9a:1e:1e:44:86:20:ac:e3:c6:41:
5c:c6:8a:45:d6:4a:99:77:a7:95:7f:b2:bb:30:5d:
2a:1d:08:8f:e5:d7:13:83:f3:92:04:7d:cc:5a:16:
0d:b1:3c:d6:8b:12:a3:92:52:2f:cb:82:03:5f:c6:
a5:df:1d:ff:f2:83:54:c1:b2:1d:39:9c:55:f1:22:
87:04:8f:52:ae:a3:2d:74:36:be:aa:8c:ef:d8:24:
10:a2:a6:2b:10:44:8b:3d:db:d2:dc:4b:b6:25:2b:
f8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F4:3E:4B:5D:43:15:F8:53:80:22:63:08:39:71:E0:E2:C9:DF:10
X509v3 Authority Key Identifier:
keyid:DC:74:08:38:C2:43:73:AD:EE:0B:26:F9:EB:63:A7:EF:25:80:96:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63c3a21c71007155e6b7b013a30357703347965c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/dfc8d88f61a387c3a0f0c895403dcb8373a2d755.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/63c3a21c71007155e6b7b013a30357703347965c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.56.0/22
170.233.192.0/22
170.245.48.0/22
Signature Algorithm: sha256WithRSAEncryption
42:ae:63:03:33:27:76:59:80:e0:b1:0d:9a:de:e4:51:fe:af:
8e:8c:9b:14:e3:1d:54:be:4d:3d:7a:72:cf:16:02:ac:d3:cc:
ba:57:af:a5:8e:3b:79:64:64:5d:46:c4:e2:0a:50:27:95:66:
c2:31:57:79:c4:60:1c:9a:38:b6:a2:25:b9:64:a1:83:b5:52:
ce:a4:e4:09:f6:d8:b2:c6:b2:f2:5c:bb:dc:e2:74:00:05:63:
23:df:a1:c6:86:d6:4b:63:32:8b:20:4c:12:e7:d6:a5:a0:90:
24:c1:48:1c:ba:1f:c6:b6:6c:54:c3:4a:70:a3:77:65:db:b8:
88:8d:8d:5a:28:92:ad:00:90:a4:05:89:b5:6e:60:65:ae:f4:
48:f9:5a:f2:e5:6f:40:f6:0b:eb:42:ee:71:c1:49:16:9d:6d:
26:b2:94:3e:6b:2d:74:60:db:89:4c:43:eb:e5:7d:d5:69:b2:
31:7a:58:ab:b0:2b:c4:46:57:31:08:0a:e2:4e:4a:4c:80:09:
00:c4:70:30:c7:44:50:28:71:77:34:ea:00:ee:e9:f8:0f:e2:
42:cc:d4:08:dc:d3:e3:8e:b9:e5:25:9e:fd:3b:2a:40:c2:9f:
4b:74:02:1f:d9:7a:e8:c8:9e:f2:ec:4b:5e:36:be:9b:85:99:
3f:6a:cb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org