Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/596fd940559c72f154bc9575b22d656a4f92eebb.roa
File: 596fd940559c72f154bc9575b22d656a4f92eebb.roa (raw, json)
Hash identifier: 5EwCVwo3zDOGfEK/ii3K+8jT2Ud6UN27dyMkMaNC1d0=
Subject key identifier: 02:1A:33:45:BC:CF:F3:F7:B9:7A:C2:4E:61:1D:92:16:DF:64:9B:7D
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 24D77F
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/596fd940559c72f154bc9575b22d656a4f92eebb.roa
Signing time: Mon 30 Oct 2023 12:07:11 +0000
ROA not before: Mon 30 Oct 2023 12:06:35 +0000
ROA not after: Thu 30 Oct 2025 12:06:35 +0000
asID: 61553
IP address blocks: 201.182.138.0/24 maxlen: 24
138.204.255.0/24 maxlen: 24
2801:168:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2414463 (0x24d77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Oct 30 12:06:35 2023 GMT
Not After : Oct 30 12:06:35 2025 GMT
Subject: CN=596fd940559c72f154bc9575b22d656a4f92eebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:f5:30:cf:c5:f2:01:53:d7:47:8b:5e:af:
40:dd:56:04:bc:ff:84:d1:5f:f9:cb:a0:4c:69:3c:
07:52:67:dc:e1:3f:8f:97:5f:1a:f5:75:30:ef:67:
67:6b:06:cd:f1:ab:a5:ed:fc:b5:6c:59:11:37:5c:
92:c2:53:50:48:87:e3:c4:44:97:66:cb:d4:72:2e:
e1:88:7d:23:2d:7a:43:b1:8d:18:e5:03:a5:ef:22:
e0:60:e2:9d:ac:cb:5f:bd:74:44:83:d6:0d:d6:9b:
95:64:2e:c9:93:6e:b8:f4:ad:ed:54:4c:b1:b5:ae:
92:fa:0c:1c:c2:9d:48:3e:17:23:ed:bd:ed:9c:a2:
f9:51:49:73:81:eb:d2:9c:9b:50:34:64:27:1f:b0:
f5:48:cd:3c:8e:3a:a9:cd:cd:42:51:c5:88:32:2c:
81:d6:35:5e:9d:67:0d:50:a8:85:2d:10:ce:4a:ef:
0e:e5:2e:aa:37:26:ec:ae:b3:24:81:b8:f3:bd:23:
7b:14:96:06:83:63:0d:18:79:2a:18:89:78:b2:16:
e6:6e:fb:51:8a:e7:02:1e:d5:c6:2e:91:14:58:af:
b3:3a:47:19:a9:a2:20:36:b8:b9:60:05:4b:ff:36:
64:6f:43:c1:01:db:ee:e8:b8:04:79:5a:2a:da:6f:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1A:33:45:BC:CF:F3:F7:B9:7A:C2:4E:61:1D:92:16:DF:64:9B:7D
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/596fd940559c72f154bc9575b22d656a4f92eebb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.255.0/24
201.182.138.0/24
IPv6:
2801:168:1::/48
Signature Algorithm: sha256WithRSAEncryption
92:ae:48:d8:ea:1f:44:f6:36:a3:78:9e:19:f6:0f:e2:06:43:
ee:87:a9:f3:e3:86:d8:59:78:fb:78:8b:bb:4c:9b:dd:1a:0c:
e4:39:c9:db:66:4b:50:87:0c:4e:d9:20:55:e3:46:1f:22:1a:
ec:3a:07:1e:3a:72:74:c9:ef:b5:72:0d:95:34:8c:ee:1a:90:
05:0a:6d:8f:38:ae:5d:9f:cf:9c:60:35:bf:95:89:83:a1:99:
26:f5:18:e6:88:96:c8:90:e2:1d:1d:54:b6:70:68:41:fe:ca:
c6:d9:38:b2:6d:a4:c8:02:8f:bb:13:6a:8c:c7:86:07:05:f5:
28:e6:a0:e7:75:e2:99:2f:0d:91:98:86:36:bd:86:e4:e8:d9:
88:ca:e5:bf:90:ad:aa:90:db:ba:c6:64:7f:61:8b:82:e2:ce:
e9:cd:00:39:aa:40:ee:af:3c:e3:78:b9:66:c2:6e:fd:e5:3b:
90:58:6c:18:d8:52:78:3f:d4:18:76:3b:a0:c4:f8:ee:56:11:
a3:02:8b:63:90:0d:57:c9:dc:8b:24:ef:5b:21:f3:bf:83:70:
76:34:91:2e:b5:52:f2:94:1f:cb:fd:50:54:a0:6f:ca:ef:39:
c5:b2:fb:79:49:84:8e:67:8a:c0:3b:a4:a7:7a:9c:d9:85:0c:
d1:a6:50:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org