Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/f0993fec668a54de2ca572dfd3bd7ebf8c70624e.roa
File: f0993fec668a54de2ca572dfd3bd7ebf8c70624e.roa (raw, json)
Hash identifier: UwBOfs1IUpVhYHq5sETosYIRQHdRPSZqGbgBhlhyMns=
Subject key identifier: 4E:C4:BF:B4:30:2C:43:D6:7C:34:8B:94:73:09:78:30:25:09:71:E4
Certificate issuer: /CN=e8fb249d4f9466e3a1a3e886e27e824279d45530
Certificate serial: 118582
Authority key identifier: 0E:08:35:B8:43:89:E5:7E:56:5B:87:9F:46:02:15:46:A7:18:54:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fb249d4f9466e3a1a3e886e27e824279d45530.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/f0993fec668a54de2ca572dfd3bd7ebf8c70624e.roa
Signing time: Wed 30 Aug 2023 08:30:00 +0000
ROA not before: Tue 29 Aug 2023 08:30:00 +0000
ROA not after: Thu 28 Aug 2025 08:30:00 +0000
asID: 264850
IP address blocks: 138.0.240.0/22 maxlen: 22
138.186.136.0/22 maxlen: 22
168.90.196.0/22 maxlen: 22
170.83.176.0/22 maxlen: 22
200.10.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148290 (0x118582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8fb249d4f9466e3a1a3e886e27e824279d45530
Validity
Not Before: Aug 29 08:30:00 2023 GMT
Not After : Aug 28 08:30:00 2025 GMT
Subject: CN=f0993fec668a54de2ca572dfd3bd7ebf8c70624e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:26:3e:30:11:8f:61:f3:e4:2f:20:fc:7c:00:
91:86:b8:03:65:b7:09:ba:be:49:59:5b:db:32:45:
32:69:0c:d2:dc:fb:b9:f8:da:2e:71:15:f1:81:6c:
d0:0e:88:15:ed:4a:60:96:35:00:d5:d2:93:d0:30:
79:45:9e:3d:1c:d4:c0:7c:6e:ed:50:88:f5:74:94:
8a:25:63:c2:3c:df:85:8a:78:62:57:61:05:32:ed:
fa:12:9b:2c:b7:f0:81:08:d7:fe:87:eb:23:b7:6d:
93:22:64:d9:08:28:4c:54:17:0f:1b:15:d0:9a:6c:
76:0a:f9:5c:c7:0f:33:f2:da:46:d1:d8:c3:73:e1:
a3:59:b2:0f:12:a0:ee:08:0a:0c:da:f3:72:0a:cd:
32:9a:bc:b5:f7:bd:6f:3c:1f:69:87:12:32:ad:04:
8d:62:90:c7:51:bf:09:7b:35:09:cc:d8:4f:7c:81:
8f:d7:a7:c3:99:aa:92:5c:5e:39:07:8b:ad:8e:eb:
29:2e:66:59:4a:fa:1b:33:ff:43:c2:fa:82:cc:26:
c9:6f:e6:bd:94:8b:12:fb:45:99:d8:5b:dc:10:cb:
a5:93:d3:ae:bd:fc:62:d2:13:32:8f:53:9a:86:1f:
40:96:8e:a3:13:8f:72:10:d4:a9:7b:d0:d0:91:94:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C4:BF:B4:30:2C:43:D6:7C:34:8B:94:73:09:78:30:25:09:71:E4
X509v3 Authority Key Identifier:
keyid:0E:08:35:B8:43:89:E5:7E:56:5B:87:9F:46:02:15:46:A7:18:54:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fb249d4f9466e3a1a3e886e27e824279d45530.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/f0993fec668a54de2ca572dfd3bd7ebf8c70624e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/e8fb249d4f9466e3a1a3e886e27e824279d45530.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.240.0/22
138.186.136.0/22
168.90.196.0/22
170.83.176.0/22
200.10.32.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:f4:50:2e:18:8b:71:ce:48:f4:a8:79:bc:8c:f6:11:80:93:
92:23:36:41:65:29:68:31:ed:54:97:a5:2f:5f:c8:60:10:65:
d0:7b:b4:db:09:7d:cf:b0:93:e1:5c:82:5b:5f:da:3e:ea:7a:
46:6e:3c:93:41:15:d4:8e:f8:4c:b7:64:04:9b:db:2b:dc:c1:
af:f8:dc:21:a8:9d:30:3b:f9:02:fb:b9:f6:69:80:88:24:a5:
64:af:a9:57:f1:84:a6:88:7d:c2:3c:e6:1f:ce:9e:a9:a3:9c:
a0:26:98:33:33:32:15:f0:0d:09:40:25:cd:fe:c3:ce:f1:52:
6b:f4:93:95:21:3e:3f:16:5f:f3:e4:4d:3a:20:9c:43:49:3f:
2b:0a:de:ac:c5:06:fc:97:ec:c1:6b:bf:1d:6a:b6:02:f7:62:
f7:a8:ad:3d:36:bc:a4:f0:14:67:ec:33:4b:c1:70:4c:c5:9a:
ea:74:6f:2d:2a:d9:95:48:a9:fa:92:2c:b3:ef:17:ee:31:fc:
e7:d4:e1:ac:f3:27:33:ef:7e:5c:ca:7d:f5:b4:7d:f1:16:51:
29:0f:5f:ff:62:48:ee:b7:a0:8f:e4:59:95:55:ad:12:1e:aa:
13:6a:87:9c:c3:e1:fd:3e:4c:6d:72:dc:d9:17:4a:62:42:69:
fa:0a:e2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org