Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/a3f4c7c18dbd258511571d80af344e634516eeb8.roa
File: a3f4c7c18dbd258511571d80af344e634516eeb8.roa (raw, json)
Hash identifier: xbvXKlgt7ar0egJvFB11GAWEk+Ff1QRj9CjHYcZxbp4=
Subject key identifier: 39:16:64:D6:33:D6:7D:66:0C:5A:B2:60:D9:56:11:AB:CE:62:A6:0F
Certificate issuer: /CN=4245076a2cc4607485f913342504c58cdd14441f
Certificate serial: 213233
Authority key identifier: AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4245076a2cc4607485f913342504c58cdd14441f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/a3f4c7c18dbd258511571d80af344e634516eeb8.roa
Signing time: Wed 28 Jun 2023 02:20:46 +0000
ROA not before: Tue 27 Jun 2023 02:20:45 +0000
ROA not after: Sat 28 Jun 2025 02:20:45 +0000
asID: 265703
IP address blocks: 138.36.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175539 (0x213233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4245076a2cc4607485f913342504c58cdd14441f
Validity
Not Before: Jun 27 02:20:45 2023 GMT
Not After : Jun 28 02:20:45 2025 GMT
Subject: CN=a3f4c7c18dbd258511571d80af344e634516eeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:7f:a1:7e:a9:de:f7:f0:6b:f9:43:88:1b:
dd:ca:b4:3f:67:ae:dd:5a:d6:a3:03:2f:68:8c:b3:
cc:24:5a:1e:cf:ee:cc:66:31:1f:7f:a6:f3:65:06:
29:40:3c:f2:b5:1f:00:32:60:60:82:1b:32:2b:de:
a7:2e:c0:6f:b8:71:3b:fb:0d:a6:f1:e4:c1:5f:18:
2e:aa:a7:ab:0b:31:0e:57:b2:1f:8b:9f:d5:23:f8:
53:f3:02:3a:a5:73:a9:33:a5:6e:c6:f0:13:c2:bf:
a5:1c:a5:44:25:c7:fe:5a:bd:18:20:16:08:6a:21:
82:3b:47:d0:2a:c1:95:8b:1c:89:47:3b:6a:c8:66:
cd:83:82:87:d8:45:c9:99:83:33:54:a1:f8:76:7d:
d0:f8:2e:ef:14:ae:57:80:56:78:d0:51:c8:de:c7:
fa:cd:c3:40:a6:30:b6:24:d7:90:0a:83:c8:fb:a2:
d9:b2:be:ae:f6:6c:ee:1d:11:73:82:c6:f5:fd:01:
0c:04:4c:5b:89:0e:0a:61:ec:1e:08:3c:14:a5:41:
d5:c6:e4:55:4c:02:e9:1d:64:2d:e0:89:08:a5:fc:
12:5d:1f:0e:99:cf:f3:a7:32:d4:ca:fd:2f:2b:e8:
e4:c8:75:26:40:30:51:fc:1b:04:34:6a:1d:2f:8f:
ae:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:16:64:D6:33:D6:7D:66:0C:5A:B2:60:D9:56:11:AB:CE:62:A6:0F
X509v3 Authority Key Identifier:
keyid:AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4245076a2cc4607485f913342504c58cdd14441f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/a3f4c7c18dbd258511571d80af344e634516eeb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/4245076a2cc4607485f913342504c58cdd14441f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.252.0/22
Signature Algorithm: sha256WithRSAEncryption
12:e3:67:a8:3d:18:ad:3d:6f:70:f9:da:d6:14:35:71:0f:56:
93:e1:d1:0e:15:66:9e:1c:a3:b9:94:9b:8d:c3:46:93:9b:18:
09:ed:92:e8:ec:3f:bc:30:9e:b9:26:81:e4:b1:66:e4:a6:d2:
ae:dd:01:9f:3b:ab:f3:96:a1:39:c2:86:27:07:0e:9d:90:bc:
34:71:f2:ef:98:df:61:31:ab:b4:15:d5:d8:9a:00:90:f4:68:
ca:19:fe:c2:d9:83:a8:4a:e4:a3:d9:b0:b9:b3:1e:d0:a5:c3:
f6:ff:f4:d7:b3:36:88:2f:f8:45:45:dc:22:46:9e:a4:91:a8:
a5:26:23:ff:6b:a1:ac:5f:2d:e0:89:0c:55:d8:80:df:b7:65:
38:6e:6e:29:c6:0d:b7:71:57:a6:7d:12:ff:66:5a:0c:34:4e:
96:8f:c3:4f:4d:7d:24:2f:b1:48:ea:98:c2:f3:23:04:02:65:
58:e2:4f:20:2d:f1:e0:06:f7:b6:44:34:72:6f:5b:36:67:f6:
4c:90:8e:9e:eb:01:fa:10:57:dc:73:70:38:de:73:1a:84:0d:
ee:ad:cd:b4:e0:3f:69:0d:74:72:6d:91:89:18:53:33:c8:9d:
50:b1:80:94:1d:d7:79:bb:9c:d2:a5:ef:9c:4d:0a:e7:fb:52:
35:c9:af:38
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDITIzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQy
NDUwNzZhMmNjNDYwNzQ4NWY5MTMzNDI1MDRjNThjZGQxNDQ0MWYwHhcNMjMwNjI3
MDIyMDQ1WhcNMjUwNjI4MDIyMDQ1WjAzMTEwLwYDVQQDEyhhM2Y0YzdjMThkYmQy
NTg1MTE1NzFkODBhZjM0NGU2MzQ1MTZlZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl1B/oX6p3vfwa/lDiBvdyrQ/Z67dWtajAy9ojLPMJFoez+7M
ZjEff6bzZQYpQDzytR8AMmBgghsyK96nLsBvuHE7+w2m8eTBXxguqqerCzEOV7If
i5/VI/hT8wI6pXOpM6VuxvATwr+lHKVEJcf+Wr0YIBYIaiGCO0fQKsGVixyJRztq
yGbNg4KH2EXJmYMzVKH4dn3Q+C7vFK5XgFZ40FHI3sf6zcNApjC2JNeQCoPI+6LZ
sr6u9mzuHRFzgsb1/QEMBExbiQ4KYeweCDwUpUHVxuRVTALpHWQt4IkIpfwSXR8O
mc/zpzLUyv0vK+jkyHUmQDBR/BsENGodL4+uqQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDkWZNYz1n1mDFqyYNlWEavOYqYPMB8GA1UdIwQYMBaAFK2fFl5N2AC3QbgE
BPA41t4k5VW4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDI0NTA3
NmEyY2M0NjA3NDg1ZjkxMzM0MjUwNGM1OGNkZDE0NDQxZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjY0YjVhZWYtYjFhOC00MjQ1LWFhOTctMGEwMDI5
NjRlNjVjL2EzZjRjN2MxOGRiZDI1ODUxMTU3MWQ4MGFmMzQ0ZTYzNDUxNmVlYjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NjRiNWFlZi1iMWE4LTQyNDUtYWE5Ny0wYTAw
Mjk2NGU2NWMvNDI0NTA3NmEyY2M0NjA3NDg1ZjkxMzM0MjUwNGM1OGNkZDE0NDQx
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAook/DANBgkqhkiG9w0BAQsFAAOCAQEAEuNnqD0YrT1vcPna
1hQ1cQ9Wk+HRDhVmnhyjuZSbjcNGk5sYCe2S6Ow/vDCeuSaB5LFm5KbSrt0Bnzur
85ahOcKGJwcOnZC8NHHy75jfYTGrtBXV2JoAkPRoyhn+wtmDqErko9mwubMe0KXD
9v/017M2iC/4RUXcIkaepJGopSYj/2uhrF8t4IkMVdiA37dlOG5uKcYNt3FXpn0S
/2ZaDDROlo/DT019JC+xSOqYwvMjBAJlWOJPIC3x4Ab3tkQ0cm9bNmf2TJCOnusB
+hBX3HNwON5zGoQN7q3NtOA/aQ10cm2RiRhTM8idULGAlB3Xebuc0qXvnE0K5/tS
NcmvOA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org