Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6d26b71a-ea69-4ab9-b972-634f6cb6bdec/4322532b6b532abfe40eee3d7f1a80b4688adfe8.roa
File: 4322532b6b532abfe40eee3d7f1a80b4688adfe8.roa (raw, json)
Hash identifier: 45ZB7S4SWcBhIW+WCYNO29L1/0RqFRw7JZ+x/gLwNR0=
Subject key identifier: 79:1A:AF:33:9C:CD:BC:E6:2B:66:C4:7D:65:6B:D7:48:F1:F2:3A:D0
Certificate issuer: /CN=b3089555a2ff274cc3f3d658901d3ac99e4a448d
Certificate serial: 1D62AD
Authority key identifier: 03:5B:49:76:39:53:8C:71:71:AC:A4:D7:F4:6C:03:80:19:6E:DF:65
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3089555a2ff274cc3f3d658901d3ac99e4a448d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6d26b71a-ea69-4ab9-b972-634f6cb6bdec/4322532b6b532abfe40eee3d7f1a80b4688adfe8.roa
Signing time: Tue 01 Aug 2023 02:08:42 +0000
ROA not before: Mon 31 Jul 2023 02:08:42 +0000
ROA not after: Fri 01 Aug 2025 02:08:42 +0000
asID: 269989
IP address blocks: 138.117.228.0/22 maxlen: 24
2803:bee0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1925805 (0x1d62ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3089555a2ff274cc3f3d658901d3ac99e4a448d
Validity
Not Before: Jul 31 02:08:42 2023 GMT
Not After : Aug 1 02:08:42 2025 GMT
Subject: CN=4322532b6b532abfe40eee3d7f1a80b4688adfe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:68:8a:2a:01:b4:02:79:59:6c:f2:d6:39:
ef:1b:38:e1:0f:61:3d:2b:be:e9:c6:9c:47:98:59:
73:95:90:8f:e5:f3:3b:c5:f0:c2:eb:73:02:f9:63:
17:a0:53:3a:72:93:24:1a:16:02:66:94:e8:c2:67:
e9:8f:36:42:57:6e:7c:ce:a4:86:a4:69:00:b4:08:
5e:83:93:01:27:6c:be:a5:79:39:74:23:58:7c:75:
fa:dc:46:48:64:5b:51:07:50:63:9a:61:fa:28:f7:
6a:e7:89:a2:e5:96:9a:7a:3a:e3:8e:1c:c1:aa:2b:
76:a7:42:17:1a:68:e8:b3:ef:99:fd:ae:ff:5a:fe:
6b:11:23:7a:33:06:8e:af:a0:ec:fd:13:25:af:ac:
dc:35:1b:d7:db:22:b3:96:a9:ad:01:20:bb:7b:16:
f4:2f:66:af:d6:36:7a:3b:e9:9e:de:e0:a3:0f:2d:
f1:2a:a9:b8:8f:d0:2a:b3:33:44:19:32:da:59:f0:
58:ca:d3:99:c5:f5:03:c6:32:64:e5:da:8a:d9:46:
a7:a7:06:50:bc:68:2c:9b:80:2b:88:c1:fb:68:6e:
4e:6a:bf:64:6e:b6:45:a1:35:45:86:38:f7:30:ce:
a8:ac:af:35:6b:d3:6f:e1:c3:a9:97:f8:46:69:3b:
dc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1A:AF:33:9C:CD:BC:E6:2B:66:C4:7D:65:6B:D7:48:F1:F2:3A:D0
X509v3 Authority Key Identifier:
keyid:03:5B:49:76:39:53:8C:71:71:AC:A4:D7:F4:6C:03:80:19:6E:DF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3089555a2ff274cc3f3d658901d3ac99e4a448d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6d26b71a-ea69-4ab9-b972-634f6cb6bdec/4322532b6b532abfe40eee3d7f1a80b4688adfe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6d26b71a-ea69-4ab9-b972-634f6cb6bdec/b3089555a2ff274cc3f3d658901d3ac99e4a448d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.228.0/22
IPv6:
2803:bee0::/32
Signature Algorithm: sha256WithRSAEncryption
24:27:89:42:d5:2f:eb:53:fc:a4:e5:43:78:c0:77:0e:8a:db:
8d:4f:31:dc:4b:01:fd:f3:1d:67:d1:0b:56:cd:27:82:8f:fd:
e1:55:69:aa:46:17:59:6f:c2:d9:d0:5c:a9:bf:f6:04:4b:6a:
3d:70:8a:79:69:b3:c3:5b:f1:80:31:0f:04:bd:66:1c:09:24:
78:a9:32:f9:59:ca:09:0d:72:48:a1:f2:43:03:cf:38:67:cc:
51:bd:1c:e1:72:6c:e7:71:a5:89:f6:92:74:35:3c:5e:5c:8f:
0e:7e:4b:e1:68:6d:ab:01:99:05:e3:69:e0:af:4a:03:7d:2f:
6e:8d:a5:74:f7:91:4a:6a:0b:49:70:48:2b:ca:d3:10:93:68:
e3:df:2f:cf:6a:f2:6b:29:61:fe:f2:9a:40:cd:3e:d8:c4:cf:
ef:1e:af:af:34:2b:c3:a6:76:a6:ba:5c:72:36:cb:fd:4e:ea:
60:20:a9:8d:78:e3:ce:24:14:b7:34:d3:75:64:35:5a:be:56:
09:1a:ef:33:0d:a7:a0:73:e0:7b:72:2f:cd:2d:d0:11:a0:a9:
49:d0:4a:58:12:90:41:d1:ed:53:58:05:78:b5:1f:42:27:db:
34:c9:98:27:b7:5c:3d:b8:a8:93:d6:18:e6:55:45:5b:09:eb:
b6:85:da:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org