Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6d26b71a-ea69-4ab9-b972-634f6cb6bdec/ca8562a1ccacf10b6d747a7c5fa5843a4a0862ad.roa
File: ca8562a1ccacf10b6d747a7c5fa5843a4a0862ad.roa (raw, json)
Hash identifier: F6XwMaSglxNtQQE5zaBnpGxLcDZ2yvuzTD5wu07724k=
Subject key identifier: 84:2C:E5:14:36:95:BD:D0:65:10:4A:AA:19:C3:5E:80:CA:02:9F:07
Certificate issuer: /CN=b3089555a2ff274cc3f3d658901d3ac99e4a448d
Certificate serial: 231203
Authority key identifier: 03:5B:49:76:39:53:8C:71:71:AC:A4:D7:F4:6C:03:80:19:6E:DF:65
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3089555a2ff274cc3f3d658901d3ac99e4a448d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6d26b71a-ea69-4ab9-b972-634f6cb6bdec/ca8562a1ccacf10b6d747a7c5fa5843a4a0862ad.roa
Signing time: Mon 25 Mar 2024 16:48:08 +0000
ROA not before: Mon 25 Mar 2024 16:48:07 +0000
ROA not after: Wed 25 Mar 2026 16:48:07 +0000
asID: 269989
IP address blocks: 138.117.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2298371 (0x231203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3089555a2ff274cc3f3d658901d3ac99e4a448d
Validity
Not Before: Mar 25 16:48:07 2024 GMT
Not After : Mar 25 16:48:07 2026 GMT
Subject: CN=ca8562a1ccacf10b6d747a7c5fa5843a4a0862ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:38:31:f2:4e:71:07:34:5a:35:89:ce:c3:
18:dd:bf:9a:77:d0:c6:03:1b:26:8f:a9:ed:fb:aa:
32:46:c9:78:61:cd:a8:4e:82:c4:17:98:8f:63:4a:
a1:46:7c:3b:6c:ba:f6:04:14:80:c1:df:ce:59:df:
e1:59:3b:4f:f1:83:96:02:fe:17:67:82:1a:de:00:
28:6b:4a:07:04:b6:d3:bc:cf:e9:4e:c7:d8:e3:e4:
df:6c:ed:28:1d:46:8e:43:bc:65:75:31:92:ce:09:
de:13:9d:23:8b:43:05:e4:63:e3:c6:2e:82:a4:20:
bf:50:da:93:57:03:e7:3f:a0:b3:18:14:15:f0:05:
c2:d6:4e:67:0e:74:0e:dc:a4:3d:a2:d5:85:50:c6:
8b:19:e4:f0:88:8c:54:84:2b:da:e4:e9:f0:11:9f:
59:de:48:95:62:54:df:fb:88:85:34:15:02:c9:0f:
ef:09:e6:e7:66:1f:79:51:f7:e2:1d:3c:57:1a:2d:
5a:b9:45:6b:dc:db:c4:f9:6d:85:01:59:f0:f1:7c:
82:e7:e6:60:0e:3b:66:cc:ed:a1:8b:2f:58:68:3b:
85:96:9e:58:ae:73:dc:4d:33:13:30:af:00:5c:64:
1a:37:a9:11:6f:d5:e3:a0:30:3d:3d:b4:1e:e0:2f:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2C:E5:14:36:95:BD:D0:65:10:4A:AA:19:C3:5E:80:CA:02:9F:07
X509v3 Authority Key Identifier:
keyid:03:5B:49:76:39:53:8C:71:71:AC:A4:D7:F4:6C:03:80:19:6E:DF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3089555a2ff274cc3f3d658901d3ac99e4a448d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6d26b71a-ea69-4ab9-b972-634f6cb6bdec/ca8562a1ccacf10b6d747a7c5fa5843a4a0862ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6d26b71a-ea69-4ab9-b972-634f6cb6bdec/b3089555a2ff274cc3f3d658901d3ac99e4a448d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.228.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:ec:bb:70:3b:60:33:bf:d2:e5:8e:88:f7:e8:b5:fa:67:ca:
66:14:0a:45:32:96:1a:9b:a2:86:e2:dd:a7:8a:d9:b0:e5:ba:
2f:43:02:4a:52:61:e7:09:39:33:f8:21:08:9f:6a:e1:91:95:
f0:16:05:4d:1b:64:15:94:c3:0c:43:a9:8e:e2:85:7c:b4:00:
c2:b4:d2:ba:14:f9:e1:bc:78:6f:0f:96:dc:6c:c3:2e:a8:05:
33:8c:cd:58:09:ac:be:13:b3:61:da:e2:ad:22:94:62:0d:4c:
20:0e:e6:2c:f6:ca:fc:94:fc:47:be:a2:22:45:db:e2:2a:8d:
ba:57:02:a9:41:59:ff:9b:a4:0a:47:cb:82:63:83:cc:f7:e9:
86:3a:8f:c5:cf:19:92:98:25:0c:57:d5:f0:c9:09:7c:da:0b:
dd:91:5c:af:39:e6:54:d6:e3:87:bd:37:fe:1a:b0:14:ba:6f:
81:53:89:0d:f8:68:44:1f:4f:af:9e:fc:96:24:88:44:bf:34:
86:2e:7e:34:0a:f0:61:8a:ca:c2:29:ba:c4:5e:37:1d:1a:c9:
49:ea:1b:32:1c:0f:3a:ab:fe:a1:0c:66:15:7c:f0:19:9e:d2:
1a:f1:a8:ea:ea:9c:6f:8b:9d:c8:b2:ec:08:fb:a4:10:12:d0:
66:38:5e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org