Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e859dbe-1637-4ec9-9807-60a486157ffa/b4f9819cde74856da365f1f0b3bdbb27e67eecc5.roa
File: b4f9819cde74856da365f1f0b3bdbb27e67eecc5.roa (raw, json)
Hash identifier: 2nz4dcwowfPfKE2tT4zYj+rMviyeDot84SlDG30Ry1w=
Subject key identifier: 22:C1:2C:3B:D1:09:A4:04:C3:D4:C1:DC:B0:8A:EF:AC:1A:11:55:D3
Certificate issuer: /CN=dcfc1bb1cedc6321805c909b53115fb285208613
Certificate serial: 191C09
Authority key identifier: EF:7F:13:07:0D:1A:46:0D:77:01:7A:A2:B8:28:0E:1B:F7:8F:C2:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dcfc1bb1cedc6321805c909b53115fb285208613.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6e859dbe-1637-4ec9-9807-60a486157ffa/b4f9819cde74856da365f1f0b3bdbb27e67eecc5.roa
Signing time: Mon 18 Jul 2022 17:47:58 +0000
ROA not before: Mon 18 Jul 2022 03:00:00 +0000
ROA not after: Thu 18 Jul 2024 03:00:00 +0000
asID: 265703
IP address blocks: 138.117.148.0/22 maxlen: 24
190.107.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1645577 (0x191c09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfc1bb1cedc6321805c909b53115fb285208613
Validity
Not Before: Jul 18 03:00:00 2022 GMT
Not After : Jul 18 03:00:00 2024 GMT
Subject: CN=b4f9819cde74856da365f1f0b3bdbb27e67eecc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:02:70:9f:32:9b:c7:07:bb:98:70:c0:d4:fd:
f2:8b:73:d3:e7:44:e5:c7:cb:1d:85:d7:1c:26:99:
ed:df:d2:19:4c:b4:3d:f2:93:96:20:b1:e6:77:a5:
00:15:46:35:86:1a:0c:10:b4:ba:bb:f1:70:0f:d7:
a7:11:ea:6f:f5:df:90:b1:14:be:a7:67:eb:e7:99:
f2:18:5b:94:67:5b:4f:d9:41:4a:16:01:29:89:00:
53:ac:c4:23:c7:03:ba:03:78:b0:6e:0a:9c:6e:e8:
4c:63:be:ea:7a:dd:6f:5a:18:8e:01:a0:d3:f8:13:
07:df:35:9d:15:75:fe:7b:3e:30:71:2a:14:a4:1d:
b1:f2:34:6e:5b:28:4e:ed:d7:77:44:fe:d8:39:7d:
b5:49:e9:b9:57:73:8e:6a:ed:45:f1:35:8d:13:d9:
2c:16:b8:06:cb:df:0a:fc:f9:0a:18:2b:1e:36:1c:
b4:e0:8c:48:00:65:85:d0:9e:f1:ab:5a:c5:0a:52:
83:13:fc:aa:f5:71:6e:90:dd:b8:30:5b:ce:9f:39:
e7:45:2c:ea:ae:91:db:40:b6:a4:8e:ae:53:f2:3c:
61:8e:40:06:95:75:2f:e7:56:73:8a:f5:8c:c1:58:
74:9e:6f:e7:3c:58:7c:57:15:00:00:84:ac:09:20:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C1:2C:3B:D1:09:A4:04:C3:D4:C1:DC:B0:8A:EF:AC:1A:11:55:D3
X509v3 Authority Key Identifier:
keyid:EF:7F:13:07:0D:1A:46:0D:77:01:7A:A2:B8:28:0E:1B:F7:8F:C2:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dcfc1bb1cedc6321805c909b53115fb285208613.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e859dbe-1637-4ec9-9807-60a486157ffa/b4f9819cde74856da365f1f0b3bdbb27e67eecc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6e859dbe-1637-4ec9-9807-60a486157ffa/dcfc1bb1cedc6321805c909b53115fb285208613.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.148.0/22
190.107.176.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:a1:28:de:41:85:ba:b6:3e:f7:73:69:b7:5d:3b:c7:a2:36:
bb:a2:db:b3:95:b1:e9:ee:bd:e3:65:5a:11:3b:46:35:6b:d9:
0a:3e:4c:72:0a:56:2d:9f:6e:bc:5a:8c:0f:ba:60:75:8c:d1:
8f:f2:e0:21:37:ba:40:73:45:dd:7f:0f:ee:46:00:e9:f2:b9:
10:33:b5:fd:ca:23:c2:76:a4:1a:ef:60:f0:38:3b:38:40:e3:
f7:e3:72:0b:5a:f0:1d:60:6a:eb:1a:4c:88:4a:69:3d:8d:34:
90:55:d5:e3:ba:2d:a7:9a:d0:7c:5d:f4:a0:99:39:fa:76:64:
53:65:22:ad:46:4d:d7:0d:ff:19:fd:ad:39:7a:99:9b:ee:f9:
9c:e4:71:d0:8b:b3:5e:02:05:db:c4:49:fe:15:fc:5c:18:75:
75:60:0d:63:33:a2:59:a6:72:fa:56:32:1b:f4:5f:c9:a6:4e:
51:5b:e3:06:8b:7a:f6:b1:dd:a4:ad:0d:77:4d:6a:46:03:1e:
30:2d:eb:e7:dd:dd:0e:ce:15:95:6a:da:b7:f9:db:26:10:cf:
6b:48:f1:9c:c3:e6:40:c3:be:8f:8b:38:b1:9f:b3:75:a1:83:
61:02:e9:0e:f1:86:fc:7b:df:b8:dd:5b:a7:b0:44:53:9c:2c:
67:3d:ab:7a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDGRwJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRj
ZmMxYmIxY2VkYzYzMjE4MDVjOTA5YjUzMTE1ZmIyODUyMDg2MTMwHhcNMjIwNzE4
MDMwMDAwWhcNMjQwNzE4MDMwMDAwWjAzMTEwLwYDVQQDEyhiNGY5ODE5Y2RlNzQ4
NTZkYTM2NWYxZjBiM2JkYmIyN2U2N2VlY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5AJwnzKbxwe7mHDA1P3yi3PT50Tlx8sdhdccJpnt39IZTLQ9
8pOWILHmd6UAFUY1hhoMELS6u/FwD9enEepv9d+QsRS+p2fr55nyGFuUZ1tP2UFK
FgEpiQBTrMQjxwO6A3iwbgqcbuhMY77qet1vWhiOAaDT+BMH3zWdFXX+ez4wcSoU
pB2x8jRuWyhO7dd3RP7YOX21Sem5V3OOau1F8TWNE9ksFrgGy98K/PkKGCseNhy0
4IxIAGWF0J7xq1rFClKDE/yq9XFukN24MFvOnznnRSzqrpHbQLakjq5T8jxhjkAG
lXUv51ZzivWMwVh0nm/nPFh8VxUAAISsCSBgqQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFCLBLDvRCaQEw9TB3LCK76waEVXTMB8GA1UdIwQYMBaAFO9/EwcNGkYNdwF6
orgoDhv3j8IZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGNmYzFi
YjFjZWRjNjMyMTgwNWM5MDliNTMxMTVmYjI4NTIwODYxMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmU4NTlkYmUtMTYzNy00ZWM5LTk4MDctNjBhNDg2
MTU3ZmZhL2I0Zjk4MTljZGU3NDg1NmRhMzY1ZjFmMGIzYmRiYjI3ZTY3ZWVjYzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ZTg1OWRiZS0xNjM3LTRlYzktOTgwNy02MGE0
ODYxNTdmZmEvZGNmYzFiYjFjZWRjNjMyMTgwNWM5MDliNTMxMTVmYjI4NTIwODYx
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAop1lAMEAr5rsDANBgkqhkiG9w0BAQsFAAOCAQEAX6Eo3kGF
urY+93Npt107x6I2u6Lbs5Wx6e6942VaETtGNWvZCj5McgpWLZ9uvFqMD7pgdYzR
j/LgITe6QHNF3X8P7kYA6fK5EDO1/cojwnakGu9g8Dg7OEDj9+NyC1rwHWBq6xpM
iEppPY00kFXV47otp5rQfF30oJk5+nZkU2UirUZN1w3/Gf2tOXqZm+75nORx0Iuz
XgIF28RJ/hX8XBh1dWANYzOiWaZy+lYyG/RfyaZOUVvjBot69rHdpK0Nd01qRgMe
MC3r593dDs4VlWrat/nbJhDPa0jxnMPmQMO+j4s4sZ+zdaGDYQLpDvGG/HvfuN1b
p7BEU5wsZz2reg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org