Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/40f192bf0a582087acec386cacab51d24ae43264.roa
File: 40f192bf0a582087acec386cacab51d24ae43264.roa (raw, json)
Hash identifier: bhz4F9QwEE3LoJbjT7Dx5faEQjSmZpgGWT/RJl3eTkA=
Subject key identifier: 22:5D:30:B9:61:3B:6B:C0:00:0A:26:10:CE:E5:A3:2A:C9:6B:94:8D
Certificate issuer: /CN=59310929980be7f876d3482fedcd45ce2c4f795e
Certificate serial: 162CF7
Authority key identifier: 74:96:F1:D1:DD:AE:67:AB:DE:13:19:E9:8B:08:C8:B6:D8:9E:AA:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/59310929980be7f876d3482fedcd45ce2c4f795e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/40f192bf0a582087acec386cacab51d24ae43264.roa
Signing time: Thu 08 Feb 2024 16:17:03 +0000
ROA not before: Thu 08 Feb 2024 16:17:03 +0000
ROA not after: Sun 08 Feb 2026 16:17:03 +0000
asID: 263744
IP address blocks: 131.108.16.0/22 maxlen: 22
168.228.44.0/22 maxlen: 22
143.137.168.0/22 maxlen: 22
170.81.196.0/22 maxlen: 22
138.94.216.0/22 maxlen: 22
2803:5380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1453303 (0x162cf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59310929980be7f876d3482fedcd45ce2c4f795e
Validity
Not Before: Feb 8 16:17:03 2024 GMT
Not After : Feb 8 16:17:03 2026 GMT
Subject: CN=40f192bf0a582087acec386cacab51d24ae43264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:07:55:be:34:30:97:7f:42:8b:7d:e6:59:1f:
eb:a8:03:f2:d0:90:ee:07:eb:4a:48:6d:9c:3d:aa:
b7:16:fe:20:ca:42:3b:3d:b4:69:86:34:97:42:d4:
8a:92:68:0b:cb:a5:cc:22:d4:55:bd:c1:0a:20:6c:
a7:de:0c:07:77:cf:9c:8d:12:4f:52:db:5d:35:ac:
2d:de:6c:1b:c9:2e:b0:2f:66:4e:70:57:4a:3a:3f:
1f:c5:6a:09:4c:48:24:1f:f0:a8:c7:6c:96:52:ed:
e6:7a:3d:13:5d:36:84:39:74:66:e2:86:89:a7:a7:
80:a5:63:a7:5e:d6:47:40:80:64:05:b5:b5:8f:bf:
b8:6a:3b:a4:e4:30:d7:a8:76:82:f9:81:04:f4:c3:
d0:51:4d:d5:5c:7e:5a:a8:24:33:d7:70:ee:6e:91:
6d:70:be:56:f9:c1:64:fa:81:02:1f:e0:d8:af:5d:
de:38:cd:2b:2a:e2:37:1f:d6:38:06:89:d2:f2:aa:
7f:93:25:88:b6:44:30:04:e6:1f:bf:17:95:34:16:
18:f9:9f:84:d3:93:61:7e:b4:b0:e5:9f:f8:f5:29:
fa:f0:b7:f5:86:c1:70:15:7f:eb:ee:2c:ff:8d:60:
e3:8b:a0:a9:ba:68:24:29:b8:3b:96:76:31:b5:a3:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5D:30:B9:61:3B:6B:C0:00:0A:26:10:CE:E5:A3:2A:C9:6B:94:8D
X509v3 Authority Key Identifier:
keyid:74:96:F1:D1:DD:AE:67:AB:DE:13:19:E9:8B:08:C8:B6:D8:9E:AA:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/59310929980be7f876d3482fedcd45ce2c4f795e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/40f192bf0a582087acec386cacab51d24ae43264.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/59310929980be7f876d3482fedcd45ce2c4f795e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.16.0/22
138.94.216.0/22
143.137.168.0/22
168.228.44.0/22
170.81.196.0/22
IPv6:
2803:5380::/32
Signature Algorithm: sha256WithRSAEncryption
34:d9:9a:3c:82:2c:b8:f2:2d:be:37:72:a0:0f:5e:86:fe:f2:
92:0c:90:24:84:43:54:25:ba:0d:fb:d8:55:70:8d:4d:fc:48:
e7:39:fd:91:08:a5:5f:ad:25:59:d2:7e:04:df:9a:2f:4d:13:
76:70:dc:14:79:1b:38:aa:c1:06:f3:7a:cb:67:4e:4a:3e:b1:
2f:db:10:41:1d:7e:bb:af:25:e2:f6:c8:87:c1:b5:38:e3:9e:
dd:0a:f0:ac:cb:b6:85:e1:69:30:2d:f1:50:d3:86:e6:36:d6:
4f:e1:52:08:a0:da:d5:df:3a:02:31:6d:d2:b0:02:fb:4c:d1:
fd:a8:98:60:7f:d3:7d:dc:3e:46:0e:5c:5c:de:fd:c3:ca:12:
5b:5a:e6:fc:2f:d7:a6:9d:c4:35:4c:6d:0f:36:67:ec:8e:a6:
60:e4:c3:26:b4:fe:3f:59:3d:40:ac:fc:a6:e9:57:fe:8c:52:
cf:a9:86:1a:dd:ca:50:3c:17:7d:af:08:e2:c3:6a:91:5a:a7:
87:3e:e7:2f:df:28:ef:1e:db:13:d5:73:51:8a:b6:11:d1:63:
da:bb:8a:18:a8:38:54:23:93:03:f2:88:52:47:a2:b4:8c:2d:
f4:30:15:1a:5e:3b:08:de:35:25:c4:19:4c:e1:7a:1e:93:7e:
04:90:c4:a9
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIDFiz3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU5
MzEwOTI5OTgwYmU3Zjg3NmQzNDgyZmVkY2Q0NWNlMmM0Zjc5NWUwHhcNMjQwMjA4
MTYxNzAzWhcNMjYwMjA4MTYxNzAzWjAzMTEwLwYDVQQDEyg0MGYxOTJiZjBhNTgy
MDg3YWNlYzM4NmNhY2FiNTFkMjRhZTQzMjY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkAdVvjQwl39Ci33mWR/rqAPy0JDuB+tKSG2cPaq3Fv4gykI7
PbRphjSXQtSKkmgLy6XMItRVvcEKIGyn3gwHd8+cjRJPUttdNawt3mwbyS6wL2ZO
cFdKOj8fxWoJTEgkH/Cox2yWUu3mej0TXTaEOXRm4oaJp6eApWOnXtZHQIBkBbW1
j7+4ajuk5DDXqHaC+YEE9MPQUU3VXH5aqCQz13DubpFtcL5W+cFk+oECH+DYr13e
OM0rKuI3H9Y4BonS8qp/kyWItkQwBOYfvxeVNBYY+Z+E05NhfrSw5Z/49Sn68Lf1
hsFwFX/r7iz/jWDji6CpumgkKbg7lnYxtaP4swIDAQABo4ICgjCCAn4wHQYDVR0O
BBYEFCJdMLlhO2vAAAomEM7loyrJa5SNMB8GA1UdIwQYMBaAFHSW8dHdrmer3hMZ
6YsIyLbYnqoXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTkzMTA5
Mjk5ODBiZTdmODc2ZDM0ODJmZWRjZDQ1Y2UyYzRmNzk1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmY2OWY1MWEtZjUyMi00ZWUwLWJjZWItNDE0Yzg3
N2FkMjBiLzQwZjE5MmJmMGE1ODIwODdhY2VjMzg2Y2FjYWI1MWQyNGFlNDMyNjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ZjY5ZjUxYS1mNTIyLTRlZTAtYmNlYi00MTRj
ODc3YWQyMGIvNTkzMTA5Mjk5ODBiZTdmODc2ZDM0ODJmZWRjZDQ1Y2UyYzRmNzk1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBGBggrBgEFBQcBBwEB/wQ3
MDUwJAQCAAEwHgMEAoNsEAMEAope2AMEAo+JqAMEAqjkLAMEAqpRxDANBAIAAjAH
AwUAKANTgDANBgkqhkiG9w0BAQsFAAOCAQEANNmaPIIsuPItvjdyoA9ehv7ykgyQ
JIRDVCW6DfvYVXCNTfxI5zn9kQilX60lWdJ+BN+aL00TdnDcFHkbOKrBBvN6y2dO
Sj6xL9sQQR1+u68l4vbIh8G1OOOe3QrwrMu2heFpMC3xUNOG5jbWT+FSCKDa1d86
AjFt0rAC+0zR/aiYYH/Tfdw+Rg5cXN79w8oSW1rm/C/Xpp3ENUxtDzZn7I6mYOTD
JrT+P1k9QKz8pulX/oxSz6mGGt3KUDwXfa8I4sNqkVqnhz7nL98o7x7bE9VzUYq2
EdFj2ruKGKg4VCOTA/KIUkeitIwt9DAVGl47CN41JcQZTOF6HpN+BJDEqQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org