Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/5baccc3c88baa055f1459cfb12fc6a96f2b04638.roa
File: 5baccc3c88baa055f1459cfb12fc6a96f2b04638.roa (raw, json)
Hash identifier: EWJPu0oLvWyXaPKdfoxs9BrFZ7+Rf7TKB75mneKRB/M=
Subject key identifier: 03:19:E6:CD:29:C0:58:AF:FC:CF:A4:33:0E:52:57:3C:17:4B:27:5C
Certificate issuer: /CN=bf0c3190bc902c16f95a9189977c2b845fc1db00
Certificate serial: 2797A6
Authority key identifier: 5C:72:DD:19:84:85:C5:0B:E6:6D:CD:14:91:85:F0:6C:55:63:C2:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf0c3190bc902c16f95a9189977c2b845fc1db00.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/5baccc3c88baa055f1459cfb12fc6a96f2b04638.roa
Signing time: Sun 31 Mar 2024 00:50:01 +0000
ROA not before: Sun 31 Mar 2024 00:49:59 +0000
ROA not after: Sat 31 Mar 2029 00:49:59 +0000
asID: 64139
IP address blocks: 138.0.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2594726 (0x2797a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf0c3190bc902c16f95a9189977c2b845fc1db00
Validity
Not Before: Mar 31 00:49:59 2024 GMT
Not After : Mar 31 00:49:59 2029 GMT
Subject: CN=5baccc3c88baa055f1459cfb12fc6a96f2b04638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:74:4c:7b:7d:2b:fd:27:af:b2:36:61:84:
1f:0f:8a:3f:d3:b4:2f:d5:35:71:82:14:d2:f8:93:
68:7e:43:f9:eb:d1:93:f2:db:f7:fa:b3:1f:41:ae:
fb:bf:cd:69:9d:7c:ce:60:01:74:8f:16:03:c8:af:
79:a5:10:87:57:73:d9:ba:65:b2:2d:de:d1:b9:0e:
88:58:86:b0:2b:32:d0:2d:56:fd:4c:63:92:e1:39:
34:06:5d:70:65:8a:75:6f:ef:d7:bf:47:44:e4:a3:
54:ac:0c:bd:51:78:39:41:dd:b1:cc:7a:10:be:8e:
dc:33:1c:19:67:8b:fd:c1:3c:34:ff:4b:47:a4:95:
0d:ac:7b:ec:db:a5:e5:e0:46:e5:a0:38:91:31:d0:
b6:8f:5a:98:e0:87:a4:12:df:f0:fb:4d:40:6b:93:
31:e1:33:e6:62:ba:8c:42:e5:14:b6:33:8b:2e:55:
d2:5c:b2:7b:0c:d5:8a:aa:ce:ca:6f:0f:2a:fd:6e:
fa:56:5d:c3:8c:ab:44:a7:fd:09:50:ab:22:8d:ff:
52:b5:8c:2d:58:0b:6f:c5:c3:b0:bb:09:89:77:33:
99:f7:01:6b:01:1a:0b:98:26:5e:6c:84:b2:53:f5:
e4:a5:8c:8c:d8:e8:25:b2:7f:47:6f:48:c4:35:12:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:19:E6:CD:29:C0:58:AF:FC:CF:A4:33:0E:52:57:3C:17:4B:27:5C
X509v3 Authority Key Identifier:
keyid:5C:72:DD:19:84:85:C5:0B:E6:6D:CD:14:91:85:F0:6C:55:63:C2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf0c3190bc902c16f95a9189977c2b845fc1db00.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/5baccc3c88baa055f1459cfb12fc6a96f2b04638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/bf0c3190bc902c16f95a9189977c2b845fc1db00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.123.0/24
Signature Algorithm: sha256WithRSAEncryption
26:86:50:fc:3e:be:29:f2:13:5c:b0:37:47:19:dc:40:36:11:
76:59:a5:d0:42:85:f1:c8:07:e4:57:5e:f5:c4:10:4a:c1:9a:
84:06:1c:4f:19:dc:18:23:2c:0c:af:06:81:57:2e:d0:4b:13:
90:d6:d3:d5:37:78:f2:41:64:c7:48:75:ba:fc:2c:78:8b:6a:
23:e4:40:c6:47:2f:66:79:4c:7e:13:89:5f:a5:38:8d:fd:42:
4a:14:07:10:10:39:c4:40:6e:e4:7e:1c:f8:f6:ac:ce:40:0f:
96:59:1b:3e:7c:ed:ec:d5:ab:60:95:2d:a3:4f:12:70:6e:38:
db:97:51:69:a1:a2:33:e0:e4:28:e1:e1:37:e4:72:10:f1:cb:
a0:a9:1a:6f:bc:f5:49:a4:26:1c:60:a6:a8:44:33:8d:c4:ef:
e8:84:bc:d6:4e:23:35:b4:d2:a4:06:64:d6:22:79:26:bb:3e:
c6:0c:e8:7d:ae:4a:d6:b9:0c:cb:6d:d5:77:5d:3f:b6:1b:d6:
ac:28:b3:ee:21:49:c9:55:84:05:51:73:0f:83:38:a0:87:7f:
24:97:e1:68:f1:92:14:d4:a3:84:f5:3d:79:36:f5:14:d8:a5:
1c:16:81:de:8c:7b:cb:b2:e4:25:3e:bd:a3:d4:84:d0:b3:70:
72:b9:0d:e7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ5emMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
MGMzMTkwYmM5MDJjMTZmOTVhOTE4OTk3N2MyYjg0NWZjMWRiMDAwHhcNMjQwMzMx
MDA0OTU5WhcNMjkwMzMxMDA0OTU5WjAzMTEwLwYDVQQDEyg1YmFjY2MzYzg4YmFh
MDU1ZjE0NTljZmIxMmZjNmE5NmYyYjA0NjM4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv5t0THt9K/0nr7I2YYQfD4o/07Qv1TVxghTS+JNofkP569GT
8tv3+rMfQa77v81pnXzOYAF0jxYDyK95pRCHV3PZumWyLd7RuQ6IWIawKzLQLVb9
TGOS4Tk0Bl1wZYp1b+/Xv0dE5KNUrAy9UXg5Qd2xzHoQvo7cMxwZZ4v9wTw0/0tH
pJUNrHvs26Xl4EbloDiRMdC2j1qY4IekEt/w+01Aa5Mx4TPmYrqMQuUUtjOLLlXS
XLJ7DNWKqs7Kbw8q/W76Vl3DjKtEp/0JUKsijf9StYwtWAtvxcOwuwmJdzOZ9wFr
ARoLmCZebISyU/XkpYyM2Oglsn9Hb0jENRLL8wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAMZ5s0pwFiv/M+kMw5SVzwXSydcMB8GA1UdIwQYMBaAFFxy3RmEhcUL5m3N
FJGF8GxVY8ICMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmYwYzMx
OTBiYzkwMmMxNmY5NWE5MTg5OTc3YzJiODQ1ZmMxZGIwMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2MyOTM2NjQtZjNlNy00NjkyLWFlNDMtNDE4M2Qz
ZDY0MjlhLzViYWNjYzNjODhiYWEwNTVmMTQ1OWNmYjEyZmM2YTk2ZjJiMDQ2Mzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83YzI5MzY2NC1mM2U3LTQ2OTItYWU0My00MTgz
ZDNkNjQyOWEvYmYwYzMxOTBiYzkwMmMxNmY5NWE5MTg5OTc3YzJiODQ1ZmMxZGIw
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIoAezANBgkqhkiG9w0BAQsFAAOCAQEAJoZQ/D6+KfITXLA3
RxncQDYRdlml0EKF8cgH5Fde9cQQSsGahAYcTxncGCMsDK8GgVcu0EsTkNbT1Td4
8kFkx0h1uvwseItqI+RAxkcvZnlMfhOJX6U4jf1CShQHEBA5xEBu5H4c+PaszkAP
llkbPnzt7NWrYJUto08ScG4425dRaaGiM+DkKOHhN+RyEPHLoKkab7z1SaQmHGCm
qEQzjcTv6IS81k4jNbTSpAZk1iJ5Jrs+xgzofa5K1rkMy23Vd10/thvWrCiz7iFJ
yVWEBVFzD4M4oId/JJfhaPGSFNSjhPU9eTb1FNilHBaB3ox7y7LkJT69o9SE0LNw
crkN5w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-ams.rpki-client.org