Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/abfd90ca1b150823df4316cc8a10795127605327.roa
File: abfd90ca1b150823df4316cc8a10795127605327.roa (raw, json)
Hash identifier: nz0Uy8I7jW104MAm0kPdpr2Eq9RBkxMmnBryttTs1Kw=
Subject key identifier: F0:99:A3:63:51:5D:4C:6B:32:FA:07:26:F8:2B:93:94:B2:B4:8A:29
Certificate issuer: /CN=0127eff5fb89d4f04f362b89beb72d612147af7f
Certificate serial: 25D2B8
Authority key identifier: F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/abfd90ca1b150823df4316cc8a10795127605327.roa
Signing time: Fri 12 Jan 2024 23:08:29 +0000
ROA not before: Fri 12 Jan 2024 23:08:29 +0000
ROA not after: Mon 12 Jan 2026 23:08:29 +0000
asID: 266846
IP address blocks: 45.238.176.0/23 maxlen: 24
138.0.122.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2478776 (0x25d2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0127eff5fb89d4f04f362b89beb72d612147af7f
Validity
Not Before: Jan 12 23:08:29 2024 GMT
Not After : Jan 12 23:08:29 2026 GMT
Subject: CN=abfd90ca1b150823df4316cc8a10795127605327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:48:b9:15:5f:ee:e6:60:50:81:6d:3e:cf:
96:5e:50:9e:5c:5b:3e:b0:14:ae:40:75:3c:9e:50:
64:99:da:ad:88:ea:29:59:d1:5a:d9:9f:ee:1f:c6:
eb:db:61:bc:a9:b7:db:3d:01:e2:97:88:eb:4b:f1:
a4:a9:bb:40:dc:58:ab:55:d2:2b:ea:9a:94:8f:a6:
4d:b8:ca:d6:cc:af:d8:fd:49:a1:91:5d:9d:23:65:
bd:02:74:c4:06:65:a4:c7:07:90:cc:05:54:8b:f2:
98:27:6f:b6:d7:84:cf:d6:40:3a:3f:b2:34:0a:df:
21:27:83:dd:ba:c7:84:f7:fb:87:d4:13:26:49:b9:
91:cc:b6:5c:a5:d4:00:e7:31:fd:99:7f:c7:74:9c:
9c:ef:5e:ba:24:48:5a:24:af:40:95:8a:12:fa:96:
60:df:b1:b8:46:f5:3a:e5:f9:28:60:8c:52:92:8c:
7b:94:e5:f8:67:de:19:85:1d:43:f3:b2:81:b3:f0:
8d:6b:7e:6a:45:5e:ed:23:84:a8:fa:fc:92:35:8f:
76:c6:9a:39:5c:2e:34:bb:de:f5:a4:68:ea:0e:d5:
6f:d8:ac:11:d8:c6:4a:13:7c:6e:61:a8:a1:cc:0c:
10:3c:92:78:b0:64:93:79:28:59:c4:b4:17:f8:37:
7f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:99:A3:63:51:5D:4C:6B:32:FA:07:26:F8:2B:93:94:B2:B4:8A:29
X509v3 Authority Key Identifier:
keyid:F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/abfd90ca1b150823df4316cc8a10795127605327.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/0127eff5fb89d4f04f362b89beb72d612147af7f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.176.0/23
138.0.122.0/23
Signature Algorithm: sha256WithRSAEncryption
02:89:16:a5:b8:53:fe:d3:8a:84:67:e3:32:51:e7:46:df:c7:
f0:a6:fd:7f:e8:98:73:bd:c3:fe:8b:d5:d9:6d:ee:db:e4:83:
8d:d0:fd:0c:59:d5:f5:d5:ca:3e:42:71:e6:be:b3:eb:3e:f3:
4c:22:43:cb:f8:20:d8:cd:61:b0:40:6e:f7:d1:51:91:a3:eb:
4d:db:92:97:cc:05:0d:8a:16:07:2c:7a:ab:48:6f:8f:ab:64:
23:ec:71:5d:a4:b0:02:d8:2b:e4:13:4d:70:82:a3:7e:be:27:
95:f7:b1:33:f4:bd:86:14:86:3c:41:ac:d7:67:f4:6b:b7:d5:
56:0a:a4:70:85:25:a7:4b:9e:fe:b6:f6:0b:26:05:55:0e:51:
bc:25:c7:38:d0:70:c4:e7:2a:5c:23:a9:2b:01:e2:7d:4b:2c:
c7:77:f2:0d:16:4f:92:b7:88:2b:55:00:72:26:bd:32:f0:04:
25:af:2c:e3:43:88:ce:71:29:ba:12:90:35:1e:a1:9c:7c:5f:
fc:ea:81:f1:16:c5:8d:1c:e9:7c:13:67:b9:5e:33:77:fc:d8:
5e:e6:97:3d:4e:ae:fe:35:52:d4:1a:67:3c:24:49:dc:e4:34:
44:bc:57:27:19:ae:d9:25:6d:12:ee:d1:66:c0:90:af:80:ee:
4c:e4:8a:3b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDJdK4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAx
MjdlZmY1ZmI4OWQ0ZjA0ZjM2MmI4OWJlYjcyZDYxMjE0N2FmN2YwHhcNMjQwMTEy
MjMwODI5WhcNMjYwMTEyMjMwODI5WjAzMTEwLwYDVQQDEyhhYmZkOTBjYTFiMTUw
ODIzZGY0MzE2Y2M4YTEwNzk1MTI3NjA1MzI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1YZIuRVf7uZgUIFtPs+WXlCeXFs+sBSuQHU8nlBkmdqtiOop
WdFa2Z/uH8br22G8qbfbPQHil4jrS/GkqbtA3FirVdIr6pqUj6ZNuMrWzK/Y/Umh
kV2dI2W9AnTEBmWkxweQzAVUi/KYJ2+214TP1kA6P7I0Ct8hJ4PduseE9/uH1BMm
SbmRzLZcpdQA5zH9mX/HdJyc7166JEhaJK9AlYoS+pZg37G4RvU65fkoYIxSkox7
lOX4Z94ZhR1D87KBs/CNa35qRV7tI4So+vySNY92xpo5XC40u971pGjqDtVv2KwR
2MZKE3xuYaihzAwQPJJ4sGSTeShZxLQX+Dd/IQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFPCZo2NRXUxrMvoHJvgrk5SytIopMB8GA1UdIwQYMBaAFPY9QYUeFNUrFKiK
0YhGJhc+hOMrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDEyN2Vm
ZjVmYjg5ZDRmMDRmMzYyYjg5YmViNzJkNjEyMTQ3YWY3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2MyOTM2NjQtZjNlNy00NjkyLWFlNDMtNDE4M2Qz
ZDY0MjlhL2FiZmQ5MGNhMWIxNTA4MjNkZjQzMTZjYzhhMTA3OTUxMjc2MDUzMjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83YzI5MzY2NC1mM2U3LTQ2OTItYWU0My00MTgz
ZDNkNjQyOWEvMDEyN2VmZjVmYjg5ZDRmMDRmMzYyYjg5YmViNzJkNjEyMTQ3YWY3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAS3usAMEAYoAejANBgkqhkiG9w0BAQsFAAOCAQEAAokWpbhT
/tOKhGfjMlHnRt/H8Kb9f+iYc73D/ovV2W3u2+SDjdD9DFnV9dXKPkJx5r6z6z7z
TCJDy/gg2M1hsEBu99FRkaPrTduSl8wFDYoWByx6q0hvj6tkI+xxXaSwAtgr5BNN
cIKjfr4nlfexM/S9hhSGPEGs12f0a7fVVgqkcIUlp0ue/rb2CyYFVQ5RvCXHONBw
xOcqXCOpKwHifUssx3fyDRZPkreIK1UAcia9MvAEJa8s40OIznEpuhKQNR6hnHxf
/OqB8RbFjRzpfBNnuV4zd/zYXuaXPU6u/jVS1BpnPCRJ3OQ0RLxXJxmu2SVtEu7R
ZsCQr4DuTOSKOw==
-----END CERTIFICATE-----
Generated at Sun Mar 31 02:29:00 2024 by rpki-client on console-fra.rpki-client.org