Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/de8b4ec684cdcf1bc760604d23c8b52b4fa42b5b.roa
File: de8b4ec684cdcf1bc760604d23c8b52b4fa42b5b.roa (raw, json)
Hash identifier: Ok9+i1x94+/1I6eoHj9yfHyD+T6XjIEmlDzkmT70e58=
Subject key identifier: E7:87:6A:E5:2F:B5:9E:8A:E1:84:46:FD:70:34:BB:AD:96:6D:6C:17
Certificate issuer: /CN=bf0c3190bc902c16f95a9189977c2b845fc1db00
Certificate serial: 2791BD
Authority key identifier: 5C:72:DD:19:84:85:C5:0B:E6:6D:CD:14:91:85:F0:6C:55:63:C2:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf0c3190bc902c16f95a9189977c2b845fc1db00.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/de8b4ec684cdcf1bc760604d23c8b52b4fa42b5b.roa
Signing time: Sun 31 Mar 2024 00:50:00 +0000
ROA not before: Sun 31 Mar 2024 00:49:59 +0000
ROA not after: Sat 31 Mar 2029 00:49:59 +0000
asID: 265703
IP address blocks: 45.238.176.0/23 maxlen: 24
138.0.122.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2593213 (0x2791bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf0c3190bc902c16f95a9189977c2b845fc1db00
Validity
Not Before: Mar 31 00:49:59 2024 GMT
Not After : Mar 31 00:49:59 2029 GMT
Subject: CN=de8b4ec684cdcf1bc760604d23c8b52b4fa42b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:66:b7:b5:08:12:99:03:d9:01:eb:02:74:
9d:79:c1:cc:5c:6a:70:a5:d5:90:12:9c:fb:0a:c1:
5f:e5:69:77:b0:f3:6b:fa:57:c7:aa:4c:ea:e4:48:
df:d7:9a:0f:09:38:10:fe:27:90:80:0d:d7:78:92:
5d:1f:69:28:34:0f:c6:4e:ad:95:ab:57:25:ca:16:
42:d1:bd:62:d3:e2:b4:60:0c:ce:cc:56:85:d3:00:
8c:5c:70:ca:63:e8:ee:a0:51:a4:9a:bb:03:f8:d8:
09:fe:d2:3e:1c:21:45:7c:d4:aa:bf:99:99:d4:92:
67:94:a9:a6:d9:ac:38:21:18:b0:70:c7:7d:4b:12:
86:db:9d:bd:a5:64:94:70:9e:dd:65:f0:5b:5f:d1:
e6:11:0b:a3:14:32:df:45:5a:2b:fe:e6:c6:b2:24:
85:3d:77:fd:42:c5:2c:88:b2:62:8d:63:2b:60:3f:
92:14:94:c3:f4:0c:bc:59:30:6e:0b:a6:a3:70:8b:
c1:f4:60:2e:1e:26:55:7f:07:6a:7c:a3:d3:89:12:
7d:2e:c2:92:08:9f:7c:8e:c9:b4:eb:e7:fe:85:29:
e7:f9:da:ce:6b:de:58:51:5b:31:08:5c:fb:e1:93:
31:c9:6a:70:99:c9:aa:68:8b:8e:5a:74:d9:1b:6c:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:87:6A:E5:2F:B5:9E:8A:E1:84:46:FD:70:34:BB:AD:96:6D:6C:17
X509v3 Authority Key Identifier:
keyid:5C:72:DD:19:84:85:C5:0B:E6:6D:CD:14:91:85:F0:6C:55:63:C2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf0c3190bc902c16f95a9189977c2b845fc1db00.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/de8b4ec684cdcf1bc760604d23c8b52b4fa42b5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/bf0c3190bc902c16f95a9189977c2b845fc1db00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.176.0/23
138.0.122.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:03:99:1b:35:85:06:fe:6b:77:56:d7:b5:ae:de:20:05:28:
7a:71:13:30:6f:5f:f3:53:ab:cf:3d:47:17:cd:6f:e2:6a:d6:
15:93:66:b4:d5:13:4b:23:71:1e:4b:4d:3a:0c:e9:71:c2:10:
7f:de:77:eb:09:46:8f:dc:2a:06:0d:01:7c:0d:71:9d:e7:68:
a8:a9:34:ea:8b:f6:6f:5c:54:68:7a:4d:48:56:57:07:c1:23:
7f:46:17:9c:3c:24:44:da:32:be:73:06:12:b1:99:46:f3:d4:
9f:fa:77:a4:82:a3:57:ba:86:2a:e9:b0:5d:64:16:c6:2b:6b:
af:05:f2:8d:19:e7:24:4e:a5:a6:7e:d9:df:90:3c:09:9d:c8:
2b:1c:93:2e:9b:07:5d:1f:ec:31:5b:4f:14:a8:2b:ea:48:a9:
fe:67:99:97:74:f9:e2:d7:91:42:d9:97:6b:a0:01:e8:bc:9b:
a4:1d:ab:d9:99:8d:cc:4f:8c:46:25:aa:e6:06:79:d2:c5:d8:
25:aa:ba:15:17:6d:ec:2a:45:06:36:7f:c1:67:23:89:83:46:
6b:a6:3b:6c:05:02:50:ef:27:1d:2b:86:be:c1:a5:7b:b6:65:
30:33:3a:17:e0:d2:9e:f2:e9:22:bb:c1:eb:8f:8f:f1:9d:8b:
06:f2:ef:50
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDJ5G9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
MGMzMTkwYmM5MDJjMTZmOTVhOTE4OTk3N2MyYjg0NWZjMWRiMDAwHhcNMjQwMzMx
MDA0OTU5WhcNMjkwMzMxMDA0OTU5WjAzMTEwLwYDVQQDEyhkZThiNGVjNjg0Y2Rj
ZjFiYzc2MDYwNGQyM2M4YjUyYjRmYTQyYjViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvMZmt7UIEpkD2QHrAnSdecHMXGpwpdWQEpz7CsFf5Wl3sPNr
+lfHqkzq5Ejf15oPCTgQ/ieQgA3XeJJdH2koNA/GTq2Vq1clyhZC0b1i0+K0YAzO
zFaF0wCMXHDKY+juoFGkmrsD+NgJ/tI+HCFFfNSqv5mZ1JJnlKmm2aw4IRiwcMd9
SxKG2529pWSUcJ7dZfBbX9HmEQujFDLfRVor/ubGsiSFPXf9QsUsiLJijWMrYD+S
FJTD9Ay8WTBuC6ajcIvB9GAuHiZVfwdqfKPTiRJ9LsKSCJ98jsm06+f+hSnn+drO
a95YUVsxCFz74ZMxyWpwmcmqaIuOWnTZG2x59QIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFOeHauUvtZ6K4YRG/XA0u62WbWwXMB8GA1UdIwQYMBaAFFxy3RmEhcUL5m3N
FJGF8GxVY8ICMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmYwYzMx
OTBiYzkwMmMxNmY5NWE5MTg5OTc3YzJiODQ1ZmMxZGIwMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2MyOTM2NjQtZjNlNy00NjkyLWFlNDMtNDE4M2Qz
ZDY0MjlhL2RlOGI0ZWM2ODRjZGNmMWJjNzYwNjA0ZDIzYzhiNTJiNGZhNDJiNWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83YzI5MzY2NC1mM2U3LTQ2OTItYWU0My00MTgz
ZDNkNjQyOWEvYmYwYzMxOTBiYzkwMmMxNmY5NWE5MTg5OTc3YzJiODQ1ZmMxZGIw
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAS3usAMEAYoAejANBgkqhkiG9w0BAQsFAAOCAQEADQOZGzWF
Bv5rd1bXta7eIAUoenETMG9f81Orzz1HF81v4mrWFZNmtNUTSyNxHktNOgzpccIQ
f9536wlGj9wqBg0BfA1xnedoqKk06ov2b1xUaHpNSFZXB8Ejf0YXnDwkRNoyvnMG
ErGZRvPUn/p3pIKjV7qGKumwXWQWxitrrwXyjRnnJE6lpn7Z35A8CZ3IKxyTLpsH
XR/sMVtPFKgr6kip/meZl3T54teRQtmXa6AB6LybpB2r2ZmNzE+MRiWq5gZ50sXY
Jaq6FRdt7CpFBjZ/wWcjiYNGa6Y7bAUCUO8nHSuGvsGle7ZlMDM6F+DSnvLpIrvB
64+P8Z2LBvLvUA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-ams.rpki-client.org