Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/137f3527b84e923388720fa8191e7538e7bd4172.roa
File: 137f3527b84e923388720fa8191e7538e7bd4172.roa (raw, json)
Hash identifier: GeZsmvM88RT+rPPq2oz5mZaQR8p4OYEEFP9KZv+rxo8=
Subject key identifier: 53:65:64:62:6B:05:B3:59:3F:68:2C:E7:1B:C8:E1:22:B1:25:64:C1
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 26053A
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/137f3527b84e923388720fa8191e7538e7bd4172.roa
Signing time: Thu 11 May 2023 08:30:00 +0000
ROA not before: Wed 10 May 2023 08:30:00 +0000
ROA not after: Fri 09 May 2025 08:30:00 +0000
asID: 278
IP address blocks: 2001:1218:601b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2491706 (0x26053a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: May 10 08:30:00 2023 GMT
Not After : May 9 08:30:00 2025 GMT
Subject: CN=137f3527b84e923388720fa8191e7538e7bd4172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:db:8d:50:61:21:84:9e:5c:df:08:6a:2b:f2:
06:a7:c9:9d:f8:00:f4:66:ae:3a:f6:c1:ec:f8:ac:
d7:52:87:67:2d:87:10:e3:e8:f9:46:20:b6:a8:0d:
1d:cc:21:f7:75:27:3e:81:c0:8f:01:7b:a5:8f:5e:
e3:77:f4:4d:36:26:a4:7f:99:6b:e6:57:a6:1d:ed:
cb:f6:4c:fb:db:75:fb:af:d3:02:9f:e8:8b:eb:d5:
97:ca:7c:2b:bf:4e:51:af:1a:16:b3:83:48:a9:b7:
81:9b:1e:ea:32:f8:d9:59:db:f3:2d:8e:4a:69:6c:
ad:cf:3f:14:81:18:30:f8:88:18:84:f9:20:ec:25:
4f:13:1c:b2:5f:4c:70:a3:64:59:8d:12:1a:b0:fa:
55:48:2b:33:d6:1d:b2:17:be:71:5d:38:d9:7d:ce:
34:91:e7:f3:66:92:23:cf:81:4b:91:9d:2b:6e:96:
15:96:c0:7a:d0:7e:a4:b9:f5:d1:cf:af:93:b4:27:
48:c9:16:f4:d8:98:5e:5f:8a:c5:6f:9a:e3:25:a7:
ef:89:c2:48:39:ca:55:eb:61:b9:3c:1d:f5:b9:2d:
e8:b2:0b:b8:0c:8c:30:3e:cb:46:65:7d:f8:01:bd:
a2:aa:38:df:f8:2c:97:2e:e2:37:1c:6c:54:f7:00:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:65:64:62:6B:05:B3:59:3F:68:2C:E7:1B:C8:E1:22:B1:25:64:C1
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/137f3527b84e923388720fa8191e7538e7bd4172.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1218:601b::/48
Signature Algorithm: sha256WithRSAEncryption
77:71:63:27:93:36:7b:0f:f5:2a:09:b3:44:e5:e8:f0:33:ba:
7c:70:75:a9:bc:ee:14:18:3b:67:5e:38:9b:97:bd:c3:8e:5b:
10:eb:ba:db:74:95:f0:27:65:d5:d6:1c:c7:ce:81:53:bc:6b:
e5:f5:fb:5a:0b:a4:c7:6f:91:6f:34:4a:d7:a9:2f:c5:a5:70:
8d:0f:69:4c:ea:d3:d3:af:a9:58:0b:2b:b0:7b:9a:63:47:f1:
6c:d5:84:2d:5c:90:3b:7c:3d:92:36:db:6d:e6:00:a3:35:75:
af:b2:57:f9:52:7a:4b:60:88:30:b5:b4:e0:53:96:25:b3:1c:
88:02:ae:90:72:70:47:9d:ba:0e:b0:68:d6:75:a5:0c:e3:87:
da:ce:c5:6f:4f:d0:71:92:c4:f7:8b:b8:7f:9f:32:56:23:e0:
0d:d1:4f:7c:a4:72:67:89:2d:1b:f9:0d:f6:3d:43:18:d5:6d:
05:06:37:3d:24:8c:b7:1c:4e:0f:fa:7f:32:a1:6e:41:32:26:
f6:6b:3b:f6:fc:e8:9d:f0:d2:5a:62:64:e9:ef:52:4b:c1:2e:
59:ad:b9:70:c0:dd:d6:8a:85:12:44:c2:7e:1b:48:74:ab:61:
14:2a:ad:e5:9f:83:bc:f7:08:ce:cf:f2:1c:a2:45:59:bf:2c:
e6:c6:1d:89
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDJgU6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjMwNTEw
MDgzMDAwWhcNMjUwNTA5MDgzMDAwWjAzMTEwLwYDVQQDEygxMzdmMzUyN2I4NGU5
MjMzODg3MjBmYTgxOTFlNzUzOGU3YmQ0MTcyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg9uNUGEhhJ5c3whqK/IGp8md+AD0Zq469sHs+KzXUodnLYcQ
4+j5RiC2qA0dzCH3dSc+gcCPAXulj17jd/RNNiakf5lr5lemHe3L9kz723X7r9MC
n+iL69WXynwrv05RrxoWs4NIqbeBmx7qMvjZWdvzLY5KaWytzz8UgRgw+IgYhPkg
7CVPExyyX0xwo2RZjRIasPpVSCsz1h2yF75xXTjZfc40kefzZpIjz4FLkZ0rbpYV
lsB60H6kufXRz6+TtCdIyRb02JheX4rFb5rjJafvicJIOcpV62G5PB31uS3osgu4
DIwwPstGZX34Ab2iqjjf+CyXLuI3HGxU9wBPPQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFFNlZGJrBbNZP2gs5xvI4SKxJWTBMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzEzN2YzNTI3Yjg0ZTkyMzM4ODcyMGZhODE5MWU3NTM4ZTdiZDQxNzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgGzANBgkqhkiG9w0BAQsFAAOCAQEAd3FjJ5M2ew/1
KgmzROXo8DO6fHB1qbzuFBg7Z144m5e9w45bEOu623SV8Cdl1dYcx86BU7xr5fX7
Wgukx2+RbzRK16kvxaVwjQ9pTOrT06+pWAsrsHuaY0fxbNWELVyQO3w9kjbbbeYA
ozV1r7JX+VJ6S2CIMLW04FOWJbMciAKukHJwR526DrBo1nWlDOOH2s7Fb0/QcZLE
94u4f58yViPgDdFPfKRyZ4ktG/kN9j1DGNVtBQY3PSSMtxxOD/p/MqFuQTIm9ms7
9vzonfDSWmJk6e9SS8EuWa25cMDd1oqFEkTCfhtIdKthFCqt5Z+DvPcIzs/yHKJF
Wb8s5sYdiQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org