Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/1478e2326b15b12f6ae482c533f9e8ee40157c96.roa
File: 1478e2326b15b12f6ae482c533f9e8ee40157c96.roa (raw, json)
Hash identifier: rwK1mKaKUFJ+T3nLp4Ov8Z95TmzYZowDVjqMqu0Raf8=
Subject key identifier: 04:67:71:C6:A9:C8:AE:2F:90:68:07:FA:0E:E4:49:E4:3F:70:F8:95
Certificate issuer: /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial: 237DBB
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/1478e2326b15b12f6ae482c533f9e8ee40157c96.roa
Signing time: Fri 20 Oct 2023 04:31:41 +0000
ROA not before: Fri 20 Oct 2023 04:31:40 +0000
ROA not after: Mon 20 Oct 2025 04:31:40 +0000
asID: 269862
IP address blocks: 138.185.14.0/24 maxlen: 24
168.194.168.0/24 maxlen: 24
168.194.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2325947 (0x237dbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Validity
Not Before: Oct 20 04:31:40 2023 GMT
Not After : Oct 20 04:31:40 2025 GMT
Subject: CN=1478e2326b15b12f6ae482c533f9e8ee40157c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:aa:89:34:50:70:24:42:3b:28:a9:e5:a8:
a4:e0:c0:95:75:d1:8f:42:be:ef:25:68:fc:a2:87:
ac:13:97:d3:94:77:6d:9e:2a:51:25:97:b9:7b:16:
e7:17:5d:70:61:0a:2a:13:5f:6c:8d:39:77:ce:80:
8f:87:57:d5:ef:34:b3:54:a8:81:c2:97:51:b7:64:
02:5f:24:31:28:27:df:a6:d7:3d:f1:22:b6:88:f5:
94:f6:ca:e6:e7:3f:70:0d:33:89:74:63:6b:9d:6f:
0b:35:34:e7:75:ab:0d:76:09:2c:5d:52:e7:57:69:
71:9c:2f:79:ba:42:fd:54:56:1a:e1:ad:eb:4f:19:
93:bb:18:09:11:9c:a9:8c:12:a7:d5:ff:4a:e3:ec:
bb:cd:21:ca:18:cc:98:23:98:0b:a3:f7:09:53:27:
b9:97:32:1a:63:c8:20:c5:27:15:9b:7b:e5:1d:3c:
34:77:8f:72:14:6a:a6:c5:9e:ba:9c:d1:2b:28:38:
1b:6f:f5:84:45:fb:e9:10:d1:56:8f:e3:56:98:79:
30:00:26:4d:b5:8a:e8:37:e2:8b:ba:4e:69:29:4a:
85:66:39:e1:49:90:27:43:a0:e4:fe:27:31:bd:21:
12:be:7b:6d:dd:aa:d7:e3:f7:d5:ba:1b:7e:bd:9d:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:67:71:C6:A9:C8:AE:2F:90:68:07:FA:0E:E4:49:E4:3F:70:F8:95
X509v3 Authority Key Identifier:
keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/1478e2326b15b12f6ae482c533f9e8ee40157c96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.14.0/24
168.194.168.0/24
168.194.171.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:1e:cb:b6:1e:6b:29:a8:2e:a4:83:50:e6:0f:e7:c1:d7:42:
76:4d:cf:82:dd:25:03:cc:1d:e4:ed:9b:e2:ed:65:d2:0e:7d:
1b:ed:f7:54:53:43:75:9c:d1:91:9e:12:36:32:9f:38:ab:07:
86:8f:eb:f9:e0:81:5d:ab:87:e4:09:9d:9f:e2:11:d5:95:9d:
5e:44:30:5e:f4:bc:aa:9f:12:62:33:ca:46:c9:4d:ff:e7:9d:
4f:d3:be:d3:cd:d9:72:94:15:5d:62:0f:e6:77:90:78:ab:c4:
23:b6:22:cb:24:f5:d6:b3:68:96:b6:a5:08:66:94:c2:b5:87:
5e:08:30:79:be:15:ac:05:e8:80:71:7d:69:ea:24:22:4d:36:
5e:69:b2:c4:0d:b4:41:ee:ff:31:f7:96:be:c7:b8:34:e4:d6:
89:45:be:3f:42:4d:31:de:f8:5a:3a:e4:93:92:4f:33:cd:01:
6a:b9:5e:82:ff:d1:9b:80:f0:7f:ff:40:2a:10:8f:7e:a5:72:
07:55:0a:c4:cf:9c:88:35:74:19:53:16:d2:92:40:f7:bb:e7:
3e:19:9e:62:1f:db:3d:8a:44:fb:e0:9f:bf:d6:c9:ad:d7:2c:
e8:1b:4e:9d:5e:a4:19:e5:a5:1f:73:ee:e8:09:8d:f2:da:c8:
43:7b:98:57
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDI327MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZi
Y2M4ZGVkNDBiYzI0OTM3YTJhZTRmYjdhNTIxYmQzODhlZTAyNGIwHhcNMjMxMDIw
MDQzMTQwWhcNMjUxMDIwMDQzMTQwWjAzMTEwLwYDVQQDEygxNDc4ZTIzMjZiMTVi
MTJmNmFlNDgyYzUzM2Y5ZThlZTQwMTU3Yzk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArteqiTRQcCRCOyip5aik4MCVddGPQr7vJWj8ooesE5fTlHdt
nipRJZe5exbnF11wYQoqE19sjTl3zoCPh1fV7zSzVKiBwpdRt2QCXyQxKCffptc9
8SK2iPWU9srm5z9wDTOJdGNrnW8LNTTndasNdgksXVLnV2lxnC95ukL9VFYa4a3r
TxmTuxgJEZypjBKn1f9K4+y7zSHKGMyYI5gLo/cJUye5lzIaY8ggxScVm3vlHTw0
d49yFGqmxZ66nNErKDgbb/WERfvpENFWj+NWmHkwACZNtYroN+KLuk5pKUqFZjnh
SZAnQ6Dk/icxvSESvntt3arX4/fVuht+vZ3dkQIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFARnccapyK4vkGgH+g7kSeQ/cPiVMB8GA1UdIwQYMBaAFIFE0O4gQeqqO3rX
w05lAvlvq/hcMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmJjYzhk
ZWQ0MGJjMjQ5MzdhMmFlNGZiN2E1MjFiZDM4OGVlMDI0Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODRjNjM3YzYtYWE3OS00MTQxLTg5MWUtNjhkYzBh
OTA2YTE0LzE0NzhlMjMyNmIxNWIxMmY2YWU0ODJjNTMzZjllOGVlNDAxNTdjOTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NGM2MzdjNi1hYTc5LTQxNDEtODkxZS02OGRj
MGE5MDZhMTQvZmJjYzhkZWQ0MGJjMjQ5MzdhMmFlNGZiN2E1MjFiZDM4OGVlMDI0
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAIq5DgMEAKjCqAMEAKjCqzANBgkqhkiG9w0BAQsFAAOCAQEA
sR7Lth5rKagupINQ5g/nwddCdk3Pgt0lA8wd5O2b4u1l0g59G+33VFNDdZzRkZ4S
NjKfOKsHho/r+eCBXauH5Amdn+IR1ZWdXkQwXvS8qp8SYjPKRslN/+edT9O+083Z
cpQVXWIP5neQeKvEI7YiyyT11rNolralCGaUwrWHXggweb4VrAXogHF9aeokIk02
XmmyxA20Qe7/MfeWvse4NOTWiUW+P0JNMd74Wjrkk5JPM80Barlegv/Rm4Dwf/9A
KhCPfqVyB1UKxM+ciDV0GVMW0pJA97vnPhmeYh/bPYpE++Cfv9bJrdcs6BtOnV6k
GeWlH3Pu6AmN8trIQ3uYVw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org