Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8981fc56-ac47-4508-994c-af4b862173c4/cbb9b3e7b8a5039e57bc694f007f046b625bf7eb.roa
File: cbb9b3e7b8a5039e57bc694f007f046b625bf7eb.roa (raw, json)
Hash identifier: gNIMxdXtumiF2SzA1MzpHAUHWwSdPYGT/2ecHb8eLZw=
Subject key identifier: B2:17:63:C3:A4:A6:85:22:D1:C6:E1:AB:A1:10:24:DE:7B:63:40:21
Certificate issuer: /CN=c852da8e6bb5beba55af1f3e439b76d81d468f5a
Certificate serial: 0D813D
Authority key identifier: 88:E4:98:B0:92:7D:A4:16:88:E1:A6:EA:DE:08:F2:A5:A3:C1:B0:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c852da8e6bb5beba55af1f3e439b76d81d468f5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8981fc56-ac47-4508-994c-af4b862173c4/cbb9b3e7b8a5039e57bc694f007f046b625bf7eb.roa
Signing time: Wed 24 Mar 2021 14:30:22 +0000
ROA not before: Wed 24 Mar 2021 14:30:22 +0000
ROA not after: Tue 24 Mar 2026 14:30:22 +0000
asID: 52431
IP address blocks: 138.118.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 885053 (0xd813d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c852da8e6bb5beba55af1f3e439b76d81d468f5a
Validity
Not Before: Mar 24 14:30:22 2021 GMT
Not After : Mar 24 14:30:22 2026 GMT
Subject: CN=cbb9b3e7b8a5039e57bc694f007f046b625bf7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:8a:2d:ed:c2:b0:e8:1e:59:4b:98:3a:32:
c6:6b:24:bf:00:81:2c:4b:fa:c6:19:7f:29:01:97:
9e:79:40:ac:60:18:06:42:91:17:c6:90:4b:31:3f:
83:97:e0:ef:2d:6b:89:43:0a:a3:0a:59:74:88:f9:
22:1f:8a:3f:39:a3:02:cc:f6:d6:66:9c:1d:f6:51:
f3:e8:7d:77:b8:d4:c4:84:c3:77:f8:cb:59:42:97:
7e:0d:65:3e:c4:79:2c:56:21:8f:97:e8:8e:99:01:
d8:c3:01:ca:f1:75:34:d8:4e:e7:f7:74:40:c9:b1:
e7:8d:0f:7e:2a:0b:73:47:49:7c:c2:18:24:8d:c7:
72:fa:54:20:f3:e1:7f:45:fc:de:53:48:e4:9d:4c:
25:49:de:42:b6:e1:6c:53:5a:b2:60:9f:74:c0:e5:
1d:99:45:e0:63:b8:84:ff:04:18:c0:4d:be:5c:f4:
bf:8a:90:78:b4:fa:c7:ff:c6:1f:15:24:73:69:5a:
64:be:2c:92:60:97:00:68:a1:20:99:67:1c:af:a1:
4b:6e:34:3b:49:0c:38:fc:37:e2:2c:1e:87:71:3e:
ad:e6:1a:26:68:4a:9f:a6:13:6b:5e:7f:95:79:45:
bd:7d:38:a8:4f:ec:f7:fd:55:94:28:86:1d:54:ca:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:17:63:C3:A4:A6:85:22:D1:C6:E1:AB:A1:10:24:DE:7B:63:40:21
X509v3 Authority Key Identifier:
keyid:88:E4:98:B0:92:7D:A4:16:88:E1:A6:EA:DE:08:F2:A5:A3:C1:B0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c852da8e6bb5beba55af1f3e439b76d81d468f5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8981fc56-ac47-4508-994c-af4b862173c4/cbb9b3e7b8a5039e57bc694f007f046b625bf7eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8981fc56-ac47-4508-994c-af4b862173c4/c852da8e6bb5beba55af1f3e439b76d81d468f5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.48.0/22
Signature Algorithm: sha256WithRSAEncryption
17:ac:4d:a9:55:cf:48:13:cc:24:65:9e:d1:5e:50:ae:f5:b8:
4a:ab:e4:9e:60:d2:7b:c4:2b:d2:f4:8b:5d:37:e5:31:b7:9c:
84:99:6e:4b:c6:de:34:a7:27:35:fa:c3:cc:83:5c:58:39:74:
dc:3d:b1:68:7b:63:c4:0d:34:71:e1:ba:f9:20:54:13:3d:41:
4b:f0:e8:8c:0a:f3:66:55:01:22:05:e7:27:30:28:c4:73:36:
1c:cf:73:76:c7:2b:35:ba:d2:1c:e7:42:1d:29:01:47:af:40:
59:8e:36:b2:89:30:2f:ac:d4:1d:73:82:1a:81:0e:86:df:74:
05:2b:61:16:48:7c:b2:7e:70:b2:96:a3:fa:5e:45:8d:63:be:
15:1e:39:c0:a1:9c:fb:8f:c2:1d:84:29:97:58:c1:9b:b5:af:
74:eb:f3:3e:39:80:89:c3:b2:c2:c1:c4:b0:2f:b1:9e:b8:23:
ea:0e:e6:f6:de:42:3e:40:fe:de:ff:92:15:10:1a:06:86:26:
89:87:45:b1:e0:da:f1:72:4d:a8:50:7c:20:d9:84:41:72:c8:
6c:f2:39:74:70:79:a8:99:73:2a:cd:85:44:21:32:09:3b:b9:
bd:68:0f:0e:dd:3b:17:5b:08:31:c1:b7:da:38:f1:e3:68:03:
68:00:95:80
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDYE9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM4
NTJkYThlNmJiNWJlYmE1NWFmMWYzZTQzOWI3NmQ4MWQ0NjhmNWEwHhcNMjEwMzI0
MTQzMDIyWhcNMjYwMzI0MTQzMDIyWjAzMTEwLwYDVQQDEyhjYmI5YjNlN2I4YTUw
MzllNTdiYzY5NGYwMDdmMDQ2YjYyNWJmN2ViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqdCKLe3CsOgeWUuYOjLGayS/AIEsS/rGGX8pAZeeeUCsYBgG
QpEXxpBLMT+Dl+DvLWuJQwqjCll0iPkiH4o/OaMCzPbWZpwd9lHz6H13uNTEhMN3
+MtZQpd+DWU+xHksViGPl+iOmQHYwwHK8XU02E7n93RAybHnjQ9+KgtzR0l8whgk
jcdy+lQg8+F/RfzeU0jknUwlSd5CtuFsU1qyYJ90wOUdmUXgY7iE/wQYwE2+XPS/
ipB4tPrH/8YfFSRzaVpkviySYJcAaKEgmWccr6FLbjQ7SQw4/DfiLB6HcT6t5hom
aEqfphNrXn+VeUW9fTioT+z3/VWUKIYdVMpM/QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLIXY8OkpoUi0cbhq6EQJN57Y0AhMB8GA1UdIwQYMBaAFIjkmLCSfaQWiOGm
6t4I8qWjwbDPMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzg1MmRh
OGU2YmI1YmViYTU1YWYxZjNlNDM5Yjc2ZDgxZDQ2OGY1YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODk4MWZjNTYtYWM0Ny00NTA4LTk5NGMtYWY0Yjg2
MjE3M2M0L2NiYjliM2U3YjhhNTAzOWU1N2JjNjk0ZjAwN2YwNDZiNjI1YmY3ZWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84OTgxZmM1Ni1hYzQ3LTQ1MDgtOTk0Yy1hZjRi
ODYyMTczYzQvYzg1MmRhOGU2YmI1YmViYTU1YWYxZjNlNDM5Yjc2ZDgxZDQ2OGY1
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAop2MDANBgkqhkiG9w0BAQsFAAOCAQEAF6xNqVXPSBPMJGWe
0V5QrvW4SqvknmDSe8Qr0vSLXTflMbechJluS8beNKcnNfrDzINcWDl03D2xaHtj
xA00ceG6+SBUEz1BS/DojArzZlUBIgXnJzAoxHM2HM9zdscrNbrSHOdCHSkBR69A
WY42sokwL6zUHXOCGoEOht90BSthFkh8sn5wspaj+l5FjWO+FR45wKGc+4/CHYQp
l1jBm7WvdOvzPjmAicOywsHEsC+xnrgj6g7m9t5CPkD+3v+SFRAaBoYmiYdFseDa
8XJNqFB8INmEQXLIbPI5dHB5qJlzKs2FRCEyCTu5vWgPDt07F1sIMcG32jjx42gD
aACVgA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org