Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/6319bb019c66f1f1de00204372415f3e00d39d9c.roa
File: 6319bb019c66f1f1de00204372415f3e00d39d9c.roa (raw, json)
Hash identifier: ZnetQXAh60k0iLB+waP0eCDyEVy5e2GT6/yo3go3by4=
Subject key identifier: 3E:C0:87:72:38:2A:F7:9E:25:62:47:73:45:2B:B2:6F:12:78:5A:1F
Certificate issuer: /CN=23392513f47d61c0f12dc66bb0d069fed5378524
Certificate serial: 16E924
Authority key identifier: 3C:89:F0:67:EB:7D:D4:43:8F:12:76:A2:BA:04:A3:4B:62:11:70:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23392513f47d61c0f12dc66bb0d069fed5378524.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/6319bb019c66f1f1de00204372415f3e00d39d9c.roa
Signing time: Wed 05 Jul 2023 18:02:46 +0000
ROA not before: Tue 04 Jul 2023 18:02:46 +0000
ROA not after: Sat 05 Jul 2025 18:02:46 +0000
asID: 263681
IP address blocks: 138.204.12.0/22 maxlen: 24
45.236.172.0/23 maxlen: 24
2803:c240:1002::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1501476 (0x16e924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23392513f47d61c0f12dc66bb0d069fed5378524
Validity
Not Before: Jul 4 18:02:46 2023 GMT
Not After : Jul 5 18:02:46 2025 GMT
Subject: CN=6319bb019c66f1f1de00204372415f3e00d39d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:16:88:e4:07:42:64:10:4e:31:23:ca:c7:
b3:4b:e7:d4:ed:f8:33:61:df:43:9e:d2:b1:0a:8d:
13:9f:98:f4:51:4d:bf:cd:fd:d5:2e:b0:6e:38:94:
ca:2f:7a:41:94:ad:ee:bc:09:0e:94:b8:1a:95:39:
fc:4d:72:88:4c:93:b5:a9:83:43:90:86:4c:09:0b:
fd:fc:01:86:ba:21:3f:d6:12:8f:e3:41:a5:b1:f4:
e9:74:01:7e:2d:0d:14:01:b9:58:65:aa:38:db:ed:
55:88:6f:96:80:08:bd:01:0d:4b:70:8b:36:1c:97:
13:7d:9b:77:99:b9:c1:01:d1:7e:76:b5:f6:6d:75:
28:e8:a5:ea:8a:f0:3d:91:79:88:6f:33:f8:74:ed:
e2:ac:8b:1a:a8:d0:9d:2c:0e:81:f3:6a:d1:bb:96:
bd:3f:43:20:26:c8:5e:70:9e:dc:38:8f:42:8a:77:
38:29:00:53:07:9b:9d:f9:64:57:70:eb:fc:64:8f:
eb:00:aa:4b:31:1d:a6:c9:c5:6f:93:83:d4:d9:d3:
8c:b0:0a:2f:d8:75:a3:25:5b:08:71:fc:f4:3d:d9:
e8:8c:a3:8a:47:54:32:a1:74:79:d4:f9:54:8e:c2:
e4:a0:85:e5:a7:42:94:87:34:16:2b:ac:68:76:89:
00:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C0:87:72:38:2A:F7:9E:25:62:47:73:45:2B:B2:6F:12:78:5A:1F
X509v3 Authority Key Identifier:
keyid:3C:89:F0:67:EB:7D:D4:43:8F:12:76:A2:BA:04:A3:4B:62:11:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23392513f47d61c0f12dc66bb0d069fed5378524.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/6319bb019c66f1f1de00204372415f3e00d39d9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/23392513f47d61c0f12dc66bb0d069fed5378524.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.172.0/23
138.204.12.0/22
IPv6:
2803:c240:1002::/48
Signature Algorithm: sha256WithRSAEncryption
75:e2:a4:ff:f2:48:98:08:0f:15:20:a9:a8:b8:d3:3d:4c:c9:
fe:ce:a4:d9:f4:07:19:7f:1b:d6:5a:50:ae:77:3c:e3:e7:bb:
e0:e3:6c:87:cb:21:ae:29:7d:86:0c:99:28:e7:82:ee:68:7c:
a4:2b:33:43:e4:19:78:00:4a:70:dc:c3:84:31:16:2c:68:f5:
b9:68:79:e1:66:80:fb:26:07:66:22:4a:40:1e:ee:7c:9f:dc:
49:31:86:49:92:a5:c3:7a:17:3d:21:ff:c4:cd:de:8a:3f:ff:
56:e8:f7:db:fd:8e:60:80:fd:b7:65:ae:20:c6:18:d6:e1:19:
56:ed:1b:ca:1f:01:94:9d:0a:d4:f1:06:10:f6:2f:dd:cb:87:
f6:33:56:70:29:88:c0:d2:eb:28:75:b5:ef:3b:1a:dd:e3:ac:
08:f5:33:50:f9:c5:18:75:d8:fa:f9:77:c3:10:83:d9:49:be:
4e:a3:2a:0b:a9:40:4e:00:6c:d0:b7:e3:56:34:46:3b:d4:31:
4c:52:68:02:24:e0:3f:94:f4:b7:fa:af:3c:8b:be:f4:5c:ec:
e9:b1:87:a9:34:32:3c:20:3e:12:63:48:9d:dc:2f:fc:57:0c:
d6:6a:bd:44:44:44:0c:64:ba:75:e1:eb:63:e0:3d:c0:5a:54:
76:88:df:95
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDFukkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIz
MzkyNTEzZjQ3ZDYxYzBmMTJkYzY2YmIwZDA2OWZlZDUzNzg1MjQwHhcNMjMwNzA0
MTgwMjQ2WhcNMjUwNzA1MTgwMjQ2WjAzMTEwLwYDVQQDEyg2MzE5YmIwMTljNjZm
MWYxZGUwMDIwNDM3MjQxNWYzZTAwZDM5ZDljMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq5wWiOQHQmQQTjEjysezS+fU7fgzYd9DntKxCo0Tn5j0UU2/
zf3VLrBuOJTKL3pBlK3uvAkOlLgalTn8TXKITJO1qYNDkIZMCQv9/AGGuiE/1hKP
40GlsfTpdAF+LQ0UAblYZao42+1ViG+WgAi9AQ1LcIs2HJcTfZt3mbnBAdF+drX2
bXUo6KXqivA9kXmIbzP4dO3irIsaqNCdLA6B82rRu5a9P0MgJshecJ7cOI9Cinc4
KQBTB5ud+WRXcOv8ZI/rAKpLMR2mycVvk4PU2dOMsAov2HWjJVsIcfz0PdnojKOK
R1QyoXR51PlUjsLkoIXlp0KUhzQWK6xodokANQIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFD7Ah3I4KveeJWJHc0Ursm8SeFofMB8GA1UdIwQYMBaAFDyJ8GfrfdRDjxJ2
oroEo0tiEXBKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjMzOTI1
MTNmNDdkNjFjMGYxMmRjNjZiYjBkMDY5ZmVkNTM3ODUyNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGE3NmQ0ZTQtYzA1NC00YWQyLWFlODEtNTYxMDE1
NWE2ZWEzLzYzMTliYjAxOWM2NmYxZjFkZTAwMjA0MzcyNDE1ZjNlMDBkMzlkOWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84YTc2ZDRlNC1jMDU0LTRhZDItYWU4MS01NjEw
MTU1YTZlYTMvMjMzOTI1MTNmNDdkNjFjMGYxMmRjNjZiYjBkMDY5ZmVkNTM3ODUy
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwEgQCAAEwDAMEAS3srAMEAorMDDAPBAIAAjAJAwcAKAPCQBACMA0GCSqGSIb3
DQEBCwUAA4IBAQB14qT/8kiYCA8VIKmouNM9TMn+zqTZ9AcZfxvWWlCudzzj57vg
42yHyyGuKX2GDJko54LuaHykKzND5Bl4AEpw3MOEMRYsaPW5aHnhZoD7JgdmIkpA
Hu58n9xJMYZJkqXDehc9If/Ezd6KP/9W6Pfb/Y5ggP23Za4gxhjW4RlW7RvKHwGU
nQrU8QYQ9i/dy4f2M1ZwKYjA0usodbXvOxrd46wI9TNQ+cUYddj6+XfDEIPZSb5O
oyoLqUBOAGzQt+NWNEY71DFMUmgCJOA/lPS3+q88i770XOzpsYepNDI8ID4SY0id
3C/8VwzWar1EREQMZLp14etj4D3AWlR2iN+V
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org