Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/d43b215aad41879e29074dbf7ed4584463ea8058.roa
File: d43b215aad41879e29074dbf7ed4584463ea8058.roa (raw, json)
Hash identifier: JBIIU3Tg0oZkEGNiIt3ACrScA/6vBpqdzg3q+MKTFQs=
Subject key identifier: 4A:F2:9A:2E:01:CF:E5:65:06:08:88:95:81:5B:F9:9C:10:0A:32:73
Certificate issuer: /CN=23392513f47d61c0f12dc66bb0d069fed5378524
Certificate serial: 1DB527
Authority key identifier: 3C:89:F0:67:EB:7D:D4:43:8F:12:76:A2:BA:04:A3:4B:62:11:70:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23392513f47d61c0f12dc66bb0d069fed5378524.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/d43b215aad41879e29074dbf7ed4584463ea8058.roa
Signing time: Tue 09 Apr 2024 21:21:57 +0000
ROA not before: Tue 09 Apr 2024 21:21:57 +0000
ROA not after: Thu 09 Apr 2026 21:21:57 +0000
asID: 273000
IP address blocks: 138.204.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946919 (0x1db527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23392513f47d61c0f12dc66bb0d069fed5378524
Validity
Not Before: Apr 9 21:21:57 2024 GMT
Not After : Apr 9 21:21:57 2026 GMT
Subject: CN=d43b215aad41879e29074dbf7ed4584463ea8058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:86:1d:b4:e5:02:42:09:b7:98:f3:2f:12:
9b:50:71:02:f6:1c:5b:82:ce:9c:27:a0:70:6f:cc:
da:63:ee:f4:17:e9:a6:fb:a3:06:68:2c:3e:b6:6b:
b9:8b:ad:8e:b1:67:08:cb:92:e5:a6:e6:b3:c5:1c:
dd:a6:db:5f:a3:6a:e7:67:4e:4f:f1:5f:0b:f5:15:
b3:c7:b7:3d:8c:97:9e:94:f8:e9:fc:6c:69:08:0a:
4e:2e:97:3f:25:d6:3d:11:3d:8a:70:43:7b:a8:55:
c2:9e:23:13:a3:a9:71:67:02:d0:48:5d:83:3f:b6:
0e:d2:0c:b8:32:eb:37:37:ce:f4:02:32:21:21:46:
5a:ba:59:5c:77:c0:35:de:eb:59:b3:e0:78:c4:9c:
9c:bc:1f:f3:66:e1:ef:0d:95:cf:57:6c:bb:63:f6:
fb:ea:bc:b5:2a:62:97:7b:1e:03:22:d8:92:92:08:
f3:e0:8b:f5:ae:c8:48:59:bc:1c:d1:34:f8:b0:58:
75:75:41:00:c1:9c:e4:e8:ba:ab:87:22:d1:c0:df:
1a:19:67:11:08:b7:98:66:32:18:83:9b:0d:f2:3a:
02:84:fa:9a:df:17:f0:b6:a6:8a:96:f2:20:c6:ca:
e1:0f:83:29:aa:45:3e:3b:5f:da:ed:d1:15:b3:a0:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F2:9A:2E:01:CF:E5:65:06:08:88:95:81:5B:F9:9C:10:0A:32:73
X509v3 Authority Key Identifier:
keyid:3C:89:F0:67:EB:7D:D4:43:8F:12:76:A2:BA:04:A3:4B:62:11:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23392513f47d61c0f12dc66bb0d069fed5378524.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/d43b215aad41879e29074dbf7ed4584463ea8058.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/23392513f47d61c0f12dc66bb0d069fed5378524.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.12.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5f:64:ea:93:6f:d3:0f:ba:59:f4:92:88:ed:8a:3e:50:db:
70:6e:24:2b:32:35:c8:81:5b:88:9e:93:c4:f4:2c:50:80:49:
16:8a:09:e8:6f:32:c3:e0:a6:04:23:b7:02:9d:13:85:3b:b6:
39:fc:b7:11:b3:9e:07:9d:72:f4:23:11:8d:b0:43:e7:d2:53:
b2:a0:0f:f2:62:d6:02:e8:36:36:a2:bf:56:c9:c2:dc:4e:80:
39:91:b8:46:dd:9a:ca:4a:24:96:0d:bb:b0:84:3e:fa:2f:c6:
a3:27:94:36:f9:b9:00:ce:c2:0c:b3:4f:bc:72:c2:9b:d5:80:
c4:01:ae:55:d3:ed:be:29:71:d2:c3:29:20:37:0c:cc:f3:7d:
35:08:4c:a7:d0:99:0c:c7:27:c7:49:d4:3c:72:8f:22:ed:0b:
f9:aa:23:05:2f:4b:0f:6d:33:ca:25:02:32:14:ad:f4:7d:f1:
38:2d:9d:17:db:cd:d6:00:6a:b6:73:20:68:b6:28:b4:22:c3:
85:b0:8f:0a:29:5b:8b:f9:23:44:3d:c1:74:ea:6e:1c:cc:51:
5b:96:87:f5:1e:8a:44:68:c2:0b:97:a1:24:e2:06:8c:44:b6:
fd:03:36:a2:68:96:ab:bb:91:de:65:2c:ff:18:86:07:5e:0c:
c1:34:62:55
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHbUnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIz
MzkyNTEzZjQ3ZDYxYzBmMTJkYzY2YmIwZDA2OWZlZDUzNzg1MjQwHhcNMjQwNDA5
MjEyMTU3WhcNMjYwNDA5MjEyMTU3WjAzMTEwLwYDVQQDEyhkNDNiMjE1YWFkNDE4
NzllMjkwNzRkYmY3ZWQ0NTg0NDYzZWE4MDU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoLuGHbTlAkIJt5jzLxKbUHEC9hxbgs6cJ6Bwb8zaY+70F+mm
+6MGaCw+tmu5i62OsWcIy5LlpuazxRzdpttfo2rnZ05P8V8L9RWzx7c9jJeelPjp
/GxpCApOLpc/JdY9ET2KcEN7qFXCniMTo6lxZwLQSF2DP7YO0gy4Mus3N870AjIh
IUZaullcd8A13utZs+B4xJycvB/zZuHvDZXPV2y7Y/b76ry1KmKXex4DItiSkgjz
4Iv1rshIWbwc0TT4sFh1dUEAwZzk6LqrhyLRwN8aGWcRCLeYZjIYg5sN8joChPqa
3xfwtqaKlvIgxsrhD4MpqkU+O1/a7dEVs6CYkwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFErymi4Bz+VlBgiIlYFb+ZwQCjJzMB8GA1UdIwQYMBaAFDyJ8GfrfdRDjxJ2
oroEo0tiEXBKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjMzOTI1
MTNmNDdkNjFjMGYxMmRjNjZiYjBkMDY5ZmVkNTM3ODUyNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGE3NmQ0ZTQtYzA1NC00YWQyLWFlODEtNTYxMDE1
NWE2ZWEzL2Q0M2IyMTVhYWQ0MTg3OWUyOTA3NGRiZjdlZDQ1ODQ0NjNlYTgwNTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84YTc2ZDRlNC1jMDU0LTRhZDItYWU4MS01NjEw
MTU1YTZlYTMvMjMzOTI1MTNmNDdkNjFjMGYxMmRjNjZiYjBkMDY5ZmVkNTM3ODUy
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIrMDDANBgkqhkiG9w0BAQsFAAOCAQEARV9k6pNv0w+6WfSS
iO2KPlDbcG4kKzI1yIFbiJ6TxPQsUIBJFooJ6G8yw+CmBCO3Ap0ThTu2Ofy3EbOe
B51y9CMRjbBD59JTsqAP8mLWAug2NqK/VsnC3E6AOZG4Rt2aykoklg27sIQ++i/G
oyeUNvm5AM7CDLNPvHLCm9WAxAGuVdPtvilx0sMpIDcMzPN9NQhMp9CZDMcnx0nU
PHKPIu0L+aojBS9LD20zyiUCMhSt9H3xOC2dF9vN1gBqtnMgaLYotCLDhbCPCilb
i/kjRD3BdOpuHMxRW5aH9R6KRGjCC5ehJOIGjES2/QM2omiWq7uR3mUs/xiGB14M
wTRiVQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org