Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/03358b35919c8ada2d014b7490bbc0d8a2505049.roa
File: 03358b35919c8ada2d014b7490bbc0d8a2505049.roa (raw, json)
Hash identifier: 7Wt8LQ5yvjGNTBfBq8dgnqm5rCxtnkv5C13LGUp+axM=
Subject key identifier: C6:34:38:F3:5A:22:A0:64:A4:B3:C9:D0:D6:CB:EE:73:E8:F1:B0:CA
Certificate issuer: /CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
Certificate serial: 2425FE
Authority key identifier: 4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/03358b35919c8ada2d014b7490bbc0d8a2505049.roa
Signing time: Fri 08 Sep 2023 11:16:49 +0000
ROA not before: Thu 07 Sep 2023 11:16:49 +0000
ROA not after: Mon 08 Sep 2025 11:16:49 +0000
asID: 263774
IP address blocks: 138.117.76.0/22 maxlen: 24
170.83.124.0/22 maxlen: 24
2803:440::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2369022 (0x2425fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
Validity
Not Before: Sep 7 11:16:49 2023 GMT
Not After : Sep 8 11:16:49 2025 GMT
Subject: CN=03358b35919c8ada2d014b7490bbc0d8a2505049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:69:49:66:e6:a1:23:a8:01:b8:c1:56:da:28:
75:73:46:45:02:29:cb:84:d1:1a:c0:48:e4:b6:04:
dd:78:41:82:0e:40:e8:d9:5f:d6:9a:2d:8d:b5:80:
72:12:98:e7:e8:a3:66:ad:ee:b4:0c:1d:35:3b:60:
21:69:27:61:9e:f3:4e:58:86:fa:b9:24:15:8f:b7:
5a:3e:b9:6f:04:63:76:ef:e1:7b:07:c3:43:ee:df:
1f:88:69:d2:62:3e:80:df:d3:fb:d1:b5:4a:cf:e9:
f8:13:14:ee:2c:26:23:8d:32:d2:1c:6e:25:31:90:
72:b5:c0:e2:5e:88:59:81:dc:aa:34:b2:a2:7b:c2:
60:71:c9:2f:f0:86:f4:99:26:b6:83:2f:3b:40:42:
77:da:86:cf:e8:7f:92:48:bb:7b:bd:51:5b:62:0c:
2c:89:94:3a:79:f6:15:09:e8:6c:33:44:b9:1f:0d:
fa:87:ae:5a:49:d3:5a:3a:c6:08:af:8f:54:bb:63:
53:f7:d3:15:6c:10:3e:26:bb:23:97:e8:6a:f9:c1:
c5:7d:62:36:42:bb:5c:11:3c:d8:8f:a7:2a:95:ab:
24:21:1d:62:d3:0b:68:ce:bc:b1:a7:2c:e5:7a:76:
b8:be:40:8a:ff:9a:b9:28:ee:42:c7:44:97:dd:cc:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:34:38:F3:5A:22:A0:64:A4:B3:C9:D0:D6:CB:EE:73:E8:F1:B0:CA
X509v3 Authority Key Identifier:
keyid:4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/03358b35919c8ada2d014b7490bbc0d8a2505049.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/0306af81c270a60bd7a6b440bc97d420322ebcb5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.76.0/22
170.83.124.0/22
IPv6:
2803:440::/32
Signature Algorithm: sha256WithRSAEncryption
01:cf:49:73:37:f2:6c:51:a4:ae:33:89:68:2b:81:b7:a9:a6:
fe:c7:ca:84:d4:e4:40:7b:f6:a2:d5:9b:f0:bb:07:20:db:9a:
c2:85:36:6b:a0:c8:ad:2a:8f:cd:c7:0e:d0:8a:bf:45:a2:89:
10:1a:e0:c5:53:89:c0:63:a3:bd:ec:09:de:26:ab:8e:c0:ab:
bc:76:0c:ec:21:8b:44:eb:c5:67:4a:6c:65:80:3a:5e:4f:a2:
c6:af:90:29:99:ab:cc:2c:bb:74:32:01:a9:7e:5a:8c:99:31:
72:b9:99:96:cc:eb:37:ec:26:bf:db:30:79:01:55:4b:3c:f6:
61:fe:eb:35:bf:f6:36:98:08:27:26:71:9a:af:f4:6f:db:3d:
78:45:ac:17:8f:ac:fa:27:30:fd:3c:a2:9f:99:29:52:81:9f:
0e:5c:90:5f:75:43:08:a5:21:43:d1:f0:2f:8c:79:80:8c:df:
53:77:e7:a9:49:c6:22:8d:8f:8e:b1:df:19:a4:9e:22:71:29:
a6:25:c1:e7:12:59:f7:af:16:42:33:2e:e4:92:85:7f:6e:3e:
2b:5b:0b:bb:50:e9:c8:54:31:7b:db:1f:55:e8:ee:72:4e:f5:
6d:97:68:f1:d3:63:63:f6:9f:81:e2:9c:0a:d8:e5:b7:7a:fa:
2e:00:12:c8
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDJCX+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAz
MDZhZjgxYzI3MGE2MGJkN2E2YjQ0MGJjOTdkNDIwMzIyZWJjYjUwHhcNMjMwOTA3
MTExNjQ5WhcNMjUwOTA4MTExNjQ5WjAzMTEwLwYDVQQDEygwMzM1OGIzNTkxOWM4
YWRhMmQwMTRiNzQ5MGJiYzBkOGEyNTA1MDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoWlJZuahI6gBuMFW2ih1c0ZFAinLhNEawEjktgTdeEGCDkDo
2V/Wmi2NtYByEpjn6KNmre60DB01O2AhaSdhnvNOWIb6uSQVj7daPrlvBGN27+F7
B8ND7t8fiGnSYj6A39P70bVKz+n4ExTuLCYjjTLSHG4lMZBytcDiXohZgdyqNLKi
e8Jgcckv8Ib0mSa2gy87QEJ32obP6H+SSLt7vVFbYgwsiZQ6efYVCehsM0S5Hw36
h65aSdNaOsYIr49Uu2NT99MVbBA+Jrsjl+hq+cHFfWI2QrtcETzYj6cqlaskIR1i
0wtozryxpyzlena4vkCK/5q5KO5Cx0SX3cyqTwIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFMY0OPNaIqBkpLPJ0NbL7nPo8bDKMB8GA1UdIwQYMBaAFE7h+ZpS1J1Q2X+F
YnwRm3OXhrC1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDMwNmFm
ODFjMjcwYTYwYmQ3YTZiNDQwYmM5N2Q0MjAzMjJlYmNiNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGUwNjYxMjQtZGNhNC00MjA1LWI1OTQtOTBkMzky
YzNlMzJjLzAzMzU4YjM1OTE5YzhhZGEyZDAxNGI3NDkwYmJjMGQ4YTI1MDUwNDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZTA2NjEyNC1kY2E0LTQyMDUtYjU5NC05MGQz
OTJjM2UzMmMvMDMwNmFmODFjMjcwYTYwYmQ3YTZiNDQwYmM5N2Q0MjAzMjJlYmNi
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAop1TAMEAqpTfDANBAIAAjAHAwUAKAMEQDANBgkqhkiG9w0B
AQsFAAOCAQEAAc9JczfybFGkrjOJaCuBt6mm/sfKhNTkQHv2otWb8LsHINuawoU2
a6DIrSqPzccO0Iq/RaKJEBrgxVOJwGOjvewJ3iarjsCrvHYM7CGLROvFZ0psZYA6
Xk+ixq+QKZmrzCy7dDIBqX5ajJkxcrmZlszrN+wmv9sweQFVSzz2Yf7rNb/2NpgI
JyZxmq/0b9s9eEWsF4+s+icw/Tyin5kpUoGfDlyQX3VDCKUhQ9HwL4x5gIzfU3fn
qUnGIo2PjrHfGaSeInEppiXB5xJZ968WQjMu5JKFf24+K1sLu1DpyFQxe9sfVeju
ck71bZdo8dNjY/afgeKcCtjlt3r6LgASyA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:08 2024 by rpki-client on console-ams.rpki-client.org