Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/d80e43a7221b0a18d9a0eb3605e9ee45221c1150.roa
File: d80e43a7221b0a18d9a0eb3605e9ee45221c1150.roa (raw, json)
Hash identifier: EqoiFPEGHI+eFJKi4gWVCU1E2+OGIJ96LuEGJBPKIlY=
Subject key identifier: AA:96:BC:62:35:9E:AA:E9:7B:0A:FA:B6:21:EB:05:04:13:84:DD:3C
Certificate issuer: /CN=99a6fc41bdae0a6a4945c4018c1d95c871e31e3c
Certificate serial: 046EAC
Authority key identifier: 11:80:E3:67:E8:52:18:E4:8E:D9:F4:9E:83:F1:05:C6:71:33:C9:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99a6fc41bdae0a6a4945c4018c1d95c871e31e3c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/d80e43a7221b0a18d9a0eb3605e9ee45221c1150.roa
Signing time: Wed 24 Mar 2021 14:32:28 +0000
ROA not before: Wed 24 Mar 2021 14:32:28 +0000
ROA not after: Tue 24 Mar 2026 14:32:28 +0000
asID: 262216
IP address blocks: 138.0.104.0/22 maxlen: 22
190.113.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290476 (0x46eac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a6fc41bdae0a6a4945c4018c1d95c871e31e3c
Validity
Not Before: Mar 24 14:32:28 2021 GMT
Not After : Mar 24 14:32:28 2026 GMT
Subject: CN=d80e43a7221b0a18d9a0eb3605e9ee45221c1150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:80:9f:d0:f1:02:c9:32:6b:b0:5e:2e:55:e4:
95:ac:ad:71:2b:23:86:e3:9b:54:6c:37:86:ad:8a:
0a:5b:5a:cf:de:b6:25:47:b5:bc:e5:81:0a:f9:09:
e0:ce:d8:ce:4d:b6:fa:c6:29:43:8a:8c:4f:b1:4b:
db:2e:73:f6:9e:ca:ad:8e:ea:6c:f1:9a:d7:07:73:
e1:1d:74:6e:9a:ba:9d:e0:60:1e:e7:82:dd:23:79:
1d:4e:f4:0a:c2:60:34:9d:19:d5:93:b9:2d:c1:92:
3d:78:51:c2:1d:e5:32:78:77:81:df:0f:92:c9:6f:
06:69:c1:6f:6a:4c:54:a9:6e:bc:e9:e1:1a:48:d4:
45:fe:bb:d6:4c:29:44:ab:56:3c:48:5b:41:7e:fb:
26:83:69:cd:3b:47:ea:92:35:49:1a:2c:fa:b2:f7:
33:38:87:8b:69:32:4c:07:8e:e2:71:ce:1e:7d:83:
ca:11:14:59:03:2d:31:79:10:04:2f:c1:32:17:f4:
dd:3d:fa:1b:bc:a5:49:e3:fa:6d:af:20:84:fd:2d:
79:0c:69:9a:12:d4:10:3b:a4:c8:b5:2f:71:4e:29:
6e:91:38:ab:2e:6d:1b:92:3f:a8:b3:1b:73:09:9d:
8d:9e:1c:23:b6:9b:eb:2c:20:9a:6d:5e:74:6a:94:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:96:BC:62:35:9E:AA:E9:7B:0A:FA:B6:21:EB:05:04:13:84:DD:3C
X509v3 Authority Key Identifier:
keyid:11:80:E3:67:E8:52:18:E4:8E:D9:F4:9E:83:F1:05:C6:71:33:C9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99a6fc41bdae0a6a4945c4018c1d95c871e31e3c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/d80e43a7221b0a18d9a0eb3605e9ee45221c1150.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/99a6fc41bdae0a6a4945c4018c1d95c871e31e3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.104.0/22
190.113.224.0/21
Signature Algorithm: sha256WithRSAEncryption
11:3d:c3:65:0e:f8:f2:03:65:e1:dd:f5:73:f6:9f:59:34:19:
54:3b:0f:96:65:8f:8c:4e:9e:f5:bd:1c:8f:a5:d5:51:3a:56:
3b:7d:10:4f:3f:49:20:06:87:75:7f:7f:87:99:ff:5f:1a:22:
b3:7f:95:90:cc:66:8f:9b:6b:03:2a:2d:43:ef:cd:2d:a2:20:
cb:d2:86:f0:57:e1:af:d7:09:f7:6b:63:f6:66:f6:0b:b9:46:
4b:e0:80:75:fe:3a:be:94:be:8d:06:5a:75:1a:71:29:43:ac:
6f:1a:38:0d:cf:5a:ae:a6:f1:cc:b5:ce:6c:e8:23:ae:8c:1a:
cd:03:9f:61:ba:51:f0:21:16:c6:41:a0:1b:10:81:27:ff:a0:
02:1d:e6:4e:64:9d:3f:5d:ed:83:26:c7:bb:56:e6:c0:2b:23:
63:e4:ca:59:e7:7a:12:f1:25:19:12:af:ea:83:fb:99:1f:de:
24:9a:44:4e:82:00:ba:1f:3b:9d:db:2d:ca:1a:1f:b4:84:5d:
28:90:56:fb:f7:df:5e:20:cd:24:9a:b8:f6:a0:43:d4:21:b3:
e4:6a:12:46:29:18:a1:66:a9:ac:07:89:70:ba:a3:bf:dc:da:
42:36:39:9f:bf:ae:fd:d2:a2:fe:e3:d4:25:bb:45:f5:42:39:
c6:20:4d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:08 2024 by rpki-client on console-ams.rpki-client.org