Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/38b429e8dfe6ca0180b3050542b58230792a8229.roa
File: 38b429e8dfe6ca0180b3050542b58230792a8229.roa (raw, json)
Hash identifier: edg0XWQZ5nZDsFIwBCAeKvD8hnHK4121UN3tgWSJcAw=
Subject key identifier: 9A:F9:A7:AF:E3:6C:C6:4F:EC:5B:12:3F:B5:B1:38:6C:A6:28:F1:91
Certificate issuer: /CN=d0615608a5f64a875e5be0a66c710b668ecb0886
Certificate serial: 1947D6
Authority key identifier: C3:2B:D5:97:7D:9A:F1:4D:F2:53:CB:EB:AC:C7:D2:22:2A:41:67:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0615608a5f64a875e5be0a66c710b668ecb0886.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/38b429e8dfe6ca0180b3050542b58230792a8229.roa
Signing time: Wed 31 Jan 2024 21:24:34 +0000
ROA not before: Wed 31 Jan 2024 21:24:34 +0000
ROA not after: Sat 31 Jan 2026 21:24:34 +0000
asID: 28398
IP address blocks: 164.163.188.0/22 maxlen: 24
2806:2ed::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1656790 (0x1947d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0615608a5f64a875e5be0a66c710b668ecb0886
Validity
Not Before: Jan 31 21:24:34 2024 GMT
Not After : Jan 31 21:24:34 2026 GMT
Subject: CN=38b429e8dfe6ca0180b3050542b58230792a8229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:06:ae:9c:be:1f:ac:1d:c2:54:10:66:f6:
02:2d:96:62:f1:1e:c7:01:d0:bd:b0:f0:1b:c2:49:
0b:a8:41:a5:aa:43:aa:74:28:19:ef:4d:08:6a:a8:
cd:6b:0c:b2:de:13:d3:6d:b0:83:ba:04:04:14:b0:
af:4c:c3:47:2a:cb:04:be:36:eb:f7:77:5e:9a:b0:
e2:45:4c:bc:c0:88:b1:29:75:57:da:f8:39:85:32:
8a:da:ad:85:77:91:1b:f1:be:95:3e:0d:4b:52:f7:
8e:d0:1f:c5:b6:57:57:d2:c8:2c:2b:d6:10:3c:f7:
19:d3:a1:fa:c4:ca:19:f8:87:6c:89:7e:bb:15:f2:
78:52:af:0a:9b:cd:81:3e:fe:f5:47:99:ea:e5:cf:
b9:3f:ae:6d:e8:6c:4a:b2:56:d2:95:93:75:ca:9a:
05:fe:b5:6f:fb:e8:f0:4f:89:80:82:8e:a7:f1:f7:
07:c9:b6:53:cb:b7:b9:29:46:8e:dc:30:6c:ff:9a:
22:dd:0c:03:59:2e:e9:57:1e:f3:53:43:c8:05:03:
29:b2:4b:6e:78:fc:b3:17:b7:ee:04:e6:7f:dd:28:
f0:ad:f1:95:78:2c:e4:8d:14:3e:44:d1:bc:bb:85:
13:ca:e9:4d:79:e6:dd:e4:99:ff:8e:58:4b:8c:47:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F9:A7:AF:E3:6C:C6:4F:EC:5B:12:3F:B5:B1:38:6C:A6:28:F1:91
X509v3 Authority Key Identifier:
keyid:C3:2B:D5:97:7D:9A:F1:4D:F2:53:CB:EB:AC:C7:D2:22:2A:41:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0615608a5f64a875e5be0a66c710b668ecb0886.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/38b429e8dfe6ca0180b3050542b58230792a8229.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/d0615608a5f64a875e5be0a66c710b668ecb0886.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.188.0/22
IPv6:
2806:2ed::/32
Signature Algorithm: sha256WithRSAEncryption
68:94:86:54:b5:1c:df:c8:3e:76:f9:05:9a:39:88:f6:39:c7:
fa:cc:e7:af:e0:6e:90:59:61:a0:db:ac:6a:bf:1c:38:bf:5b:
27:d0:27:27:aa:84:9c:9b:da:59:0b:01:4e:a6:6e:a1:c6:b2:
5e:e7:48:f1:46:1b:96:d4:02:c2:9a:64:af:dc:59:9c:c1:a9:
50:e4:69:74:53:b6:4c:bc:99:25:18:5c:19:55:68:18:c3:c6:
62:ca:8d:a1:36:49:9a:17:87:5d:94:65:a3:dc:98:47:96:15:
b5:a6:e3:66:d1:b1:ad:1d:ad:4d:76:fe:52:1f:3c:b1:3d:d0:
fa:78:34:19:ea:89:29:81:f4:d6:34:a8:bf:51:ea:74:1b:8c:
9d:3e:77:36:81:d6:8e:fb:13:50:75:ee:95:98:48:92:3e:3f:
50:4a:aa:57:d6:61:a6:a1:17:a6:96:8e:9d:b1:ef:32:ab:86:
c7:7d:7b:fd:c0:c5:b9:4a:ca:87:a7:5f:c4:fa:10:4a:c6:f7:
df:8f:2e:d7:5b:d1:f4:3f:62:7c:08:f1:62:be:d2:0e:cd:47:
e6:42:90:95:1b:ec:c6:90:66:3c:50:06:e8:33:69:fe:18:44:
76:03:51:36:10:dc:d2:6b:dc:e7:1a:5a:f7:a5:ea:23:82:34:
aa:60:2a:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDGUfWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQw
NjE1NjA4YTVmNjRhODc1ZTViZTBhNjZjNzEwYjY2OGVjYjA4ODYwHhcNMjQwMTMx
MjEyNDM0WhcNMjYwMTMxMjEyNDM0WjAzMTEwLwYDVQQDEygzOGI0MjllOGRmZTZj
YTAxODBiMzA1MDU0MmI1ODIzMDc5MmE4MjI5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkksGrpy+H6wdwlQQZvYCLZZi8R7HAdC9sPAbwkkLqEGlqkOq
dCgZ700IaqjNawyy3hPTbbCDugQEFLCvTMNHKssEvjbr93demrDiRUy8wIixKXVX
2vg5hTKK2q2Fd5Eb8b6VPg1LUveO0B/FtldX0sgsK9YQPPcZ06H6xMoZ+IdsiX67
FfJ4Uq8Km82BPv71R5nq5c+5P65t6GxKslbSlZN1ypoF/rVv++jwT4mAgo6n8fcH
ybZTy7e5KUaO3DBs/5oi3QwDWS7pVx7zU0PIBQMpsktuePyzF7fuBOZ/3SjwrfGV
eCzkjRQ+RNG8u4UTyulNeebd5Jn/jlhLjEd7vwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFJr5p6/jbMZP7FsSP7WxOGymKPGRMB8GA1UdIwQYMBaAFMMr1Zd9mvFN8lPL
66zH0iIqQWeXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDA2MTU2
MDhhNWY2NGE4NzVlNWJlMGE2NmM3MTBiNjY4ZWNiMDg4Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWIzZWNhMzQtN2U1Yi00NmIwLWI4MGItNWY3NDVh
NTEwZDYyLzM4YjQyOWU4ZGZlNmNhMDE4MGIzMDUwNTQyYjU4MjMwNzkyYTgyMjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YjNlY2EzNC03ZTViLTQ2YjAtYjgwYi01Zjc0
NWE1MTBkNjIvZDA2MTU2MDhhNWY2NGE4NzVlNWJlMGE2NmM3MTBiNjY4ZWNiMDg4
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqSjvDANBAIAAjAHAwUAKAYC7TANBgkqhkiG9w0BAQsFAAOC
AQEAaJSGVLUc38g+dvkFmjmI9jnH+sznr+BukFlhoNusar8cOL9bJ9AnJ6qEnJva
WQsBTqZuocayXudI8UYbltQCwppkr9xZnMGpUORpdFO2TLyZJRhcGVVoGMPGYsqN
oTZJmheHXZRlo9yYR5YVtabjZtGxrR2tTXb+Uh88sT3Q+ng0GeqJKYH01jSov1Hq
dBuMnT53NoHWjvsTUHXulZhIkj4/UEqqV9ZhpqEXppaOnbHvMquGx317/cDFuUrK
h6dfxPoQSsb3348u11vR9D9ifAjxYr7SDs1H5kKQlRvsxpBmPFAG6DNp/hhEdgNR
NhDc0mvc5xpa96XqI4I0qmAqAA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org