Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d93a332-5fc9-4100-ab9d-51c20c012f78/1b11725e538d43a58f111f6a99dee87e0de6eb88.roa
File: 1b11725e538d43a58f111f6a99dee87e0de6eb88.roa (raw, json)
Hash identifier: 4cfHnyl1qTPOY8YbwtTtZsp7tSEEBRFpHAzikcpfoEs=
Subject key identifier: A0:FE:20:3D:66:99:CF:68:B6:CB:B3:F2:6C:61:B3:A7:90:FA:91:4D
Certificate issuer: /CN=69dbd374c2a561eac76283ef20e457a087a19243
Certificate serial: 0D486C
Authority key identifier: 0B:D4:59:AC:B4:12:5D:9D:96:D3:DE:53:14:41:98:F9:21:92:91:D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/69dbd374c2a561eac76283ef20e457a087a19243.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9d93a332-5fc9-4100-ab9d-51c20c012f78/1b11725e538d43a58f111f6a99dee87e0de6eb88.roa
Signing time: Wed 24 Mar 2021 14:33:13 +0000
ROA not before: Wed 24 Mar 2021 14:33:13 +0000
ROA not after: Tue 24 Mar 2026 14:33:13 +0000
asID: 263784
IP address blocks: 138.121.96.0/22 maxlen: 22
170.247.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870508 (0xd486c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbd374c2a561eac76283ef20e457a087a19243
Validity
Not Before: Mar 24 14:33:13 2021 GMT
Not After : Mar 24 14:33:13 2026 GMT
Subject: CN=1b11725e538d43a58f111f6a99dee87e0de6eb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:3a:fc:f1:6f:21:17:dd:1b:26:e8:8a:61:
f3:e9:ab:28:da:3a:d0:c2:97:ee:b0:91:98:da:0c:
39:52:04:b5:5c:19:97:99:e5:31:db:ba:2b:96:c7:
cb:04:a3:2e:86:5b:75:b7:77:ac:b3:5c:15:aa:46:
3d:89:58:8c:96:a9:e7:a0:f9:70:89:3f:2f:31:19:
5f:35:02:3e:ea:aa:16:a0:91:18:51:9e:97:55:cc:
80:72:03:04:55:2c:9c:d2:c8:1a:9a:98:b0:04:8f:
5c:c2:c4:31:01:8f:d6:c9:1f:a7:f6:87:51:00:53:
53:25:db:a4:47:01:cc:fa:cc:35:13:0d:dd:87:8a:
b9:29:82:19:45:b0:db:f6:c8:4d:bc:95:8b:e5:7c:
a8:20:c3:a9:1b:a2:16:25:ae:1e:5d:d4:52:06:80:
e6:1f:7f:4e:f6:63:65:64:4a:02:7a:7c:a3:d2:83:
85:ad:d5:89:9f:e7:21:f5:3e:dd:97:78:2a:ca:e1:
f6:18:52:b7:16:a5:99:9f:9f:6d:2f:f0:fe:f7:5b:
4b:20:b3:b4:e5:8f:fd:c8:c8:cb:a5:76:96:da:0d:
72:b1:41:b5:8d:a3:e4:1b:53:57:6d:fd:df:a0:66:
93:6b:a7:54:42:c6:28:a8:ea:ef:d6:e8:fd:d4:34:
15:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FE:20:3D:66:99:CF:68:B6:CB:B3:F2:6C:61:B3:A7:90:FA:91:4D
X509v3 Authority Key Identifier:
keyid:0B:D4:59:AC:B4:12:5D:9D:96:D3:DE:53:14:41:98:F9:21:92:91:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/69dbd374c2a561eac76283ef20e457a087a19243.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d93a332-5fc9-4100-ab9d-51c20c012f78/1b11725e538d43a58f111f6a99dee87e0de6eb88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9d93a332-5fc9-4100-ab9d-51c20c012f78/69dbd374c2a561eac76283ef20e457a087a19243.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.96.0/22
170.247.92.0/22
Signature Algorithm: sha256WithRSAEncryption
93:27:af:70:d6:4c:b1:42:af:04:40:df:76:c1:9a:5f:58:97:
b9:61:20:ed:56:dd:7d:2d:fb:fe:75:a4:fd:57:36:5c:3d:9f:
67:fd:40:ff:cc:42:be:7c:a4:0f:bf:3e:cb:7b:12:1f:4a:48:
51:cd:72:27:5e:cf:3b:08:55:c2:94:bf:03:41:ad:01:57:91:
68:e9:a0:08:4a:a1:1f:68:85:f9:51:07:ba:ad:20:9d:5d:7f:
82:dc:8b:f5:74:f6:e2:dc:f8:4d:58:b9:62:11:64:df:c5:76:
61:59:c8:ef:2d:25:dc:00:8a:ba:40:e9:37:3f:cf:68:6a:69:
9c:f4:3c:52:ba:ab:01:0f:9f:e4:d9:7b:cb:fc:35:43:1c:3f:
d8:d5:ad:96:be:17:5e:ab:ab:6c:de:f5:14:4b:d5:35:a1:d0:
15:99:30:d9:0e:3d:fe:ea:ac:d4:56:f3:e1:f5:3a:40:f1:7c:
62:9a:96:35:5d:1f:2d:23:b8:82:cf:93:3d:77:82:8e:be:76:
87:ce:d5:30:bb:41:dd:7b:5d:ef:49:f7:d9:35:2f:b1:6e:55:
53:c2:ad:14:87:ae:1d:54:dd:07:10:59:56:62:c6:ff:cb:b8:
5d:d7:9d:ac:00:21:62:f3:7f:70:3d:cf:e7:f2:1c:e8:db:a3:
a0:6e:c2:31
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDDUhsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY5
ZGJkMzc0YzJhNTYxZWFjNzYyODNlZjIwZTQ1N2EwODdhMTkyNDMwHhcNMjEwMzI0
MTQzMzEzWhcNMjYwMzI0MTQzMzEzWjAzMTEwLwYDVQQDEygxYjExNzI1ZTUzOGQ0
M2E1OGYxMTFmNmE5OWRlZTg3ZTBkZTZlYjg4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAupU6/PFvIRfdGyboimHz6aso2jrQwpfusJGY2gw5UgS1XBmX
meUx27orlsfLBKMuhlt1t3ess1wVqkY9iViMlqnnoPlwiT8vMRlfNQI+6qoWoJEY
UZ6XVcyAcgMEVSyc0sgampiwBI9cwsQxAY/WyR+n9odRAFNTJdukRwHM+sw1Ew3d
h4q5KYIZRbDb9shNvJWL5XyoIMOpG6IWJa4eXdRSBoDmH39O9mNlZEoCenyj0oOF
rdWJn+ch9T7dl3gqyuH2GFK3FqWZn59tL/D+91tLILO05Y/9yMjLpXaW2g1ysUG1
jaPkG1NXbf3foGaTa6dUQsYoqOrv1uj91DQVRwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFKD+ID1mmc9otsuz8mxhs6eQ+pFNMB8GA1UdIwQYMBaAFAvUWay0El2dltPe
UxRBmPkhkpHYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjlkYmQz
NzRjMmE1NjFlYWM3NjI4M2VmMjBlNDU3YTA4N2ExOTI0My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQ5M2EzMzItNWZjOS00MTAwLWFiOWQtNTFjMjBj
MDEyZjc4LzFiMTE3MjVlNTM4ZDQzYTU4ZjExMWY2YTk5ZGVlODdlMGRlNmViODgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDkzYTMzMi01ZmM5LTQxMDAtYWI5ZC01MWMy
MGMwMTJmNzgvNjlkYmQzNzRjMmE1NjFlYWM3NjI4M2VmMjBlNDU3YTA4N2ExOTI0
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAop5YAMEAqr3XDANBgkqhkiG9w0BAQsFAAOCAQEAkyevcNZM
sUKvBEDfdsGaX1iXuWEg7VbdfS37/nWk/Vc2XD2fZ/1A/8xCvnykD78+y3sSH0pI
Uc1yJ17POwhVwpS/A0GtAVeRaOmgCEqhH2iF+VEHuq0gnV1/gtyL9XT24tz4TVi5
YhFk38V2YVnI7y0l3ACKukDpNz/PaGppnPQ8UrqrAQ+f5Nl7y/w1Qxw/2NWtlr4X
XqurbN71FEvVNaHQFZkw2Q49/uqs1Fbz4fU6QPF8YpqWNV0fLSO4gs+TPXeCjr52
h87VMLtB3Xtd70n32TUvsW5VU8KtFIeuHVTdBxBZVmLG/8u4XdedrAAhYvN/cD3P
5/Ic6NujoG7CMQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:42 2024 by rpki-client on console-ams.rpki-client.org