Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e3a8aef-5241-4aa2-8310-346caecccd58/cdc34a24a4e3d7138859064fdec3cc07d3616596.roa
File: cdc34a24a4e3d7138859064fdec3cc07d3616596.roa (raw, json)
Hash identifier: 3g/MD4aNbkLNE44B55pHp3YSfrJWQi7rgFka0/ap5cM=
Subject key identifier: 60:4B:D6:FC:62:2B:E8:23:A0:FA:76:51:9E:F1:77:35:06:40:E1:7E
Certificate issuer: /CN=9e03528add95459ad882223f3d7897c8534b198e
Certificate serial: 086E
Authority key identifier: A8:38:FC:0D:A6:2F:78:36:9A:B2:ED:34:58:A3:74:04:52:D9:14:B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e03528add95459ad882223f3d7897c8534b198e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9e3a8aef-5241-4aa2-8310-346caecccd58/cdc34a24a4e3d7138859064fdec3cc07d3616596.roa
Signing time: Wed 27 Oct 2021 13:22:54 +0000
ROA not before: Wed 27 Oct 2021 03:00:00 +0000
ROA not after: Tue 27 Oct 2026 03:00:00 +0000
asID: 263736
IP address blocks: 138.0.184.0/22 maxlen: 24
143.137.20.0/22 maxlen: 24
170.239.128.0/22 maxlen: 24
2803:3780::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2158 (0x86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e03528add95459ad882223f3d7897c8534b198e
Validity
Not Before: Oct 27 03:00:00 2021 GMT
Not After : Oct 27 03:00:00 2026 GMT
Subject: CN=cdc34a24a4e3d7138859064fdec3cc07d3616596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:19:9e:ce:9e:c6:37:2f:38:89:e0:e9:e1:
46:65:f5:c3:d0:a8:71:cf:d3:9d:94:e7:4d:bb:9f:
3f:2f:c8:74:d9:3f:fc:ba:61:5e:0d:c7:cc:e2:ee:
b1:fc:d5:a9:15:da:dc:cd:f3:91:19:54:db:a3:d5:
a9:d4:c8:ec:5b:9c:2e:97:bb:de:7e:f1:1a:1d:7c:
1f:38:d3:e4:e3:99:9d:12:50:8b:b6:cb:9a:5d:61:
45:aa:77:70:2b:c3:bf:39:24:a5:eb:ce:1f:c9:8f:
54:c0:e2:c7:9a:7d:5f:21:68:1e:52:c4:37:bb:50:
69:47:10:f8:cc:32:7d:7a:2f:c6:af:b8:c1:42:38:
08:63:6e:d4:e2:ac:04:46:e3:e4:c8:07:c8:4a:49:
20:fc:cb:67:19:0e:03:4f:e6:34:43:23:17:d8:72:
d4:27:b3:76:cc:9c:6f:bb:05:83:5e:86:bc:b8:84:
be:de:fa:f0:3f:f7:7e:76:4d:cb:34:4f:2b:52:51:
6e:6a:b3:44:3f:e0:c4:c1:3f:36:28:bf:b6:58:75:
5c:e8:66:00:e4:5b:fc:b7:cf:26:87:6d:a7:36:e6:
f6:ae:60:80:ce:ea:1e:d8:bd:d3:8a:77:aa:1c:fd:
9c:52:87:b2:aa:c9:b2:2f:3a:a5:ee:8a:60:49:0e:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4B:D6:FC:62:2B:E8:23:A0:FA:76:51:9E:F1:77:35:06:40:E1:7E
X509v3 Authority Key Identifier:
keyid:A8:38:FC:0D:A6:2F:78:36:9A:B2:ED:34:58:A3:74:04:52:D9:14:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e03528add95459ad882223f3d7897c8534b198e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e3a8aef-5241-4aa2-8310-346caecccd58/cdc34a24a4e3d7138859064fdec3cc07d3616596.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9e3a8aef-5241-4aa2-8310-346caecccd58/9e03528add95459ad882223f3d7897c8534b198e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.184.0/22
143.137.20.0/22
170.239.128.0/22
IPv6:
2803:3780::/32
Signature Algorithm: sha256WithRSAEncryption
0d:46:ea:75:be:60:a7:be:21:0d:cd:8c:cc:ec:ab:39:be:ad:
40:60:d6:e3:99:20:f1:1d:ea:f9:94:b5:96:28:7e:89:d2:35:
bf:f1:b8:2c:d7:fe:cc:89:62:1c:81:18:8a:f3:c8:d2:e1:59:
4c:f6:bd:42:59:5c:ab:6a:23:04:a5:47:fd:9a:4f:e2:35:28:
c0:16:1d:df:51:a5:7e:9a:c3:c9:db:e5:1e:0d:c4:12:ca:63:
ee:31:4c:bf:ca:7a:11:46:23:ee:12:b3:d8:e8:ce:fd:28:cd:
d4:c4:13:81:eb:06:0f:62:5a:d0:a2:8d:3e:46:5f:f1:e9:65:
9c:87:b3:e8:04:9e:3b:b6:bf:c5:f1:e1:a8:6e:74:01:c4:c5:
46:ea:d5:b6:a8:de:7c:ae:e0:1e:ae:5c:85:f4:7f:f3:d6:6f:
fb:29:ed:14:3a:fc:01:44:2a:49:c2:0b:9f:43:8d:1d:51:dd:
2c:7a:0f:87:0c:5c:ef:63:e0:3e:34:92:9d:03:19:03:af:f9:
d8:3e:40:fe:0f:07:35:75:2c:1e:43:bd:2d:2d:cf:c7:b2:6e:
34:c4:8e:95:ca:5d:34:bd:73:7f:0b:7a:53:42:52:ae:7f:e3:
05:cb:93:ba:f4:62:ce:dd:5e:a5:b2:bc:d3:4c:2e:3c:42:ab:
3b:c7:74:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org