Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232372e302f32342d3234203d3e20323730303532.roa
File: 3133382e35392e3232372e302f32342d3234203d3e20323730303532.roa (raw, json)
Hash identifier: 2VRcMvN2+4eRtm4k9/LbrKGzKxj10FDS33O+91c6/R8=
Subject key identifier: 24:38:F4:5F:D9:DF:5A:70:9B:62:B4:CC:C1:F0:9C:B4:2B:73:4E:AA
Certificate issuer: /CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
Certificate serial: 6CC0E832709E3AC3669E63AF648E57DAC897E0C3
Authority key identifier: 69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232372e302f32342d3234203d3e20323730303532.roa
Signing time: Sun 26 May 2024 15:00:00 +0000
ROA not before: Sun 26 May 2024 14:55:00 +0000
ROA not after: Sun 25 May 2025 15:00:00 +0000
asID: 270052
IP address blocks: 138.59.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c0:e8:32:70:9e:3a:c3:66:9e:63:af:64:8e:57:da:c8:97:e0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
Validity
Not Before: May 26 14:55:00 2024 GMT
Not After : May 25 15:00:00 2025 GMT
Subject: CN=2438F45FD9DF5A709B62B4CCC1F09CB42B734EAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f6:96:39:29:88:97:db:a7:99:03:c3:01:a8:
6f:02:e3:bf:24:7d:3c:c6:df:28:59:8b:09:5d:36:
da:18:bf:19:40:0e:3c:4d:3f:d6:91:25:50:71:fd:
85:d9:29:26:97:86:f4:2b:53:a3:b3:25:5f:b5:fb:
7f:c7:8d:e1:da:65:a0:b5:b7:26:aa:1a:6f:16:a9:
a2:56:4a:61:b7:7d:cf:28:44:89:42:8f:ae:aa:d6:
de:02:b5:c6:ac:8e:78:62:67:0e:57:32:cd:f5:af:
d4:46:a5:f8:87:f1:53:42:73:d0:05:31:c0:7b:8e:
40:20:5f:00:dc:97:83:1f:f3:89:7b:c0:e3:b1:c9:
8f:fc:7c:5b:c8:91:ed:cd:17:ff:31:8f:44:77:00:
d7:a1:3a:ab:75:a9:74:62:76:70:59:8c:ca:64:5d:
75:a0:cb:99:70:6c:21:a8:68:cb:9a:1e:81:dc:f0:
a6:ad:ec:38:9d:6d:c5:91:d9:7c:dd:44:e4:1f:6a:
35:ca:f0:a1:5b:b1:ff:b1:55:0c:0a:7e:66:51:7f:
c8:0b:2c:4b:72:7f:93:ec:10:0c:40:ae:db:90:b2:
5d:d1:66:fe:21:4d:f3:6e:41:62:0c:f5:1b:8d:2e:
db:0c:0f:76:5f:ba:ea:d5:c1:c6:05:ac:5a:12:71:
6d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:38:F4:5F:D9:DF:5A:70:9B:62:B4:CC:C1:F0:9C:B4:2B:73:4E:AA
X509v3 Authority Key Identifier:
keyid:69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232372e302f32342d3234203d3e20323730303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.227.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:cf:7f:db:72:d4:ae:b4:58:d4:39:31:27:79:f1:f0:e5:6d:
dc:5a:8f:c2:bb:15:aa:87:03:f9:d7:e2:40:ab:a6:45:37:9d:
ac:59:48:5b:37:0b:71:dd:e5:7f:6a:0d:45:d1:17:b3:12:d8:
64:95:0e:5b:1e:d4:65:fb:53:08:55:fb:e1:04:2b:cc:20:8d:
cf:e5:e5:a2:29:93:53:9f:fc:aa:42:ec:f9:15:82:5b:48:2d:
a1:bb:3a:61:6a:30:dc:0c:8a:10:a6:37:d9:1a:89:5f:45:88:
84:a4:15:ce:cf:5a:e9:d7:6d:0c:88:fa:0a:a2:e1:b5:25:c4:
6a:35:7e:d3:f7:88:2f:54:af:06:7c:f4:bb:1c:cf:e5:9d:82:
b5:f0:67:f8:4d:85:65:70:51:d7:bd:64:c6:c9:ed:b3:16:80:
cc:b3:7f:26:01:7c:2d:b9:d0:47:b4:29:18:79:f1:59:af:d1:
b1:55:32:1e:1e:d2:ac:51:92:f6:2f:41:4d:99:94:7d:6b:a7:
a4:e6:36:4b:39:00:bb:d3:20:0a:74:42:30:40:96:ec:ab:df:
e4:9c:10:92:a4:fc:03:b8:69:1b:e7:9a:53:e4:7b:78:8e:eb:
32:25:2b:5f:fa:b3:d9:6c:a2:06:03:a1:df:6c:f6:ab:51:24:
26:be:39:b5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbMDoMnCeOsNmnmOvZI5X2siX4MMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlGRDNFQjIzRTkxMEM0MEMzNkI4NDg5M0JBMEU1RDcy
NjMxMjQwRjAeFw0yNDA1MjYxNDU1MDBaFw0yNTA1MjUxNTAwMDBaMDMxMTAvBgNV
BAMTKDI0MzhGNDVGRDlERjVBNzA5QjYyQjRDQ0MxRjA5Q0I0MkI3MzRFQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT9pY5KYiX26eZA8MBqG8C478k
fTzG3yhZiwldNtoYvxlADjxNP9aRJVBx/YXZKSaXhvQrU6OzJV+1+3/HjeHaZaC1
tyaqGm8WqaJWSmG3fc8oRIlCj66q1t4CtcasjnhiZw5XMs31r9RGpfiH8VNCc9AF
McB7jkAgXwDcl4Mf84l7wOOxyY/8fFvIke3NF/8xj0R3ANehOqt1qXRidnBZjMpk
XXWgy5lwbCGoaMuaHoHc8Kat7DidbcWR2XzdROQfajXK8KFbsf+xVQwKfmZRf8gL
LEtyf5PsEAxArtuQsl3RZv4hTfNuQWIM9RuNLtsMD3ZfuurVwcYFrFoScW2PAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUJDj0X9nfWnCbYrTMwfCctCtzTqowHwYDVR0j
BBgwFoAUaf0+sj6RDEDDa4SJO6Dl1yYxJA8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjRGOThFOUZGMzU3MTMxMEEyMDIxNjlEOEQ0NkYwRkZF
NDQ4NkZDNEI2MzY0QjYyNTA0NEQ4NkNCRTNDRDkxLzAvNjlGRDNFQjIzRTkxMEM0
MEMzNkI4NDg5M0JBMEU1RDcyNjMxMjQwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OUZEM0VCMjNFOTEwQzQwQzM2
Qjg0ODkzQkEwRTVENzI2MzEyNDBGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTY0Rjk4RTlGRjM1NzEzMTBBMjAyMTY5RDhENDZGMEZGRTQ0ODZGQzRC
NjM2NEI2MjUwNDREODZDQkUzQ0Q5MS8wLzMxMzMzODJlMzUzOTJlMzIzMjM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzNTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAijvj
MA0GCSqGSIb3DQEBCwUAA4IBAQAOz3/bctSutFjUOTEnefHw5W3cWo/CuxWqhwP5
1+JAq6ZFN52sWUhbNwtx3eV/ag1F0RezEthklQ5bHtRl+1MIVfvhBCvMII3P5eWi
KZNTn/yqQuz5FYJbSC2huzphajDcDIoQpjfZGolfRYiEpBXOz1rp120MiPoKouG1
JcRqNX7T94gvVK8GfPS7HM/lnYK18Gf4TYVlcFHXvWTGye2zFoDMs38mAXwtudBH
tCkYefFZr9GxVTIeHtKsUZL2L0FNmZR9a6ek5jZLOQC70yAKdEIwQJbsq9/knBCS
pPwDuGkb55pT5Ht4jusyJStf+rPZbKIGA6HfbParUSQmvjm1
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:17:45 2025 by rpki-client