Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/e09e58f8e975669ae6bd727ec6e680dc623d6e92.roa
File: e09e58f8e975669ae6bd727ec6e680dc623d6e92.roa (raw, json)
Hash identifier: XqhpWY+IRA6ioIkvD9qx2TRKtdrOkO6k1B9KKvfMzuY=
Subject key identifier: 5F:DA:C2:49:D5:A4:A7:A9:B3:A1:19:95:0C:9B:F4:28:06:66:CB:2E
Certificate issuer: /CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
Certificate serial: 24EF7C
Authority key identifier: 29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/e09e58f8e975669ae6bd727ec6e680dc623d6e92.roa
Signing time: Wed 01 Nov 2023 13:07:18 +0000
ROA not before: Wed 01 Nov 2023 13:07:18 +0000
ROA not after: Sat 01 Nov 2025 13:07:18 +0000
asID: 263746
IP address blocks: 138.121.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2420604 (0x24ef7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
Validity
Not Before: Nov 1 13:07:18 2023 GMT
Not After : Nov 1 13:07:18 2025 GMT
Subject: CN=e09e58f8e975669ae6bd727ec6e680dc623d6e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:36:86:23:a9:e3:32:1e:53:83:d6:b4:5a:a4:
bf:32:b8:52:3c:6b:cd:d2:7a:4b:30:b0:b6:13:d0:
8e:16:bb:24:61:e0:5c:b8:ca:95:11:1e:5b:c6:1e:
09:d0:bf:f4:07:bd:c7:1d:7e:f6:d9:2c:e7:07:3a:
d2:99:c3:01:c1:12:e6:17:68:eb:fa:43:b6:55:15:
60:ba:e8:0a:d1:a3:10:8c:75:b7:43:60:05:a2:01:
6a:f5:6d:08:39:ce:5b:f0:c2:77:d0:c1:2e:08:77:
5a:92:a6:f1:c9:10:4f:39:ed:29:ad:bc:4b:95:88:
3d:25:08:87:01:37:76:21:af:03:58:a2:3b:1c:21:
48:8a:66:47:71:33:02:c1:02:3a:1c:6b:99:64:b9:
6d:bb:cb:f6:07:fb:c7:a6:13:16:3b:29:97:33:1a:
be:95:82:bc:15:ae:e2:79:9b:69:3c:e4:03:83:50:
d2:ea:5e:9a:9d:f6:f7:62:08:2b:db:9d:46:61:46:
9f:83:47:e7:cc:71:2b:5b:b5:05:b5:73:28:6f:38:
7e:d5:83:82:15:0a:b6:29:bc:7c:99:5c:1e:c2:85:
f6:9e:de:e1:fa:2e:21:cb:54:11:19:10:15:1b:b4:
3b:d0:ae:56:33:05:d9:b8:de:40:73:68:e8:18:0a:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DA:C2:49:D5:A4:A7:A9:B3:A1:19:95:0C:9B:F4:28:06:66:CB:2E
X509v3 Authority Key Identifier:
keyid:29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/e09e58f8e975669ae6bd727ec6e680dc623d6e92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.240.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:11:1f:0b:f9:13:e5:a6:c6:50:c4:3a:78:33:fc:86:90:a3:
81:a2:93:47:e9:f4:1f:d8:ae:ed:9b:1c:00:e4:bf:bd:f8:ef:
91:7b:1b:fe:8a:4b:d1:80:d3:30:30:6d:72:dd:46:ef:55:34:
b5:98:ee:02:56:4e:1d:26:cb:59:1f:7e:8f:09:4b:27:b0:29:
e3:e3:ad:6f:9e:03:b5:75:4b:a8:ac:3a:e4:ca:05:f4:7d:51:
79:13:43:c0:93:75:ab:a4:0f:2a:c4:20:87:12:ce:45:84:55:
22:fe:ff:24:45:64:e5:56:97:b0:bc:67:16:43:08:2a:35:c4:
39:b4:83:db:4d:69:08:f3:28:9c:4b:6e:ef:4f:0f:d4:e2:51:
e9:aa:53:6a:7a:98:db:18:45:af:d5:aa:c3:02:9c:7e:c4:f4:
a6:a0:f1:79:5b:06:4e:fc:e4:57:9f:2e:e1:5a:86:fe:45:23:
d0:66:88:79:bd:d6:3c:89:08:95:01:3d:c8:59:4d:21:09:a8:
b0:c8:78:5a:a4:d4:7e:5c:0c:02:41:18:19:2b:1d:e0:56:da:
45:d2:8a:58:7e:f1:12:08:5f:63:db:82:e8:02:be:b0:54:3f:
86:4d:7d:81:43:84:5e:12:fd:2c:88:74:ec:ee:aa:0f:87:75:
b4:b5:4b:06
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJO98MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJi
ZjNkMTJlODU2MTg1OWNjN2NkZjQzM2RlMGQxMzFhNjZjMWE0M2IwHhcNMjMxMTAx
MTMwNzE4WhcNMjUxMTAxMTMwNzE4WjAzMTEwLwYDVQQDEyhlMDllNThmOGU5NzU2
NjlhZTZiZDcyN2VjNmU2ODBkYzYyM2Q2ZTkyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlDaGI6njMh5Tg9a0WqS/MrhSPGvN0npLMLC2E9COFrskYeBc
uMqVER5bxh4J0L/0B73HHX722SznBzrSmcMBwRLmF2jr+kO2VRVguugK0aMQjHW3
Q2AFogFq9W0IOc5b8MJ30MEuCHdakqbxyRBPOe0prbxLlYg9JQiHATd2Ia8DWKI7
HCFIimZHcTMCwQI6HGuZZLltu8v2B/vHphMWOymXMxq+lYK8Fa7ieZtpPOQDg1DS
6l6anfb3Yggr251GYUafg0fnzHErW7UFtXMobzh+1YOCFQq2Kbx8mVwewoX2nt7h
+i4hy1QRGRAVG7Q70K5WMwXZuN5Ac2joGAqHJwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFF/awknVpKeps6EZlQyb9CgGZssuMB8GA1UdIwQYMBaAFCnODtdn8Rt+b8WR
3nNvcFELLftPMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmJmM2Qx
MmU4NTYxODU5Y2M3Y2RmNDMzZGUwZDEzMWE2NmMxYTQzYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTU1YmQxNDctYjQ3ZC00NmU3LWI0MWEtNzI1ZDZj
ZDUzYzM4L2UwOWU1OGY4ZTk3NTY2OWFlNmJkNzI3ZWM2ZTY4MGRjNjIzZDZlOTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNTViZDE0Ny1iNDdkLTQ2ZTctYjQxYS03MjVk
NmNkNTNjMzgvMmJmM2QxMmU4NTYxODU5Y2M3Y2RmNDMzZGUwZDEzMWE2NmMxYTQz
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAop58DANBgkqhkiG9w0BAQsFAAOCAQEAjhEfC/kT5abGUMQ6
eDP8hpCjgaKTR+n0H9iu7ZscAOS/vfjvkXsb/opL0YDTMDBtct1G71U0tZjuAlZO
HSbLWR9+jwlLJ7Ap4+Otb54DtXVLqKw65MoF9H1ReRNDwJN1q6QPKsQghxLORYRV
Iv7/JEVk5VaXsLxnFkMIKjXEObSD201pCPMonEtu708P1OJR6apTanqY2xhFr9Wq
wwKcfsT0pqDxeVsGTvzkV58u4VqG/kUj0GaIeb3WPIkIlQE9yFlNIQmosMh4WqTU
flwMAkEYGSsd4FbaRdKKWH7xEghfY9uC6AK+sFQ/hk19gUOEXhL9LIh07O6qD4d1
tLVLBg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org