Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1ff29cb-5a83-4b3f-a900-b9d3a34bc19f/062ae39fb7323b6d20f5c6df5495702fb9c807cf.roa
File: 062ae39fb7323b6d20f5c6df5495702fb9c807cf.roa (raw, json)
Hash identifier: wfIKgeCb4O+Dt4EEOpttfQ3nZ1i1kqdUzKpw+NEi6EA=
Subject key identifier: 5E:83:4C:B2:CA:EF:BD:98:88:6E:56:B1:75:61:68:74:4A:DA:FC:B0
Certificate issuer: /CN=fa092f07e38e9048e9276bd9c5b8977da9cfba5d
Certificate serial: 227C09
Authority key identifier: 3E:AA:95:D2:CF:03:E3:F0:24:4B:07:C4:63:06:80:FB:09:6F:B7:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa092f07e38e9048e9276bd9c5b8977da9cfba5d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b1ff29cb-5a83-4b3f-a900-b9d3a34bc19f/062ae39fb7323b6d20f5c6df5495702fb9c807cf.roa
Signing time: Tue 22 Aug 2023 17:34:33 +0000
ROA not before: Mon 21 Aug 2023 17:34:33 +0000
ROA not after: Fri 22 Aug 2025 17:34:33 +0000
asID: 263807
IP address blocks: 138.255.96.0/24 maxlen: 24
138.255.97.0/24 maxlen: 24
138.255.98.0/24 maxlen: 24
138.255.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2259977 (0x227c09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa092f07e38e9048e9276bd9c5b8977da9cfba5d
Validity
Not Before: Aug 21 17:34:33 2023 GMT
Not After : Aug 22 17:34:33 2025 GMT
Subject: CN=062ae39fb7323b6d20f5c6df5495702fb9c807cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:02:09:54:74:14:06:cf:76:7c:77:1c:d3:
78:06:c2:7c:02:bb:91:98:7a:26:b7:01:11:49:98:
28:b8:6c:77:33:cf:a4:70:83:00:cf:f6:1c:d4:e6:
29:ff:d5:9a:e8:ed:c7:b9:49:de:1f:1c:11:6c:db:
93:65:0f:a5:8c:85:70:99:29:90:5c:17:e4:20:fc:
09:7b:30:0d:b4:aa:a0:64:0c:dd:0b:39:64:6b:7e:
53:c7:b1:2e:20:a5:4e:b5:14:7d:a0:da:b8:2d:a6:
98:dd:a5:d5:25:02:10:15:23:14:23:34:be:9a:24:
22:ef:b9:d9:74:d4:d2:83:d1:6a:e9:28:5b:10:09:
1d:6d:9a:59:7e:47:0f:06:e4:e6:31:a6:77:7e:ea:
e3:8e:9b:1c:16:0a:42:71:19:ac:54:da:4f:d7:57:
0c:4f:f9:b2:47:82:95:1c:65:d4:b8:42:a9:71:5d:
e0:5d:08:7d:39:17:6f:06:df:ff:21:dc:f9:3f:ea:
37:b4:7b:87:ad:80:bb:09:e5:3a:28:b3:16:8a:ef:
64:08:1e:7e:54:4c:e2:82:77:ec:b5:8d:90:3b:97:
87:f6:a8:4e:a2:15:74:1d:2d:28:b0:87:22:2e:b8:
ba:12:b0:4f:c1:17:7a:26:52:ca:dc:bf:d1:ba:43:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:83:4C:B2:CA:EF:BD:98:88:6E:56:B1:75:61:68:74:4A:DA:FC:B0
X509v3 Authority Key Identifier:
keyid:3E:AA:95:D2:CF:03:E3:F0:24:4B:07:C4:63:06:80:FB:09:6F:B7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa092f07e38e9048e9276bd9c5b8977da9cfba5d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1ff29cb-5a83-4b3f-a900-b9d3a34bc19f/062ae39fb7323b6d20f5c6df5495702fb9c807cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b1ff29cb-5a83-4b3f-a900-b9d3a34bc19f/fa092f07e38e9048e9276bd9c5b8977da9cfba5d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:9c:2a:c9:f9:e3:97:4c:e4:fe:c6:f6:28:ff:b5:76:d2:9a:
e9:d5:b6:a8:10:29:3a:8f:38:d5:4e:81:c5:55:15:67:aa:ba:
e3:7b:4d:52:f8:5a:95:21:17:bf:f1:45:11:bd:36:18:45:e0:
27:23:20:46:6a:b9:70:e6:7a:9c:cb:67:36:7d:99:e7:92:72:
a4:a6:74:97:9d:69:84:08:88:f5:7b:37:a8:0c:ab:14:ca:ef:
72:41:82:63:53:1e:88:03:78:89:9c:da:dd:7d:71:ca:b5:ff:
f8:73:0f:6a:51:d6:73:6d:3f:a2:be:ea:0c:71:43:23:34:8f:
76:2d:b4:a0:97:83:44:c6:e2:8e:a5:f2:2d:f7:4c:a7:60:c0:
8a:fd:09:e9:47:ff:ad:17:35:ef:03:09:69:88:c3:9a:07:ee:
15:8b:db:6c:6e:ee:da:28:43:d9:e8:65:7e:69:3d:5e:0d:f4:
01:95:40:b1:31:e9:0e:be:be:a5:9d:e7:0b:ea:77:38:06:4b:
db:62:57:f5:96:fa:4b:aa:03:a3:b9:3a:b9:89:41:d3:6a:ed:
51:1c:b9:c0:62:e2:1f:c4:a5:3b:7a:41:13:43:fc:cf:e0:67:
a5:aa:d0:20:b1:29:96:f7:23:7c:56:2b:42:6d:a1:53:dd:ea:
2a:f9:c5:52
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDInwJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZh
MDkyZjA3ZTM4ZTkwNDhlOTI3NmJkOWM1Yjg5NzdkYTljZmJhNWQwHhcNMjMwODIx
MTczNDMzWhcNMjUwODIyMTczNDMzWjAzMTEwLwYDVQQDEygwNjJhZTM5ZmI3MzIz
YjZkMjBmNWM2ZGY1NDk1NzAyZmI5YzgwN2NmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsfkCCVR0FAbPdnx3HNN4BsJ8AruRmHomtwERSZgouGx3M8+k
cIMAz/Yc1OYp/9Wa6O3HuUneHxwRbNuTZQ+ljIVwmSmQXBfkIPwJezANtKqgZAzd
Czlka35Tx7EuIKVOtRR9oNq4LaaY3aXVJQIQFSMUIzS+miQi77nZdNTSg9Fq6Shb
EAkdbZpZfkcPBuTmMaZ3furjjpscFgpCcRmsVNpP11cMT/myR4KVHGXUuEKpcV3g
XQh9ORdvBt//Idz5P+o3tHuHrYC7CeU6KLMWiu9kCB5+VEzignfstY2QO5eH9qhO
ohV0HS0osIciLri6ErBPwRd6JlLK3L/RukPkkQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFF6DTLLK772YiG5WsXVhaHRK2vywMB8GA1UdIwQYMBaAFD6qldLPA+PwJEsH
xGMGgPsJb7cLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmEwOTJm
MDdlMzhlOTA0OGU5Mjc2YmQ5YzViODk3N2RhOWNmYmE1ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjFmZjI5Y2ItNWE4My00YjNmLWE5MDAtYjlkM2Ez
NGJjMTlmLzA2MmFlMzlmYjczMjNiNmQyMGY1YzZkZjU0OTU3MDJmYjljODA3Y2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMWZmMjljYi01YTgzLTRiM2YtYTkwMC1iOWQz
YTM0YmMxOWYvZmEwOTJmMDdlMzhlOTA0OGU5Mjc2YmQ5YzViODk3N2RhOWNmYmE1
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAor/YDANBgkqhkiG9w0BAQsFAAOCAQEAK5wqyfnjl0zk/sb2
KP+1dtKa6dW2qBApOo841U6BxVUVZ6q643tNUvhalSEXv/FFEb02GEXgJyMgRmq5
cOZ6nMtnNn2Z55JypKZ0l51phAiI9Xs3qAyrFMrvckGCY1MeiAN4iZza3X1xyrX/
+HMPalHWc20/or7qDHFDIzSPdi20oJeDRMbijqXyLfdMp2DAiv0J6Uf/rRc17wMJ
aYjDmgfuFYvbbG7u2ihD2ehlfmk9Xg30AZVAsTHpDr6+pZ3nC+p3OAZL22JX9Zb6
S6oDo7k6uYlB02rtURy5wGLiH8SlO3pBE0P8z+BnparQILEplvcjfFYrQm2hU93q
KvnFUg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org