Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/05dbda826e902788faa9a15b7c0f790276a590f2.roa
File: 05dbda826e902788faa9a15b7c0f790276a590f2.roa (raw, json)
Hash identifier: zsS+83mffo851EKae5PTqmkWuoxn4ELF2cUD9qINkCw=
Subject key identifier: 8E:37:61:62:64:2A:3A:E9:7C:91:B9:95:26:34:F2:FF:0D:D5:99:67
Certificate issuer: /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial: 1F8CA2
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/05dbda826e902788faa9a15b7c0f790276a590f2.roa
Signing time: Sat 25 Mar 2023 03:24:06 +0000
ROA not before: Thu 23 Mar 2023 02:54:21 +0000
ROA not after: Sat 25 Mar 2028 02:54:21 +0000
asID: 22869
IP address blocks: 138.117.142.0/24 maxlen: 24
138.117.143.0/24 maxlen: 24
190.99.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2067618 (0x1f8ca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Validity
Not Before: Mar 23 02:54:21 2023 GMT
Not After : Mar 25 02:54:21 2028 GMT
Subject: CN=05dbda826e902788faa9a15b7c0f790276a590f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:95:3f:ad:42:07:e0:d0:23:d3:33:e7:8d:
1b:57:14:0b:d3:a9:29:d1:a1:9b:c9:09:2e:38:10:
7c:17:58:ea:7f:8c:b5:c9:fb:cb:fb:55:90:de:81:
7d:73:35:65:b8:09:f6:ae:28:4a:4f:04:0a:ce:00:
bb:72:ca:8c:d3:d9:73:dc:9d:2d:fd:76:5d:5c:6d:
a7:db:f7:8f:02:ae:77:26:ee:b0:e3:64:94:16:98:
77:ba:1a:40:30:6c:bc:84:71:f8:bf:d4:0d:33:cf:
82:86:57:95:ba:e1:f5:74:2b:86:7b:3a:68:0e:9a:
4a:42:35:2f:fe:b3:7d:3e:d4:eb:74:73:2d:5e:a3:
53:19:ea:b9:1e:72:29:88:e0:cc:4e:da:f9:44:2d:
c5:03:7d:96:01:b0:65:4d:5d:27:87:b0:24:0b:55:
27:ff:49:e9:9f:2e:93:71:77:e4:4c:8d:b6:1d:60:
77:fd:89:a8:c9:8e:95:9c:34:79:18:84:b7:80:e7:
c4:53:a2:ca:65:ea:56:96:64:6e:d3:7d:38:bd:a1:
1d:ff:45:e9:4e:a9:47:48:63:7e:bc:76:aa:48:dd:
23:f9:3e:67:9f:50:32:30:ff:86:62:c9:67:fa:89:
9f:aa:0b:4c:04:c0:37:d7:f4:bf:6a:9a:8f:c6:95:
68:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:37:61:62:64:2A:3A:E9:7C:91:B9:95:26:34:F2:FF:0D:D5:99:67
X509v3 Authority Key Identifier:
keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/05dbda826e902788faa9a15b7c0f790276a590f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.142.0/23
190.99.116.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:af:64:9b:79:04:3f:fb:5a:56:26:dc:b8:91:1d:7f:bc:62:
5d:c3:a3:16:c7:34:c9:f6:88:07:bd:8b:df:b6:ec:9d:b5:46:
8e:65:e5:8d:ec:19:2a:c9:cd:c4:7e:2b:98:60:e6:f6:04:d2:
76:28:c2:4c:08:d1:15:92:6c:19:29:c2:a8:32:36:27:bb:fc:
52:28:d3:ef:90:97:94:71:b2:47:e3:c2:5f:91:40:b3:53:34:
f5:10:ac:dd:8b:8b:44:a3:85:14:c6:82:5f:42:61:df:6f:9b:
d9:f6:aa:a4:d2:be:c8:9c:32:af:7c:79:35:ec:81:6a:0f:df:
c1:59:c7:ce:6e:5c:1a:41:cb:c3:f8:97:45:18:b6:80:53:50:
b8:a3:96:a5:f1:a5:14:98:c1:74:8a:b8:b1:db:25:26:f5:7b:
fb:40:15:f2:bc:0a:2a:57:09:3d:59:7e:3b:69:37:57:96:c7:
ec:fd:a0:93:55:39:d8:17:3b:b8:81:de:03:60:b8:7e:ef:88:
9f:45:94:22:d4:69:ec:42:8a:f1:1e:50:20:a2:d5:9c:6b:26:
b2:83:e3:73:e5:4e:a2:b5:52:7d:25:02:9a:67:d4:f6:9d:10:
49:5a:f1:25:aa:56:3e:e9:4f:fc:b2:f8:dd:2f:84:58:84:4c:
31:e8:b9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:23 2024 by rpki-client on console-ams.rpki-client.org