Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/47eef589388aef5202e9fca1b635891516e466bf.roa
File: 47eef589388aef5202e9fca1b635891516e466bf.roa (raw, json)
Hash identifier: eLxap+CLqdGUQGwWOqKF+k1uPjHpdGtWU2cKy8LsDTs=
Subject key identifier: E9:2E:BD:40:42:67:6C:B7:43:AA:CB:61:00:26:B8:AF:8F:07:97:13
Certificate issuer: /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial: 287B85
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/47eef589388aef5202e9fca1b635891516e466bf.roa
Signing time: Mon 25 Mar 2024 14:42:44 +0000
ROA not before: Mon 25 Mar 2024 14:42:44 +0000
ROA not after: Wed 25 Mar 2026 14:42:44 +0000
asID: 263761
IP address blocks: 138.117.140.0/23 maxlen: 24
190.99.117.0/24 maxlen: 24
190.99.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2653061 (0x287b85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Validity
Not Before: Mar 25 14:42:44 2024 GMT
Not After : Mar 25 14:42:44 2026 GMT
Subject: CN=47eef589388aef5202e9fca1b635891516e466bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a4:02:9e:7c:ee:5f:be:61:ca:9d:4e:f0:bd:
60:bc:bd:45:ef:69:45:a2:63:b9:da:e9:8b:4b:e8:
b9:28:1c:28:b1:c1:36:21:4f:e6:8b:e8:3b:e6:af:
aa:1e:38:1e:11:a3:41:96:b9:04:01:00:15:40:4c:
46:b1:41:26:41:c2:90:73:80:d7:4a:6e:fe:26:7e:
17:ce:b6:7e:86:85:4b:df:e1:a9:dc:ea:e6:d0:77:
40:aa:05:15:d1:8a:1f:d9:1a:98:45:7f:a4:13:db:
5e:dd:13:1b:bf:35:64:e9:a4:56:de:3e:74:cd:5b:
dd:4c:8a:f5:7a:37:9c:b9:1b:ad:7a:d3:3d:59:ed:
1a:2d:6f:65:25:dd:86:da:7f:27:39:c0:74:e5:f1:
4b:b8:a8:99:ae:3d:08:ed:18:45:45:2d:29:55:98:
3f:b7:0f:1e:2e:e7:dc:a0:6c:74:d9:25:d2:c3:c2:
c4:9b:a2:ae:4e:c2:8f:56:0f:71:12:35:7d:09:53:
4e:2a:9e:e3:51:b5:0f:d8:ee:71:89:e6:77:85:b1:
52:cd:95:97:d8:4d:2f:73:56:86:30:33:b1:a5:65:
31:b0:64:21:03:88:ec:74:1b:41:f1:c5:c1:2a:2a:
0d:1f:58:e5:b7:ba:e6:1f:9e:8c:48:46:8f:59:2e:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2E:BD:40:42:67:6C:B7:43:AA:CB:61:00:26:B8:AF:8F:07:97:13
X509v3 Authority Key Identifier:
keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/47eef589388aef5202e9fca1b635891516e466bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.140.0/23
190.99.117.0-190.99.118.255
Signature Algorithm: sha256WithRSAEncryption
a0:2c:70:f5:0e:2d:d0:42:97:6a:58:89:71:c3:11:21:b5:da:
50:4b:65:1a:ff:14:e4:01:3a:93:5d:8a:56:bb:97:e5:22:47:
2b:62:51:0f:94:fc:d5:c8:ab:39:be:f6:d9:9e:2d:34:9e:2f:
69:47:1c:26:89:44:68:22:ad:3e:36:da:cd:f8:ab:f7:f9:e9:
d9:4d:d7:5b:c7:f1:62:5d:bb:df:32:cb:b9:a8:8e:b4:b5:67:
a0:70:cb:50:06:4f:28:39:8a:b9:65:e5:6b:e5:26:12:0e:fe:
d4:b2:05:6c:52:6f:69:b3:13:7c:3d:88:55:a6:ff:19:d4:7e:
24:19:75:a7:90:1f:a9:46:6a:44:83:de:f6:4c:d9:77:3b:60:
90:05:11:07:f5:3c:76:ce:fd:d4:e3:c3:d7:55:79:e6:35:e9:
58:0b:66:40:c5:82:40:72:1b:e8:c2:6e:4f:5a:7b:94:b5:77:
4c:bc:07:ca:24:31:30:96:fe:66:f6:d8:04:68:90:9e:e6:11:
ab:8d:48:23:08:42:ca:9f:11:7d:f5:b3:03:eb:5e:06:0f:cd:
b6:c9:07:de:7e:d2:0b:0c:ad:ba:d8:a8:54:bc:f0:47:1f:07:
5e:19:24:66:89:2b:eb:98:d7:6f:0e:97:7a:88:df:e7:0a:17:
de:c1:c0:c1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDKHuFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE1
ZGI1NzhkZGFhZWRjZjQzNzU3NDBlODVmNWY1MWRiNGUxOTM3MDYwHhcNMjQwMzI1
MTQ0MjQ0WhcNMjYwMzI1MTQ0MjQ0WjAzMTEwLwYDVQQDEyg0N2VlZjU4OTM4OGFl
ZjUyMDJlOWZjYTFiNjM1ODkxNTE2ZTQ2NmJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiKQCnnzuX75hyp1O8L1gvL1F72lFomO52umLS+i5KBwoscE2
IU/mi+g75q+qHjgeEaNBlrkEAQAVQExGsUEmQcKQc4DXSm7+Jn4XzrZ+hoVL3+Gp
3Orm0HdAqgUV0Yof2RqYRX+kE9te3RMbvzVk6aRW3j50zVvdTIr1ejecuRutetM9
We0aLW9lJd2G2n8nOcB05fFLuKiZrj0I7RhFRS0pVZg/tw8eLufcoGx02SXSw8LE
m6KuTsKPVg9xEjV9CVNOKp7jUbUP2O5xieZ3hbFSzZWX2E0vc1aGMDOxpWUxsGQh
A4jsdBtB8cXBKioNH1jlt7rmH56MSEaPWS6f5QIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFOkuvUBCZ2y3Q6rLYQAmuK+PB5cTMB8GA1UdIwQYMBaAFHcSaFWyrO1PGOhN
iOjSr2OwGCeCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTVkYjU3
OGRkYWFlZGNmNDM3NTc0MGU4NWY1ZjUxZGI0ZTE5MzcwNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjM0M2EyNDUtN2VhZi00OTU1LTkwZmEtOGU2ZDZm
ZDQzYWI4LzQ3ZWVmNTg5Mzg4YWVmNTIwMmU5ZmNhMWI2MzU4OTE1MTZlNDY2YmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMzQzYTI0NS03ZWFmLTQ5NTUtOTBmYS04ZTZk
NmZkNDNhYjgvYTVkYjU3OGRkYWFlZGNmNDM3NTc0MGU4NWY1ZjUxZGI0ZTE5Mzcw
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAEwFAMEAYp1jDAMAwQAvmN1AwQAvmN2MA0GCSqGSIb3DQEBCwUAA4IB
AQCgLHD1Di3QQpdqWIlxwxEhtdpQS2Ua/xTkATqTXYpWu5flIkcrYlEPlPzVyKs5
vvbZni00ni9pRxwmiURoIq0+NtrN+Kv3+enZTddbx/FiXbvfMsu5qI60tWegcMtQ
Bk8oOYq5ZeVr5SYSDv7UsgVsUm9psxN8PYhVpv8Z1H4kGXWnkB+pRmpEg972TNl3
O2CQBREH9Tx2zv3U48PXVXnmNelYC2ZAxYJAchvowm5PWnuUtXdMvAfKJDEwlv5m
9tgEaJCe5hGrjUgjCELKnxF99bMD614GD822yQfeftILDK262KhUvPBHHwdeGSRm
iSvrmNdvDpd6iN/nChfewcDB
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org