Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/5cf762da7abdff01ad06b2e15300d3e6a0b18891.roa
File: 5cf762da7abdff01ad06b2e15300d3e6a0b18891.roa (raw, json)
Hash identifier: kKvs2oenzSoWGxSAEIGUj7HBkExfxFWrmec1UebQYwM=
Subject key identifier: 0F:3F:B8:4A:4D:8C:18:5D:FB:1C:97:27:F1:51:3E:64:8A:0B:2C:4E
Certificate issuer: /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial: 1F875B
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/5cf762da7abdff01ad06b2e15300d3e6a0b18891.roa
Signing time: Sat 25 Mar 2023 02:54:22 +0000
ROA not before: Fri 24 Mar 2023 02:54:21 +0000
ROA not after: Sat 25 Mar 2028 02:54:21 +0000
asID: 22869
IP address blocks: 138.117.143.0/24 maxlen: 24
190.99.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2066267 (0x1f875b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Validity
Not Before: Mar 24 02:54:21 2023 GMT
Not After : Mar 25 02:54:21 2028 GMT
Subject: CN=5cf762da7abdff01ad06b2e15300d3e6a0b18891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:14:1e:93:0b:29:08:47:54:be:6f:ba:28:
70:3a:78:30:1b:81:ae:da:1e:2f:b5:2b:e6:f2:6e:
e8:1f:a4:f9:f7:ad:7b:9e:36:9c:ef:5c:12:d5:e7:
39:8b:69:cb:16:59:76:b4:bf:f0:b6:79:dc:6c:c9:
5c:34:27:00:25:5f:cd:90:a2:81:0c:01:b5:5f:24:
ca:a9:07:7f:6c:b3:bc:02:87:84:e3:5d:ea:c0:b8:
00:cc:63:da:9d:bb:53:91:38:6d:00:04:01:33:a2:
96:18:29:37:71:ad:fe:9c:96:30:e4:04:91:e3:5d:
1b:ea:f0:e5:42:92:9d:86:47:63:e0:56:99:33:2b:
83:ae:47:48:8c:e8:00:80:e7:a4:f2:8b:55:3f:98:
88:7a:ea:26:d8:e9:66:17:cb:47:ec:67:e7:22:e7:
16:65:18:a6:3d:0a:d2:76:ca:81:be:ec:06:89:0f:
9e:26:b0:df:9b:93:27:b0:37:f8:3e:c0:01:5a:87:
a5:88:e6:07:53:57:86:f2:6f:5a:40:8e:91:b2:11:
fa:d2:a0:60:2b:0c:79:35:20:1c:70:ed:db:ee:81:
e0:0b:46:0e:8c:09:db:73:bb:92:c2:f7:11:05:b3:
19:ea:20:25:a9:be:e2:5a:44:51:ec:13:8e:9f:e7:
67:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3F:B8:4A:4D:8C:18:5D:FB:1C:97:27:F1:51:3E:64:8A:0B:2C:4E
X509v3 Authority Key Identifier:
keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/5cf762da7abdff01ad06b2e15300d3e6a0b18891.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.143.0/24
190.99.116.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b5:d2:f7:1e:2e:6c:09:9d:9d:db:f7:41:66:99:01:76:be:
d0:a9:10:d8:fd:2b:d2:9c:02:10:80:fe:77:59:59:df:06:bc:
40:3c:52:12:27:3d:3a:65:52:d8:62:a1:fe:a3:fe:02:9e:45:
c6:8e:ca:e4:d8:7f:0a:56:d7:f5:0b:b6:e9:d2:a1:71:b6:a5:
a0:a9:9a:8e:c0:1a:1e:b2:ac:5d:fc:b8:56:19:e8:8a:bf:3f:
fd:fa:87:81:5d:9e:3d:86:20:a6:a4:08:17:81:cc:1e:d8:0c:
cc:da:dd:b2:a3:d4:0f:9b:77:a9:2d:9f:fb:fc:4b:82:c9:5c:
05:f9:c6:a7:90:b9:9b:a8:63:ec:17:32:d2:61:9a:03:b5:ac:
82:79:20:3e:37:56:0a:f0:c0:ff:2c:fa:0e:41:58:ac:e0:af:
22:eb:eb:7d:c9:0a:04:19:c8:54:f7:ff:d7:3f:34:f0:ac:b8:
2a:03:b0:9d:6c:7b:3e:7d:ba:47:3c:f5:67:20:6b:d0:6d:47:
7a:8e:dc:99:c7:65:d0:82:63:cc:37:3f:46:3b:ff:3d:98:d8:
9d:83:75:5d:f0:5c:09:e3:5c:78:48:fa:84:e1:30:2d:bd:96:
50:3e:a5:32:d2:3e:53:0f:8d:7c:99:e5:e8:d4:cd:4a:91:0e:
9a:dd:f6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org