Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a8a098407d6e16b4d001c9cbbcb292ded05eca82.roa
File: a8a098407d6e16b4d001c9cbbcb292ded05eca82.roa (raw, json)
Hash identifier: hg61DOpvLVKfjl8BC75GND6I11/abaySaO8gVA0ioL0=
Subject key identifier: 20:5E:35:CD:9A:69:88:BA:48:68:F7:08:DE:24:17:2C:D4:2F:F1:F6
Certificate issuer: /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial: 1E961F
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a8a098407d6e16b4d001c9cbbcb292ded05eca82.roa
Signing time: Thu 09 Mar 2023 22:05:03 +0000
ROA not before: Wed 08 Mar 2023 22:01:59 +0000
ROA not after: Sun 09 Mar 2025 23:01:59 +0000
asID: 263761
IP address blocks: 138.117.140.0/22 maxlen: 22
190.99.116.0/22 maxlen: 22
2803:5100::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2004511 (0x1e961f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Validity
Not Before: Mar 8 22:01:59 2023 GMT
Not After : Mar 9 23:01:59 2025 GMT
Subject: CN=a8a098407d6e16b4d001c9cbbcb292ded05eca82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8f:03:0f:fa:f9:60:8c:89:58:15:25:f7:ee:
43:cc:93:ee:6c:48:15:84:38:be:d9:41:83:d8:d7:
0e:27:d1:65:62:a6:cc:5e:f3:14:ce:4d:43:0c:bc:
e6:97:6d:57:f3:80:ce:aa:db:28:4c:49:64:4a:fa:
8c:c5:30:fc:01:49:15:83:9b:06:86:41:90:20:33:
08:0c:02:ff:c4:8e:3e:9f:29:86:88:81:f8:c6:57:
76:d9:f2:2d:f5:1f:7a:78:73:70:07:15:38:ec:d7:
7e:35:66:05:ec:2f:26:47:8e:44:b1:ff:4f:8b:88:
9d:ea:88:e6:90:77:71:ee:41:2f:57:6d:83:fc:fd:
10:5e:09:b7:9f:7b:d8:f2:26:47:cb:7a:85:42:9d:
3a:59:aa:18:b3:1c:1c:3f:85:f8:d8:5b:5d:37:8c:
8f:59:98:e9:2f:a1:a0:4f:bf:f1:b3:d8:1e:d0:7f:
52:ee:46:e6:d2:5b:43:a1:a6:d8:e4:4b:af:03:c8:
3e:2b:82:ec:e7:e5:35:a4:d4:73:b4:02:c0:6d:c8:
86:07:8a:28:0c:f3:4e:96:69:e6:64:98:96:b3:c9:
f9:bc:6d:13:9a:ed:f1:f2:15:13:b0:b7:13:08:94:
08:3a:e4:bd:73:61:85:d7:bc:bd:29:94:ad:64:89:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5E:35:CD:9A:69:88:BA:48:68:F7:08:DE:24:17:2C:D4:2F:F1:F6
X509v3 Authority Key Identifier:
keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a8a098407d6e16b4d001c9cbbcb292ded05eca82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.140.0/22
190.99.116.0/22
IPv6:
2803:5100::/32
Signature Algorithm: sha256WithRSAEncryption
bd:7f:49:3f:85:29:65:c5:1c:e0:1f:5a:bd:59:6d:37:d3:ce:
4a:61:43:76:88:ff:26:33:40:9a:6d:a8:ab:a3:30:84:10:36:
fe:e1:78:f1:d0:0e:c2:a5:8a:9f:47:bb:11:ec:25:51:35:f8:
cd:2a:9c:42:bc:90:48:87:98:a4:b6:8d:26:98:f9:8c:a9:ab:
5d:0a:c2:f9:43:5e:bf:de:7a:72:4a:52:b5:93:4c:cb:39:bb:
99:b3:92:64:c3:da:ad:58:e3:dd:e6:44:c6:a7:ab:02:c0:d3:
7c:d3:de:a0:d5:b0:9f:a0:d0:6f:d4:a5:22:61:e3:1c:cf:d4:
b7:49:2c:b5:8d:98:31:26:b5:e8:79:17:3c:9d:77:af:2b:48:
ab:eb:c6:03:a7:b1:6e:d9:19:a6:9e:44:62:d0:da:f9:2f:99:
03:0d:e8:1b:7b:0e:c4:0a:4d:91:00:82:ba:b4:e4:f0:45:2c:
ad:0b:2a:f9:1c:af:a1:14:80:47:62:73:0e:25:52:7f:37:0d:
30:df:09:de:83:5d:4d:a6:52:93:3a:5f:e5:86:41:04:65:0e:
c3:df:ae:51:6b:f0:71:c0:d4:b0:5e:df:bf:16:ae:b0:6d:2f:
d7:cd:6a:d3:cc:40:a5:b1:73:46:2d:f0:1c:cb:37:6b:f1:a2:
28:ee:86:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:26:24 2025 by rpki-client