Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/b3ebd0182d888e5445bde67bf637a786f76d5dd2.roa
File: b3ebd0182d888e5445bde67bf637a786f76d5dd2.roa (raw, json)
Hash identifier: Hpq0Fe4oSfSjRHmaA1LJmpJQj98IVhmgCRQbwlCJNVw=
Subject key identifier: 5A:00:80:D6:1A:73:09:0F:2E:93:60:0F:32:45:0C:61:9B:9B:A0:BD
Certificate issuer: /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial: 0D50E7
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/b3ebd0182d888e5445bde67bf637a786f76d5dd2.roa
Signing time: Wed 24 Mar 2021 14:41:44 +0000
ROA not before: Wed 24 Mar 2021 14:41:42 +0000
ROA not after: Tue 24 Mar 2026 14:41:42 +0000
asID: 263761
IP address blocks: 138.117.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 872679 (0xd50e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Validity
Not Before: Mar 24 14:41:42 2021 GMT
Not After : Mar 24 14:41:42 2026 GMT
Subject: CN=b3ebd0182d888e5445bde67bf637a786f76d5dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:06:f1:72:fe:e3:61:57:d9:4d:96:ff:ac:
21:b6:68:9f:b0:83:24:53:a7:96:ea:11:5f:6c:d6:
6f:1e:e7:7b:ca:ee:66:3e:29:13:1a:b9:ac:52:64:
e8:6c:f7:7a:c8:7c:bd:93:59:2e:e1:af:ee:db:83:
be:a9:e2:13:6c:3f:a4:4d:02:df:5a:ad:52:8e:c3:
f7:f0:df:58:87:2f:1e:0b:8d:a2:9c:b5:91:c6:9e:
0b:68:b4:b9:df:b9:9f:66:8d:2f:62:20:9c:da:87:
8a:81:11:a4:c6:f7:a1:20:9a:9e:66:7a:d0:4a:a6:
0a:57:38:05:97:a8:8c:ac:d7:d2:58:33:ae:14:ba:
40:3d:fd:28:7d:ab:79:d0:9a:bb:4f:4a:f2:da:cd:
82:eb:83:da:72:e7:de:0c:16:49:e1:40:78:49:9b:
c3:9a:f7:aa:8a:ec:49:68:ba:56:2a:07:22:5f:c5:
84:fa:82:ce:ab:48:8a:4b:26:10:9d:74:6a:59:24:
a6:e5:5a:1b:9a:55:e3:f3:84:e5:0f:ce:16:af:00:
87:b3:c1:74:60:6b:98:07:c7:c2:2d:a2:9f:ad:c6:
27:b0:c2:74:39:25:c2:0c:a0:1b:80:3e:8f:8c:75:
a5:7a:74:0b:47:b8:ee:79:21:88:29:a5:7d:4d:96:
e1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:00:80:D6:1A:73:09:0F:2E:93:60:0F:32:45:0C:61:9B:9B:A0:BD
X509v3 Authority Key Identifier:
keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/b3ebd0182d888e5445bde67bf637a786f76d5dd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.142.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:19:77:b7:23:3f:26:e4:7d:42:b4:c2:f3:40:53:31:56:dd:
87:b5:35:b2:09:1c:30:ad:c0:e1:63:e1:16:fa:a7:64:00:e4:
4c:d7:e7:ff:26:8c:6c:65:e2:9c:3a:11:2e:96:df:24:b1:db:
e8:ad:50:69:0e:92:0f:43:47:24:23:41:b9:45:e1:2a:98:7a:
d6:bd:cc:93:a1:30:d7:02:34:64:63:fd:7a:bb:0b:19:ad:6b:
c7:53:fe:be:35:3d:7f:db:80:44:7f:c1:1a:5a:f9:e9:97:12:
ea:49:f0:e2:4e:49:74:fb:8a:4a:c6:ed:ba:b1:ba:4f:74:cb:
d7:0e:9b:1e:16:1d:62:c8:8d:60:dd:dd:db:2b:90:14:e1:ff:
5d:fe:c9:bd:db:e0:ae:0e:da:e4:65:0b:a0:20:0e:5c:e8:64:
7c:e7:cd:47:1a:a8:d1:4e:d7:f3:8b:1f:76:ba:26:31:9d:5e:
3b:37:7a:92:7d:ca:f5:a3:eb:22:f0:5c:90:21:6e:fd:d8:b9:
ee:ea:ef:1d:47:e6:6a:cd:d6:b0:ba:0d:57:bd:6c:d8:53:f0:
14:d9:fe:0f:e3:c3:56:e6:8a:85:f2:1b:b0:46:bb:1d:33:fb:
01:16:79:19:ce:48:99:e3:a0:b2:0a:4e:57:72:6a:7d:d2:8c:
5c:02:4e:8d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDVDnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE1
ZGI1NzhkZGFhZWRjZjQzNzU3NDBlODVmNWY1MWRiNGUxOTM3MDYwHhcNMjEwMzI0
MTQ0MTQyWhcNMjYwMzI0MTQ0MTQyWjAzMTEwLwYDVQQDEyhiM2ViZDAxODJkODg4
ZTU0NDViZGU2N2JmNjM3YTc4NmY3NmQ1ZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsRwG8XL+42FX2U2W/6whtmifsIMkU6eW6hFfbNZvHud7yu5m
PikTGrmsUmTobPd6yHy9k1ku4a/u24O+qeITbD+kTQLfWq1SjsP38N9Yhy8eC42i
nLWRxp4LaLS537mfZo0vYiCc2oeKgRGkxvehIJqeZnrQSqYKVzgFl6iMrNfSWDOu
FLpAPf0ofat50Jq7T0ry2s2C64PacufeDBZJ4UB4SZvDmveqiuxJaLpWKgciX8WE
+oLOq0iKSyYQnXRqWSSm5VobmlXj84TlD84WrwCHs8F0YGuYB8fCLaKfrcYnsMJ0
OSXCDKAbgD6PjHWlenQLR7jueSGIKaV9TZbhDwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFoAgNYacwkPLpNgDzJFDGGbm6C9MB8GA1UdIwQYMBaAFHcSaFWyrO1PGOhN
iOjSr2OwGCeCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTVkYjU3
OGRkYWFlZGNmNDM3NTc0MGU4NWY1ZjUxZGI0ZTE5MzcwNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjM0M2EyNDUtN2VhZi00OTU1LTkwZmEtOGU2ZDZm
ZDQzYWI4L2IzZWJkMDE4MmQ4ODhlNTQ0NWJkZTY3YmY2MzdhNzg2Zjc2ZDVkZDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMzQzYTI0NS03ZWFmLTQ5NTUtOTBmYS04ZTZk
NmZkNDNhYjgvYTVkYjU3OGRkYWFlZGNmNDM3NTc0MGU4NWY1ZjUxZGI0ZTE5Mzcw
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIp1jjANBgkqhkiG9w0BAQsFAAOCAQEAoBl3tyM/JuR9QrTC
80BTMVbdh7U1sgkcMK3A4WPhFvqnZADkTNfn/yaMbGXinDoRLpbfJLHb6K1QaQ6S
D0NHJCNBuUXhKph61r3Mk6Ew1wI0ZGP9ersLGa1rx1P+vjU9f9uARH/BGlr56ZcS
6knw4k5JdPuKSsbturG6T3TL1w6bHhYdYsiNYN3d2yuQFOH/Xf7Jvdvgrg7a5GUL
oCAOXOhkfOfNRxqo0U7X84sfdromMZ1eOzd6kn3K9aPrIvBckCFu/di57urvHUfm
as3WsLoNV71s2FPwFNn+D+PDVuaKhfIbsEa7HTP7ARZ5Gc5ImeOgsgpOV3JqfdKM
XAJOjQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:23 2024 by rpki-client on console-ams.rpki-client.org