Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/ea9e8d43979f4b3985cdbb73c66caf838ccf6703.roa
File: ea9e8d43979f4b3985cdbb73c66caf838ccf6703.roa (raw, json)
Hash identifier: oH71Uk83uoHOwYIqdt/7c0ooJMHkLCUqFzCjMc9OSAk=
Subject key identifier: 93:18:F2:5C:69:E4:63:83:E9:37:D5:C8:1D:69:9E:59:19:BD:90:DC
Certificate issuer: /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial: 1EA518
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/ea9e8d43979f4b3985cdbb73c66caf838ccf6703.roa
Signing time: Thu 09 Mar 2023 22:15:59 +0000
ROA not before: Tue 07 Mar 2023 22:12:30 +0000
ROA not after: Sun 09 Mar 2025 23:12:30 +0000
asID: 263761
IP address blocks: 138.117.140.0/22 maxlen: 22
190.99.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2008344 (0x1ea518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Validity
Not Before: Mar 7 22:12:30 2023 GMT
Not After : Mar 9 23:12:30 2025 GMT
Subject: CN=ea9e8d43979f4b3985cdbb73c66caf838ccf6703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:22:32:73:d4:4f:4e:62:d3:b7:ba:a8:e6:ec:
51:13:f5:7a:59:b3:26:3b:cf:86:fb:50:c0:29:8e:
fa:9b:3a:a6:b9:5e:2e:cf:b5:cc:28:fb:9f:38:2c:
0e:bc:b8:5c:ca:a2:0b:a7:4e:0f:dd:71:9b:cd:a7:
22:72:c8:16:95:b6:0e:8a:7f:3a:91:08:97:5c:76:
98:fc:e2:f6:86:aa:4f:74:c1:be:56:44:13:d7:ed:
ee:d9:b2:0f:20:94:b5:24:91:42:b4:62:e7:c7:21:
ad:62:52:90:f9:52:7d:fa:ce:43:2c:de:43:0c:f7:
57:60:d7:75:35:15:da:fe:b7:59:50:7f:8f:46:51:
ec:f2:dc:79:a8:5a:27:3f:d5:b2:29:03:fa:86:4b:
9f:07:e9:07:ad:9b:e3:38:4d:bd:09:8e:d7:78:ce:
66:c5:af:83:b7:e4:dc:48:a0:b4:b3:f7:25:ff:d7:
29:53:30:f8:f5:88:73:b1:7a:98:b9:fb:04:21:30:
25:96:5e:b6:77:c7:ad:59:8a:19:5a:1b:5a:d1:31:
79:cc:4a:06:c6:67:26:8b:34:74:a2:d9:07:e3:fd:
60:a2:97:66:8b:9e:50:4d:56:ca:e1:fe:7a:e0:ff:
7e:e2:3b:ef:e0:db:e8:73:b9:10:87:41:64:1d:43:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:18:F2:5C:69:E4:63:83:E9:37:D5:C8:1D:69:9E:59:19:BD:90:DC
X509v3 Authority Key Identifier:
keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/ea9e8d43979f4b3985cdbb73c66caf838ccf6703.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.140.0/22
190.99.116.0/22
Signature Algorithm: sha256WithRSAEncryption
59:00:02:b4:cb:e5:ba:81:29:90:47:e0:75:35:1a:5f:24:90:
09:c4:18:e6:fa:21:31:8e:6f:ce:60:dc:f7:d9:1c:23:db:cc:
39:7c:82:c6:0c:e7:a3:83:91:99:b0:fd:d1:31:75:68:85:0c:
f4:7b:64:44:0f:36:98:a9:a7:93:6a:2a:20:fe:db:00:ec:bc:
f7:d3:ef:d0:ba:5b:1b:76:80:ad:ab:b5:02:05:77:59:ae:0f:
9d:55:8c:32:a5:a2:f8:0b:31:df:6f:68:1d:15:2f:fa:b9:0f:
9c:32:57:28:be:34:78:72:c1:35:e5:2d:54:54:c8:34:41:76:
b2:1d:d1:21:04:7a:2c:50:dd:b6:1d:e0:b5:82:fd:46:f6:bc:
b1:62:25:0b:bf:c0:38:38:0d:ed:f8:85:5a:3c:7a:c4:47:58:
5a:f0:69:08:92:b9:f7:5b:9e:71:a5:80:7c:83:5a:57:52:a4:
82:ca:b8:6c:df:13:23:d0:b4:cd:7e:72:cc:e7:94:ba:15:63:
a3:9f:35:b9:44:26:35:66:03:29:6c:00:0d:e4:66:23:f4:e9:
42:84:65:a4:18:69:f2:5b:cb:31:0c:12:71:b9:a5:05:ba:39:
25:3c:af:f8:05:cf:36:55:96:20:5b:82:64:e7:58:5b:27:06:
24:6f:5a:bf
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDHqUYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE1
ZGI1NzhkZGFhZWRjZjQzNzU3NDBlODVmNWY1MWRiNGUxOTM3MDYwHhcNMjMwMzA3
MjIxMjMwWhcNMjUwMzA5MjMxMjMwWjAzMTEwLwYDVQQDEyhlYTllOGQ0Mzk3OWY0
YjM5ODVjZGJiNzNjNjZjYWY4MzhjY2Y2NzAzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjyIyc9RPTmLTt7qo5uxRE/V6WbMmO8+G+1DAKY76mzqmuV4u
z7XMKPufOCwOvLhcyqILp04P3XGbzacicsgWlbYOin86kQiXXHaY/OL2hqpPdMG+
VkQT1+3u2bIPIJS1JJFCtGLnxyGtYlKQ+VJ9+s5DLN5DDPdXYNd1NRXa/rdZUH+P
RlHs8tx5qFonP9WyKQP6hkufB+kHrZvjOE29CY7XeM5mxa+Dt+TcSKC0s/cl/9cp
UzD49YhzsXqYufsEITAlll62d8etWYoZWhta0TF5zEoGxmcmizR0otkH4/1gopdm
i55QTVbK4f564P9+4jvv4Nvoc7kQh0FkHUNREQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFJMY8lxp5GOD6TfVyB1pnlkZvZDcMB8GA1UdIwQYMBaAFHcSaFWyrO1PGOhN
iOjSr2OwGCeCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTVkYjU3
OGRkYWFlZGNmNDM3NTc0MGU4NWY1ZjUxZGI0ZTE5MzcwNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjM0M2EyNDUtN2VhZi00OTU1LTkwZmEtOGU2ZDZm
ZDQzYWI4L2VhOWU4ZDQzOTc5ZjRiMzk4NWNkYmI3M2M2NmNhZjgzOGNjZjY3MDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMzQzYTI0NS03ZWFmLTQ5NTUtOTBmYS04ZTZk
NmZkNDNhYjgvYTVkYjU3OGRkYWFlZGNmNDM3NTc0MGU4NWY1ZjUxZGI0ZTE5Mzcw
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAop1jAMEAr5jdDANBgkqhkiG9w0BAQsFAAOCAQEAWQACtMvl
uoEpkEfgdTUaXySQCcQY5vohMY5vzmDc99kcI9vMOXyCxgzno4ORmbD90TF1aIUM
9HtkRA82mKmnk2oqIP7bAOy899Pv0LpbG3aArau1AgV3Wa4PnVWMMqWi+Asx329o
HRUv+rkPnDJXKL40eHLBNeUtVFTINEF2sh3RIQR6LFDdth3gtYL9Rva8sWIlC7/A
ODgN7fiFWjx6xEdYWvBpCJK591uecaWAfINaV1Kkgsq4bN8TI9C0zX5yzOeUuhVj
o581uUQmNWYDKWwADeRmI/TpQoRlpBhp8lvLMQwScbmlBbo5JTyv+AXPNlWWIFuC
ZOdYWycGJG9avw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:23 2024 by rpki-client on console-ams.rpki-client.org