Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/70c1fd264f862bf3b24c282149791f70336c10ef.roa
File: 70c1fd264f862bf3b24c282149791f70336c10ef.roa (raw, json)
Hash identifier: JwG7GB5zp0GsI11YccriAtHB06xSee1lk1w0pXRQg0U=
Subject key identifier: 08:96:E2:E5:8C:49:74:09:5D:8F:50:39:C3:84:49:98:64:94:95:38
Certificate issuer: /CN=2affce9463fa8415cf700b389ea137e31e6bc44d
Certificate serial: 0C5EFF
Authority key identifier: 57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/70c1fd264f862bf3b24c282149791f70336c10ef.roa
Signing time: Wed 24 Mar 2021 22:50:49 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 263801
IP address blocks: 138.122.188.0/23 maxlen: 23
138.122.188.0/24 maxlen: 24
138.122.189.0/24 maxlen: 24
138.122.190.0/23 maxlen: 23
138.122.190.0/24 maxlen: 24
138.122.191.0/24 maxlen: 24
168.196.244.0/23 maxlen: 23
168.196.244.0/24 maxlen: 24
168.196.245.0/24 maxlen: 24
168.196.246.0/23 maxlen: 23
168.196.246.0/24 maxlen: 24
168.196.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810751 (0xc5eff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2affce9463fa8415cf700b389ea137e31e6bc44d
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=70c1fd264f862bf3b24c282149791f70336c10ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:6a:54:3a:8f:9b:85:e2:6f:81:71:6d:0e:
15:db:5c:6c:34:8f:11:0d:8d:85:7a:39:87:9a:a5:
ea:7b:34:cc:71:4e:dc:76:58:81:5e:17:0e:9b:ee:
65:86:68:b5:51:e1:b4:56:c4:c1:62:59:ba:9a:d3:
7c:d7:0c:3c:63:f3:eb:37:00:87:e2:4f:8e:21:fc:
5f:71:79:7a:45:c8:5c:97:a4:49:58:c4:09:82:d1:
25:dc:0b:5c:07:38:2b:2a:fa:cb:e4:ed:02:b9:a5:
7b:2f:ad:76:07:2f:07:03:0b:d7:da:f6:a6:9f:7c:
94:ca:54:71:d3:09:e0:73:c2:83:01:ea:87:fe:14:
f9:22:31:7d:9c:ba:d6:51:a6:b5:06:be:aa:32:38:
17:b5:30:02:27:0e:03:fd:46:24:71:8b:f8:8b:8c:
61:3b:44:71:59:82:e2:13:75:7e:5f:d4:97:75:6f:
86:6b:db:72:5b:78:11:1b:37:c3:4a:8c:b9:ce:33:
23:48:11:75:ee:dc:b9:32:ea:a3:90:b5:00:6f:c4:
49:53:72:0d:f0:fe:27:f4:b9:d1:5c:cc:36:03:d8:
52:4a:76:8e:dc:94:aa:9a:c7:22:4b:bd:65:34:d1:
7e:4c:8a:4e:a2:15:a2:42:e8:16:e9:07:15:69:68:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:96:E2:E5:8C:49:74:09:5D:8F:50:39:C3:84:49:98:64:94:95:38
X509v3 Authority Key Identifier:
keyid:57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/70c1fd264f862bf3b24c282149791f70336c10ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/2affce9463fa8415cf700b389ea137e31e6bc44d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.188.0/22
168.196.244.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:97:73:35:c1:90:26:4e:55:e4:6c:97:ab:28:40:f1:a2:6f:
4b:5a:3f:9c:56:3e:25:47:0d:5d:c2:a6:1c:24:e1:d4:06:a6:
46:ea:47:f6:de:96:9b:14:53:38:a0:92:34:7b:a4:1d:55:92:
ef:37:7d:9e:8b:46:4f:d3:39:c4:5f:d8:45:03:30:a2:93:fa:
3b:cd:d3:46:c4:62:56:79:62:11:91:06:fe:ed:fe:c6:0a:98:
70:9e:57:06:ac:a1:20:7e:97:04:26:eb:cb:ad:6d:bb:ff:b2:
37:0e:bb:26:76:6e:11:cf:e5:42:92:e9:02:97:ef:71:c6:b5:
2d:1e:26:30:1f:ac:eb:02:94:99:20:16:d4:d9:f8:57:65:07:
d1:db:c5:b3:4b:24:67:ee:0f:3b:62:04:7c:86:f5:5d:9e:ff:
c5:5b:51:91:5a:55:23:42:01:39:98:b1:20:3e:55:94:5c:68:
93:3d:98:20:61:4a:42:05:1b:b3:90:46:12:5c:a3:38:f5:d0:
b2:76:1b:5b:26:f0:a5:ee:e5:a6:d7:90:3b:71:65:97:59:38:
e5:f1:ab:7b:d1:76:71:05:09:23:d0:99:6c:ec:dc:cc:d1:dc:
d2:54:bb:f4:b9:70:ab:35:5f:fa:e1:71:4b:d2:d8:f7:b8:ff:
12:2f:1f:2a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDDF7/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
ZmZjZTk0NjNmYTg0MTVjZjcwMGIzODllYTEzN2UzMWU2YmM0NGQwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEyg3MGMxZmQyNjRmODYy
YmYzYjI0YzI4MjE0OTc5MWY3MDMzNmMxMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtTZqVDqPm4Xib4FxbQ4V21xsNI8RDY2FejmHmqXqezTMcU7c
dliBXhcOm+5lhmi1UeG0VsTBYlm6mtN81ww8Y/PrNwCH4k+OIfxfcXl6Rchcl6RJ
WMQJgtEl3AtcBzgrKvrL5O0CuaV7L612By8HAwvX2vamn3yUylRx0wngc8KDAeqH
/hT5IjF9nLrWUaa1Br6qMjgXtTACJw4D/UYkcYv4i4xhO0RxWYLiE3V+X9SXdW+G
a9tyW3gRGzfDSoy5zjMjSBF17ty5MuqjkLUAb8RJU3IN8P4n9LnRXMw2A9hSSnaO
3JSqmsciS71lNNF+TIpOohWiQugW6QcVaWj4ewIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFAiW4uWMSXQJXY9QOcOESZhklJU4MB8GA1UdIwQYMBaAFFfFc8ohtyJgOB7N
YtWFtVtJS9pTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmFmZmNl
OTQ2M2ZhODQxNWNmNzAwYjM4OWVhMTM3ZTMxZTZiYzQ0ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjViMDVkNjgtYTNkYS00NWMwLTgxYTYtYjlkMzAw
MzQ3NDhmLzcwYzFmZDI2NGY4NjJiZjNiMjRjMjgyMTQ5NzkxZjcwMzM2YzEwZWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNWIwNWQ2OC1hM2RhLTQ1YzAtODFhNi1iOWQz
MDAzNDc0OGYvMmFmZmNlOTQ2M2ZhODQxNWNmNzAwYjM4OWVhMTM3ZTMxZTZiYzQ0
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAop6vAMEAqjE9DANBgkqhkiG9w0BAQsFAAOCAQEAf5dzNcGQ
Jk5V5GyXqyhA8aJvS1o/nFY+JUcNXcKmHCTh1AamRupH9t6WmxRTOKCSNHukHVWS
7zd9notGT9M5xF/YRQMwopP6O83TRsRiVnliEZEG/u3+xgqYcJ5XBqyhIH6XBCbr
y61tu/+yNw67JnZuEc/lQpLpApfvcca1LR4mMB+s6wKUmSAW1Nn4V2UH0dvFs0sk
Z+4PO2IEfIb1XZ7/xVtRkVpVI0IBOZixID5VlFxokz2YIGFKQgUbs5BGElyjOPXQ
snYbWybwpe7lpteQO3Fll1k45fGre9F2cQUJI9CZbOzczNHc0lS79LlwqzVf+uFx
S9LY97j/Ei8fKg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org