Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/f859ae8a4b2c132c5e59e0c2450fa342f955fb77.roa
File: f859ae8a4b2c132c5e59e0c2450fa342f955fb77.roa (raw, json)
Hash identifier: VcgbxqZKVcUkyZopcnuxes4gP0zJO1QdMm4Re6JqtNg=
Subject key identifier: BC:ED:71:06:8A:38:0A:E3:A2:8C:DF:B9:A5:B8:43:E2:F3:E2:C3:F0
Certificate issuer: /CN=2affce9463fa8415cf700b389ea137e31e6bc44d
Certificate serial: 2618B4
Authority key identifier: 57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/f859ae8a4b2c132c5e59e0c2450fa342f955fb77.roa
Signing time: Wed 24 Jan 2024 19:20:15 +0000
ROA not before: Wed 24 Jan 2024 19:20:15 +0000
ROA not after: Sat 24 Jan 2026 19:20:15 +0000
asID: 263801
IP address blocks: 138.122.188.0/22 maxlen: 32
168.196.244.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2496692 (0x2618b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2affce9463fa8415cf700b389ea137e31e6bc44d
Validity
Not Before: Jan 24 19:20:15 2024 GMT
Not After : Jan 24 19:20:15 2026 GMT
Subject: CN=f859ae8a4b2c132c5e59e0c2450fa342f955fb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:e3:13:ad:e9:3a:09:ae:19:cc:fc:2a:ee:
e9:77:e6:db:79:6d:ec:2c:2d:4f:20:62:3e:96:fb:
7d:74:6b:95:88:a5:fa:c4:1d:6a:aa:19:7b:37:fe:
60:e8:29:30:a6:c0:23:6e:16:75:81:74:e8:02:94:
7a:92:87:c9:b0:19:a1:f8:cf:e9:6b:a5:9d:70:41:
81:c6:c8:12:5b:c7:f0:dc:18:64:46:1f:fd:f2:0f:
8a:95:76:82:db:27:94:d6:dc:6b:c4:0d:79:50:45:
2a:4d:a6:97:eb:92:5a:be:38:47:e6:d0:c2:8b:de:
e5:c9:f8:8a:1b:58:40:6b:69:45:45:fa:b4:58:49:
86:66:a8:c7:db:da:5f:e4:21:2c:95:9a:39:72:f3:
3e:2f:e3:dc:56:a6:c5:34:cf:c2:a8:e4:59:31:45:
b7:07:da:ac:c9:9a:7c:73:51:c2:f1:65:b2:62:28:
c0:98:54:7c:c3:7c:68:50:12:07:3e:25:dd:e3:ae:
34:4f:eb:83:74:53:ad:38:7a:af:7b:d4:04:c3:13:
42:0d:96:0f:0a:32:63:69:25:d1:36:48:34:6e:6f:
cb:07:e0:55:85:3f:54:13:51:be:88:a6:12:f7:ad:
d9:41:9d:fd:d3:24:52:d0:16:14:3b:2a:98:24:30:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:ED:71:06:8A:38:0A:E3:A2:8C:DF:B9:A5:B8:43:E2:F3:E2:C3:F0
X509v3 Authority Key Identifier:
keyid:57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/f859ae8a4b2c132c5e59e0c2450fa342f955fb77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/2affce9463fa8415cf700b389ea137e31e6bc44d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.188.0/22
168.196.244.0/22
Signature Algorithm: sha256WithRSAEncryption
76:77:df:fa:43:2b:06:06:6c:cb:8c:69:18:2f:8e:27:ba:a9:
51:8e:51:4c:ea:66:17:16:cd:01:a3:fa:7f:7f:32:ef:d3:fb:
de:68:ee:9c:38:09:2c:ba:20:eb:9c:7e:fd:92:1f:ac:24:26:
90:74:4b:78:f8:0f:cc:28:e4:13:83:56:14:db:d7:9a:cc:0b:
bd:85:20:93:14:6a:18:fc:2a:f2:62:5a:38:0f:18:60:c4:6e:
15:d1:0d:ff:43:f8:90:62:13:42:33:dd:67:86:09:d6:29:34:
6b:34:59:00:96:d8:43:f7:fe:a8:f9:fe:e1:cd:24:a4:64:51:
44:0a:7a:22:e9:8e:01:74:5e:7e:2a:3c:7c:a6:7e:28:9e:7d:
ed:fc:69:cd:f3:7e:6c:4e:6b:63:ed:54:3a:89:d3:dc:cb:0c:
f3:85:d6:e0:69:07:82:de:99:2d:6a:90:59:56:7f:d8:1b:72:
50:3b:08:0c:93:77:6a:b1:d5:98:44:c9:e4:6e:ca:7b:07:df:
b4:1f:92:9e:4f:a4:69:06:e1:41:38:f7:ea:94:99:08:25:7d:
94:f8:29:53:97:da:3e:7d:13:2c:e6:ae:20:04:96:b8:63:61:
10:5d:78:f0:58:20:cc:1a:ec:89:81:40:b2:7c:48:dd:c0:55:
6b:43:1a:f4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDJhi0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
ZmZjZTk0NjNmYTg0MTVjZjcwMGIzODllYTEzN2UzMWU2YmM0NGQwHhcNMjQwMTI0
MTkyMDE1WhcNMjYwMTI0MTkyMDE1WjAzMTEwLwYDVQQDEyhmODU5YWU4YTRiMmMx
MzJjNWU1OWUwYzI0NTBmYTM0MmY5NTVmYjc3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm33jE63pOgmuGcz8Ku7pd+bbeW3sLC1PIGI+lvt9dGuViKX6
xB1qqhl7N/5g6CkwpsAjbhZ1gXToApR6kofJsBmh+M/pa6WdcEGBxsgSW8fw3Bhk
Rh/98g+KlXaC2yeU1txrxA15UEUqTaaX65JavjhH5tDCi97lyfiKG1hAa2lFRfq0
WEmGZqjH29pf5CEslZo5cvM+L+PcVqbFNM/CqORZMUW3B9qsyZp8c1HC8WWyYijA
mFR8w3xoUBIHPiXd4640T+uDdFOtOHqve9QEwxNCDZYPCjJjaSXRNkg0bm/LB+BV
hT9UE1G+iKYS963ZQZ390yRS0BYUOyqYJDBMSQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFLztcQaKOArjoozfuaW4Q+Lz4sPwMB8GA1UdIwQYMBaAFFfFc8ohtyJgOB7N
YtWFtVtJS9pTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmFmZmNl
OTQ2M2ZhODQxNWNmNzAwYjM4OWVhMTM3ZTMxZTZiYzQ0ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjViMDVkNjgtYTNkYS00NWMwLTgxYTYtYjlkMzAw
MzQ3NDhmL2Y4NTlhZThhNGIyYzEzMmM1ZTU5ZTBjMjQ1MGZhMzQyZjk1NWZiNzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNWIwNWQ2OC1hM2RhLTQ1YzAtODFhNi1iOWQz
MDAzNDc0OGYvMmFmZmNlOTQ2M2ZhODQxNWNmNzAwYjM4OWVhMTM3ZTMxZTZiYzQ0
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAop6vAMEAqjE9DANBgkqhkiG9w0BAQsFAAOCAQEAdnff+kMr
BgZsy4xpGC+OJ7qpUY5RTOpmFxbNAaP6f38y79P73mjunDgJLLog65x+/ZIfrCQm
kHRLePgPzCjkE4NWFNvXmswLvYUgkxRqGPwq8mJaOA8YYMRuFdEN/0P4kGITQjPd
Z4YJ1ik0azRZAJbYQ/f+qPn+4c0kpGRRRAp6IumOAXRefio8fKZ+KJ597fxpzfN+
bE5rY+1UOonT3MsM84XW4GkHgt6ZLWqQWVZ/2BtyUDsIDJN3arHVmETJ5G7Kewff
tB+Snk+kaQbhQTj36pSZCCV9lPgpU5faPn0TLOauIASWuGNhEF148FggzBrsiYFA
snxI3cBVa0Ma9A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org