Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/6c8fb2b526c7be5af7a4c2423a47a036993e6401.roa
File: 6c8fb2b526c7be5af7a4c2423a47a036993e6401.roa (raw, json)
Hash identifier: D1Ppg5jToU/R6FFN1cQXuUo1m/yWCX7xl+0LVXoZ21k=
Subject key identifier: A3:56:A3:E4:95:B1:1A:B6:15:87:49:9C:29:10:80:A9:38:90:65:2D
Certificate issuer: /CN=9d44e5cc8623c5cdabd559bdad688e9f03759533
Certificate serial: 0DCAC0
Authority key identifier: 88:50:96:CD:A6:E7:72:8D:C1:9C:13:39:45:81:74:B5:69:6E:44:F4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d44e5cc8623c5cdabd559bdad688e9f03759533.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/6c8fb2b526c7be5af7a4c2423a47a036993e6401.roa
Signing time: Wed 24 Mar 2021 14:33:50 +0000
ROA not before: Wed 24 Mar 2021 14:33:50 +0000
ROA not after: Tue 24 Mar 2026 14:33:50 +0000
asID: 61506
IP address blocks: 138.204.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903872 (0xdcac0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d44e5cc8623c5cdabd559bdad688e9f03759533
Validity
Not Before: Mar 24 14:33:50 2021 GMT
Not After : Mar 24 14:33:50 2026 GMT
Subject: CN=6c8fb2b526c7be5af7a4c2423a47a036993e6401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3f:28:67:ca:8f:7d:5d:f1:0a:f9:63:a1:75:
5d:b3:11:84:e4:81:98:01:fa:6f:fa:2a:c4:23:48:
d2:e5:b7:b8:3f:10:fe:39:66:be:2d:c3:5c:31:a8:
56:9b:d7:97:8a:43:2e:a3:13:5a:2d:cd:c1:61:9f:
65:a4:03:1f:7d:06:04:eb:84:60:d0:f8:b6:5d:17:
94:57:e0:96:e1:21:79:ef:65:a8:d4:d2:35:39:19:
7f:c7:df:c3:55:97:47:47:a6:09:ec:79:1c:ef:e8:
14:d3:b7:c1:02:3c:e2:31:01:2a:07:f3:3c:c6:78:
86:04:28:fa:65:76:5e:0e:eb:0a:53:03:ba:b7:08:
14:07:ba:48:7a:ef:fa:46:9a:2d:e9:a7:2b:1b:e5:
c3:6a:d9:38:1c:d5:68:5d:19:98:90:6c:6d:e4:69:
1b:80:ee:da:ee:92:51:2a:70:10:9a:e9:74:53:8a:
73:53:57:27:1f:f7:60:6e:78:14:a0:03:e5:c5:4d:
94:db:14:e6:ca:fe:27:5e:07:ff:77:0d:18:d2:fd:
3e:d7:af:2a:86:0e:d7:36:09:d4:7f:b9:d3:4a:6b:
49:e0:6f:43:57:46:30:e7:91:da:21:6d:a0:72:35:
47:43:ae:39:06:b4:4f:8a:48:55:b4:3a:e3:42:f5:
d0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:56:A3:E4:95:B1:1A:B6:15:87:49:9C:29:10:80:A9:38:90:65:2D
X509v3 Authority Key Identifier:
keyid:88:50:96:CD:A6:E7:72:8D:C1:9C:13:39:45:81:74:B5:69:6E:44:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d44e5cc8623c5cdabd559bdad688e9f03759533.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/6c8fb2b526c7be5af7a4c2423a47a036993e6401.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/9d44e5cc8623c5cdabd559bdad688e9f03759533.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.229.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:9f:d4:b8:cf:40:0d:d1:79:77:bb:f3:15:c2:d7:9c:6c:88:
9c:44:89:d0:5f:e3:ce:b3:ed:58:dd:b7:4a:c3:f6:66:43:64:
d0:70:c6:e1:b9:78:c7:a5:53:1a:08:1c:ca:00:b2:0a:47:14:
73:e9:c3:2e:eb:53:c3:0a:73:60:47:e1:18:34:ec:cd:7d:77:
5e:78:23:b1:bf:d2:22:b9:a4:ad:fd:3c:b9:61:21:d3:79:d4:
ab:0f:2c:e4:cb:dc:23:ea:89:95:19:b7:85:e8:07:1d:7d:4c:
9a:75:2d:d8:7b:3e:96:0a:25:95:c2:a0:e3:7f:e9:5f:cb:e1:
e1:1c:6a:53:2e:93:06:2a:8e:9e:52:80:3d:d8:f3:c8:36:8a:
65:93:ae:04:d9:66:c6:0e:9d:69:e5:62:bd:d1:73:54:9f:dd:
ff:b0:af:16:2d:9b:fd:84:af:a3:19:c8:7c:d9:db:21:61:17:
f8:39:fd:22:c1:77:aa:3d:e6:4e:c2:27:87:d6:7b:7c:7a:26:
31:13:8a:c0:53:ec:19:8c:08:aa:ab:5e:08:23:94:47:9c:bc:
77:10:a8:fe:51:28:43:27:3e:4d:40:6d:b4:bd:ae:85:b8:92:
7c:51:a8:aa:7a:79:42:f6:3f:cb:b6:79:f7:9d:98:8b:e3:1f:
27:b5:6f:f8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDcrAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlk
NDRlNWNjODYyM2M1Y2RhYmQ1NTliZGFkNjg4ZTlmMDM3NTk1MzMwHhcNMjEwMzI0
MTQzMzUwWhcNMjYwMzI0MTQzMzUwWjAzMTEwLwYDVQQDEyg2YzhmYjJiNTI2Yzdi
ZTVhZjdhNGMyNDIzYTQ3YTAzNjk5M2U2NDAxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmD8oZ8qPfV3xCvljoXVdsxGE5IGYAfpv+irEI0jS5be4PxD+
OWa+LcNcMahWm9eXikMuoxNaLc3BYZ9lpAMffQYE64Rg0Pi2XReUV+CW4SF572Wo
1NI1ORl/x9/DVZdHR6YJ7Hkc7+gU07fBAjziMQEqB/M8xniGBCj6ZXZeDusKUwO6
twgUB7pIeu/6Rpot6acrG+XDatk4HNVoXRmYkGxt5GkbgO7a7pJRKnAQmul0U4pz
U1cnH/dgbngUoAPlxU2U2xTmyv4nXgf/dw0Y0v0+168qhg7XNgnUf7nTSmtJ4G9D
V0Yw55HaIW2gcjVHQ645BrRPikhVtDrjQvXQAQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKNWo+SVsRq2FYdJnCkQgKk4kGUtMB8GA1UdIwQYMBaAFIhQls2m53KNwZwT
OUWBdLVpbkT0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWQ0NGU1
Y2M4NjIzYzVjZGFiZDU1OWJkYWQ2ODhlOWYwMzc1OTUzMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmNmOTE5NzAtOTAzYS00NzM0LTgxNWYtNzYyYjM4
ZWZlNWEzLzZjOGZiMmI1MjZjN2JlNWFmN2E0YzI0MjNhNDdhMDM2OTkzZTY0MDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iY2Y5MTk3MC05MDNhLTQ3MzQtODE1Zi03NjJi
MzhlZmU1YTMvOWQ0NGU1Y2M4NjIzYzVjZGFiZDU1OWJkYWQ2ODhlOWYwMzc1OTUz
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIrM5TANBgkqhkiG9w0BAQsFAAOCAQEACp/UuM9ADdF5d7vz
FcLXnGyInESJ0F/jzrPtWN23SsP2ZkNk0HDG4bl4x6VTGggcygCyCkcUc+nDLutT
wwpzYEfhGDTszX13Xngjsb/SIrmkrf08uWEh03nUqw8s5MvcI+qJlRm3hegHHX1M
mnUt2Hs+lgollcKg43/pX8vh4RxqUy6TBiqOnlKAPdjzyDaKZZOuBNlmxg6daeVi
vdFzVJ/d/7CvFi2b/YSvoxnIfNnbIWEX+Dn9IsF3qj3mTsInh9Z7fHomMROKwFPs
GYwIqqteCCOUR5y8dxCo/lEoQyc+TUBttL2uhbiSfFGoqnp5QvY/y7Z5952Yi+Mf
J7Vv+A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org