Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c8e44697-6439-4ff4-8eca-cbfb1cb9fa18/a9d06ccb6bdf44a20736d946e232ca668f65ff04.roa
File: a9d06ccb6bdf44a20736d946e232ca668f65ff04.roa (raw, json)
Hash identifier: loIxaLpbrn/sWu2uzHshX4Q//Rx5JnNB9adOy+FrTno=
Subject key identifier: 93:C8:22:52:C2:41:36:0A:78:6A:16:86:C1:F9:72:35:1A:0A:8B:61
Certificate issuer: /CN=bd6057380dd89aff72d7ae49a56065fc54e4eeee
Certificate serial: 121003
Authority key identifier: F0:C8:B1:04:9F:A1:06:94:7E:E6:C0:0B:55:38:AC:EB:10:2B:ED:F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd6057380dd89aff72d7ae49a56065fc54e4eeee.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c8e44697-6439-4ff4-8eca-cbfb1cb9fa18/a9d06ccb6bdf44a20736d946e232ca668f65ff04.roa
Signing time: Tue 21 Nov 2023 07:30:00 +0000
ROA not before: Tue 21 Nov 2023 07:30:00 +0000
ROA not after: Thu 20 Nov 2025 07:30:00 +0000
asID: 28397
IP address blocks: 138.94.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1183747 (0x121003)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6057380dd89aff72d7ae49a56065fc54e4eeee
Validity
Not Before: Nov 21 07:30:00 2023 GMT
Not After : Nov 20 07:30:00 2025 GMT
Subject: CN=a9d06ccb6bdf44a20736d946e232ca668f65ff04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:18:2a:5f:15:cb:fa:df:ce:52:c6:67:53:
4c:40:c6:4a:4b:91:3a:67:4c:73:9c:5e:d2:5a:2a:
c7:59:9f:b1:fc:7e:a6:8a:f6:21:89:e7:e0:66:02:
1a:85:7b:48:10:98:29:12:af:b7:cf:a3:29:56:94:
12:09:9e:2c:92:d8:f8:77:82:7c:dd:ca:16:30:fe:
c7:dc:ac:cc:db:92:63:67:d7:58:34:72:37:50:18:
c6:7b:5e:ca:c2:03:b7:18:cd:27:2d:a1:7b:44:66:
80:8b:48:13:20:43:f0:01:62:99:57:bf:d9:b3:9e:
42:68:e9:03:e0:27:6e:78:d4:f9:d7:7b:91:36:3a:
49:4b:ac:04:54:04:c5:05:f7:cb:4f:fc:65:e4:39:
4f:a7:99:81:b8:a3:6c:06:1b:b1:18:92:4d:e6:54:
1f:7c:54:2b:07:a6:ed:ed:b7:07:56:54:51:85:be:
9d:bb:ec:34:50:b1:9f:7e:36:ed:16:bd:1d:df:9b:
9c:78:e4:12:4c:6b:7f:6d:b2:a6:18:c9:b7:80:26:
81:e7:63:e2:60:6c:f2:84:b5:05:3d:af:7b:41:32:
d0:1b:f4:0a:03:e0:93:74:44:fa:9e:49:2a:05:6c:
d6:9f:59:9f:c5:ca:99:9d:28:1a:38:2c:54:32:fc:
f6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C8:22:52:C2:41:36:0A:78:6A:16:86:C1:F9:72:35:1A:0A:8B:61
X509v3 Authority Key Identifier:
keyid:F0:C8:B1:04:9F:A1:06:94:7E:E6:C0:0B:55:38:AC:EB:10:2B:ED:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd6057380dd89aff72d7ae49a56065fc54e4eeee.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c8e44697-6439-4ff4-8eca-cbfb1cb9fa18/a9d06ccb6bdf44a20736d946e232ca668f65ff04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c8e44697-6439-4ff4-8eca-cbfb1cb9fa18/bd6057380dd89aff72d7ae49a56065fc54e4eeee.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.140.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:44:62:de:53:78:6d:4c:21:99:d9:3e:f7:e2:e5:88:8c:0b:
21:ce:a7:44:e2:07:03:ac:92:36:b1:08:ef:7f:48:24:c5:d7:
3f:9c:7e:1e:bf:2b:b4:c3:4f:c4:e4:a9:88:98:9f:16:2c:0a:
a0:41:a8:a5:41:df:b8:7c:94:cc:13:fd:e7:9b:ff:27:5e:d2:
89:82:ad:c0:90:47:df:a2:7a:9c:0b:71:e1:83:ce:6e:bc:ff:
c9:3e:b6:4f:df:d1:20:c0:a9:75:42:bc:89:f3:77:01:52:be:
2a:b5:aa:b2:e6:a8:ae:ff:e2:6e:ec:ee:3c:b3:79:b6:b6:6e:
fe:29:a1:de:8d:6c:c6:89:ae:5a:00:1b:ba:96:e0:a7:1d:d9:
78:f3:62:b4:ac:a1:aa:4c:12:54:25:1e:b1:5d:39:9a:99:1f:
df:d0:75:5f:a5:f3:94:5e:aa:09:42:b3:c2:7f:51:5f:66:50:
aa:ea:fd:0e:b0:3b:3a:d4:64:04:c4:86:0a:4b:35:ef:57:67:
43:d9:83:f8:27:04:b5:f9:ad:76:bd:4b:f3:69:62:6a:ef:ae:
a9:79:49:a2:3d:39:65:1d:db:42:69:e6:06:f7:0e:32:b9:52:
29:df:87:cf:6c:22:4f:b9:64:4e:6e:63:04:74:3d:b2:a9:ec:
da:24:96:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org