Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6e1f083-cd72-40f5-aee0-6c1b7fafe441/cc3a5f6d3660da79291638cb5f9adc003cf99a49.roa
File: cc3a5f6d3660da79291638cb5f9adc003cf99a49.roa (raw, json)
Hash identifier: ODSj0QCKhOgiJ/qF+xxdoqTsDlW/TqvK6zVWG9CozzE=
Subject key identifier: 26:23:67:FB:61:D4:7E:AA:1E:35:78:C8:F1:39:63:63:88:F6:D5:DA
Certificate issuer: /CN=d9a06b12727bc0ed97a16a645ac286bdc41e63dc
Certificate serial: 11C464
Authority key identifier: C5:6C:A0:40:97:DB:4E:D9:37:61:A5:3F:4B:DF:23:0C:1A:E5:78:28
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9a06b12727bc0ed97a16a645ac286bdc41e63dc.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6e1f083-cd72-40f5-aee0-6c1b7fafe441/cc3a5f6d3660da79291638cb5f9adc003cf99a49.roa
Signing time: Tue 03 Oct 2023 08:30:09 +0000
ROA not before: Mon 02 Oct 2023 08:30:09 +0000
ROA not after: Wed 01 Oct 2025 08:30:09 +0000
asID: 263829
IP address blocks: 138.36.136.0/22 maxlen: 22
138.219.72.0/22 maxlen: 22
168.181.228.0/22 maxlen: 22
170.82.0.0/22 maxlen: 22
2803:8f80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1164388 (0x11c464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a06b12727bc0ed97a16a645ac286bdc41e63dc
Validity
Not Before: Oct 2 08:30:09 2023 GMT
Not After : Oct 1 08:30:09 2025 GMT
Subject: CN=cc3a5f6d3660da79291638cb5f9adc003cf99a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:c1:40:77:09:a0:6a:b1:f1:1e:fb:2f:d9:
8d:6f:9a:87:c1:49:3c:c5:70:ae:ee:3c:79:42:dd:
63:d1:63:43:4e:f6:76:e6:af:16:f2:4e:65:e1:16:
25:fb:46:66:ba:47:e0:e3:26:74:9b:8f:37:30:47:
bf:b9:69:6a:75:8c:02:f6:a7:42:5e:02:74:01:e5:
67:8d:8b:6c:0e:a9:d2:80:4c:df:0e:df:95:92:34:
c1:e3:0f:72:07:18:a7:16:0d:7e:8f:86:08:1d:eb:
21:32:22:c0:21:be:2d:8f:9c:85:4e:cc:e1:11:f7:
78:85:4a:9f:56:63:1c:a9:bc:7c:64:34:1e:b9:2f:
2e:9d:3f:06:15:ea:b7:4a:59:33:05:51:8e:7d:82:
91:0c:65:16:89:9d:a3:36:a3:6f:48:6a:23:68:04:
0a:36:a8:44:6a:2f:f8:a8:0a:0a:89:fa:b5:45:87:
88:15:7d:9a:b3:7a:cf:94:0d:fc:50:09:36:ab:da:
7f:86:9d:49:e9:22:89:e4:30:2f:14:d3:ef:f8:e2:
0a:49:d7:11:50:fa:4f:43:44:5a:76:7f:ab:f5:4b:
55:79:5b:82:9c:61:63:88:9d:95:99:5c:a2:aa:12:
68:b2:76:c0:1d:b2:5d:f8:3a:9e:d1:07:7a:06:4d:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:23:67:FB:61:D4:7E:AA:1E:35:78:C8:F1:39:63:63:88:F6:D5:DA
X509v3 Authority Key Identifier:
keyid:C5:6C:A0:40:97:DB:4E:D9:37:61:A5:3F:4B:DF:23:0C:1A:E5:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9a06b12727bc0ed97a16a645ac286bdc41e63dc.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6e1f083-cd72-40f5-aee0-6c1b7fafe441/cc3a5f6d3660da79291638cb5f9adc003cf99a49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6e1f083-cd72-40f5-aee0-6c1b7fafe441/d9a06b12727bc0ed97a16a645ac286bdc41e63dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.136.0/22
138.219.72.0/22
168.181.228.0/22
170.82.0.0/22
IPv6:
2803:8f80::/32
Signature Algorithm: sha256WithRSAEncryption
71:34:10:02:e1:cb:2c:d6:fa:61:cc:94:aa:a9:70:fd:d2:cb:
40:2e:1d:05:00:78:87:a3:7d:8a:13:fb:5f:77:ba:30:f2:fa:
f7:8b:06:4d:7d:67:1b:1d:38:5f:88:87:1a:81:2c:36:64:d2:
47:56:3a:9c:64:22:81:a7:c1:ec:b7:e9:bd:b9:29:cf:55:6a:
c0:51:cf:66:43:0e:bb:a3:89:14:2a:dc:83:e9:35:5b:c0:2c:
80:af:f1:af:21:dc:a3:3f:73:93:ef:cf:b6:f8:ac:03:51:fe:
0c:52:27:0c:04:62:d7:8c:3f:f4:b9:72:3c:1b:06:28:c6:9c:
6f:8c:09:66:83:ac:0d:f5:cc:fb:d8:3d:9a:31:99:3f:cd:4e:
a0:60:62:46:80:f8:d2:d6:c2:1d:21:48:21:c0:c3:b9:94:3e:
ff:5e:f5:26:b6:83:33:1a:69:42:b9:79:20:3d:2a:35:e9:ea:
c1:14:2e:48:05:72:a2:0b:8e:f6:b2:70:e6:cf:2e:88:74:0b:
46:88:4a:bd:c3:86:f2:9c:91:b4:f9:ee:c5:61:af:2f:79:96:
d9:b3:7e:bb:4f:70:79:24:70:91:cf:ef:44:e1:82:90:7b:e5:
58:c4:45:23:42:8e:21:7d:81:59:f3:12:bd:69:af:ab:38:8b:
05:6e:c1:aa
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIDEcRkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
YTA2YjEyNzI3YmMwZWQ5N2ExNmE2NDVhYzI4NmJkYzQxZTYzZGMwHhcNMjMxMDAy
MDgzMDA5WhcNMjUxMDAxMDgzMDA5WjAzMTEwLwYDVQQDEyhjYzNhNWY2ZDM2NjBk
YTc5MjkxNjM4Y2I1ZjlhZGMwMDNjZjk5YTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtO3BQHcJoGqx8R77L9mNb5qHwUk8xXCu7jx5Qt1j0WNDTvZ2
5q8W8k5l4RYl+0Zmukfg4yZ0m483MEe/uWlqdYwC9qdCXgJ0AeVnjYtsDqnSgEzf
Dt+VkjTB4w9yBxinFg1+j4YIHeshMiLAIb4tj5yFTszhEfd4hUqfVmMcqbx8ZDQe
uS8unT8GFeq3SlkzBVGOfYKRDGUWiZ2jNqNvSGojaAQKNqhEai/4qAoKifq1RYeI
FX2as3rPlA38UAk2q9p/hp1J6SKJ5DAvFNPv+OIKSdcRUPpPQ0Radn+r9UtVeVuC
nGFjiJ2VmVyiqhJosnbAHbJd+Dqe0Qd6Bk3R9QIDAQABo4ICfDCCAngwHQYDVR0O
BBYEFCYjZ/th1H6qHjV4yPE5Y2OI9tXaMB8GA1UdIwQYMBaAFMVsoECX207ZN2Gl
P0vfIwwa5XgoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDlhMDZi
MTI3MjdiYzBlZDk3YTE2YTY0NWFjMjg2YmRjNDFlNjNkYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDZlMWYwODMtY2Q3Mi00MGY1LWFlZTAtNmMxYjdm
YWZlNDQxL2NjM2E1ZjZkMzY2MGRhNzkyOTE2MzhjYjVmOWFkYzAwM2NmOTlhNDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNmUxZjA4My1jZDcyLTQwZjUtYWVlMC02YzFi
N2ZhZmU0NDEvZDlhMDZiMTI3MjdiYzBlZDk3YTE2YTY0NWFjMjg2YmRjNDFlNjNk
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQx
MC8wHgQCAAEwGAMEAookiAMEAorbSAMEAqi15AMEAqpSADANBAIAAjAHAwUAKAOP
gDANBgkqhkiG9w0BAQsFAAOCAQEAcTQQAuHLLNb6YcyUqqlw/dLLQC4dBQB4h6N9
ihP7X3e6MPL694sGTX1nGx04X4iHGoEsNmTSR1Y6nGQigafB7Lfpvbkpz1VqwFHP
ZkMOu6OJFCrcg+k1W8AsgK/xryHcoz9zk+/PtvisA1H+DFInDARi14w/9LlyPBsG
KMacb4wJZoOsDfXM+9g9mjGZP81OoGBiRoD40tbCHSFIIcDDuZQ+/171JraDMxpp
Qrl5ID0qNenqwRQuSAVyoguO9rJw5s8uiHQLRohKvcOG8pyRtPnuxWGvL3mW2bN+
u09weSRwkc/vROGCkHvlWMRFI0KOIX2BWfMSvWmvqziLBW7Bqg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org