Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/74fcb88270562d0a0497e86dc549befe1429ecc9.roa
File: 74fcb88270562d0a0497e86dc549befe1429ecc9.roa (raw, json)
Hash identifier: n8H/Dui9gUnX0YaTEzGrwWd9N1gymHDvYmL3gf4Mk/8=
Subject key identifier: 13:F3:D6:0E:70:7C:AE:5E:AD:45:27:40:D6:5D:EC:BB:22:67:F5:27
Certificate issuer: /CN=231291584c896b71599d4bb8b4d15a658a7149ad
Certificate serial: 10150E
Authority key identifier: 64:87:98:0A:B6:3E:2D:3E:AC:27:72:40:35:FA:EC:BA:BC:5A:F0:B3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/231291584c896b71599d4bb8b4d15a658a7149ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/74fcb88270562d0a0497e86dc549befe1429ecc9.roa
Signing time: Tue 11 Jul 2023 19:05:06 +0000
ROA not before: Mon 10 Jul 2023 19:05:06 +0000
ROA not after: Fri 11 Jul 2025 19:05:06 +0000
asID: 20207
IP address blocks: 181.174.172.0/22 maxlen: 24
181.174.176.0/21 maxlen: 24
138.122.128.0/22 maxlen: 24
2803:cc80::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1053966 (0x10150e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231291584c896b71599d4bb8b4d15a658a7149ad
Validity
Not Before: Jul 10 19:05:06 2023 GMT
Not After : Jul 11 19:05:06 2025 GMT
Subject: CN=74fcb88270562d0a0497e86dc549befe1429ecc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:cf:3d:7a:9a:af:25:1f:c8:ad:a8:7a:3e:95:
8d:40:a7:bd:37:7b:62:35:cf:dd:6d:19:74:c4:36:
01:dd:ac:de:10:c6:00:1b:b0:e3:21:0c:f3:9d:41:
90:b7:2f:51:5e:42:2d:db:40:88:e0:f2:5b:7e:23:
55:59:9d:79:1f:58:71:1d:93:a2:c7:54:a9:3e:c9:
3d:78:86:f0:4f:55:f2:e7:4f:c9:27:4f:4e:97:ef:
da:da:fb:24:53:4f:f7:9a:3d:ee:97:c3:8c:32:9d:
89:8b:f5:a7:f1:8d:6a:f6:76:8a:11:c8:cf:f3:76:
de:1a:e8:51:37:b8:ac:62:27:f7:34:36:a2:bb:19:
ff:df:83:15:de:4b:0d:40:62:f6:96:62:26:46:82:
68:09:9d:ef:64:a9:02:0e:c5:26:bc:4a:10:0f:70:
19:cb:d2:1d:d1:98:b7:c6:d2:b9:f7:98:f6:31:a8:
a4:22:2d:f1:a9:4f:cd:3d:3e:6a:46:cd:68:4e:8a:
2b:56:fd:a9:75:d0:cf:aa:d7:64:b6:49:9d:d1:b2:
af:71:60:1d:15:b1:4d:f1:1b:46:9d:82:1c:be:ad:
77:2b:c4:a0:9b:2c:e0:21:3c:d9:b4:f4:09:e0:01:
a0:dd:dd:cb:0e:f7:f9:f0:c1:2b:5c:48:17:61:ab:
4c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F3:D6:0E:70:7C:AE:5E:AD:45:27:40:D6:5D:EC:BB:22:67:F5:27
X509v3 Authority Key Identifier:
keyid:64:87:98:0A:B6:3E:2D:3E:AC:27:72:40:35:FA:EC:BA:BC:5A:F0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/231291584c896b71599d4bb8b4d15a658a7149ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/74fcb88270562d0a0497e86dc549befe1429ecc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/231291584c896b71599d4bb8b4d15a658a7149ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.128.0/22
181.174.172.0-181.174.183.255
IPv6:
2803:cc80::/32
Signature Algorithm: sha256WithRSAEncryption
2d:62:dd:73:71:bc:39:9a:61:2f:49:4c:3f:13:49:e6:c8:4c:
75:7b:a6:09:45:ac:53:b0:be:dc:e8:77:a1:6f:c1:96:03:69:
bc:0f:56:d9:28:72:23:a3:3e:bc:51:01:85:fb:ae:24:6b:f8:
3f:e6:19:53:b9:04:2d:16:4f:a7:4b:58:a1:8e:92:ae:18:b8:
66:3f:7c:b9:80:3e:3f:00:56:40:0d:99:af:5f:f9:7e:64:47:
45:57:89:fb:b9:dd:fc:fa:e5:79:de:27:f1:ff:8a:25:da:36:
6c:7d:dc:ff:c3:21:da:90:b3:ec:34:78:e4:8a:dd:31:05:80:
5f:92:fd:25:36:f3:54:cd:9b:28:02:8f:0e:f5:34:3e:b4:d6:
93:ca:2f:11:69:43:67:51:e6:e9:eb:f5:68:ba:c8:5f:43:6c:
d7:19:3d:fd:dd:2c:fa:dd:3a:20:8a:0e:a9:7a:a9:e7:f2:a2:
b7:8d:ef:d7:14:66:21:4d:5f:cb:d8:51:ad:79:37:a2:80:9f:
a8:02:67:88:e6:a2:cd:6e:29:84:44:9d:1c:45:06:a6:a9:65:
e3:64:63:d1:04:48:1c:7b:fe:eb:17:7d:15:c5:58:5c:23:a3:
34:4d:b7:9a:7d:70:0a:e7:ca:a4:71:70:79:84:8c:05:57:bb:
6b:0c:64:57
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIDEBUOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIz
MTI5MTU4NGM4OTZiNzE1OTlkNGJiOGI0ZDE1YTY1OGE3MTQ5YWQwHhcNMjMwNzEw
MTkwNTA2WhcNMjUwNzExMTkwNTA2WjAzMTEwLwYDVQQDEyg3NGZjYjg4MjcwNTYy
ZDBhMDQ5N2U4NmRjNTQ5YmVmZTE0MjllY2M5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA9s89epqvJR/Irah6PpWNQKe9N3tiNc/dbRl0xDYB3azeEMYA
G7DjIQzznUGQty9RXkIt20CI4PJbfiNVWZ15H1hxHZOix1SpPsk9eIbwT1Xy50/J
J09Ol+/a2vskU0/3mj3ul8OMMp2Ji/Wn8Y1q9naKEcjP83beGuhRN7isYif3NDai
uxn/34MV3ksNQGL2lmImRoJoCZ3vZKkCDsUmvEoQD3AZy9Id0Zi3xtK595j2Maik
Ii3xqU/NPT5qRs1oToorVv2pddDPqtdktkmd0bKvcWAdFbFN8RtGnYIcvq13K8Sg
myzgITzZtPQJ4AGg3d3LDvf58MErXEgXYatMKQIDAQABo4ICeDCCAnQwHQYDVR0O
BBYEFBPz1g5wfK5erUUnQNZd7LsiZ/UnMB8GA1UdIwQYMBaAFGSHmAq2Pi0+rCdy
QDX67Lq8WvCzMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjMxMjkx
NTg0Yzg5NmI3MTU5OWQ0YmI4YjRkMTVhNjU4YTcxNDlhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGU4NGUwMDAtZjUxMy00MTkxLWE4YmEtMTFmNzFh
YWJmNDcyLzc0ZmNiODgyNzA1NjJkMGEwNDk3ZTg2ZGM1NDliZWZlMTQyOWVjYzku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kZTg0ZTAwMC1mNTEzLTQxOTEtYThiYS0xMWY3
MWFhYmY0NzIvMjMxMjkxNTg0Yzg5NmI3MTU5OWQ0YmI4YjRkMTVhNjU4YTcxNDlh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8BggrBgEFBQcBBwEB/wQt
MCswGgQCAAEwFAMEAop6gDAMAwQCta6sAwQDta6wMA0EAgACMAcDBQAoA8yAMA0G
CSqGSIb3DQEBCwUAA4IBAQAtYt1zcbw5mmEvSUw/E0nmyEx1e6YJRaxTsL7c6Heh
b8GWA2m8D1bZKHIjoz68UQGF+64ka/g/5hlTuQQtFk+nS1ihjpKuGLhmP3y5gD4/
AFZADZmvX/l+ZEdFV4n7ud38+uV53ifx/4ol2jZsfdz/wyHakLPsNHjkit0xBYBf
kv0lNvNUzZsoAo8O9TQ+tNaTyi8RaUNnUebp6/VoushfQ2zXGT393Sz63Togig6p
eqnn8qK3je/XFGYhTV/L2FGteTeigJ+oAmeI5qLNbimERJ0cRQamqWXjZGPRBEgc
e/7rF30VxVhcI6M0TbeafXAK58qkcXB5hIwFV7trDGRX
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org