Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/19562ebf3ed2f44ea567decbe92611a74f5ad721.roa
File: 19562ebf3ed2f44ea567decbe92611a74f5ad721.roa (raw, json)
Hash identifier: ulVdJD96fkvnC4NR8eJMYOzu2o6McC9xkfdyCv6khKg=
Subject key identifier: 0D:78:A8:6E:59:DF:13:11:93:B9:4D:F2:A7:C2:9D:48:37:32:89:45
Certificate issuer: /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial: 145521
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/19562ebf3ed2f44ea567decbe92611a74f5ad721.roa
Signing time: Thu 31 Aug 2023 08:30:03 +0000
ROA not before: Wed 30 Aug 2023 08:30:03 +0000
ROA not after: Fri 29 Aug 2025 08:30:03 +0000
asID: 263833
IP address blocks: 138.255.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1332513 (0x145521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Validity
Not Before: Aug 30 08:30:03 2023 GMT
Not After : Aug 29 08:30:03 2025 GMT
Subject: CN=19562ebf3ed2f44ea567decbe92611a74f5ad721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c6:03:c7:90:0f:7e:b8:50:54:0e:34:bc:3e:
a7:9c:13:85:b6:5e:b4:d4:74:c5:85:36:15:79:c1:
6d:a0:a8:01:f6:95:47:ed:ff:f5:32:2b:5f:b9:17:
6b:b2:54:9d:dd:c0:8c:5e:96:ee:fc:19:fa:99:62:
3e:0d:d7:af:d5:1d:49:b3:3c:46:27:9f:b8:a1:4c:
4d:91:09:3b:7a:5d:11:ff:7e:29:06:59:89:81:b4:
59:32:26:0b:5b:1a:44:a0:60:9e:3c:48:d6:f9:d0:
52:3d:7e:28:a9:db:d2:75:fd:84:da:6b:8e:a5:a6:
3d:61:c6:d7:1e:18:b5:81:fc:55:17:25:b0:f5:a5:
0a:43:d8:cb:8c:a5:88:e6:86:91:1d:33:9c:99:c6:
b2:77:68:6e:82:5b:23:ea:a7:02:d6:82:02:99:54:
f8:ce:4a:04:bb:48:62:38:48:a8:74:12:1c:5c:11:
2e:2d:b7:61:7a:a1:8e:be:cd:da:95:ba:a1:f6:98:
94:ff:90:2f:b0:fe:d7:8f:3f:b3:e1:e8:bb:82:02:
ae:fd:b8:00:ae:ae:6c:27:8a:c8:ca:5d:bd:9b:23:
47:77:41:54:f1:25:d6:65:5b:d1:32:43:bd:11:e8:
0a:0a:18:0a:49:8c:b3:6b:a9:b7:78:c6:97:b6:5d:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:78:A8:6E:59:DF:13:11:93:B9:4D:F2:A7:C2:9D:48:37:32:89:45
X509v3 Authority Key Identifier:
keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/19562ebf3ed2f44ea567decbe92611a74f5ad721.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.170.0/23
Signature Algorithm: sha256WithRSAEncryption
31:cb:01:ae:99:74:07:ee:07:78:68:6e:31:7c:fd:fb:40:c6:
a5:8f:3c:89:55:be:4c:11:c4:57:90:23:c3:55:44:bb:a2:3e:
54:c0:3f:72:fc:f4:ec:c9:5b:8e:91:95:f4:74:41:ba:b5:a1:
6a:52:a7:ea:e5:3e:6b:22:46:02:0e:fd:70:1b:81:07:2f:a4:
41:84:2a:2f:f3:95:1d:bf:37:a3:45:3c:59:86:08:48:72:e9:
aa:27:d4:1b:02:b0:91:6a:43:07:f7:4b:03:34:48:1c:e1:4e:
e6:ef:40:35:b0:64:b4:82:53:b7:3f:7a:ea:af:3c:2c:14:54:
9f:af:bd:d3:50:fd:f1:6f:f0:0c:7b:4d:e4:dc:2f:8f:2f:fc:
20:8b:2d:46:af:e1:9f:e7:cf:83:6f:02:48:09:12:6f:94:eb:
a1:c4:18:7c:6c:19:bb:50:51:3c:dd:4b:9a:5c:d5:b4:cc:7e:
c9:56:04:22:55:20:5d:de:51:53:62:8a:fe:4f:a1:07:30:6e:
86:60:b0:fc:56:e2:87:70:e9:76:bc:76:78:63:19:86:01:ba:
84:46:22:1a:43:43:2a:7a:fe:9f:7c:d3:99:45:58:13:6c:62:
57:dc:13:a9:3c:9e:c6:e8:28:4c:66:65:97:c6:1f:ca:fc:86:
11:bf:73:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:37 2024 by rpki-client on console-ams.rpki-client.org