Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/b9adb3fef651153badb5dc5ad87d114093845e97.roa
File: b9adb3fef651153badb5dc5ad87d114093845e97.roa (raw, json)
Hash identifier: G7hixDkv7fJboiPtvMfkb9xCsuKfpW1QEi9ogu8OAsI=
Subject key identifier: 18:7A:A0:D6:24:2B:11:75:C7:3F:E8:EB:7E:99:48:A2:43:47:74:3A
Certificate issuer: /CN=5842a35efb02d60e07426e0d03b3de78f9d908db
Certificate serial: 5CE8
Authority key identifier: ED:8B:CA:8A:42:45:08:D7:40:0B:74:41:B1:45:0A:49:10:D8:6E:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5842a35efb02d60e07426e0d03b3de78f9d908db.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/b9adb3fef651153badb5dc5ad87d114093845e97.roa
Signing time: Wed 24 Mar 2021 14:29:51 +0000
ROA not before: Wed 24 Mar 2021 14:29:51 +0000
ROA not after: Tue 24 Mar 2026 14:29:51 +0000
asID: 265704
IP address blocks: 138.36.220.0/22 maxlen: 24
168.181.176.0/22 maxlen: 24
2803:cf80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23784 (0x5ce8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5842a35efb02d60e07426e0d03b3de78f9d908db
Validity
Not Before: Mar 24 14:29:51 2021 GMT
Not After : Mar 24 14:29:51 2026 GMT
Subject: CN=b9adb3fef651153badb5dc5ad87d114093845e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:1c:cc:34:e1:97:ab:c3:68:13:a0:79:7d:
8e:a9:f7:7f:6b:b4:b1:a4:5f:f0:5b:57:ae:c1:b2:
fa:17:6e:62:bb:ea:78:27:b7:be:f7:31:9f:cc:6c:
2a:d8:12:3f:c0:6d:63:2e:57:ab:50:ab:d9:4f:bc:
f1:1e:ef:66:49:35:89:b1:a9:ff:86:7c:4a:96:0d:
3a:d5:d6:99:7d:53:bf:0b:e7:c7:ca:f3:e1:d7:62:
0a:7a:ec:cc:6c:0a:45:d2:17:fe:d1:e2:7f:ab:3c:
9a:9b:c9:cf:bc:50:f5:02:f3:ca:ed:69:4c:b2:3d:
a5:c2:ae:36:e0:3e:e5:c1:91:5e:00:71:33:a1:38:
db:99:a7:d3:d0:ed:20:c2:d5:1a:e3:47:f0:8d:c7:
58:2a:08:19:c2:c0:62:5c:67:08:c0:48:b6:8f:80:
2b:84:4e:e4:8c:69:d9:84:31:e9:25:22:32:86:c5:
d3:49:0b:03:83:e1:cd:f8:42:d6:07:d5:59:a1:02:
64:a4:49:d7:f7:4d:cb:00:70:a3:bc:78:18:70:28:
94:c0:77:73:c9:be:8b:2f:61:72:df:cf:03:e2:21:
61:9a:3e:99:97:09:f7:bf:5a:b6:05:cc:3c:2a:50:
83:58:5a:1b:62:0f:f5:d9:18:95:38:f2:7d:39:cc:
47:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7A:A0:D6:24:2B:11:75:C7:3F:E8:EB:7E:99:48:A2:43:47:74:3A
X509v3 Authority Key Identifier:
keyid:ED:8B:CA:8A:42:45:08:D7:40:0B:74:41:B1:45:0A:49:10:D8:6E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5842a35efb02d60e07426e0d03b3de78f9d908db.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/b9adb3fef651153badb5dc5ad87d114093845e97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/5842a35efb02d60e07426e0d03b3de78f9d908db.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.220.0/22
168.181.176.0/22
IPv6:
2803:cf80::/32
Signature Algorithm: sha256WithRSAEncryption
0d:ab:c5:c5:47:0c:4b:ea:55:7f:f9:5b:d7:33:5d:df:8a:12:
bc:19:21:24:1c:ac:1e:12:21:a6:c6:51:a5:8c:64:47:b3:06:
b9:04:2b:95:23:53:d2:91:87:fb:94:77:d2:05:b7:10:6a:a6:
bd:2f:e3:e5:dc:5b:13:da:9c:e4:b3:e7:6d:d6:c8:4d:e8:a0:
e5:2f:ec:8c:46:4a:5b:bd:3f:ce:ea:d1:2a:24:11:3e:d7:f3:
b7:16:1e:8a:89:85:45:06:be:e1:08:56:83:5e:6c:b6:6a:d1:
f3:98:26:95:bd:4b:42:e9:b5:cb:b2:2f:c8:ca:cf:64:67:2d:
a9:39:f7:06:1d:69:2a:dd:65:3a:81:81:30:61:ae:1f:c4:f8:
10:86:2f:b9:8d:1f:04:db:bc:1c:d1:0b:ba:b9:6d:49:b6:32:
8e:74:70:53:18:e6:26:0c:cd:71:32:68:6f:69:4e:86:b9:72:
aa:eb:85:f2:02:28:ea:6e:22:f4:53:54:7c:59:3a:d7:3e:21:
65:74:f6:ef:43:65:d3:f6:61:e5:b5:9e:ba:d4:9e:14:67:4b:
e1:2b:4e:42:fa:e2:60:19:10:cc:c6:50:53:1a:e0:00:38:63:
1f:2a:55:f9:1c:fa:90:19:c7:82:83:d9:d9:78:33:ee:dc:3d:
14:e9:cf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org