Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f06b4ed2-191b-42ce-b493-8366f066efe0/1c60a83a86f8ab945f8cebf2c7ba51319ade6ab9.roa
File: 1c60a83a86f8ab945f8cebf2c7ba51319ade6ab9.roa (raw, json)
Hash identifier: IgJcCNnFHD92hwpeFw27aA+zpeFM4anRK66UItcHeds=
Subject key identifier: 9F:98:8F:E7:23:00:04:76:D0:43:A9:FE:6F:D5:FC:1A:67:B1:7E:1D
Certificate issuer: /CN=965400f367a3b50c2a9a6934837510a29a8a229f
Certificate serial: 062829
Authority key identifier: A5:FD:1E:FC:E0:65:40:BA:F0:28:40:9B:1C:21:2B:70:C6:AE:E6:F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/965400f367a3b50c2a9a6934837510a29a8a229f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f06b4ed2-191b-42ce-b493-8366f066efe0/1c60a83a86f8ab945f8cebf2c7ba51319ade6ab9.roa
Signing time: Thu 28 Jul 2022 10:43:36 +0000
ROA not before: Thu 28 Jul 2022 03:00:00 +0000
ROA not after: Sun 28 Jul 2024 03:00:00 +0000
asID: 262287
IP address blocks: 138.99.208.0/24 maxlen: 24
138.99.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403497 (0x62829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965400f367a3b50c2a9a6934837510a29a8a229f
Validity
Not Before: Jul 28 03:00:00 2022 GMT
Not After : Jul 28 03:00:00 2024 GMT
Subject: CN=1c60a83a86f8ab945f8cebf2c7ba51319ade6ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:e0:6d:5e:54:61:fe:1d:be:2d:78:7f:8d:
33:0d:e0:d2:4e:47:6f:bc:0d:73:65:a6:f3:67:eb:
41:03:a4:35:11:20:6a:cd:ec:ee:45:4b:59:1d:3c:
cb:43:c2:cd:66:b0:0f:58:42:61:9a:a2:ef:1e:86:
bb:07:ac:3f:2a:40:ab:39:b9:8a:eb:6f:a8:40:e3:
d5:b2:61:f7:83:18:80:db:c7:6a:b3:d9:5e:bc:ff:
d7:63:88:ff:12:5c:ff:14:30:ad:7e:3f:b2:8b:57:
53:5c:4a:63:8e:c2:5b:38:59:f0:5e:67:51:b5:87:
3e:7e:30:26:03:88:cf:1d:90:cf:9f:16:ba:be:d0:
c1:6a:5d:76:14:bc:ff:71:71:69:1b:93:e5:c6:e8:
07:9a:9b:ef:fe:e4:6e:8a:72:ac:21:32:3a:e5:ff:
0f:b3:7d:7f:93:61:2e:9a:84:93:fd:cd:91:7f:31:
0c:3f:68:20:bb:64:1a:51:e5:40:4b:51:53:56:9f:
b4:a1:7f:d5:9b:76:e0:d2:48:4e:1f:0a:dc:23:d0:
99:a3:8b:d3:bf:ee:36:16:13:51:b6:3a:cc:11:38:
57:0e:89:5b:d3:ba:dd:61:7f:a3:a3:6a:16:a2:a2:
86:63:f8:ce:78:70:9e:95:24:6f:cf:ae:3d:65:b9:
7b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:98:8F:E7:23:00:04:76:D0:43:A9:FE:6F:D5:FC:1A:67:B1:7E:1D
X509v3 Authority Key Identifier:
keyid:A5:FD:1E:FC:E0:65:40:BA:F0:28:40:9B:1C:21:2B:70:C6:AE:E6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/965400f367a3b50c2a9a6934837510a29a8a229f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f06b4ed2-191b-42ce-b493-8366f066efe0/1c60a83a86f8ab945f8cebf2c7ba51319ade6ab9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f06b4ed2-191b-42ce-b493-8366f066efe0/965400f367a3b50c2a9a6934837510a29a8a229f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.208.0/24
138.99.210.0/23
Signature Algorithm: sha256WithRSAEncryption
45:61:a2:e1:5a:b9:6a:c8:a0:8e:9e:8f:7f:3e:24:e4:e3:6d:
70:50:0c:7f:ae:08:6b:05:c2:f5:3c:62:c7:cc:ad:8b:a0:13:
61:f6:4c:1d:a4:29:9a:fa:bd:8c:44:d1:90:45:f3:c4:50:cd:
76:e2:1b:82:83:26:1a:34:df:5a:50:2d:cb:d8:f5:aa:44:80:
42:24:89:b2:44:22:ce:db:6f:c9:6d:10:e8:13:ea:54:9e:99:
41:c0:ee:5f:7a:51:09:ba:41:e0:ea:ab:38:2c:ce:39:9a:d4:
1f:2d:4d:66:03:04:d7:cc:4e:9f:8d:3a:4a:6c:09:29:4a:a1:
c5:33:2e:9a:65:19:f7:9d:cd:c6:cd:c6:54:31:26:ca:74:65:
4a:55:77:58:ce:fe:5f:a9:6b:45:2b:8d:f5:be:d4:1d:a5:36:
87:46:2e:6a:f6:5c:7f:18:74:d9:53:68:54:3e:3c:44:2d:cb:
da:ee:df:c1:9b:75:c1:2a:15:0d:d5:f2:64:51:72:49:7f:b4:
ac:e2:08:ac:b5:96:d8:9a:b6:d8:79:9b:a7:d9:66:01:2b:3a:
5e:8f:b3:47:e4:80:6e:0e:67:a1:d5:6d:05:e4:dd:a0:4d:d0:
06:85:31:37:04:97:03:2b:9a:82:63:b3:d7:93:20:35:2c:da:
ed:dd:fe:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org