Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ff79bff4-e3d4-49e2-9e42-454af92034f6/823bf48bf1dfa2d11baebe82e8752735cd402205.roa
File: 823bf48bf1dfa2d11baebe82e8752735cd402205.roa (raw, json)
Hash identifier: urvBum4OhP+Z02j3WyCyZxzzQ/c1Knfijve92drximo=
Subject key identifier: F3:BA:30:54:28:3B:F6:C0:85:C9:40:FC:34:7B:32:E9:0B:8E:0C:73
Certificate issuer: /CN=986ea0f5c8cffc44df21b81b038b788b536d285b
Certificate serial: 0D5E27
Authority key identifier: 05:43:30:37:75:78:C3:ED:77:46:AB:1E:45:B3:C5:86:0B:0A:C3:89
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/986ea0f5c8cffc44df21b81b038b788b536d285b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ff79bff4-e3d4-49e2-9e42-454af92034f6/823bf48bf1dfa2d11baebe82e8752735cd402205.roa
Signing time: Wed 24 Mar 2021 14:35:00 +0000
ROA not before: Wed 24 Mar 2021 14:35:00 +0000
ROA not after: Tue 24 Mar 2026 14:35:00 +0000
asID: 52467
IP address blocks: 138.36.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876071 (0xd5e27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ea0f5c8cffc44df21b81b038b788b536d285b
Validity
Not Before: Mar 24 14:35:00 2021 GMT
Not After : Mar 24 14:35:00 2026 GMT
Subject: CN=823bf48bf1dfa2d11baebe82e8752735cd402205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:39:fb:96:6c:5c:54:0e:52:2b:de:08:12:4f:
0b:d5:1c:93:3d:90:e0:91:36:28:b1:f1:53:bf:69:
a2:e8:94:8b:a6:2a:5f:f3:a3:3c:3f:80:84:24:f4:
9f:f9:5c:93:4d:fa:ec:dd:02:ec:c2:d4:40:65:fd:
dc:b7:7a:b7:35:d8:3a:71:92:a4:f9:5c:69:cb:af:
74:6f:4d:9c:8d:9d:48:56:70:9e:8f:37:7d:16:4f:
ab:4a:34:3c:cb:ba:fc:ac:ee:28:e8:e6:e2:10:f5:
d7:d5:50:1d:ae:18:5a:34:f5:a2:61:70:18:35:7a:
11:7d:03:41:22:28:d7:94:12:c5:a1:0d:b4:04:f1:
51:ac:24:f4:cc:c0:b7:52:26:03:97:c6:f9:48:24:
5a:10:df:a5:aa:28:d8:1e:4d:a7:ad:cd:a7:54:87:
8a:ab:ca:27:b3:0e:88:c0:d3:31:df:1f:d7:a2:8a:
e6:b6:29:65:24:1f:17:3f:5b:95:bc:64:4c:9c:df:
52:85:34:c5:c0:28:e0:b2:0e:bb:ec:1f:9e:48:ad:
7f:87:50:3c:48:ec:e3:07:a9:57:10:76:f1:63:c5:
b6:0a:d1:4c:a0:8e:0c:32:f5:12:72:a2:00:0e:9c:
db:86:b9:a2:f4:fb:19:6a:15:dc:9a:11:7e:f4:f2:
28:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BA:30:54:28:3B:F6:C0:85:C9:40:FC:34:7B:32:E9:0B:8E:0C:73
X509v3 Authority Key Identifier:
keyid:05:43:30:37:75:78:C3:ED:77:46:AB:1E:45:B3:C5:86:0B:0A:C3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/986ea0f5c8cffc44df21b81b038b788b536d285b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ff79bff4-e3d4-49e2-9e42-454af92034f6/823bf48bf1dfa2d11baebe82e8752735cd402205.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ff79bff4-e3d4-49e2-9e42-454af92034f6/986ea0f5c8cffc44df21b81b038b788b536d285b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.66.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:97:03:b5:f4:e9:74:a0:73:df:9e:82:c2:ed:d2:8b:65:9b:
f3:2c:c5:cd:04:8d:9b:ec:f5:7a:27:1e:f9:b7:02:73:75:cf:
82:d1:7d:64:d3:d9:80:27:5a:19:c2:91:dc:ed:46:cc:79:62:
b8:5f:a5:35:aa:ff:22:1f:16:06:3e:5a:78:13:67:e5:5d:d1:
d5:bc:eb:d7:45:a7:4f:34:87:36:55:84:29:bc:9e:19:b1:98:
37:f0:e3:94:18:eb:39:a6:f2:8f:a4:85:0f:e5:b0:ba:d2:05:
ca:1c:20:2c:1f:70:54:92:5b:ec:11:86:76:34:a1:f0:51:a7:
12:f6:ae:73:fa:61:6b:62:ce:df:b1:47:2b:bb:41:0e:36:4d:
37:d8:71:fe:b4:79:c9:b9:1e:d1:3d:8d:af:ef:09:a3:56:89:
96:54:2f:0a:e7:b9:57:eb:b6:bd:bc:ec:f5:93:54:d6:19:a8:
84:21:2a:35:a0:6d:34:2c:c0:b1:7e:8a:42:e9:ab:f4:9c:c0:
29:ea:35:b3:f2:54:cb:66:a2:b5:44:dc:2f:1a:52:74:45:0e:
67:53:89:a0:30:44:b7:18:87:df:1d:99:19:28:04:e0:e3:ee:
68:d6:8c:dd:e4:53:b4:8e:0a:33:03:e2:29:34:c0:12:b7:6a:
5c:33:9e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org