Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ff79bff4-e3d4-49e2-9e42-454af92034f6/f9afaf7bc656fb21c63ca2ab23c1ea1e759b0bec.roa
File: f9afaf7bc656fb21c63ca2ab23c1ea1e759b0bec.roa (raw, json)
Hash identifier: D8phnLXH9Yo2+zfrODo1ER/RLgam2X9+Q6tykwj9tkg=
Subject key identifier: EC:97:4D:90:5A:AD:C6:CF:38:38:75:F9:E0:EF:27:4E:56:2A:4A:9A
Certificate issuer: /CN=986ea0f5c8cffc44df21b81b038b788b536d285b
Certificate serial: 1EE5A8
Authority key identifier: 05:43:30:37:75:78:C3:ED:77:46:AB:1E:45:B3:C5:86:0B:0A:C3:89
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/986ea0f5c8cffc44df21b81b038b788b536d285b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ff79bff4-e3d4-49e2-9e42-454af92034f6/f9afaf7bc656fb21c63ca2ab23c1ea1e759b0bec.roa
Signing time: Fri 24 Feb 2023 16:44:27 +0000
ROA not before: Sun 21 Mar 2021 14:35:00 +0000
ROA not after: Tue 24 Mar 2026 14:35:00 +0000
asID: 52467
IP address blocks: 138.36.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2024872 (0x1ee5a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ea0f5c8cffc44df21b81b038b788b536d285b
Validity
Not Before: Mar 21 14:35:00 2021 GMT
Not After : Mar 24 14:35:00 2026 GMT
Subject: CN=f9afaf7bc656fb21c63ca2ab23c1ea1e759b0bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:56:70:0c:31:5a:c4:d2:9e:6c:21:48:d9:
d2:e4:22:31:94:d0:4e:2e:ef:4d:15:c1:f9:6e:8a:
fb:e1:5a:c5:1e:10:99:3c:e1:15:06:c9:5c:4e:72:
c2:88:a1:02:0b:be:61:df:9d:a3:2b:6b:34:9b:7c:
b1:6f:58:49:f4:d0:61:91:e5:74:b6:ff:37:73:ff:
d8:56:cb:ba:89:e2:e6:b7:39:bf:76:dc:1a:b7:b7:
9f:03:aa:71:d9:d0:63:18:54:aa:0f:da:a4:cf:e9:
2b:ce:aa:4f:cd:23:94:bd:e2:c6:53:33:7f:db:8f:
ea:f8:10:23:1f:ca:86:7e:c6:30:74:bf:a5:33:77:
d9:69:7a:52:4f:23:58:7a:8e:11:c6:8f:96:b6:8d:
53:0b:19:ce:a1:f1:6b:c0:fd:11:a1:b3:ac:b4:fe:
c9:0e:36:b6:d6:80:c4:c5:ac:9b:ab:c3:4a:d7:56:
70:e0:23:14:76:50:3e:56:2b:13:ba:15:8c:65:d3:
9a:91:2a:5d:f5:f0:ce:db:27:0b:d8:ff:9b:0d:03:
8b:a4:05:e0:8a:01:c7:df:f0:c2:5f:c4:65:24:81:
b2:c8:3a:f6:bb:ab:ca:f9:90:64:5f:26:dc:ea:ee:
a2:ee:c6:c2:7a:47:19:41:d9:e6:d1:7d:8c:b9:13:
69:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:97:4D:90:5A:AD:C6:CF:38:38:75:F9:E0:EF:27:4E:56:2A:4A:9A
X509v3 Authority Key Identifier:
keyid:05:43:30:37:75:78:C3:ED:77:46:AB:1E:45:B3:C5:86:0B:0A:C3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/986ea0f5c8cffc44df21b81b038b788b536d285b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ff79bff4-e3d4-49e2-9e42-454af92034f6/f9afaf7bc656fb21c63ca2ab23c1ea1e759b0bec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ff79bff4-e3d4-49e2-9e42-454af92034f6/986ea0f5c8cffc44df21b81b038b788b536d285b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.65.0/24
Signature Algorithm: sha256WithRSAEncryption
49:db:95:47:30:df:0e:a7:44:f4:d2:cb:d1:38:69:5e:ce:f5:
d4:6c:fc:00:ae:d1:8c:38:81:8e:c3:21:0e:fb:dd:19:ce:31:
74:4f:53:0c:4d:37:7a:fa:2a:f5:a3:4a:fb:ef:c2:9f:b0:ca:
59:63:18:ae:19:10:cd:0d:04:19:28:8e:89:6f:1e:f0:68:2d:
ff:f3:fb:35:09:17:01:f9:46:86:39:e2:e3:7d:11:9d:60:27:
e5:9c:4b:a1:48:3d:a8:4e:c1:9b:27:6f:22:01:59:78:57:1c:
ae:8b:14:24:7e:c5:9f:a2:f3:f4:4f:4c:29:c9:8f:35:96:5e:
19:b8:c8:9c:7d:a0:05:85:af:ba:23:f1:95:17:f0:70:05:9d:
15:12:52:dd:6b:1b:95:ef:47:54:77:71:82:a6:78:b2:89:57:
4d:3c:1d:59:be:3a:f2:b3:49:e0:4d:6e:2a:ff:94:c4:df:e6:
18:8b:23:61:5e:8f:35:8f:23:c1:db:ab:4d:ec:de:37:f1:68:
25:33:25:2b:63:39:99:92:94:71:fb:e8:a4:ca:f1:e0:bd:8d:
ad:34:57:40:23:9d:15:af:e7:eb:ad:22:65:eb:7b:87:41:ee:
d8:27:fa:a9:d5:92:0b:54:99:6b:ec:cc:15:2e:76:e9:f8:21:
59:ef:73:3e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHuWoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk4
NmVhMGY1YzhjZmZjNDRkZjIxYjgxYjAzOGI3ODhiNTM2ZDI4NWIwHhcNMjEwMzIx
MTQzNTAwWhcNMjYwMzI0MTQzNTAwWjAzMTEwLwYDVQQDEyhmOWFmYWY3YmM2NTZm
YjIxYzYzY2EyYWIyM2MxZWExZTc1OWIwYmVjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkMNWcAwxWsTSnmwhSNnS5CIxlNBOLu9NFcH5bor74VrFHhCZ
POEVBslcTnLCiKECC75h352jK2s0m3yxb1hJ9NBhkeV0tv83c//YVsu6ieLmtzm/
dtwat7efA6px2dBjGFSqD9qkz+krzqpPzSOUveLGUzN/24/q+BAjH8qGfsYwdL+l
M3fZaXpSTyNYeo4Rxo+Wto1TCxnOofFrwP0RobOstP7JDja21oDExaybq8NK11Zw
4CMUdlA+VisTuhWMZdOakSpd9fDO2ycL2P+bDQOLpAXgigHH3/DCX8RlJIGyyDr2
u6vK+ZBkXybc6u6i7sbCekcZQdnm0X2MuRNpiQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOyXTZBarcbPODh1+eDvJ05WKkqaMB8GA1UdIwQYMBaAFAVDMDd1eMPtd0ar
HkWzxYYLCsOJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTg2ZWEw
ZjVjOGNmZmM0NGRmMjFiODFiMDM4Yjc4OGI1MzZkMjg1Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmY3OWJmZjQtZTNkNC00OWUyLTllNDItNDU0YWY5
MjAzNGY2L2Y5YWZhZjdiYzY1NmZiMjFjNjNjYTJhYjIzYzFlYTFlNzU5YjBiZWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZjc5YmZmNC1lM2Q0LTQ5ZTItOWU0Mi00NTRh
ZjkyMDM0ZjYvOTg2ZWEwZjVjOGNmZmM0NGRmMjFiODFiMDM4Yjc4OGI1MzZkMjg1
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIokQTANBgkqhkiG9w0BAQsFAAOCAQEASduVRzDfDqdE9NLL
0ThpXs711Gz8AK7RjDiBjsMhDvvdGc4xdE9TDE03evoq9aNK++/Cn7DKWWMYrhkQ
zQ0EGSiOiW8e8Ggt//P7NQkXAflGhjni430RnWAn5ZxLoUg9qE7BmydvIgFZeFcc
rosUJH7Fn6Lz9E9MKcmPNZZeGbjInH2gBYWvuiPxlRfwcAWdFRJS3Wsble9HVHdx
gqZ4solXTTwdWb468rNJ4E1uKv+UxN/mGIsjYV6PNY8jwdurTezeN/FoJTMlK2M5
mZKUcfvopMrx4L2NrTRXQCOdFa/n660iZet7h0Hu2Cf6qdWSC1SZa+zMFS526fgh
We9zPg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org