Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6d63527-7a9f-47ed-87f4-d69d34f5995a/a33692009295e725b30a512a0aebed84b84d5d30.roa
File: a33692009295e725b30a512a0aebed84b84d5d30.roa (raw, json)
Hash identifier: HRmAYyeq9P4x197QMcb0uIhBRrriiKfDgMd6lc3BCMc=
Subject key identifier: BD:71:65:77:D8:E9:D3:01:08:3F:A5:B6:AA:33:53:51:C0:1D:88:23
Certificate issuer: /CN=954ca0092fe1270a75f055c704b40b0b1f6c6601
Certificate serial: 21B718
Authority key identifier: 11:AD:4B:DE:7D:DD:68:AC:34:0D:5A:3F:DC:F5:4F:F7:D7:8C:1B:05
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/954ca0092fe1270a75f055c704b40b0b1f6c6601.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b6d63527-7a9f-47ed-87f4-d69d34f5995a/a33692009295e725b30a512a0aebed84b84d5d30.roa
Signing time: Mon 12 Jun 2023 23:38:37 +0000
ROA not before: Sun 11 Jun 2023 23:38:37 +0000
ROA not after: Thu 12 Jun 2025 23:38:37 +0000
asID: 26617
IP address blocks: 138.219.156.0/22 maxlen: 24
131.100.140.0/22 maxlen: 24
190.120.0.0/19 maxlen: 24
138.99.0.0/22 maxlen: 24
168.232.36.0/22 maxlen: 24
2803:9d80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2209560 (0x21b718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954ca0092fe1270a75f055c704b40b0b1f6c6601
Validity
Not Before: Jun 11 23:38:37 2023 GMT
Not After : Jun 12 23:38:37 2025 GMT
Subject: CN=a33692009295e725b30a512a0aebed84b84d5d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:74:38:22:a9:4e:cb:aa:4d:14:d3:71:5c:
e5:09:9a:c3:9c:ee:a8:c1:7e:43:f8:a1:b6:53:83:
e6:70:44:19:08:69:4c:3a:2e:e0:13:64:02:e5:44:
95:18:57:ac:05:6d:b3:b0:37:9c:91:d6:55:e9:43:
f3:89:93:54:17:94:5c:15:8b:a1:6e:2d:4f:33:1a:
d9:e2:c0:3b:b4:56:bb:35:1e:df:29:73:4c:f2:13:
2e:4c:d8:cb:c0:ba:69:6d:42:4c:61:c1:39:64:c3:
b0:0c:12:47:48:3d:83:7d:8b:79:ef:19:9f:75:53:
6c:19:58:ba:a5:22:ee:c7:13:7c:79:42:ba:7d:1c:
24:dd:77:e5:25:e6:a3:42:52:15:8e:db:f3:f4:d7:
65:4b:8a:28:d5:2c:2d:84:6c:74:c9:ec:c9:66:b9:
d7:a1:78:85:c6:bd:dc:44:09:7a:0b:87:28:28:07:
87:63:3a:80:94:f9:c1:05:ea:70:0e:48:af:39:4d:
e6:43:16:a2:a3:b9:f9:b2:4a:65:19:22:92:7a:ab:
18:84:cd:58:dc:e2:c2:96:0c:24:4d:82:bc:85:9d:
23:64:77:11:d6:80:56:48:e9:48:74:98:f0:ef:8e:
10:97:bd:14:de:c0:64:4a:3c:31:8f:30:49:ba:2e:
be:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:71:65:77:D8:E9:D3:01:08:3F:A5:B6:AA:33:53:51:C0:1D:88:23
X509v3 Authority Key Identifier:
keyid:11:AD:4B:DE:7D:DD:68:AC:34:0D:5A:3F:DC:F5:4F:F7:D7:8C:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/954ca0092fe1270a75f055c704b40b0b1f6c6601.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6d63527-7a9f-47ed-87f4-d69d34f5995a/a33692009295e725b30a512a0aebed84b84d5d30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b6d63527-7a9f-47ed-87f4-d69d34f5995a/954ca0092fe1270a75f055c704b40b0b1f6c6601.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.140.0/22
138.99.0.0/22
138.219.156.0/22
168.232.36.0/22
190.120.0.0/19
IPv6:
2803:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
6c:c8:9a:1b:bd:b2:20:12:5b:94:14:37:ca:3f:2c:0f:a3:a8:
54:d6:df:a7:00:e4:b9:6d:d7:4d:30:54:d7:0d:0c:dc:11:af:
e0:1a:3a:9e:6a:ae:b8:17:38:6e:e5:74:52:dd:55:1a:ea:e3:
a4:53:c5:45:e9:35:7e:8d:78:9c:bb:9b:71:90:dd:1b:ad:0d:
1c:50:a6:c7:b9:48:bc:83:4f:d7:ec:4b:3a:47:72:4c:1e:d4:
2f:21:55:59:2d:b5:ea:b8:d9:d1:86:8f:98:68:d3:f2:3c:59:
bc:8d:05:1a:98:76:92:ad:65:ee:9b:b7:12:c2:80:29:10:7b:
96:9a:dc:c4:39:33:3d:49:1a:28:a0:b8:36:07:3a:1b:84:19:
5d:a9:76:ee:78:11:f0:1e:fd:de:45:86:c8:90:93:ba:b3:38:
c4:3b:da:fa:eb:25:5e:d2:26:cb:fe:a2:8d:1d:37:4d:bb:c5:
a2:11:f4:7d:3d:7d:6f:b3:46:1b:d6:13:86:cb:2e:31:fd:d4:
40:7b:82:33:71:26:38:6c:12:86:c4:3d:7e:73:5b:3c:82:fb:
72:92:c0:38:db:89:a4:e0:57:cd:58:3a:03:63:d0:ec:3e:3a:
f3:3d:6e:c0:48:55:8a:3b:5b:7f:5d:f6:68:67:c4:78:93:4b:
9a:07:22:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 05:48:31 2025 by rpki-client