Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53e639af-cd7b-46ba-8172-f4b3feb05af9/7f3cafa03d7ac60fb25bbd99ab7d92d694f5018e.roa
File: 7f3cafa03d7ac60fb25bbd99ab7d92d694f5018e.roa (raw, json)
Hash identifier: U6Jm/0vYtK1jybRbsnyEogtsHhFDQKC//7cP8X79RTI=
Subject key identifier: 14:BF:6B:E3:AE:81:60:95:1B:B1:01:0C:E7:39:45:FC:8F:1D:5E:E8
Certificate issuer: /CN=cc9025adc86618d4b13c3405def7aff69985eb16
Certificate serial: 0613C0
Authority key identifier: E2:10:16:11:62:21:C8:F1:BE:A2:D9:38:6D:1A:7B:EA:B2:AA:F1:C1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9025adc86618d4b13c3405def7aff69985eb16.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/53e639af-cd7b-46ba-8172-f4b3feb05af9/7f3cafa03d7ac60fb25bbd99ab7d92d694f5018e.roa
Signing time: Mon 13 Jun 2022 19:12:15 +0000
ROA not before: Mon 13 Jun 2022 03:00:00 +0000
ROA not after: Thu 13 Jun 2024 03:00:00 +0000
asID: 52413
IP address blocks: 201.220.16.0/21 maxlen: 24
2803:8900::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398272 (0x613c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9025adc86618d4b13c3405def7aff69985eb16
Validity
Not Before: Jun 13 03:00:00 2022 GMT
Not After : Jun 13 03:00:00 2024 GMT
Subject: CN=7f3cafa03d7ac60fb25bbd99ab7d92d694f5018e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:30:34:cc:63:c4:8e:03:58:4e:32:7c:83:e5:
69:ec:5b:e0:e3:30:ed:c9:3e:78:7c:07:4b:15:2e:
42:fd:10:1d:50:81:cb:1b:d7:fc:43:25:78:3b:be:
9a:42:b4:e3:04:27:f9:0e:dc:e8:f7:45:45:29:f1:
96:6b:67:42:3f:2e:c7:cd:5f:81:89:09:33:9c:88:
15:de:ea:ff:44:92:bc:b3:ce:40:86:f5:f4:91:83:
3b:44:42:ee:fb:27:70:c1:e9:8f:bb:b6:c7:78:6b:
2b:1f:06:f0:09:1f:12:a8:93:7c:3a:45:72:eb:46:
d4:5e:dd:b1:89:e7:bf:d3:5d:a5:56:7b:89:53:30:
e6:82:39:da:41:46:9a:20:97:6d:5c:00:3d:ae:66:
cc:14:dc:1a:0f:fa:ba:40:a4:7f:c7:5f:59:bf:2f:
a6:e3:31:9f:1e:4b:b6:aa:3b:1d:3c:46:27:86:f6:
78:d5:e4:77:f4:f6:5e:ea:30:4f:1e:30:30:79:0f:
06:32:55:06:b1:09:c1:a3:9e:90:b0:85:9d:d3:1b:
c3:fc:67:32:ac:26:d2:ba:8e:ec:37:7a:ee:c8:19:
0e:ca:8a:94:fd:97:8a:ba:55:e6:3b:a1:db:1b:cb:
50:1a:a9:c8:e3:0d:4d:16:91:4d:2a:63:7f:06:e2:
8f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BF:6B:E3:AE:81:60:95:1B:B1:01:0C:E7:39:45:FC:8F:1D:5E:E8
X509v3 Authority Key Identifier:
keyid:E2:10:16:11:62:21:C8:F1:BE:A2:D9:38:6D:1A:7B:EA:B2:AA:F1:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9025adc86618d4b13c3405def7aff69985eb16.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53e639af-cd7b-46ba-8172-f4b3feb05af9/7f3cafa03d7ac60fb25bbd99ab7d92d694f5018e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/53e639af-cd7b-46ba-8172-f4b3feb05af9/cc9025adc86618d4b13c3405def7aff69985eb16.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.220.16.0/21
IPv6:
2803:8900::/32
Signature Algorithm: sha256WithRSAEncryption
60:8f:5a:69:32:7b:0b:68:85:6e:2d:d7:ec:a4:bd:cb:a1:49:
64:a4:d4:a1:a6:15:f2:ff:ae:2f:09:34:11:e9:6a:f7:a8:ca:
bd:1b:2c:44:02:55:01:3c:56:bd:bb:1d:7e:45:2a:22:7a:0d:
82:4a:c8:3c:2f:f7:10:0b:6a:b7:2f:18:e8:a9:43:22:17:27:
ae:02:e4:90:32:de:6d:0c:eb:56:cb:a7:8e:bb:aa:e3:a5:a6:
ee:5e:96:7c:85:bb:eb:e3:c8:e4:46:90:fc:3a:08:f6:40:eb:
b3:3e:43:38:cf:0f:fa:f5:f7:b0:cc:91:5d:ec:af:53:86:e8:
43:c1:27:a8:04:3e:ea:e3:76:3c:1f:bf:dd:d2:f3:80:76:e8:
5f:0e:f3:b2:08:41:a1:ff:f9:05:fd:66:4d:55:4b:e0:73:0f:
f4:d2:e1:b6:cb:9c:ab:9e:2f:f4:02:17:79:dd:58:27:d0:92:
90:4d:19:20:64:f5:b2:58:dd:cb:45:31:8c:e1:89:a9:49:30:
b9:50:df:36:5e:b7:2d:16:bb:88:87:1a:e6:70:d2:78:19:b3:
10:85:3b:39:24:47:d9:0e:cf:2d:31:db:81:54:1d:64:09:70:
86:4e:74:64:6a:30:5a:29:df:8c:46:22:82:d4:ab:58:a7:c2:
a0:52:86:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDBhPAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNj
OTAyNWFkYzg2NjE4ZDRiMTNjMzQwNWRlZjdhZmY2OTk4NWViMTYwHhcNMjIwNjEz
MDMwMDAwWhcNMjQwNjEzMDMwMDAwWjAzMTEwLwYDVQQDEyg3ZjNjYWZhMDNkN2Fj
NjBmYjI1YmJkOTlhYjdkOTJkNjk0ZjUwMThlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjDA0zGPEjgNYTjJ8g+Vp7Fvg4zDtyT54fAdLFS5C/RAdUIHL
G9f8QyV4O76aQrTjBCf5Dtzo90VFKfGWa2dCPy7HzV+BiQkznIgV3ur/RJK8s85A
hvX0kYM7RELu+ydwwemPu7bHeGsrHwbwCR8SqJN8OkVy60bUXt2xiee/012lVnuJ
UzDmgjnaQUaaIJdtXAA9rmbMFNwaD/q6QKR/x19Zvy+m4zGfHku2qjsdPEYnhvZ4
1eR39PZe6jBPHjAweQ8GMlUGsQnBo56QsIWd0xvD/GcyrCbSuo7sN3ruyBkOyoqU
/ZeKulXmO6HbG8tQGqnI4w1NFpFNKmN/BuKPhwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFBS/a+OugWCVG7EBDOc5RfyPHV7oMB8GA1UdIwQYMBaAFOIQFhFiIcjxvqLZ
OG0ae+qyqvHBMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2M5MDI1
YWRjODY2MThkNGIxM2MzNDA1ZGVmN2FmZjY5OTg1ZWIxNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTNlNjM5YWYtY2Q3Yi00NmJhLTgxNzItZjRiM2Zl
YjA1YWY5LzdmM2NhZmEwM2Q3YWM2MGZiMjViYmQ5OWFiN2Q5MmQ2OTRmNTAxOGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81M2U2MzlhZi1jZDdiLTQ2YmEtODE3Mi1mNGIz
ZmViMDVhZjkvY2M5MDI1YWRjODY2MThkNGIxM2MzNDA1ZGVmN2FmZjY5OTg1ZWIx
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEA8ncEDANBAIAAjAHAwUAKAOJADANBgkqhkiG9w0BAQsFAAOC
AQEAYI9aaTJ7C2iFbi3X7KS9y6FJZKTUoaYV8v+uLwk0Eelq96jKvRssRAJVATxW
vbsdfkUqInoNgkrIPC/3EAtqty8Y6KlDIhcnrgLkkDLebQzrVsunjruq46Wm7l6W
fIW76+PI5EaQ/DoI9kDrsz5DOM8P+vX3sMyRXeyvU4boQ8EnqAQ+6uN2PB+/3dLz
gHboXw7zsghBof/5Bf1mTVVL4HMP9NLhtsucq54v9AIXed1YJ9CSkE0ZIGT1sljd
y0UxjOGJqUkwuVDfNl63LRa7iIca5nDSeBmzEIU7OSRH2Q7PLTHbgVQdZAlwhk50
ZGowWinfjEYigtSrWKfCoFKGdg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org