Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/3cdebc7fecdb515349dc5829c13835e377c272e8.roa
File: 3cdebc7fecdb515349dc5829c13835e377c272e8.roa (raw, json)
Hash identifier: idpyYyWxwWvlid6njcuBPatU6h6Hm3tm3PKgGNpursU=
Subject key identifier: F5:8F:1A:C0:C3:6E:61:D8:F2:63:21:8F:FB:3E:37:7B:29:F4:AD:08
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 049CCA
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/3cdebc7fecdb515349dc5829c13835e377c272e8.roa
Signing time: Tue 18 Jul 2023 20:05:01 +0000
ROA not before: Mon 17 Jul 2023 20:05:01 +0000
ROA not after: Fri 18 Jul 2025 20:05:01 +0000
asID: 16629
IP address blocks: 201.222.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302282 (0x49cca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 17 20:05:01 2023 GMT
Not After : Jul 18 20:05:01 2025 GMT
Subject: CN=3cdebc7fecdb515349dc5829c13835e377c272e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:bd:67:c2:23:09:73:4f:f8:b2:e2:ff:fc:
ee:04:7b:46:01:92:5a:35:a5:5b:2a:1e:64:f1:a3:
52:8c:dd:f3:ca:ef:f4:dd:be:40:47:01:a7:75:fd:
9b:4e:97:66:dc:15:af:ea:b2:8b:c5:21:70:ab:7d:
ff:b8:55:d3:25:27:06:6d:94:29:5e:7d:2b:72:2e:
83:b1:eb:c6:95:35:6f:fc:36:f1:95:ed:b4:ec:74:
fe:1d:d9:32:e0:0f:40:6c:56:98:7a:eb:89:3c:ad:
c2:83:4b:65:e3:5a:ea:e6:5f:cd:67:9a:6b:2c:68:
8d:17:f5:a3:b7:39:2b:3b:76:b5:fd:0c:ca:8e:1c:
70:2f:7d:a1:39:fd:48:87:5d:7f:fd:74:35:89:dd:
21:11:7f:3b:6c:3b:5f:fa:59:27:ab:24:63:fc:f6:
81:96:95:3b:03:67:b8:d5:bf:c1:ee:90:a5:97:6b:
40:9d:82:a4:c4:1a:34:32:62:1b:fd:c0:90:d7:de:
14:ef:23:29:32:f7:02:5e:3b:0f:ee:3f:6e:46:eb:
80:87:fc:fa:e1:1f:0b:cf:87:6e:60:29:c5:36:bc:
68:13:78:f5:5c:3b:19:4a:d7:4d:19:61:6d:38:a4:
17:a2:0a:b1:ce:f2:9a:e6:d8:49:51:e5:b5:35:f8:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8F:1A:C0:C3:6E:61:D8:F2:63:21:8F:FB:3E:37:7B:29:F4:AD:08
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/3cdebc7fecdb515349dc5829c13835e377c272e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.222.192.0/18
Signature Algorithm: sha256WithRSAEncryption
02:b3:32:e9:b1:b0:e0:66:7b:79:30:61:b3:0d:a9:b6:4f:b9:
98:12:79:3d:31:e9:a3:02:90:c0:ce:5e:f1:74:d3:72:f2:f2:
73:36:2e:fc:19:5f:6e:85:39:0a:72:fa:88:88:1e:41:0f:c2:
71:cf:a1:16:6a:00:30:83:f6:a0:b0:f2:09:2a:ef:04:69:62:
ad:73:46:95:30:4b:dd:10:09:c6:79:8f:f0:56:f0:af:0e:b3:
94:fb:76:cd:66:b9:12:6a:10:19:c8:53:5d:05:ca:e7:c4:bf:
0c:a9:24:19:65:e1:ef:9b:eb:1b:c7:d7:df:5b:d5:b6:fa:f0:
d5:bb:e8:69:4d:e1:f0:7c:25:db:86:70:7c:27:ab:1a:f2:7f:
1b:e4:d5:55:6e:c7:cc:57:4d:2f:9f:aa:03:95:a5:f0:d8:02:
03:02:21:a6:6d:17:a1:6e:02:03:50:14:46:9c:31:d1:b2:57:
d6:64:80:bd:ec:c1:aa:b3:df:4e:29:67:57:99:4b:73:35:05:
d0:18:69:be:c1:3b:a6:53:08:19:6d:9d:3a:95:27:ab:42:92:
f1:76:21:e1:2d:11:3f:1f:89:83:42:61:3d:67:00:80:fd:47:
02:f1:50:66:cd:36:6d:f8:4c:e7:34:01:88:0f:57:b8:7a:4d:
4c:f2:49:22
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBJzKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MjZkNmY0MmZmY2E2MjkxYzZjNWM2MTYwMWY5MTZkN2U1OWEyZDMwHhcNMjMwNzE3
MjAwNTAxWhcNMjUwNzE4MjAwNTAxWjAzMTEwLwYDVQQDEygzY2RlYmM3ZmVjZGI1
MTUzNDlkYzU4MjljMTM4MzVlMzc3YzI3MmU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuQ29Z8IjCXNP+LLi//zuBHtGAZJaNaVbKh5k8aNSjN3zyu/0
3b5ARwGndf2bTpdm3BWv6rKLxSFwq33/uFXTJScGbZQpXn0rci6DsevGlTVv/Dbx
le207HT+Hdky4A9AbFaYeuuJPK3Cg0tl41rq5l/NZ5prLGiNF/WjtzkrO3a1/QzK
jhxwL32hOf1Ih11//XQ1id0hEX87bDtf+lknqyRj/PaBlpU7A2e41b/B7pCll2tA
nYKkxBo0MmIb/cCQ194U7yMpMvcCXjsP7j9uRuuAh/z64R8Lz4duYCnFNrxoE3j1
XDsZStdNGWFtOKQXogqxzvKa5thJUeW1NfiCmQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPWPGsDDbmHY8mMhj/s+N3sp9K0IMB8GA1UdIwQYMBaAFM2qHwCJ05renW3b
eH+AQ9p8hu5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyNmQ2
ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVkYjQxNWItYjNkZC00ZjQxLWJlZTMtMjg0ZWRh
MWQ3ZTU5LzNjZGViYzdmZWNkYjUxNTM0OWRjNTgyOWMxMzgzNWUzNzdjMjcyZTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWRiNDE1Yi1iM2RkLTRmNDEtYmVlMy0yODRl
ZGExZDdlNTkvZGYyNmQ2ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBsnewDANBgkqhkiG9w0BAQsFAAOCAQEAArMy6bGw4GZ7eTBh
sw2ptk+5mBJ5PTHpowKQwM5e8XTTcvLyczYu/BlfboU5CnL6iIgeQQ/Ccc+hFmoA
MIP2oLDyCSrvBGlirXNGlTBL3RAJxnmP8Fbwrw6zlPt2zWa5EmoQGchTXQXK58S/
DKkkGWXh75vrG8fX31vVtvrw1bvoaU3h8Hwl24ZwfCerGvJ/G+TVVW7HzFdNL5+q
A5Wl8NgCAwIhpm0XoW4CA1AURpwx0bJX1mSAvezBqrPfTilnV5lLczUF0BhpvsE7
plMIGW2dOpUnq0KS8XYh4S0RPx+Jg0JhPWcAgP1HAvFQZs02bfhM5zQBiA9XuHpN
TPJJIg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org