Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/cfe35c654fc51177ed1585c9f2856170f42560a0.roa
File: cfe35c654fc51177ed1585c9f2856170f42560a0.roa (raw, json)
Hash identifier: jswz+BzvzCXxHeJoNcn5XLectQLOB+74EZku0d5dn90=
Subject key identifier: E5:E7:C0:C6:B0:9F:AA:66:2C:2C:19:E7:83:F6:67:12:0F:6C:49:01
Certificate issuer: /CN=f704dcc2bd05f2f811f329995911565e1ff53e09
Certificate serial: 25CF0D
Authority key identifier: 29:50:CD:67:0B:F0:D9:8B:2F:8D:D9:F4:08:53:EE:DB:28:C8:EA:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f704dcc2bd05f2f811f329995911565e1ff53e09.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/cfe35c654fc51177ed1585c9f2856170f42560a0.roa
Signing time: Wed 10 Jan 2024 11:04:48 +0000
ROA not before: Wed 10 Jan 2024 11:04:48 +0000
ROA not after: Sat 10 Jan 2026 11:04:48 +0000
asID: 265554
IP address blocks: 201.219.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2477837 (0x25cf0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f704dcc2bd05f2f811f329995911565e1ff53e09
Validity
Not Before: Jan 10 11:04:48 2024 GMT
Not After : Jan 10 11:04:48 2026 GMT
Subject: CN=cfe35c654fc51177ed1585c9f2856170f42560a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9c:48:20:74:06:ea:20:b3:4f:55:7e:81:17:
94:27:de:35:86:3f:04:09:13:43:08:04:85:a1:42:
55:f0:97:7e:5a:c1:9f:31:c5:37:2b:53:f9:70:89:
a5:8e:39:7d:50:c8:4b:8b:da:15:f6:4d:8e:b1:1b:
81:7b:4e:1e:c1:fc:fd:e5:55:83:00:ed:1f:41:59:
89:8a:cb:36:ad:42:01:e3:5e:0e:84:0e:7e:7f:20:
8e:6e:9d:18:be:2f:c3:68:85:34:71:96:80:c5:21:
34:4e:57:d3:82:42:f4:b2:1a:d8:e0:df:11:2a:94:
8c:38:1f:2d:09:92:66:8a:b7:b5:ca:35:2c:15:6b:
c0:76:6b:3b:3a:de:dc:49:08:79:78:90:81:bf:a3:
05:1b:ac:ec:6f:88:3f:56:71:3f:0d:55:76:25:79:
cb:97:df:de:03:3d:03:df:00:13:8c:cd:87:43:b8:
d9:b3:91:61:7f:b4:78:89:91:f4:d5:68:3b:ad:24:
b4:d3:bc:4c:8e:ae:70:6e:4c:d8:30:00:67:86:c3:
48:45:b0:99:ad:fc:d3:8b:af:98:f8:d3:47:4d:a6:
be:f7:19:b8:90:54:94:af:9b:3b:b6:02:ad:2d:78:
c1:56:31:99:4a:cf:8b:0a:52:e4:39:85:e6:c8:92:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E7:C0:C6:B0:9F:AA:66:2C:2C:19:E7:83:F6:67:12:0F:6C:49:01
X509v3 Authority Key Identifier:
keyid:29:50:CD:67:0B:F0:D9:8B:2F:8D:D9:F4:08:53:EE:DB:28:C8:EA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f704dcc2bd05f2f811f329995911565e1ff53e09.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/cfe35c654fc51177ed1585c9f2856170f42560a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/f704dcc2bd05f2f811f329995911565e1ff53e09.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.129.0/24
Signature Algorithm: sha256WithRSAEncryption
16:bb:65:a2:f4:df:1e:44:c9:c4:c9:32:72:1b:64:47:cb:e3:
9d:01:c2:65:38:5d:08:0a:9e:d3:a5:36:41:eb:25:12:61:da:
ed:61:9e:5a:60:e2:a5:95:75:ab:8e:f1:d0:66:9b:9f:ab:f6:
d0:ed:16:05:06:b2:2e:cc:57:08:fd:4b:c9:46:fb:45:e4:f4:
13:22:2f:d9:bf:27:d7:14:50:09:55:62:69:47:f1:59:64:20:
b5:9b:c6:2c:9b:df:dc:31:ca:8c:54:bb:2a:a1:44:4b:b7:09:
6e:3b:45:b2:ec:b7:77:0d:88:ea:52:be:41:66:cb:dc:4f:dd:
aa:77:ff:38:e9:f4:95:b3:73:9a:cb:c7:bb:9a:4c:06:54:7f:
3b:bf:6c:e3:93:6a:67:8c:2e:b7:44:17:cd:86:ce:4f:f4:da:
c7:eb:3a:df:7f:95:ef:d5:ee:12:27:fa:ab:b2:8a:01:97:23:
2a:b2:d1:87:03:23:d3:45:bd:79:ac:e4:4d:97:57:e9:b3:4a:
c3:4e:10:1e:0b:2a:e1:76:59:e4:46:24:e2:52:ec:c9:9d:69:
b2:e0:a1:d9:84:73:f6:3a:59:7e:5c:8f:66:de:b9:59:ef:f5:
13:0c:a5:b2:3e:87:7b:5d:2b:5d:9a:4a:50:ed:71:a6:0c:92:
8d:37:32:34
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJc8NMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY3
MDRkY2MyYmQwNWYyZjgxMWYzMjk5OTU5MTE1NjVlMWZmNTNlMDkwHhcNMjQwMTEw
MTEwNDQ4WhcNMjYwMTEwMTEwNDQ4WjAzMTEwLwYDVQQDEyhjZmUzNWM2NTRmYzUx
MTc3ZWQxNTg1YzlmMjg1NjE3MGY0MjU2MGEwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi5xIIHQG6iCzT1V+gReUJ941hj8ECRNDCASFoUJV8Jd+WsGf
McU3K1P5cImljjl9UMhLi9oV9k2OsRuBe04ewfz95VWDAO0fQVmJiss2rUIB414O
hA5+fyCObp0Yvi/DaIU0cZaAxSE0TlfTgkL0shrY4N8RKpSMOB8tCZJmire1yjUs
FWvAdms7Ot7cSQh5eJCBv6MFG6zsb4g/VnE/DVV2JXnLl9/eAz0D3wATjM2HQ7jZ
s5Fhf7R4iZH01Wg7rSS007xMjq5wbkzYMABnhsNIRbCZrfzTi6+Y+NNHTaa+9xm4
kFSUr5s7tgKtLXjBVjGZSs+LClLkOYXmyJKZ9wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOXnwMawn6pmLCwZ54P2ZxIPbEkBMB8GA1UdIwQYMBaAFClQzWcL8NmLL43Z
9AhT7tsoyOq3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjcwNGRj
YzJiZDA1ZjJmODExZjMyOTk5NTkxMTU2NWUxZmY1M2UwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODIyZGUxNjctNDZmMi00OWFmLWIxNWMtZDViMzg2
ZTYwY2MyL2NmZTM1YzY1NGZjNTExNzdlZDE1ODVjOWYyODU2MTcwZjQyNTYwYTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84MjJkZTE2Ny00NmYyLTQ5YWYtYjE1Yy1kNWIz
ODZlNjBjYzIvZjcwNGRjYzJiZDA1ZjJmODExZjMyOTk5NTkxMTU2NWUxZmY1M2Uw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnbgTANBgkqhkiG9w0BAQsFAAOCAQEAFrtlovTfHkTJxMky
chtkR8vjnQHCZThdCAqe06U2QeslEmHa7WGeWmDipZV1q47x0Gabn6v20O0WBQay
LsxXCP1LyUb7ReT0EyIv2b8n1xRQCVViaUfxWWQgtZvGLJvf3DHKjFS7KqFES7cJ
bjtFsuy3dw2I6lK+QWbL3E/dqnf/OOn0lbNzmsvHu5pMBlR/O79s45NqZ4wut0QX
zYbOT/Tax+s633+V79XuEif6q7KKAZcjKrLRhwMj00W9eazkTZdX6bNKw04QHgsq
4XZZ5EYk4lLsyZ1psuCh2YRz9jpZflyPZt65We/1Ewylsj6He10rXZpKUO1xpgyS
jTcyNA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org