Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0388cd252fb8f5b461cd90033651437abf58e329.roa
File: 0388cd252fb8f5b461cd90033651437abf58e329.roa (raw, json)
Hash identifier: eOEk02OzLFRATU/jhR72Seg7MqL/Rw9y1kdTgoaOJJ4=
Subject key identifier: D0:9F:8A:15:46:AE:AA:7C:DA:CB:E8:99:10:11:51:9F:6B:69:40:CC
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0857A9
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0388cd252fb8f5b461cd90033651437abf58e329.roa
Signing time: Mon 25 Jul 2022 00:07:57 +0000
ROA not before: Mon 25 Jul 2022 03:00:00 +0000
ROA not after: Tue 25 Jul 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546729 (0x857a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jul 25 03:00:00 2022 GMT
Not After : Jul 25 03:00:00 2023 GMT
Subject: CN=0388cd252fb8f5b461cd90033651437abf58e329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:11:49:68:a1:53:bc:ea:1e:9a:52:a8:0a:
c3:90:b6:3e:a5:7c:d3:6e:2a:88:e6:3c:11:93:50:
f2:bc:26:69:f6:1a:b5:6f:7e:70:25:1b:49:55:f4:
91:0e:de:4c:97:da:12:ed:a0:28:8f:dd:25:87:84:
53:32:df:c0:10:ca:0e:18:28:3e:06:b6:c6:bc:02:
58:24:83:42:1c:9d:d1:2a:16:a7:aa:ed:37:4f:37:
bc:ad:37:8a:83:a4:08:ad:b9:14:45:a4:f1:5b:8d:
65:29:bf:50:22:5b:c8:fb:d9:42:6b:a3:be:7a:d2:
bf:40:f1:6d:19:e0:39:8e:f9:9b:55:0d:f3:e6:63:
a8:4e:08:eb:b0:02:99:6a:64:d1:74:a1:c9:07:e6:
51:d1:7e:89:e8:a6:5f:08:f8:90:e7:5d:1a:aa:d8:
9d:73:97:7d:ae:2e:3e:db:8a:05:b7:21:cc:03:02:
86:a1:f6:57:8f:4d:a6:fd:f9:9b:0e:f0:ec:f6:3d:
86:07:62:d5:ed:e6:c2:76:1e:6a:13:98:fb:a9:3a:
a2:2e:9e:3d:b5:81:fa:3a:fb:22:40:b0:79:9e:3a:
b9:47:73:61:26:cf:0c:93:6f:41:18:96:1a:ca:5f:
b7:6b:43:af:21:ef:34:b7:bf:3c:2e:e6:48:ee:b4:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9F:8A:15:46:AE:AA:7C:DA:CB:E8:99:10:11:51:9F:6B:69:40:CC
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0388cd252fb8f5b461cd90033651437abf58e329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
09:6a:de:d0:c1:fa:6a:3a:75:f5:83:ab:95:b5:77:2f:17:9b:
50:f6:cf:f2:55:46:45:43:c3:92:e5:a0:d6:e0:a4:ee:95:c8:
02:8f:a0:f5:90:f1:0d:71:3a:b8:74:a1:ca:17:cd:4c:84:52:
a0:2b:5a:93:7a:6d:e1:d8:0d:1d:9e:e9:68:db:e1:12:8d:41:
4c:98:88:31:5a:7b:9d:c7:fa:dd:c4:6c:2d:a9:9f:00:aa:3d:
dd:1f:c7:4b:1d:ec:10:be:15:df:e5:88:1b:a1:79:1c:0e:50:
38:b9:a4:a2:34:6b:f5:2b:8a:a2:99:4d:86:c8:a8:b1:06:95:
59:a9:49:68:16:03:84:29:f9:e7:39:a5:53:62:a1:67:7f:b2:
ee:bd:08:4b:b6:e3:4f:b0:35:63:7e:cd:b9:eb:9b:9e:79:0d:
19:fc:5a:cf:0c:a7:0e:8a:7e:b9:af:74:ee:03:31:8c:2f:cf:
f9:6e:24:91:8a:c7:fc:1d:a8:a6:94:02:85:87:b3:38:ce:53:
f0:2b:af:1e:0a:07:e0:73:d1:81:96:e4:41:b2:9e:ff:84:f8:
5a:d1:bc:7c:ec:ab:71:30:cd:ec:5b:b3:fe:19:ed:2f:28:26:
a8:2e:b7:1c:ef:a0:e9:7b:c8:76:8a:a2:ff:1f:95:40:21:e7:
65:aa:97:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org