Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/17d32ff7e8ab13f535d3b6de7ec31c4c03960cd5.roa
File: 17d32ff7e8ab13f535d3b6de7ec31c4c03960cd5.roa (raw, json)
Hash identifier: nshQ6yNq1yXuZStPJiWPaxA3UdQE3v6HXU46NoF6VmA=
Subject key identifier: F4:94:AC:62:B8:7F:C7:3B:81:CB:BB:C4:E8:0F:6B:6D:1D:7F:24:4C
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 02A1B2
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/17d32ff7e8ab13f535d3b6de7ec31c4c03960cd5.roa
Signing time: Sun 20 Mar 2022 00:44:32 +0000
ROA not before: Sun 20 Mar 2022 03:00:00 +0000
ROA not after: Mon 20 Mar 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172466 (0x2a1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Mar 20 03:00:00 2022 GMT
Not After : Mar 20 03:00:00 2023 GMT
Subject: CN=17d32ff7e8ab13f535d3b6de7ec31c4c03960cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:4e:53:63:65:7d:d7:26:29:73:79:21:22:
b1:a2:9e:cb:b5:dc:25:ee:96:2f:d7:62:c8:a1:ef:
01:d8:88:d0:6c:dd:7c:b5:8e:f2:3a:5a:00:94:a8:
6a:0c:82:11:c2:bf:e6:62:92:74:8b:b1:4d:94:16:
89:dd:1e:9f:25:7b:73:45:53:19:a6:1f:ba:0d:dc:
9e:06:a6:ed:e7:a1:b2:f6:95:ff:ed:60:eb:d8:ef:
9f:93:de:90:8e:d5:ea:bf:f9:49:af:35:0e:7e:f5:
a4:f3:61:07:74:3c:ed:1d:b8:55:c5:56:4a:30:51:
1d:9b:c8:16:22:35:92:3b:ef:2f:13:6f:83:61:1a:
82:c6:ec:05:86:b3:f7:c5:79:e5:76:d0:17:ec:9d:
22:cc:72:c2:4d:35:1f:40:49:65:9c:54:90:35:69:
82:09:fc:bf:71:01:f3:6b:41:a0:2e:95:67:5d:30:
4f:99:1b:9f:a9:c9:cd:33:e2:e4:24:92:c4:a3:00:
f1:9c:96:e7:0a:20:e8:b7:2a:54:34:31:05:be:1c:
ea:64:9b:9c:c1:28:68:58:e2:ec:b0:4f:59:fe:1d:
99:0a:c4:39:dc:11:80:f6:82:a6:5b:57:1c:3e:6a:
3a:cd:a6:e5:da:20:db:d4:c6:b0:b0:8b:13:d8:b3:
e7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:94:AC:62:B8:7F:C7:3B:81:CB:BB:C4:E8:0F:6B:6D:1D:7F:24:4C
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/17d32ff7e8ab13f535d3b6de7ec31c4c03960cd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
14:6e:c1:51:bc:d3:3b:0c:62:6d:14:3e:7c:03:a0:c7:78:98:
81:35:9d:e9:ce:94:1b:7b:ee:d3:63:0a:9e:22:7d:58:30:37:
a9:01:ad:0f:e3:cf:43:8d:b6:3d:18:b0:98:6e:2b:ae:81:06:
9c:6d:0a:82:7d:51:ca:13:d1:d3:40:07:e7:53:87:93:1d:80:
bb:69:44:47:35:c6:fb:14:60:1f:2d:fc:23:4b:3f:12:bb:ed:
25:f6:b5:f6:2c:97:6b:dc:05:2c:2a:f2:70:e9:b9:b9:8c:a7:
3e:e2:c4:a0:6e:61:d3:5a:60:3b:f9:4d:39:02:55:dd:c7:6c:
79:3f:9d:70:f1:41:ab:3d:38:a2:4b:76:ff:c1:79:8c:7e:73:
ac:52:11:9d:39:96:20:85:a2:67:d8:b3:e7:7a:2f:7e:ba:63:
54:9a:a6:8e:92:02:e0:33:e1:ee:6d:2f:a7:a8:f5:0f:31:5f:
d6:08:1d:ee:da:63:b2:25:49:eb:75:46:aa:5c:d9:94:f2:00:
a0:4a:ce:a1:56:8a:59:ed:d6:cc:92:3a:a1:ad:f0:66:e4:80:
c7:02:38:47:d9:d3:4a:9c:29:ef:34:7b:cc:85:1b:5e:d2:f7:
03:bc:64:bd:83:5b:5a:a8:18:24:2a:be:0c:ec:79:34:85:05:
7e:77:f6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org