Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2738643e2713ca12cd3c9363e3b8d3707570ed0b.roa
File: 2738643e2713ca12cd3c9363e3b8d3707570ed0b.roa (raw, json)
Hash identifier: co/6ESv8KP8ScnwZzkRWRBjcgFViHCjap+UPiJwJsR8=
Subject key identifier: 86:8F:AE:C6:93:C0:49:88:71:0E:D2:FD:8F:29:1F:A6:9F:4B:E4:C8
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 04611C
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2738643e2713ca12cd3c9363e3b8d3707570ed0b.roa
Signing time: Thu 28 Apr 2022 03:21:17 +0000
ROA not before: Thu 28 Apr 2022 03:00:00 +0000
ROA not after: Fri 28 Apr 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287004 (0x4611c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Apr 28 03:00:00 2022 GMT
Not After : Apr 28 03:00:00 2023 GMT
Subject: CN=2738643e2713ca12cd3c9363e3b8d3707570ed0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:9d:c4:42:95:27:4b:8d:42:59:c9:a4:37:
30:2a:09:d8:9b:80:d4:c0:5a:87:b8:b5:20:5d:63:
e4:d5:72:31:6d:65:00:72:d2:89:bc:04:04:9f:4a:
5b:a2:25:7d:5c:73:56:f4:f7:b3:d3:a4:ee:c6:97:
d1:e0:8a:d6:85:9e:42:5c:2a:60:d5:7e:9b:e4:66:
d3:9b:d3:90:66:b0:81:2a:16:21:b1:b5:6f:cb:e0:
42:df:85:c8:b3:d4:be:49:cd:0e:96:89:87:b8:c0:
15:f1:4b:8d:d6:ad:f6:60:80:38:55:eb:06:12:ec:
66:36:ac:f7:83:71:8c:0f:71:ea:88:a8:69:e5:3b:
17:22:31:fa:5d:e5:e8:3f:8c:9d:dd:d8:61:c6:fc:
cd:10:77:18:f2:97:6b:04:ba:45:b9:7d:14:e0:cf:
1b:6a:34:5d:3e:fd:38:3b:db:8b:d9:9e:a5:92:83:
e7:52:41:da:57:c7:d5:b5:8b:e3:2f:be:6d:d4:96:
8d:94:da:25:43:5c:58:8b:9d:24:d2:2c:cb:ad:50:
c9:d4:32:6a:09:91:9c:90:c7:74:8f:e3:38:65:77:
d5:ae:30:75:2a:16:95:f5:ad:99:10:47:6e:e4:4f:
30:8e:27:69:ef:c5:7e:05:44:0a:75:ef:20:cb:a7:
48:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8F:AE:C6:93:C0:49:88:71:0E:D2:FD:8F:29:1F:A6:9F:4B:E4:C8
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2738643e2713ca12cd3c9363e3b8d3707570ed0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e3:1f:74:67:f7:46:59:7c:95:57:15:8d:cf:c0:c3:c7:a2:
fa:fa:29:9c:b7:e0:78:1e:09:aa:88:09:bb:33:11:db:dd:09:
4a:c1:a5:e3:e1:f4:32:a3:79:70:df:b2:e1:46:2c:71:41:d1:
11:ab:9e:39:0e:ae:95:4c:da:32:c8:70:3d:ef:ee:b2:d4:66:
4d:e3:be:92:10:5b:dd:dc:f2:04:e4:87:a8:73:bb:aa:ca:c2:
81:fb:c1:0a:c4:dc:ec:22:44:7a:28:1e:70:83:46:b6:54:95:
d5:2f:ce:4c:e2:4c:7e:ed:2e:9a:1e:36:ab:d1:31:d7:e9:bb:
66:28:12:46:d7:60:d7:f4:8b:3b:91:a3:c9:d7:7d:9c:d2:fe:
f2:23:48:e5:3d:70:c7:e6:32:37:28:5e:57:bb:9d:5d:1d:31:
a4:93:53:7c:12:62:f5:08:6a:e9:cb:ce:8b:99:2e:0c:65:95:
c0:ba:0c:36:75:37:0c:08:bd:17:5d:f5:4b:69:cb:ec:c5:44:
03:35:40:f1:5e:1b:7d:7b:a4:8c:3e:cc:c5:c9:53:c6:08:0f:
5c:52:78:7e:3b:57:87:72:f5:fa:ea:cd:d9:60:1b:3a:03:8b:
07:ce:2a:5d:eb:3a:4f:51:b3:a7:a2:ad:81:51:7f:11:8d:92:
ff:14:b4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org