Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2fe91ee24ba8e6f3e2f7d891ad06be150ecc32e3.roa
File: 2fe91ee24ba8e6f3e2f7d891ad06be150ecc32e3.roa (raw, json)
Hash identifier: hFF/Xt2d8cgXCcZpm4EQV9pFVmSVHVsbiQ5xfMnHZ1E=
Subject key identifier: 81:71:6F:5D:39:4C:33:19:44:99:8F:56:3F:22:75:73:11:32:FF:29
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0CE24F
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2fe91ee24ba8e6f3e2f7d891ad06be150ecc32e3.roa
Signing time: Sun 30 Oct 2022 00:12:13 +0000
ROA not before: Sat 29 Oct 2022 03:00:00 +0000
ROA not after: Mon 30 Oct 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 844367 (0xce24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Oct 29 03:00:00 2022 GMT
Not After : Oct 30 03:00:00 2023 GMT
Subject: CN=2fe91ee24ba8e6f3e2f7d891ad06be150ecc32e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:fe:6a:38:f5:7c:7a:5b:3a:ca:79:63:7d:
1d:76:7e:d1:f8:2b:b7:f5:6b:e7:e6:64:8d:a0:82:
36:f7:f8:b7:75:3a:ad:72:ff:8c:f1:8b:52:0d:b6:
e0:f1:41:3c:3c:03:71:d1:0f:1e:a5:b0:ba:33:a8:
f5:ff:21:f6:58:6d:db:6a:56:8a:ea:81:7e:36:9a:
c3:8d:27:16:c3:59:cc:8f:1d:ec:af:df:c2:93:38:
79:0b:9a:d3:35:82:47:73:1a:63:6a:42:d8:0e:00:
09:36:cb:23:cf:c9:f8:31:c2:09:18:84:9c:ea:c9:
60:5d:5d:20:6d:1c:b8:d9:c7:1d:cf:93:90:b0:4e:
fc:b9:e7:3e:b6:48:49:ae:96:32:7b:9a:55:4c:ad:
cc:4f:95:da:e9:4d:1a:33:2e:b0:c3:af:2b:f3:00:
cd:e5:36:d4:6a:54:18:bf:41:17:b6:f2:4b:ae:63:
1e:89:50:26:ca:1d:50:d5:e0:1f:99:c5:6b:38:07:
9e:45:9d:10:91:1b:84:67:5e:2d:2f:2e:64:85:fa:
1f:6a:96:74:bc:ed:82:55:8c:8c:e6:0d:fe:85:e7:
07:b7:2c:fb:6d:d8:7d:26:05:62:3f:cf:27:24:95:
44:6c:94:63:53:f1:3c:dd:d9:5c:d2:88:5c:64:c9:
87:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:71:6F:5D:39:4C:33:19:44:99:8F:56:3F:22:75:73:11:32:FF:29
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2fe91ee24ba8e6f3e2f7d891ad06be150ecc32e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
87:63:e0:c6:4d:34:37:2c:c8:41:b1:5b:99:b3:91:c9:95:cd:
b2:aa:5f:a3:43:f7:6e:98:ac:ff:4e:c2:36:39:8e:75:53:25:
d6:5f:4d:88:74:60:0b:40:96:d4:7c:21:a7:99:be:b4:be:f5:
5b:44:df:47:7b:4f:c5:03:25:4a:3e:8b:1a:72:30:55:bb:3f:
f6:25:03:d2:61:eb:e9:13:f5:3c:8c:85:c4:c9:6f:18:1c:1a:
6c:c8:cf:f7:26:fd:9e:07:18:40:9d:e4:8d:15:8e:20:d0:cc:
6d:67:94:77:65:37:cd:65:f2:b5:27:e8:0f:d4:ec:15:4c:0a:
d5:cd:e3:4a:dd:7e:f2:66:b6:ee:01:aa:eb:2d:0a:00:31:af:
4d:0c:2c:53:e7:88:b1:81:dc:d2:d6:f6:42:ff:43:4b:15:04:
7c:4b:dc:70:17:15:57:fb:82:db:e9:8d:48:b8:e1:12:7a:6b:
df:8e:5d:ca:4b:ae:90:92:e7:12:1f:6f:0d:1d:71:28:f6:2e:
b8:52:be:a2:3e:f9:b1:af:86:36:14:d4:3a:07:02:5b:b9:df:
f9:3c:df:ac:7b:a9:24:46:8b:8b:33:22:b4:3e:5d:38:69:61:
c2:8d:e7:99:a0:dd:de:e5:b1:22:95:ea:0f:d9:c4:f7:9f:41:
a1:ae:21:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org