Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3521f3b60f356a55750f10abd60aaa340a618e02.roa
File: 3521f3b60f356a55750f10abd60aaa340a618e02.roa (raw, json)
Hash identifier: yxzdtiQCkPVshiw+vOAwaqA8KA/49fgUUQQQAv/NgOQ=
Subject key identifier: F2:31:77:52:3E:09:EA:BE:0C:B5:DC:00:7A:2E:DB:D9:25:EE:EF:12
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0A0E80
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3521f3b60f356a55750f10abd60aaa340a618e02.roa
Signing time: Thu 01 Sep 2022 02:20:39 +0000
ROA not before: Thu 01 Sep 2022 03:00:00 +0000
ROA not after: Fri 01 Sep 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659072 (0xa0e80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Sep 1 03:00:00 2022 GMT
Not After : Sep 1 03:00:00 2023 GMT
Subject: CN=3521f3b60f356a55750f10abd60aaa340a618e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:ed:71:28:73:47:80:f1:06:55:e2:78:09:
36:b3:97:42:fb:0d:e6:16:70:83:63:f6:01:56:36:
53:f6:42:03:a0:1c:87:47:37:7b:95:e7:84:16:4b:
de:08:0d:4d:07:28:8d:53:4d:08:c3:22:1e:de:2e:
76:80:56:71:bb:01:95:3e:21:e6:ce:05:82:c7:3c:
b2:b9:31:30:63:b9:af:09:d9:41:69:49:b6:8c:c0:
aa:03:7a:ae:fc:02:f2:08:d7:b7:7d:d8:0f:89:e6:
8a:bf:ea:33:4c:a7:2c:6c:6c:28:55:8f:72:34:48:
d9:0f:30:75:51:3c:f9:1e:9d:86:50:cd:14:ac:8f:
db:37:1b:8f:61:73:c5:ee:f5:38:18:dd:63:7f:42:
3f:26:db:cb:c3:87:ce:f6:ff:44:79:79:06:66:49:
99:14:27:dc:7d:5d:0b:b1:49:6e:dc:c4:4b:c8:9b:
dd:38:8e:7c:cf:e5:29:e9:d2:66:89:95:51:1b:8d:
3d:f5:f2:9d:2f:f5:b9:bb:a4:c7:57:1f:e7:8a:61:
c7:d7:49:f6:f5:ad:6a:ef:3b:bb:29:2d:a8:85:7b:
f2:b5:4e:2d:bc:27:3a:95:e9:40:8b:71:44:8c:dc:
ec:f1:21:d8:1f:a5:05:af:97:d6:b1:92:f5:e0:49:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:31:77:52:3E:09:EA:BE:0C:B5:DC:00:7A:2E:DB:D9:25:EE:EF:12
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3521f3b60f356a55750f10abd60aaa340a618e02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
18:29:d5:19:12:2b:f2:84:5b:a7:cf:70:82:cd:2b:4a:7f:fc:
89:4d:30:96:be:ca:44:ce:f6:57:41:a6:bc:bb:84:6d:75:11:
23:3e:e9:a0:85:5d:5c:3e:f8:f3:62:20:7e:ed:6c:04:63:7f:
31:c4:f4:f8:0e:05:06:dd:6b:bf:fb:bf:2a:b9:9b:32:75:b6:
fa:12:47:fa:cc:28:2f:69:d0:af:d7:8c:54:80:d2:a9:e0:93:
af:64:e8:e6:ca:be:0f:89:3e:fd:b4:47:ee:ba:52:32:91:b1:
ba:91:5c:29:31:8e:9c:9a:fb:a4:e4:3e:31:bc:1e:09:4b:ae:
1f:f7:5c:8b:a9:b3:03:0f:5c:dd:69:b9:a9:89:53:a0:6d:ca:
e6:1e:3f:5b:01:de:64:8b:b9:c8:ce:db:c9:67:39:c5:c6:39:
35:9e:c2:95:c1:9c:80:00:17:b8:5c:0c:d7:13:dd:7e:07:45:
99:ea:7a:6c:e6:6e:fe:ce:cf:d1:d7:29:ee:cd:61:7a:b7:85:
ec:07:97:8e:a0:69:f8:67:7b:29:12:b3:63:85:10:7d:0d:9a:
a1:a9:eb:f0:f7:dd:9d:5f:ab:2e:48:63:18:a7:ff:a6:52:7c:
8d:3d:da:d5:96:5a:fa:a6:eb:44:33:ef:1a:d3:73:b3:94:87:
f0:7a:c6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org