Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/372a53e9483afa98182af4acc4ff9c76cec62f1c.roa
File: 372a53e9483afa98182af4acc4ff9c76cec62f1c.roa (raw, json)
Hash identifier: LqoEYMPdHuAjwZERE/EPV34FOG5qRSp5kAKEKsnUOoc=
Subject key identifier: 3A:5E:CF:1B:54:C4:49:E1:4D:14:6E:DB:A8:64:95:57:A8:7F:29:89
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 038EB3
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/372a53e9483afa98182af4acc4ff9c76cec62f1c.roa
Signing time: Fri 08 Apr 2022 01:07:48 +0000
ROA not before: Fri 08 Apr 2022 03:00:00 +0000
ROA not after: Sat 08 Apr 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233139 (0x38eb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Apr 8 03:00:00 2022 GMT
Not After : Apr 8 03:00:00 2023 GMT
Subject: CN=372a53e9483afa98182af4acc4ff9c76cec62f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:74:cf:bd:60:ff:81:e6:09:8b:88:b0:59:c5:
be:d1:31:94:e3:3f:21:48:e4:e2:b0:49:fc:ba:d1:
34:0b:a4:6c:6d:64:aa:21:a1:a6:6a:82:62:f7:2a:
f8:87:f6:03:0b:ea:59:a0:a6:43:b4:b3:93:0e:ef:
57:6d:3f:b0:9d:32:3b:f4:ed:eb:6c:d7:f8:cd:ac:
3c:17:94:da:17:7d:d6:29:b9:16:6a:91:96:a0:ab:
d9:9d:7a:dc:a8:1b:5e:61:95:c1:c0:2a:f0:7f:d1:
3a:64:1c:0d:3c:ef:3f:a5:11:a0:18:1e:22:27:76:
af:5a:08:bb:32:7f:5c:8d:29:b2:e7:fd:2f:32:35:
5f:47:05:2c:be:23:74:96:75:cc:47:3a:1a:d9:5c:
0b:72:2e:d9:7b:bb:89:9c:bc:19:f0:13:3f:0a:89:
1b:7f:4d:da:3d:4b:9e:e6:63:3f:78:7c:f1:97:c6:
6b:a4:29:f0:64:0b:8c:3a:cf:0d:30:03:b7:0c:d8:
60:a2:c9:b2:2f:ee:30:29:8f:26:09:ca:63:66:3a:
98:af:97:e3:8c:3b:bd:c2:bf:06:9e:8d:64:90:a2:
d9:ae:62:58:93:c2:fd:29:00:9c:e8:b7:49:c6:8f:
9a:3b:c4:9c:c8:67:0a:ed:e5:3a:06:6b:15:99:f3:
ff:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5E:CF:1B:54:C4:49:E1:4D:14:6E:DB:A8:64:95:57:A8:7F:29:89
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/372a53e9483afa98182af4acc4ff9c76cec62f1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ba:34:17:00:33:c9:9d:3a:eb:8a:46:da:81:b5:1c:f4:ff:
78:d7:f0:ae:55:95:cb:86:14:c3:2d:9f:8d:3f:19:b8:19:31:
96:09:85:a8:08:54:72:67:81:52:b1:60:1b:48:fb:a8:40:26:
8a:39:50:88:92:5a:8e:45:fd:fb:ed:71:21:3a:ae:ff:47:21:
86:fe:74:6d:02:96:0b:6a:8f:1e:a7:a6:3a:b3:a4:cd:00:77:
20:37:c6:26:b2:9b:d9:67:7d:54:64:79:43:bd:7a:61:48:5d:
1a:ad:bf:a4:d9:39:01:06:5d:cc:e5:75:f5:43:42:6c:81:01:
dc:39:e7:6b:2d:44:0f:c1:b1:d1:c6:70:19:a5:c1:3b:9f:db:
59:e4:56:c6:0a:5d:7a:ee:73:7c:06:5f:88:7e:49:09:3a:a0:
ef:ae:e1:36:86:be:24:b8:31:41:b8:49:df:5c:57:22:a9:a3:
60:06:7e:6e:24:dc:f3:09:73:69:81:54:4e:31:59:65:53:92:
2f:d5:a8:38:a8:3b:54:2d:5f:16:a0:7d:33:24:78:2f:93:e3:
21:1b:84:98:63:0f:08:57:95:4e:41:ac:36:0f:66:43:85:28:
61:fc:a7:a0:cb:1c:dc:98:43:cf:0e:27:e7:d2:d9:3e:60:26:
9d:56:a6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org