Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3b1936fd89dcd011ef3f1ce3b5b577367888d96d.roa
File: 3b1936fd89dcd011ef3f1ce3b5b577367888d96d.roa (raw, json)
Hash identifier: r4FbcBwEzi2QwCQyvF6YthPFbNa6XxZP0AYk9W4Ji4s=
Subject key identifier: 89:9A:41:DB:D0:12:00:E2:F4:1F:99:22:54:62:5C:64:1E:2E:2C:EE
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 052016
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3b1936fd89dcd011ef3f1ce3b5b577367888d96d.roa
Signing time: Tue 17 May 2022 02:24:04 +0000
ROA not before: Tue 17 May 2022 03:00:00 +0000
ROA not after: Wed 17 May 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335894 (0x52016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: May 17 03:00:00 2022 GMT
Not After : May 17 03:00:00 2023 GMT
Subject: CN=3b1936fd89dcd011ef3f1ce3b5b577367888d96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a3:71:6d:de:63:c0:6a:1c:1e:64:62:6a:b5:
03:77:4e:49:4c:c4:c0:62:5b:d3:d1:0e:1c:98:f0:
c9:a7:62:d3:bf:67:21:73:87:bc:73:df:c1:8e:ae:
26:e2:2f:09:f0:9d:27:94:37:b7:74:e9:32:48:53:
cc:da:29:d2:ba:45:1c:e0:63:1e:a4:2a:7e:2d:c5:
36:3e:14:f1:3b:0d:11:d0:b1:46:7c:ba:b4:4e:01:
fc:ca:6f:68:af:f2:49:20:f6:d6:a8:82:25:cf:ca:
89:74:61:7f:7a:9a:eb:41:de:3a:eb:b5:e8:b7:b9:
dc:f0:e7:5e:89:e9:af:d0:62:9a:f3:aa:0a:1e:f2:
b3:fe:77:73:35:e4:6f:fa:33:6e:7b:89:0b:a3:5f:
cc:6e:22:5f:21:96:98:8b:15:85:58:ff:43:9a:b6:
0a:f1:71:ea:96:be:4c:b5:9b:b4:27:ec:43:05:a7:
46:d6:ae:19:d3:ed:19:6d:de:a6:15:2b:f7:03:56:
5c:28:8b:b0:5d:05:42:ef:79:9f:1b:0e:87:6f:b3:
4c:1f:e8:6b:22:64:9e:c9:0f:c9:fd:34:ad:3c:a8:
43:d7:57:1b:c5:b5:6b:0b:75:e5:57:13:83:4a:29:
20:bd:2a:0d:3b:60:9a:7a:97:4d:b6:f4:4f:db:a5:
40:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9A:41:DB:D0:12:00:E2:F4:1F:99:22:54:62:5C:64:1E:2E:2C:EE
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3b1936fd89dcd011ef3f1ce3b5b577367888d96d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:9a:c4:80:19:f3:41:d6:c0:e5:8e:0d:5e:0a:a7:05:f8:55:
cf:93:aa:6b:39:5a:d0:10:cf:0f:92:5e:65:bb:f4:3f:a3:ff:
ae:1b:98:76:9d:45:11:a1:de:33:d8:13:59:3a:d5:f7:93:5e:
5d:a9:05:7d:ff:66:f2:db:68:77:09:2f:ac:0f:10:0d:a2:f2:
60:45:58:ea:89:42:e7:34:1e:98:82:55:e5:d2:99:19:3d:c8:
d5:98:b6:f2:20:ec:3a:97:74:85:2e:82:73:6c:56:be:6d:65:
e8:b1:91:60:2e:5e:e8:3a:fb:ea:c0:03:bb:7a:8e:62:0b:40:
20:5c:cb:ef:1c:6b:8a:d0:b8:65:80:18:19:c3:91:32:29:08:
90:9f:8b:47:64:1f:40:12:a0:79:9e:7b:64:84:bb:75:78:d0:
75:2f:df:ca:3a:59:3c:ee:d1:46:ea:e8:3e:1a:32:1b:1c:ba:
de:f2:78:5d:68:a5:60:f8:14:ed:f3:70:38:bd:a2:4f:74:27:
04:e6:f6:1a:ad:1b:52:96:06:25:c0:5e:f4:82:4b:f6:36:4c:
6d:eb:2f:18:bb:ec:e8:d3:f7:8c:87:65:9a:2d:5c:3b:ba:e2:
18:2a:2e:4e:26:01:2b:4b:58:de:1d:23:03:18:6f:de:3e:f6:
10:0e:70:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org