Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3cbeeffc0d4ed5e544d39ff5194d1d2541ce5d8b.roa
File: 3cbeeffc0d4ed5e544d39ff5194d1d2541ce5d8b.roa (raw, json)
Hash identifier: WmFjvF03r694sxVQGULvkr2/PfVtONVn7FxYdLILjQw=
Subject key identifier: 73:97:43:B7:34:6E:5D:C3:F1:FC:A8:A8:59:BF:FB:EC:4C:40:42:0D
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0C4593
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3cbeeffc0d4ed5e544d39ff5194d1d2541ce5d8b.roa
Signing time: Mon 17 Oct 2022 05:25:36 +0000
ROA not before: Sun 16 Oct 2022 03:00:00 +0000
ROA not after: Tue 17 Oct 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 804243 (0xc4593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Oct 16 03:00:00 2022 GMT
Not After : Oct 17 03:00:00 2023 GMT
Subject: CN=3cbeeffc0d4ed5e544d39ff5194d1d2541ce5d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:68:67:ca:2c:b3:8e:51:6c:82:b5:b5:c9:
9c:d5:53:e8:6a:d7:25:9e:a5:8b:4d:b3:20:df:93:
57:5a:37:0a:88:b7:4b:1f:9c:97:3b:cc:61:8e:58:
d8:92:4e:0a:90:51:55:d2:32:e6:46:3f:92:bf:d0:
8b:b0:fd:3b:e9:dd:20:c9:de:41:15:9f:21:8d:91:
f5:b3:ac:38:58:21:67:6c:a3:b4:2e:4a:a9:6c:a9:
7b:f5:5a:bd:a4:2c:99:b7:62:0c:f7:98:75:32:d5:
20:ee:06:e2:1c:29:e4:55:29:4f:03:97:57:02:ac:
a0:aa:b1:8e:06:ef:c1:f4:d2:8f:14:0c:f7:ef:7b:
37:34:b4:68:64:4d:4f:b6:e1:76:08:ca:28:c4:73:
b2:34:0f:1f:2f:5d:77:9f:02:c4:13:a5:63:61:54:
dd:5f:14:39:f7:43:7a:b2:ba:a2:cf:78:31:3c:92:
35:66:be:32:47:94:27:55:85:2b:20:9e:05:d4:8e:
c0:39:0e:ae:16:15:45:4f:5c:8c:cc:31:ae:ee:38:
4e:1a:cb:5c:9d:e5:4f:e5:ec:71:cf:97:93:45:46:
52:7f:57:ee:85:54:6d:fb:18:17:49:be:d5:5f:25:
66:11:1b:c5:30:d5:01:bd:4a:eb:5e:33:cd:74:e0:
d3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:97:43:B7:34:6E:5D:C3:F1:FC:A8:A8:59:BF:FB:EC:4C:40:42:0D
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3cbeeffc0d4ed5e544d39ff5194d1d2541ce5d8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
40:a5:4e:23:7f:2f:fd:98:36:ce:34:b9:67:67:12:a1:54:1d:
41:64:22:0d:53:0f:d8:ad:a2:54:b0:d2:14:55:39:43:3b:f2:
ae:16:da:81:64:13:78:e5:4b:18:22:46:e0:fb:a1:a0:2a:4d:
1a:fd:8f:f5:4d:0d:60:be:a5:0e:73:e5:ac:3f:a7:99:f1:eb:
5c:4f:8d:cd:2a:94:83:62:e8:f0:60:18:13:70:ee:9e:c1:35:
ce:30:c3:4d:08:b0:39:b8:e4:30:37:29:42:58:d7:1c:67:c2:
89:85:6a:4f:1a:ec:f6:86:93:4b:7d:3e:e9:2c:41:e7:f4:b9:
60:c4:96:e8:8d:57:78:5d:5d:d5:a7:87:e7:66:00:0a:df:21:
eb:6d:09:96:c6:11:a7:32:e9:ed:05:6a:e8:44:a5:be:4b:b0:
5f:5a:2f:36:54:ee:3c:6d:aa:ce:a7:70:e5:74:30:d1:8b:63:
1d:2a:05:82:2a:86:87:7c:c4:f8:e2:fb:92:70:e4:0a:2a:30:
12:5f:6a:b4:fa:83:bb:59:db:8a:1e:36:10:f6:59:ed:97:69:
af:2d:21:98:22:7f:73:61:35:46:55:d4:5d:9a:75:c7:4a:a9:
d0:ef:23:84:93:a0:d9:b7:97:d7:bb:d2:9f:d6:36:66:d1:c2:
a5:a0:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org