Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3e6757566c3d9c4f81aaa3976478a4ca73b7f13e.roa
File: 3e6757566c3d9c4f81aaa3976478a4ca73b7f13e.roa (raw, json)
Hash identifier: rtt1lLLlOofF64C5TQVKZ3SXWTbbmv5BGqzX1ORs+R4=
Subject key identifier: 2B:99:7F:82:6D:FF:7F:72:00:1F:14:C8:33:34:7D:40:8B:4E:09:65
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 06B9A3
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3e6757566c3d9c4f81aaa3976478a4ca73b7f13e.roa
Signing time: Sat 18 Jun 2022 01:38:21 +0000
ROA not before: Sat 18 Jun 2022 03:00:00 +0000
ROA not after: Sun 18 Jun 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440739 (0x6b9a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jun 18 03:00:00 2022 GMT
Not After : Jun 18 03:00:00 2023 GMT
Subject: CN=3e6757566c3d9c4f81aaa3976478a4ca73b7f13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cf:1d:38:e6:49:4e:b8:70:6d:23:c4:05:97:
c8:ea:d8:98:00:47:e5:6e:87:c8:5d:55:e8:85:11:
7d:db:4f:35:4e:2a:cf:3b:86:85:d8:c3:f8:40:e3:
e2:2a:e6:67:0d:da:d8:3e:d7:e2:51:f4:4b:5d:c9:
01:54:4a:16:d2:42:e9:84:d9:e1:81:a2:ef:6d:bb:
78:42:81:01:9c:b8:eb:55:28:44:57:3b:9e:4a:00:
74:5d:c7:c4:44:01:12:c2:b8:5c:5c:82:8c:5d:06:
3a:85:bc:67:4a:6d:5c:86:ac:d5:7e:ff:07:3f:dd:
16:19:78:8b:2f:b3:41:3e:5e:38:4e:5d:96:d7:4f:
99:8e:93:f1:3f:9d:a3:76:26:89:86:ae:e7:eb:96:
c6:09:59:02:16:4e:a6:69:4a:b2:8d:6c:8a:0b:84:
30:95:05:6e:6c:34:cc:dd:50:44:2e:2b:ea:2a:2d:
7f:ad:3d:d8:c1:03:16:75:b0:39:10:22:55:98:7f:
d9:07:c4:67:33:6d:9c:8f:e7:c3:57:bc:af:7a:f5:
e3:86:6d:57:50:c7:1a:d5:25:c9:15:d5:4a:14:34:
85:d7:f0:8a:a2:60:c8:a9:f4:42:81:0c:d2:28:43:
5c:bd:94:92:6b:45:cb:94:40:8e:a8:ae:93:6b:52:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:99:7F:82:6D:FF:7F:72:00:1F:14:C8:33:34:7D:40:8B:4E:09:65
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3e6757566c3d9c4f81aaa3976478a4ca73b7f13e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:3c:f7:3e:50:3e:8f:86:7e:05:a4:22:a4:f2:a5:bb:5f:50:
89:ec:bf:62:fb:f5:ed:5f:45:6d:33:9b:2c:4a:9b:9e:e3:3d:
46:0d:b2:89:9c:ae:ac:c0:2c:f0:7e:5a:39:3d:a5:11:18:85:
e4:32:02:a0:fe:d0:c6:29:69:54:a7:b5:06:bf:5d:79:e9:81:
4b:4f:51:3b:e8:6c:62:57:68:df:54:e7:62:b8:a1:9d:63:13:
88:9d:ca:9a:2d:c5:13:86:79:7b:6e:c3:5b:59:53:d0:27:9c:
00:a1:c1:ef:21:00:a8:ed:bc:22:24:34:ce:f7:ae:9a:16:5e:
c8:5b:dc:4d:84:08:3a:8b:45:7d:68:15:77:5e:66:b3:db:d5:
69:4a:a6:5c:a1:75:86:22:e7:03:f0:68:9b:bb:24:dd:b9:c1:
74:c6:cc:f7:58:56:88:77:6b:26:b3:40:2d:3b:02:ea:e0:b4:
e0:fa:0a:a4:ef:3e:13:0b:c1:d5:42:71:e0:73:f1:11:d5:80:
d6:e2:79:14:e6:bc:c8:3d:cc:ce:95:63:68:30:71:bb:20:33:
fb:7b:35:4d:50:5b:a9:a2:9e:b3:0b:c7:84:31:56:59:66:6f:
56:f2:ba:df:fe:dc:35:55:c2:ac:da:2c:6a:f1:b1:70:f4:c8:
92:fd:e5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org