Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3e74ccd16405336b4f4cf0d3e25b0518f463d7a6.roa
File: 3e74ccd16405336b4f4cf0d3e25b0518f463d7a6.roa (raw, json)
Hash identifier: OCHMfBX/fLmuhLm6x9pS/IKmKGJ5moz3s9KcRgjLkR0=
Subject key identifier: B3:9F:00:2E:09:8A:24:18:F4:CE:A2:D7:E0:32:C6:AB:46:A2:6B:51
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 039509
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3e74ccd16405336b4f4cf0d3e25b0518f463d7a6.roa
Signing time: Fri 08 Apr 2022 08:13:37 +0000
ROA not before: Fri 08 Apr 2022 03:00:00 +0000
ROA not after: Sat 08 Apr 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234761 (0x39509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Apr 8 03:00:00 2022 GMT
Not After : Apr 8 03:00:00 2023 GMT
Subject: CN=3e74ccd16405336b4f4cf0d3e25b0518f463d7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:d9:71:7d:0c:48:33:c1:70:7e:e9:10:12:
ea:72:d1:5a:ec:6e:01:fa:ab:ff:62:c1:c5:6c:f9:
c9:f5:ad:b1:df:83:1a:ab:8c:69:cb:5d:41:95:af:
78:92:f6:c4:6e:11:a5:6b:81:73:26:15:26:b4:7c:
67:19:ab:34:39:83:1d:0c:b1:2b:65:20:5c:bd:3b:
c7:50:be:ab:08:5e:98:e4:98:1a:e2:89:7b:ae:36:
45:bb:2c:cf:89:f3:01:4f:02:7f:79:42:e7:2a:62:
41:72:c5:64:53:95:fc:4e:22:f2:08:b5:7d:d2:7d:
55:c0:04:82:2b:b4:fb:6b:35:82:1b:b9:27:aa:1d:
a7:ed:82:8e:eb:82:9a:30:a6:c9:00:f4:32:0c:e6:
c0:00:c5:f2:b8:95:04:cf:9a:94:cf:7f:cb:80:8f:
48:f1:3c:6c:e8:7f:43:91:4e:d7:d2:5b:93:f3:30:
9f:df:6c:89:a1:61:f6:3d:92:50:ba:ad:b2:26:a3:
9c:0f:76:f0:c3:85:73:29:32:be:df:f3:6d:fc:ce:
4f:9b:99:91:fe:a7:66:eb:e0:66:09:dc:02:59:b4:
37:93:7d:1b:33:7c:27:4a:0b:ca:45:92:19:cf:69:
7c:e3:9c:c3:85:27:09:f0:f5:82:2a:0d:08:22:63:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9F:00:2E:09:8A:24:18:F4:CE:A2:D7:E0:32:C6:AB:46:A2:6B:51
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3e74ccd16405336b4f4cf0d3e25b0518f463d7a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
91:54:ea:7f:ac:07:6d:39:de:af:08:38:f4:4d:ef:e5:d2:a4:
4e:a4:67:d6:f3:4b:d6:18:72:a3:51:1c:a2:8a:f1:b0:2c:d4:
b2:03:cf:c7:b0:91:78:84:c9:97:99:89:43:4f:93:e4:82:0c:
5f:03:7d:70:c9:4c:8a:77:41:19:e0:44:7b:7d:10:7f:b2:7f:
2a:88:b9:ef:64:7a:d5:80:36:a2:0c:10:b6:ee:32:4b:17:e6:
ac:5b:4e:59:c1:6d:86:5a:6d:2c:f5:ef:8d:6b:56:6d:bf:f7:
3a:59:dc:8d:e5:b1:ff:e5:78:67:1d:ff:64:70:73:39:c2:78:
a2:db:1c:49:52:0f:8f:82:86:05:cf:26:dc:2d:9b:c6:ff:2d:
64:85:4c:6f:32:fe:ee:56:41:96:4c:f4:1d:84:41:52:a8:60:
f8:bd:d5:5d:b1:e3:0b:2b:fe:84:4f:16:87:d1:b8:97:cb:3e:
08:be:cb:72:f5:77:25:e8:bd:7f:70:6f:4e:96:f2:ab:08:0d:
9c:23:93:45:b5:7c:f6:c3:71:84:6a:b1:9a:a3:47:0a:46:5e:
2b:e4:45:15:52:95:fc:2e:ce:b1:7b:a4:9f:33:41:6a:ed:95:
42:7b:4b:97:83:f1:f5:73:fc:bf:d5:8c:5c:c6:ab:aa:66:f3:
68:50:bc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org