Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/43295adde9a8446446cd08cc02b9a6547958ef44.roa
File: 43295adde9a8446446cd08cc02b9a6547958ef44.roa (raw, json)
Hash identifier: KB1dYha7nfg/uPLTrJMZ2yNoyB5tmQpgAkHXZhb7wok=
Subject key identifier: A4:CD:44:A1:66:62:BE:FB:A8:8F:87:F1:CF:C2:FC:D6:8F:8E:63:6F
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 047435
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/43295adde9a8446446cd08cc02b9a6547958ef44.roa
Signing time: Sat 30 Apr 2022 00:35:44 +0000
ROA not before: Sat 30 Apr 2022 03:00:00 +0000
ROA not after: Sun 30 Apr 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291893 (0x47435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Apr 30 03:00:00 2022 GMT
Not After : Apr 30 03:00:00 2023 GMT
Subject: CN=43295adde9a8446446cd08cc02b9a6547958ef44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:90:19:57:d0:09:6c:07:7a:b7:04:bd:5a:
67:a5:1c:89:0d:65:68:ea:6a:85:65:20:f4:02:ad:
98:0b:47:93:f8:b4:77:65:17:61:8a:60:49:03:3a:
5f:74:14:b1:eb:82:45:8e:35:0d:50:ae:12:17:1f:
c5:77:78:e9:29:a3:55:9d:9b:d9:9d:99:a3:66:f3:
f7:df:82:fb:c0:26:19:9f:9e:47:66:d0:65:b2:d7:
d4:a3:42:20:2f:b2:c3:62:64:1b:84:23:2e:b0:ad:
41:c9:eb:8c:bd:d9:a2:a4:e2:22:3a:0b:8d:2a:35:
95:98:14:85:77:bf:fe:37:24:d2:97:5c:e2:00:c1:
96:a3:51:8d:99:a8:71:6e:ca:b5:a7:16:59:9c:23:
17:cc:0e:5c:b7:47:8b:25:b4:1a:0a:b8:c4:07:5c:
87:19:5c:b3:25:38:2f:93:d8:54:84:64:a9:02:24:
c3:98:7f:c3:bf:81:2c:fc:a0:2d:8a:e4:cc:4e:b6:
3b:16:74:13:a5:91:90:62:dd:ce:c3:05:e0:63:f1:
c6:5a:fe:5d:86:3a:a6:02:f8:11:ca:d2:12:dc:15:
43:dd:71:57:1c:45:19:ea:d7:28:fd:47:84:5a:9b:
b5:0d:03:11:a4:22:a7:54:4f:66:1a:e4:f8:03:eb:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CD:44:A1:66:62:BE:FB:A8:8F:87:F1:CF:C2:FC:D6:8F:8E:63:6F
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/43295adde9a8446446cd08cc02b9a6547958ef44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
17:11:88:cd:ec:13:86:d3:64:fb:06:15:44:2f:5e:23:ad:8c:
b8:f1:a2:ad:ae:f0:ea:99:bf:97:d5:0c:f3:b3:3d:7d:16:e7:
34:2d:2e:c5:25:24:3f:92:96:0d:c5:74:c4:83:3f:29:64:0f:
13:52:cf:5f:8f:99:bf:27:de:c7:ea:77:5a:dc:4e:e9:83:ed:
89:49:5f:c6:26:af:ed:77:06:09:bc:9c:c8:7e:13:51:5c:0a:
2b:06:8f:68:ed:33:21:42:49:59:28:51:a7:e3:8f:8f:d4:7c:
b4:37:bd:51:92:d4:bb:7f:f2:4d:b5:bf:79:72:1e:01:aa:39:
37:49:fc:04:ff:a2:62:62:8c:93:0f:f3:01:ff:bc:60:d4:60:
1f:02:73:ee:b5:c5:d8:ad:9d:a3:0d:a9:25:62:7c:2f:49:6b:
be:22:8e:cd:99:32:b0:a7:00:79:fd:86:de:6c:21:ae:4f:97:
19:54:9c:2e:31:7b:6e:69:0d:a4:44:80:71:6e:4d:98:cc:87:
f6:30:56:ec:b6:0f:75:3f:34:bf:94:1e:32:14:7c:66:3f:63:
58:db:6e:91:fe:45:83:4b:be:00:cc:27:eb:ec:ec:ee:a0:b8:
4c:29:97:6a:3b:ee:ac:be:4b:f9:d7:1e:bb:72:57:d2:4e:14:
03:f6:bd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org