Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4624b3f88746f46e3b5090210445e9321f921390.roa
File: 4624b3f88746f46e3b5090210445e9321f921390.roa (raw, json)
Hash identifier: 1GwI7JibCoG1l48iCXK/p+C4GgM4W4SQe9Brc2tZPzg=
Subject key identifier: A2:FD:5E:84:6E:E2:EE:D0:93:3B:C8:CA:1D:48:D7:A5:A6:51:63:D6
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0C6996
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4624b3f88746f46e3b5090210445e9321f921390.roa
Signing time: Thu 20 Oct 2022 02:01:40 +0000
ROA not before: Wed 19 Oct 2022 03:00:00 +0000
ROA not after: Fri 20 Oct 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 813462 (0xc6996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Oct 19 03:00:00 2022 GMT
Not After : Oct 20 03:00:00 2023 GMT
Subject: CN=4624b3f88746f46e3b5090210445e9321f921390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b6:36:04:67:71:57:95:6b:51:8e:fd:b3:fc:
9e:21:f1:9a:75:4f:52:26:10:95:a1:a0:40:d2:15:
d0:e2:09:95:e7:7d:b1:a8:12:39:01:88:c6:92:eb:
72:09:4f:e0:eb:28:3d:08:56:57:37:58:8a:79:d8:
23:81:1d:4e:c3:57:b1:f8:2c:ac:d6:f1:4e:a8:cf:
3d:71:6e:bc:6f:d3:75:82:6a:4f:cd:6f:a3:a1:58:
a6:3e:41:91:35:71:10:fd:37:4d:3f:ee:dc:a3:77:
93:fd:a7:54:bf:79:c3:df:a9:94:07:e8:20:17:bc:
32:db:cc:a1:65:7b:7f:78:85:53:a1:18:4d:7e:84:
0d:58:6c:4d:ab:8b:aa:e1:ea:79:1b:94:58:ac:6d:
50:b4:04:9d:93:c0:39:fc:e2:26:59:74:28:29:70:
c0:10:4a:e5:a0:45:65:4c:fc:98:07:0c:95:20:8e:
9b:1a:2e:a8:60:cc:69:5b:a5:a0:0e:1f:4b:24:0e:
d8:6d:80:62:64:dd:e2:05:46:6e:08:81:3d:44:10:
f0:ea:54:12:a5:b3:c6:c9:aa:80:7d:4d:3b:5d:9c:
62:64:d6:fd:6b:87:40:c0:5f:fb:d7:c1:82:23:cd:
23:0d:fc:c8:b5:bf:f3:82:1e:76:4c:79:59:bf:64:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FD:5E:84:6E:E2:EE:D0:93:3B:C8:CA:1D:48:D7:A5:A6:51:63:D6
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4624b3f88746f46e3b5090210445e9321f921390.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:4b:e3:5e:f5:1f:1f:cd:23:5f:57:49:77:b0:f6:28:fd:42:
9e:9d:fc:8e:0a:82:5e:52:cd:6d:28:8b:a2:8b:f4:a6:44:58:
76:fd:73:04:ec:44:ad:83:04:53:08:02:47:34:0b:c5:68:5d:
71:8b:55:1f:63:19:93:41:26:07:46:10:3d:7d:ad:b4:69:97:
cd:57:1e:bd:b1:b3:ff:63:16:37:7e:e7:72:9c:53:ce:d8:76:
e4:c7:e5:a9:cb:b6:07:8c:4f:de:fb:44:c1:65:1b:7b:e3:74:
2d:8c:4d:65:d8:b6:99:b6:d0:bc:20:28:2d:d6:c6:5f:5c:6e:
c6:19:f9:0a:b8:a3:c4:c0:ad:49:b2:8f:3e:a6:b7:d4:05:2a:
1a:22:84:4a:dd:ab:49:34:93:10:4d:c8:1b:b3:a9:28:50:6a:
fd:68:8e:c3:20:38:89:d1:b3:b1:9f:cb:b4:78:dc:b7:49:52:
4a:44:66:79:4f:4d:93:15:3b:4b:f9:97:c3:55:58:2c:a5:b4:
c0:cc:b4:8b:48:dc:8c:c6:ac:2b:ad:33:c3:f5:ed:d4:b1:5a:
0e:e1:c8:0c:90:68:df:6b:84:85:a9:92:98:c4:be:14:54:23:
49:cd:3b:e9:49:7c:48:b5:57:1e:5b:db:53:8d:71:c9:18:cf:
a6:80:d0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org