Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4e4d271f23b1de94ab088e308cff1a7dfe480d74.roa
File: 4e4d271f23b1de94ab088e308cff1a7dfe480d74.roa (raw, json)
Hash identifier: Es+EVQwi5isyUo6dPl2hx+WsJUIjFUx1gV59eFvZnc8=
Subject key identifier: 02:B4:3C:0A:C7:85:4D:5E:F6:A4:83:8E:EF:66:15:40:9D:DE:50:20
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 065B10
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4e4d271f23b1de94ab088e308cff1a7dfe480d74.roa
Signing time: Sat 11 Jun 2022 01:34:16 +0000
ROA not before: Sat 11 Jun 2022 03:00:00 +0000
ROA not after: Sun 11 Jun 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416528 (0x65b10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jun 11 03:00:00 2022 GMT
Not After : Jun 11 03:00:00 2023 GMT
Subject: CN=4e4d271f23b1de94ab088e308cff1a7dfe480d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b6:ce:37:ed:e2:39:17:87:ae:7e:65:f3:9f:
e0:25:bb:a2:bb:e8:ee:fa:92:ce:8e:5d:a9:2c:57:
d7:aa:d6:d0:d8:35:09:3f:64:81:02:6b:b2:5a:fe:
74:db:3d:c2:e7:4f:94:61:cb:1a:cc:38:ec:7f:df:
6d:b2:7e:e1:af:24:6d:08:74:dc:6a:29:68:d7:2c:
17:04:4d:f7:ea:5d:1a:0c:57:73:70:04:59:72:bf:
c7:c3:fa:50:d7:94:6d:45:e6:dc:6e:df:93:27:67:
c9:ca:61:cb:a9:77:23:90:21:ba:76:c6:35:f1:fb:
d4:a0:47:96:bf:d9:a5:bc:d5:97:c5:2c:44:6c:83:
88:64:a0:72:1f:ba:84:2c:f3:da:a7:3c:00:1d:1e:
20:ed:12:3e:e0:da:81:88:20:37:1e:64:fe:f0:c5:
a5:a0:4c:c6:6e:c5:25:50:92:66:46:40:0e:3c:09:
48:5b:c7:90:8d:68:c3:4a:5f:20:f7:81:e3:5c:9a:
a0:39:a4:e0:6b:9d:26:7f:6a:87:d6:87:28:1f:5e:
25:65:8e:01:09:36:91:42:ef:ee:22:e9:5c:c7:9f:
02:f9:6b:7b:39:57:1a:9d:f1:89:43:47:e4:b6:ce:
34:67:a8:9e:17:85:2c:81:7d:56:72:be:1f:d2:bb:
6e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B4:3C:0A:C7:85:4D:5E:F6:A4:83:8E:EF:66:15:40:9D:DE:50:20
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4e4d271f23b1de94ab088e308cff1a7dfe480d74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
85:5e:d8:79:39:b6:ac:c9:34:37:45:f3:6c:97:dd:5b:b8:80:
5d:e0:30:ca:71:62:1c:aa:2d:08:48:c9:98:85:f7:32:26:ec:
0c:75:70:5f:06:03:eb:b6:3d:7d:98:ec:79:f1:34:5f:73:bb:
eb:93:20:39:d9:04:bc:ce:bd:b0:62:c9:47:4c:b6:f8:b4:22:
da:bf:92:fe:04:7c:29:73:35:61:18:39:e9:4b:7f:2a:ef:76:
2b:26:22:79:72:da:d4:93:48:7b:92:88:9f:e7:a6:5d:89:21:
b0:d1:41:10:4e:0a:24:cf:10:3d:3f:91:8b:0f:2f:cc:f4:55:
a8:ea:00:10:4a:56:a0:70:4f:c1:10:3d:84:e8:2d:10:96:8e:
d9:5e:eb:f0:15:4a:64:3c:07:11:a6:82:73:8a:10:6a:2a:bd:
c0:34:a1:b2:97:29:fc:2b:c0:6e:3b:f0:85:e5:3c:df:63:96:
59:60:c7:0a:d6:be:cf:61:9f:99:30:c4:bd:5f:bc:ef:2f:c4:
c7:4e:a9:34:a5:ed:b8:74:41:2c:6b:fc:f7:ad:64:eb:17:35:
b0:18:e5:8b:bc:7d:de:1f:73:f9:a5:b6:bd:7f:47:6b:10:cf:
8d:78:ee:a3:fa:9b:4c:99:e2:ee:a5:6a:4b:16:75:a7:fd:d7:
23:0e:5e:39
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBlsQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNjEx
MDMwMDAwWhcNMjMwNjExMDMwMDAwWjAzMTEwLwYDVQQDEyg0ZTRkMjcxZjIzYjFk
ZTk0YWIwODhlMzA4Y2ZmMWE3ZGZlNDgwZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhrbON+3iOReHrn5l85/gJbuiu+ju+pLOjl2pLFfXqtbQ2DUJ
P2SBAmuyWv502z3C50+UYcsazDjsf99tsn7hryRtCHTcailo1ywXBE336l0aDFdz
cARZcr/Hw/pQ15RtRebcbt+TJ2fJymHLqXcjkCG6dsY18fvUoEeWv9mlvNWXxSxE
bIOIZKByH7qELPPapzwAHR4g7RI+4NqBiCA3HmT+8MWloEzGbsUlUJJmRkAOPAlI
W8eQjWjDSl8g94HjXJqgOaTga50mf2qH1ocoH14lZY4BCTaRQu/uIulcx58C+Wt7
OVcanfGJQ0fkts40Z6ieF4UsgX1Wcr4f0rtuEwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAK0PArHhU1e9qSDju9mFUCd3lAgMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzRlNGQyNzFmMjNiMWRlOTRhYjA4OGUzMDhjZmYxYTdkZmU0ODBkNzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAhV7YeTm2rMk0N0Xz
bJfdW7iAXeAwynFiHKotCEjJmIX3MibsDHVwXwYD67Y9fZjsefE0X3O765MgOdkE
vM69sGLJR0y2+LQi2r+S/gR8KXM1YRg56Ut/Ku92KyYieXLa1JNIe5KIn+emXYkh
sNFBEE4KJM8QPT+Riw8vzPRVqOoAEEpWoHBPwRA9hOgtEJaO2V7r8BVKZDwHEaaC
c4oQaiq9wDShspcp/CvAbjvwheU832OWWWDHCta+z2GfmTDEvV+87y/Ex06pNKXt
uHRBLGv8961k6xc1sBjli7x93h9z+aW2vX9HaxDPjXjuo/qbTJni7qVqSxZ1p/3X
Iw5eOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org