Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/755d66893905ab7084e106574fc2b87f3d5b9746.roa
File: 755d66893905ab7084e106574fc2b87f3d5b9746.roa (raw, json)
Hash identifier: 2nXc55nY5vuyQSAJjkTBgmJGOL0jrK3nCQg6D1SZHFA=
Subject key identifier: 21:1D:A4:E0:B9:3B:8F:A3:75:09:B1:8E:FF:D5:86:9B:55:A9:39:AB
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 055AF8
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/755d66893905ab7084e106574fc2b87f3d5b9746.roa
Signing time: Sat 21 May 2022 00:31:09 +0000
ROA not before: Sat 21 May 2022 03:00:00 +0000
ROA not after: Sun 21 May 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350968 (0x55af8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: May 21 03:00:00 2022 GMT
Not After : May 21 03:00:00 2023 GMT
Subject: CN=755d66893905ab7084e106574fc2b87f3d5b9746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a3:41:a4:0e:48:6e:d6:51:fe:17:cc:5e:17:
0b:04:3b:01:dd:54:d6:f0:bd:63:ab:c6:a8:0a:36:
0e:96:aa:a9:86:08:5d:35:de:57:02:a9:e8:8c:8a:
e8:90:e1:c3:31:46:9f:07:9c:3f:2d:37:0f:aa:ee:
0b:4a:8b:00:7f:b7:d3:c5:ce:9a:f7:85:1e:ba:c2:
4d:b5:f8:78:68:72:f2:fd:1a:b8:61:9f:5b:e9:a0:
7d:29:e9:0e:49:23:46:a6:ea:2a:e8:af:79:84:51:
47:85:16:65:83:d4:61:9b:6f:f2:d6:ac:17:a5:8f:
33:f2:59:72:04:79:35:9f:90:72:75:32:5a:19:02:
b9:30:29:37:64:6a:cb:ef:a8:de:6a:4f:49:26:7c:
d3:7a:aa:b6:34:c0:ea:8b:53:02:86:3e:22:a4:8c:
36:e1:1a:5e:2c:5c:01:3e:7c:28:3e:4d:f6:bb:da:
47:22:61:6a:1d:77:7d:e6:e1:fe:c6:86:d1:25:cf:
33:80:7c:e8:26:7f:36:5a:58:37:e3:8e:66:1e:84:
b7:7a:10:74:14:fd:e9:03:3a:3d:29:29:9e:72:3a:
ba:6f:2b:04:a4:c5:a1:c2:3e:6d:80:69:ad:b7:e3:
e7:e6:c6:e4:89:64:09:26:04:9b:c7:35:0e:d0:55:
1c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1D:A4:E0:B9:3B:8F:A3:75:09:B1:8E:FF:D5:86:9B:55:A9:39:AB
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/755d66893905ab7084e106574fc2b87f3d5b9746.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
86:cc:27:a7:6c:93:12:f5:29:4b:70:58:9e:f2:96:95:d5:4a:
18:2a:80:c3:b9:9b:f4:a0:32:49:20:0c:1a:70:98:14:04:f2:
24:48:5b:8a:55:ef:7c:4d:08:6d:f9:94:b9:35:4e:8b:3f:77:
61:35:d5:1d:95:85:9c:b2:70:cc:67:79:4b:1a:1f:f2:31:e8:
e9:ad:b5:51:81:b1:c6:a0:84:ac:92:8a:94:0d:7a:65:31:7f:
cf:04:a0:81:52:44:7e:31:aa:05:42:35:30:64:af:80:13:a7:
02:0c:9d:2c:bf:2a:2c:c5:13:cd:03:2e:48:33:4d:48:61:73:
8d:8b:2e:44:82:72:df:36:df:af:fe:4c:27:5a:c6:6c:b6:f2:
be:db:b2:ec:00:53:56:fb:08:b1:80:d2:81:fa:13:4d:78:e7:
68:53:d1:79:3d:17:2f:4f:7c:3b:06:4c:29:dc:58:01:f7:1b:
62:8f:79:a6:6b:f3:00:67:ed:82:dd:47:25:69:3e:0d:94:e6:
95:80:b2:9b:1b:d1:ef:72:2c:4e:df:58:bf:54:24:bd:74:c9:
5c:6f:af:7a:a2:4e:e2:a5:fa:e4:05:db:fa:ff:29:9d:09:b2:
22:50:06:82:ec:c5:b7:1e:ae:3a:ec:d3:b4:c0:fd:23:40:b3:
29:0f:1c:a8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBVr4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNTIx
MDMwMDAwWhcNMjMwNTIxMDMwMDAwWjAzMTEwLwYDVQQDEyg3NTVkNjY4OTM5MDVh
YjcwODRlMTA2NTc0ZmMyYjg3ZjNkNWI5NzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0aNBpA5IbtZR/hfMXhcLBDsB3VTW8L1jq8aoCjYOlqqphghd
Nd5XAqnojIrokOHDMUafB5w/LTcPqu4LSosAf7fTxc6a94UeusJNtfh4aHLy/Rq4
YZ9b6aB9KekOSSNGpuoq6K95hFFHhRZlg9Rhm2/y1qwXpY8z8llyBHk1n5BydTJa
GQK5MCk3ZGrL76jeak9JJnzTeqq2NMDqi1MChj4ipIw24RpeLFwBPnwoPk32u9pH
ImFqHXd95uH+xobRJc8zgHzoJn82Wlg3445mHoS3ehB0FP3pAzo9KSmecjq6bysE
pMWhwj5tgGmtt+Pn5sbkiWQJJgSbxzUO0FUcCQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCEdpOC5O4+jdQmxjv/VhptVqTmrMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1Lzc1NWQ2Njg5MzkwNWFiNzA4NGUxMDY1NzRmYzJiODdmM2Q1Yjk3NDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAhswnp2yTEvUpS3BY
nvKWldVKGCqAw7mb9KAySSAMGnCYFATyJEhbilXvfE0IbfmUuTVOiz93YTXVHZWF
nLJwzGd5Sxof8jHo6a21UYGxxqCErJKKlA16ZTF/zwSggVJEfjGqBUI1MGSvgBOn
AgydLL8qLMUTzQMuSDNNSGFzjYsuRIJy3zbfr/5MJ1rGbLbyvtuy7ABTVvsIsYDS
gfoTTXjnaFPReT0XL098OwZMKdxYAfcbYo95pmvzAGftgt1HJWk+DZTmlYCymxvR
73IsTt9Yv1QkvXTJXG+veqJO4qX65AXb+v8pnQmyIlAGguzFtx6uOuzTtMD9I0Cz
KQ8cqA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org