Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/89307f0f15954655cd127a48494d659bb9eeb6ee.roa
File: 89307f0f15954655cd127a48494d659bb9eeb6ee.roa (raw, json)
Hash identifier: iLAvIcfrnqFMHagF0WJHonBX3tquFrIz/KitNOEKpWg=
Subject key identifier: 88:F5:52:68:C9:8A:44:4B:0D:B2:1E:34:53:ED:B7:82:91:AB:65:D3
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 010CA2
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/89307f0f15954655cd127a48494d659bb9eeb6ee.roa
Signing time: Sat 12 Feb 2022 03:42:55 +0000
ROA not before: Sat 12 Feb 2022 03:00:00 +0000
ROA not after: Sun 12 Feb 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68770 (0x10ca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Feb 12 03:00:00 2022 GMT
Not After : Feb 12 03:00:00 2023 GMT
Subject: CN=89307f0f15954655cd127a48494d659bb9eeb6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:21:ca:18:24:51:cc:5c:7a:20:52:b0:c9:
53:7a:8e:4f:30:35:35:08:ef:24:d1:e9:5a:ea:09:
6f:61:0a:3a:92:26:b3:ff:1f:4f:d0:a3:ee:ad:92:
70:7f:ee:02:e4:d4:8d:38:04:1c:d9:54:8f:de:d4:
c8:a9:97:3c:6f:32:6e:17:e9:28:65:cd:5b:20:56:
8b:94:61:ac:da:d2:50:e3:0b:a3:7b:0b:7b:86:cd:
e4:ee:9d:db:ab:a6:ca:85:1d:a9:69:e3:c3:8c:94:
71:6b:17:6f:ad:1b:41:a9:21:9c:d4:90:c2:b6:d8:
61:73:9a:aa:6c:40:df:19:c4:aa:7e:53:21:87:e1:
b4:3e:0e:80:af:ab:c5:9f:9b:4b:0a:e2:29:d7:39:
ca:9e:6a:cc:9a:c1:80:5c:14:a0:64:dc:b1:01:96:
c0:6b:60:f9:7a:70:af:d8:e0:b8:a8:44:5d:57:28:
87:59:29:a3:bf:a7:56:20:fe:70:91:18:14:1a:ba:
98:dc:aa:7a:b5:4f:ac:6a:b6:b0:5e:d3:98:dd:54:
73:52:14:31:62:41:ea:ba:3f:03:21:53:e1:63:3e:
86:3a:27:34:4a:76:c8:d9:c9:86:96:11:bf:74:36:
e8:a9:d2:4e:2d:67:d9:a3:0e:62:cb:3f:ec:82:fb:
29:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F5:52:68:C9:8A:44:4B:0D:B2:1E:34:53:ED:B7:82:91:AB:65:D3
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/89307f0f15954655cd127a48494d659bb9eeb6ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c1:e8:19:08:b6:bc:0d:1f:b7:bf:e9:45:11:ad:74:2f:fa:
75:8a:e2:cf:49:93:e1:81:cd:3a:9d:25:ef:f7:5b:a7:9f:c5:
29:e5:54:19:b7:33:b9:b0:54:52:3c:7a:11:e4:f8:97:85:d1:
bc:95:1c:49:f6:ed:b7:d3:97:04:a0:52:b3:cc:6b:2e:14:e2:
59:d0:e3:17:bc:51:4c:b3:94:e5:62:38:84:8c:9d:7c:e3:b9:
df:98:aa:c5:31:17:c7:f1:2f:0a:ce:d5:fc:83:33:4c:06:61:
48:e5:61:f6:9f:88:82:7f:3d:4a:9d:88:4a:3c:06:e6:76:dd:
81:7d:b8:4a:57:11:10:4a:3b:23:69:c0:a8:38:38:eb:fa:d7:
bf:0c:46:04:a5:32:f1:bf:eb:fa:ec:f6:74:ce:71:4b:ab:4e:
3d:19:73:de:d1:ff:8d:9f:a6:a2:c0:86:9c:4f:e9:ab:89:95:
b5:6f:88:a9:20:74:03:33:c8:d0:7c:54:2e:22:b2:70:1b:5a:
44:99:d5:b9:96:b1:87:97:33:0b:79:a2:2e:c3:f2:c7:58:71:
0b:22:66:34:ec:e6:18:65:91:5d:04:a3:c2:ff:c6:99:72:5e:
6d:7b:71:4c:f2:9b:fe:8e:24:c5:b3:50:3e:56:28:0e:71:bf:
53:d2:3f:d4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAQyiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwMjEy
MDMwMDAwWhcNMjMwMjEyMDMwMDAwWjAzMTEwLwYDVQQDEyg4OTMwN2YwZjE1OTU0
NjU1Y2QxMjdhNDg0OTRkNjU5YmI5ZWViNmVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwaYhyhgkUcxceiBSsMlTeo5PMDU1CO8k0ela6glvYQo6kiaz
/x9P0KPurZJwf+4C5NSNOAQc2VSP3tTIqZc8bzJuF+koZc1bIFaLlGGs2tJQ4wuj
ewt7hs3k7p3bq6bKhR2paePDjJRxaxdvrRtBqSGc1JDCtthhc5qqbEDfGcSqflMh
h+G0Pg6Ar6vFn5tLCuIp1znKnmrMmsGAXBSgZNyxAZbAa2D5enCv2OC4qERdVyiH
WSmjv6dWIP5wkRgUGrqY3Kp6tU+sarawXtOY3VRzUhQxYkHquj8DIVPhYz6GOic0
SnbI2cmGlhG/dDboqdJOLWfZow5iyz/sgvspZwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIj1UmjJikRLDbIeNFPtt4KRq2XTMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1Lzg5MzA3ZjBmMTU5NTQ2NTVjZDEyN2E0ODQ5NGQ2NTliYjllZWI2ZWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAHsHoGQi2vA0ft7/p
RRGtdC/6dYriz0mT4YHNOp0l7/dbp5/FKeVUGbczubBUUjx6EeT4l4XRvJUcSfbt
t9OXBKBSs8xrLhTiWdDjF7xRTLOU5WI4hIydfOO535iqxTEXx/EvCs7V/IMzTAZh
SOVh9p+Ign89Sp2ISjwG5nbdgX24SlcREEo7I2nAqDg46/rXvwxGBKUy8b/r+uz2
dM5xS6tOPRlz3tH/jZ+mosCGnE/pq4mVtW+IqSB0AzPI0HxULiKycBtaRJnVuZax
h5czC3miLsPyx1hxCyJmNOzmGGWRXQSjwv/GmXJebXtxTPKb/o4kxbNQPlYoDnG/
U9I/1A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org