Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/8972c1911a87f372e21ba37b2fcd1745e94d9821.roa
File: 8972c1911a87f372e21ba37b2fcd1745e94d9821.roa (raw, json)
Hash identifier: fzDr/RYn7pP8yXpkytmXTZyYln1hk/TzJNaqRsclPZs=
Subject key identifier: B9:65:E1:E7:80:ED:28:DC:9B:71:12:8E:0C:E0:6A:B8:29:E6:D1:52
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 01BE50
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/8972c1911a87f372e21ba37b2fcd1745e94d9821.roa
Signing time: Sun 27 Feb 2022 00:44:09 +0000
ROA not before: Sun 27 Feb 2022 03:00:00 +0000
ROA not after: Mon 27 Feb 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114256 (0x1be50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Feb 27 03:00:00 2022 GMT
Not After : Feb 27 03:00:00 2023 GMT
Subject: CN=8972c1911a87f372e21ba37b2fcd1745e94d9821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:37:aa:fe:23:51:ff:a9:91:d5:28:a2:97:9d:
ca:80:b6:61:11:f0:1a:7e:c8:3b:ad:0a:b6:a4:c2:
f9:56:de:40:dc:b5:2b:9f:aa:4b:47:3d:db:09:50:
a6:91:0b:d6:f2:fc:8f:37:66:cd:45:27:4f:e6:2b:
c6:71:51:11:c6:98:32:de:b6:3a:13:d4:53:64:4e:
be:1b:9e:cf:0d:de:17:9b:7a:2b:80:ac:06:58:e8:
24:c6:90:b5:fa:7c:ef:e2:d5:01:19:ec:1e:cf:02:
90:6f:13:1c:57:31:f5:7d:dd:b7:d3:a9:6f:cb:e3:
d2:a2:3c:f7:99:19:80:29:58:76:00:d9:23:fb:cc:
eb:09:42:2a:59:dd:9f:cc:91:d9:1a:f8:1a:60:e0:
75:31:5e:28:8b:20:9f:3b:9c:cc:46:6c:e4:6e:7f:
fb:ca:42:f7:08:78:ba:04:33:b4:ee:87:99:5d:95:
92:e0:1d:cf:68:b9:13:2a:07:be:b2:2b:86:37:3f:
d6:56:79:9b:16:47:95:af:35:cb:9c:dc:f1:2c:6d:
49:40:44:ff:ef:ad:61:34:70:2b:4a:a5:63:67:47:
04:c0:f3:89:9d:ba:b4:f5:85:48:de:ae:75:ff:78:
96:30:51:5a:ee:25:39:20:d4:fb:68:e7:90:2a:0a:
b5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:65:E1:E7:80:ED:28:DC:9B:71:12:8E:0C:E0:6A:B8:29:E6:D1:52
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/8972c1911a87f372e21ba37b2fcd1745e94d9821.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
68:30:42:f3:a8:af:1c:ee:b7:07:82:2f:5c:99:c8:68:5e:02:
4b:b2:e5:84:c9:9a:00:58:6c:4e:33:0a:6b:98:7c:07:2a:7c:
f9:c3:33:8d:c9:6f:62:cc:58:1e:af:2f:07:26:be:5f:c5:fb:
12:cb:89:24:85:dc:e8:d7:ab:ff:d4:bd:5c:ef:d6:30:0b:46:
df:fc:d5:f5:2e:51:95:4e:43:de:4e:de:59:d0:22:e8:29:21:
74:92:95:65:59:be:59:1d:91:5d:75:bf:c1:cd:01:ae:f8:68:
5e:1e:68:aa:7c:bb:9b:a7:28:e5:d0:82:f1:a1:ef:36:19:0d:
79:f6:3d:f1:23:15:03:ee:68:55:5f:47:dd:53:db:a1:6b:72:
d9:13:ba:0b:47:6c:d5:7f:27:5f:d7:ee:7f:29:31:a5:b6:e1:
11:dc:f3:6c:4b:86:fe:87:af:57:b9:f2:ce:7c:d6:a9:3c:01:
54:b6:cf:53:d3:e8:00:fe:1b:42:eb:89:31:cd:09:62:d1:30:
cd:d9:9c:62:97:ea:21:46:e5:9b:fc:84:07:df:ac:b4:b0:47:
27:5d:19:09:49:bf:d6:ea:d8:60:b7:5e:b0:02:b4:ca:e4:fd:
ba:02:df:f9:81:be:0a:79:18:76:82:08:99:18:56:6a:52:75:
bf:00:3a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org