Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9af870dbd68ad63ee64f78a3e131367a4a37f3a1.roa
File: 9af870dbd68ad63ee64f78a3e131367a4a37f3a1.roa (raw, json)
Hash identifier: ofPf8ELcGziBh3kkMy20Z+IkqXTrH3fqCHJafWgXjEU=
Subject key identifier: C2:80:4E:3F:FD:1E:29:A7:9B:96:BF:72:7D:B4:A2:08:24:65:E4:7A
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 072F3F
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9af870dbd68ad63ee64f78a3e131367a4a37f3a1.roa
Signing time: Tue 28 Jun 2022 00:14:55 +0000
ROA not before: Tue 28 Jun 2022 03:00:00 +0000
ROA not after: Wed 28 Jun 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470847 (0x72f3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jun 28 03:00:00 2022 GMT
Not After : Jun 28 03:00:00 2023 GMT
Subject: CN=9af870dbd68ad63ee64f78a3e131367a4a37f3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:1d:f7:7e:a4:85:53:c2:65:b4:4f:7e:e9:
02:37:34:f0:48:9d:e3:42:11:5b:54:4d:3d:2e:97:
7d:74:4f:58:da:fa:41:43:93:d3:a9:4b:57:20:67:
9a:bc:52:e5:34:32:2d:af:e1:bf:bc:23:78:68:24:
dc:e0:e5:2d:ac:d6:89:2c:d6:13:11:eb:6d:87:77:
b5:06:b0:67:da:97:ee:f5:b1:9d:19:1c:44:cf:63:
82:31:ca:14:ec:49:d3:8c:20:fd:2c:06:57:f2:94:
f3:16:39:23:e7:0a:91:cb:ad:e5:cb:34:9a:8e:31:
e4:fe:6e:1c:85:fb:98:7a:22:e7:cc:17:7e:11:ac:
2a:c1:79:d2:dd:04:f7:39:88:e5:eb:20:6f:23:59:
a0:98:75:9c:18:71:9f:dd:92:a3:a9:18:04:c2:0e:
61:f0:e9:a7:ae:cf:36:9c:25:b0:b1:84:02:70:bc:
3c:bd:6e:1e:1d:e1:4f:a2:dc:54:55:2c:69:80:b1:
d1:05:54:a8:51:c2:17:25:7a:6f:f2:ad:c4:23:32:
fa:ed:04:95:10:a5:47:12:97:3c:eb:b7:37:1f:73:
a5:f8:d5:89:c8:87:07:6c:81:ea:96:5c:28:c4:ad:
d8:3f:c4:c7:38:43:e6:9b:67:b1:29:0c:bb:7e:cc:
32:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:80:4E:3F:FD:1E:29:A7:9B:96:BF:72:7D:B4:A2:08:24:65:E4:7A
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9af870dbd68ad63ee64f78a3e131367a4a37f3a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c3:1b:af:eb:f0:ef:e8:56:f3:d9:52:f7:0f:98:27:a8:bf:
5e:e3:0c:27:eb:b9:f8:1e:64:db:99:bb:63:9d:a4:1c:f9:83:
8c:51:31:9b:40:e8:28:73:ed:c8:8e:f9:d3:25:4d:d7:e0:77:
e0:a0:08:70:ba:cf:2e:52:1d:ee:4a:11:a0:7f:f5:19:99:e5:
e5:07:0c:5a:82:73:45:b8:d5:93:a9:fc:06:cd:9c:61:5d:d5:
75:2e:a7:cf:d2:1b:6c:22:d3:68:93:7a:38:cd:fe:b4:80:3f:
93:9c:ae:ae:6c:26:2e:44:e7:16:3b:be:a4:51:5d:96:8b:09:
8d:9a:3d:27:7a:00:27:e7:7f:c2:3f:36:d6:d3:1c:97:2e:1b:
05:47:bc:7c:dc:a4:46:1e:17:a4:45:e5:c6:a4:8e:5a:cc:6c:
31:d4:71:16:f8:ec:60:ab:e0:68:b3:b4:ca:df:2a:8e:fd:9d:
cf:08:39:c6:dd:b4:69:60:5a:b0:57:d8:93:9d:61:24:7a:5c:
c4:66:3e:ac:0a:21:a5:72:93:d1:c9:11:d6:d8:7a:8e:4a:1c:
b5:9b:5f:14:7e:30:2c:d2:ad:9e:2b:27:a3:d3:b7:35:32:05:
90:ee:cf:56:2f:1e:a0:aa:6c:ce:68:df:aa:53:1e:c0:cc:21:
f8:ea:7c:a4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBy8/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNjI4
MDMwMDAwWhcNMjMwNjI4MDMwMDAwWjAzMTEwLwYDVQQDEyg5YWY4NzBkYmQ2OGFk
NjNlZTY0Zjc4YTNlMTMxMzY3YTRhMzdmM2ExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmvMd936khVPCZbRPfukCNzTwSJ3jQhFbVE09Lpd9dE9Y2vpB
Q5PTqUtXIGeavFLlNDItr+G/vCN4aCTc4OUtrNaJLNYTEetth3e1BrBn2pfu9bGd
GRxEz2OCMcoU7EnTjCD9LAZX8pTzFjkj5wqRy63lyzSajjHk/m4chfuYeiLnzBd+
EawqwXnS3QT3OYjl6yBvI1mgmHWcGHGf3ZKjqRgEwg5h8Omnrs82nCWwsYQCcLw8
vW4eHeFPotxUVSxpgLHRBVSoUcIXJXpv8q3EIzL67QSVEKVHEpc867c3H3Ol+NWJ
yIcHbIHqllwoxK3YP8THOEPmm2exKQy7fswyIQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMKATj/9Himnm5a/cn20oggkZeR6MB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzlhZjg3MGRiZDY4YWQ2M2VlNjRmNzhhM2UxMzEzNjdhNGEzN2YzYTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAGsMbr+vw7+hW89lS
9w+YJ6i/XuMMJ+u5+B5k25m7Y52kHPmDjFExm0DoKHPtyI750yVN1+B34KAIcLrP
LlId7koRoH/1GZnl5QcMWoJzRbjVk6n8Bs2cYV3VdS6nz9IbbCLTaJN6OM3+tIA/
k5yurmwmLkTnFju+pFFdlosJjZo9J3oAJ+d/wj821tMcly4bBUe8fNykRh4XpEXl
xqSOWsxsMdRxFvjsYKvgaLO0yt8qjv2dzwg5xt20aWBasFfYk51hJHpcxGY+rAoh
pXKT0ckR1th6jkoctZtfFH4wLNKtnisno9O3NTIFkO7PVi8eoKpszmjfqlMewMwh
+Op8pA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org