Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9d9aa8a3d2bc54213b9bfecb3150ba86a55bfea8.roa
File: 9d9aa8a3d2bc54213b9bfecb3150ba86a55bfea8.roa (raw, json)
Hash identifier: Al9kttCVcsklgKWYGpVIFo2N4uutLmqx3U5dzEA4JY8=
Subject key identifier: F6:DF:D1:7F:C0:CD:19:41:98:16:4F:F5:A6:1B:38:FC:66:CC:A8:28
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0336AA
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9d9aa8a3d2bc54213b9bfecb3150ba86a55bfea8.roa
Signing time: Thu 31 Mar 2022 00:59:11 +0000
ROA not before: Thu 31 Mar 2022 03:00:00 +0000
ROA not after: Fri 31 Mar 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210602 (0x336aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Mar 31 03:00:00 2022 GMT
Not After : Mar 31 03:00:00 2023 GMT
Subject: CN=9d9aa8a3d2bc54213b9bfecb3150ba86a55bfea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:0f:cf:c8:65:93:08:ef:60:09:2d:81:2a:
52:30:13:cf:43:48:9f:61:d8:e2:62:cb:31:ab:53:
fb:27:c6:7c:29:04:ae:39:5d:1e:5a:b9:d7:d7:9e:
d1:5b:d0:29:67:e5:1e:36:a9:36:01:87:3d:4c:af:
01:e1:e5:d0:f8:43:65:15:97:bd:86:0a:de:86:c3:
9e:13:33:38:87:7b:92:9c:f6:28:c7:8e:79:4e:91:
6c:1d:56:3e:4e:25:11:e0:f7:26:1e:de:30:7f:c8:
ee:23:46:9c:88:26:93:ba:b4:6b:6b:b2:94:d4:74:
02:0e:85:22:5b:cf:a5:48:61:08:06:2e:f1:d8:31:
4d:c0:c8:bf:f4:82:ea:2a:4a:2a:9a:05:99:04:6e:
09:fc:d5:ff:c6:e1:3b:71:b5:66:01:85:61:e2:81:
be:75:fb:1c:7b:60:80:bc:82:14:a5:d2:4b:c3:b4:
9e:19:30:5e:7c:88:99:00:00:7a:70:94:b8:96:87:
84:7f:01:b7:9a:a1:63:5e:1f:d1:f0:5a:bf:97:2f:
26:af:58:f4:63:f4:9c:f7:08:5a:55:bb:13:b6:b0:
1a:f3:45:32:b6:36:ae:7d:10:51:64:8a:ce:86:68:
e8:15:44:66:46:ad:75:8e:1c:e6:4a:71:79:d2:f9:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DF:D1:7F:C0:CD:19:41:98:16:4F:F5:A6:1B:38:FC:66:CC:A8:28
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9d9aa8a3d2bc54213b9bfecb3150ba86a55bfea8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f7:f0:e6:3a:ab:c8:2a:21:87:f3:9f:30:de:3d:70:b5:0b:
47:18:21:96:c8:71:ce:34:a0:46:79:e7:93:5d:6e:31:b6:c0:
f7:91:ed:88:14:4f:3f:b4:a3:03:43:2d:89:9b:de:42:a4:79:
a5:4d:61:35:f1:57:90:a4:52:ba:ad:6f:e5:ec:5f:69:15:57:
27:c5:28:53:78:3b:d2:2c:e4:53:15:1c:05:42:7d:28:6e:48:
e6:fc:09:67:7c:6a:19:ca:06:8c:b6:e0:39:9e:79:3d:e6:a3:
53:5e:c3:ab:db:b3:dc:27:8c:e7:62:a6:80:45:df:95:7b:dd:
5a:5e:80:3e:e5:24:3b:14:d0:23:a7:2d:7e:12:2d:ed:56:00:
25:dc:ce:78:03:87:b7:ed:23:8a:73:9f:70:b4:3f:8e:d9:3c:
d5:d7:28:7a:7e:22:e4:7c:24:7e:d6:f0:ca:45:d7:09:34:cd:
33:bb:4c:78:f9:c7:3f:4e:c2:8e:a0:82:bf:19:ad:7f:51:64:
d2:c5:8d:53:21:19:af:40:57:84:97:cb:20:da:99:94:03:ab:
3b:ce:35:e3:2a:18:36:2b:0c:dc:23:56:86:79:5d:ba:bb:60:
0f:bb:ac:d1:e1:c4:ae:57:b7:d6:c7:b8:32:bf:4d:b9:65:db:
e4:c3:26:12
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAzaqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwMzMx
MDMwMDAwWhcNMjMwMzMxMDMwMDAwWjAzMTEwLwYDVQQDEyg5ZDlhYThhM2QyYmM1
NDIxM2I5YmZlY2IzMTUwYmE4NmE1NWJmZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsX4Pz8hlkwjvYAktgSpSMBPPQ0ifYdjiYssxq1P7J8Z8KQSu
OV0eWrnX157RW9ApZ+UeNqk2AYc9TK8B4eXQ+ENlFZe9hgrehsOeEzM4h3uSnPYo
x455TpFsHVY+TiUR4PcmHt4wf8juI0aciCaTurRra7KU1HQCDoUiW8+lSGEIBi7x
2DFNwMi/9ILqKkoqmgWZBG4J/NX/xuE7cbVmAYVh4oG+dfsce2CAvIIUpdJLw7Se
GTBefIiZAAB6cJS4loeEfwG3mqFjXh/R8Fq/ly8mr1j0Y/Sc9whaVbsTtrAa80Uy
tjaufRBRZIrOhmjoFURmRq11jhzmSnF50vkjdQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPbf0X/AzRlBmBZP9aYbOPxmzKgoMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzlkOWFhOGEzZDJiYzU0MjEzYjliZmVjYjMxNTBiYTg2YTU1YmZlYTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEASffw5jqryCohh/Of
MN49cLULRxghlshxzjSgRnnnk11uMbbA95HtiBRPP7SjA0MtiZveQqR5pU1hNfFX
kKRSuq1v5exfaRVXJ8UoU3g70izkUxUcBUJ9KG5I5vwJZ3xqGcoGjLbgOZ55Peaj
U17Dq9uz3CeM52KmgEXflXvdWl6APuUkOxTQI6ctfhIt7VYAJdzOeAOHt+0jinOf
cLQ/jtk81dcoen4i5HwkftbwykXXCTTNM7tMePnHP07CjqCCvxmtf1Fk0sWNUyEZ
r0BXhJfLINqZlAOrO8414yoYNisM3CNWhnldurtgD7us0eHErle31se4Mr9NuWXb
5MMmEg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org