Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/bb232ec84390c893632b07841bec1f546639d4ca.roa
File: bb232ec84390c893632b07841bec1f546639d4ca.roa (raw, json)
Hash identifier: 6kNLl6GFXuyob+Wn3bFzq79Rg2eXFWoPFk1cXn1SbRo=
Subject key identifier: 0F:C9:A9:AB:A4:C5:92:E7:47:9A:C3:0C:74:D8:04:E7:8E:B2:CF:F1
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 01D708
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/bb232ec84390c893632b07841bec1f546639d4ca.roa
Signing time: Wed 02 Mar 2022 00:45:41 +0000
ROA not before: Wed 02 Mar 2022 03:00:00 +0000
ROA not after: Thu 02 Mar 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120584 (0x1d708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Mar 2 03:00:00 2022 GMT
Not After : Mar 2 03:00:00 2023 GMT
Subject: CN=bb232ec84390c893632b07841bec1f546639d4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b0:6b:a3:59:94:db:08:c7:9a:4e:db:ab:91:
7f:2a:74:20:bb:07:4f:05:eb:74:69:87:23:da:20:
88:be:77:e5:f0:62:53:f2:2e:39:9f:84:d8:a3:d2:
6a:d0:0c:a2:b1:e3:5b:cf:dc:f1:c3:2a:40:de:d4:
b2:06:7f:2c:b5:10:19:d9:56:d0:bb:8b:18:77:8e:
22:76:a6:c7:2b:b1:fb:2c:12:72:44:cd:3f:3d:c0:
e9:b7:0e:6e:f3:b1:7a:85:ee:f8:49:68:cb:5a:d5:
6b:18:fd:c1:1a:d6:57:17:56:20:3d:e1:c0:25:02:
79:ff:7a:0a:e2:3e:f7:91:99:a4:67:c3:4a:52:18:
cc:8e:7c:ef:b8:4f:78:bf:8b:0d:75:ce:ec:ef:a7:
10:21:47:28:0b:43:f9:c9:d1:35:0b:58:35:dd:c5:
b7:89:7f:ff:17:02:71:fe:f8:26:f9:10:f9:97:02:
dc:3f:9d:5e:1a:61:04:73:e8:c3:7c:f3:b9:a9:ca:
e1:2a:b7:86:27:38:68:26:09:00:bf:fa:e2:9c:54:
cd:f6:6b:4a:1e:8a:89:c2:bb:bb:5b:a3:ea:bc:ed:
00:06:4d:ce:d8:9f:39:a6:55:0b:cd:60:73:5d:b9:
d6:71:e0:6e:97:a8:0e:15:92:ca:bc:31:bd:08:e0:
a9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C9:A9:AB:A4:C5:92:E7:47:9A:C3:0C:74:D8:04:E7:8E:B2:CF:F1
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/bb232ec84390c893632b07841bec1f546639d4ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:0d:59:e9:46:5b:92:44:09:86:5c:5d:cb:06:aa:01:7a:a1:
49:49:31:7a:0d:39:ba:b5:c9:62:fc:56:b8:f8:1c:c0:88:e4:
c8:b9:28:06:e1:36:b4:ed:1f:64:25:ed:58:5e:e9:16:c4:1c:
ef:57:83:a2:30:ed:3d:33:b3:43:ff:ce:c7:ff:45:2a:6e:f4:
ea:3c:09:1a:33:4b:a5:63:04:4a:c3:a1:6f:44:0a:49:f8:a6:
3f:3a:83:1f:a4:7b:64:dc:5d:f3:7b:47:b4:da:b9:54:42:fd:
10:71:44:7e:7d:c0:6a:63:16:a8:8e:4e:dc:0e:17:dc:ca:26:
48:7e:5a:43:ad:5c:96:f9:b0:2f:c6:91:3f:f2:87:56:70:fe:
f0:31:1b:47:cb:a9:bb:fc:1b:d3:1f:9c:9c:3c:b5:94:3b:89:
e1:9f:44:f7:e2:b1:48:1a:e1:d6:80:46:bd:34:c6:5e:de:02:
29:c3:8d:61:05:7c:35:c1:6d:f2:62:e3:37:0a:ef:d1:34:61:
d0:ba:b5:7e:fe:42:ee:63:15:a9:a3:dc:cf:fb:8d:06:89:27:
91:b1:a3:9e:32:ce:f0:7d:7a:df:12:64:8a:48:a3:f9:b6:5a:
2f:70:4b:6f:87:d2:83:68:25:af:80:27:41:c8:f6:60:a9:95:
2f:35:14:b0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAdcIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwMzAy
MDMwMDAwWhcNMjMwMzAyMDMwMDAwWjAzMTEwLwYDVQQDEyhiYjIzMmVjODQzOTBj
ODkzNjMyYjA3ODQxYmVjMWY1NDY2MzlkNGNhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAirBro1mU2wjHmk7bq5F/KnQguwdPBet0aYcj2iCIvnfl8GJT
8i45n4TYo9Jq0AyiseNbz9zxwypA3tSyBn8stRAZ2VbQu4sYd44idqbHK7H7LBJy
RM0/PcDptw5u87F6he74SWjLWtVrGP3BGtZXF1YgPeHAJQJ5/3oK4j73kZmkZ8NK
UhjMjnzvuE94v4sNdc7s76cQIUcoC0P5ydE1C1g13cW3iX//FwJx/vgm+RD5lwLc
P51eGmEEc+jDfPO5qcrhKreGJzhoJgkAv/rinFTN9mtKHoqJwru7W6PqvO0ABk3O
2J85plULzWBzXbnWceBul6gOFZLKvDG9COCp7wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFA/JqaukxZLnR5rDDHTYBOeOss/xMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1L2JiMjMyZWM4NDM5MGM4OTM2MzJiMDc4NDFiZWMxZjU0NjYzOWQ0Y2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAOg1Z6UZbkkQJhlxd
ywaqAXqhSUkxeg05urXJYvxWuPgcwIjkyLkoBuE2tO0fZCXtWF7pFsQc71eDojDt
PTOzQ//Ox/9FKm706jwJGjNLpWMESsOhb0QKSfimPzqDH6R7ZNxd83tHtNq5VEL9
EHFEfn3AamMWqI5O3A4X3MomSH5aQ61clvmwL8aRP/KHVnD+8DEbR8upu/wb0x+c
nDy1lDuJ4Z9E9+KxSBrh1oBGvTTGXt4CKcONYQV8NcFt8mLjNwrv0TRh0Lq1fv5C
7mMVqaPcz/uNBoknkbGjnjLO8H163xJkikij+bZaL3BLb4fSg2glr4AnQcj2YKmV
LzUUsA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org