Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c4639da878f3fe140aa9ea1366a64cf4a900de87.roa
File: c4639da878f3fe140aa9ea1366a64cf4a900de87.roa (raw, json)
Hash identifier: sXxspb8qGtXzuKVHpHdNOm71BoKpPUKApbOrTVIbOF0=
Subject key identifier: CA:20:71:81:E7:AF:59:C0:DA:70:D0:9E:A7:7A:EF:AE:13:AF:E8:B8
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 072190
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c4639da878f3fe140aa9ea1366a64cf4a900de87.roa
Signing time: Mon 27 Jun 2022 03:12:08 +0000
ROA not before: Mon 27 Jun 2022 03:00:00 +0000
ROA not after: Tue 27 Jun 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467344 (0x72190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jun 27 03:00:00 2022 GMT
Not After : Jun 27 03:00:00 2023 GMT
Subject: CN=c4639da878f3fe140aa9ea1366a64cf4a900de87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:58:59:d6:2d:21:95:87:15:ae:6f:bf:68:
63:60:5d:5d:c8:76:1f:bd:68:d2:27:98:ea:bd:42:
d3:61:ef:e5:ca:f6:f8:18:43:2c:09:3a:1f:91:ea:
e7:62:98:4c:4d:c1:bb:d9:2f:75:bb:68:70:75:af:
b3:31:0a:64:58:eb:e3:c5:6c:f9:da:d7:07:53:b4:
4e:88:c2:36:c4:d3:ad:d3:10:ae:23:fe:b7:5f:5a:
3e:06:9c:3f:d5:86:e6:10:ae:f8:c1:2e:29:1f:15:
76:cd:1e:d0:65:2e:00:d0:b0:0e:0c:39:11:ec:98:
da:54:a0:07:aa:e9:5c:ea:c7:a0:81:d4:bb:71:3c:
d9:35:59:50:67:98:ae:8f:cc:34:16:f5:5d:08:c5:
27:12:34:d7:43:10:e5:fa:e6:56:d4:55:5a:66:fe:
2c:b8:ae:5e:e5:c2:81:52:05:a4:31:a7:6f:ea:02:
76:2e:9c:6c:6a:ae:1f:68:14:5c:9a:46:87:b3:28:
45:24:ab:68:93:5d:83:aa:dd:b6:c1:93:93:35:9d:
e3:89:a9:0e:21:79:50:9b:3d:57:eb:5c:f8:38:25:
25:f4:97:aa:73:ba:59:9b:3d:14:cc:2a:7d:76:81:
db:18:ef:e1:16:00:10:b0:4b:0b:fa:b6:6b:1b:1b:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:20:71:81:E7:AF:59:C0:DA:70:D0:9E:A7:7A:EF:AE:13:AF:E8:B8
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c4639da878f3fe140aa9ea1366a64cf4a900de87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
09:0d:a4:b9:24:86:b1:cd:33:13:14:c5:8a:91:bd:22:0c:83:
ab:36:1e:a8:18:24:c2:dc:55:a0:58:4d:3d:7c:76:60:cb:24:
03:b3:b6:9d:47:a9:94:8c:74:a9:70:ab:fd:92:a8:03:e0:58:
03:93:e7:6a:e5:2c:8b:fb:56:4a:ac:76:72:77:b8:4d:38:74:
40:5e:42:31:a8:0e:b9:a3:0f:d9:38:c8:b0:19:ef:aa:10:5e:
e1:8e:2d:a4:dc:0b:36:3d:63:47:d5:bf:30:dc:68:41:11:22:
e0:91:21:58:ad:3b:14:65:02:0f:e1:f7:5e:f8:5b:11:5b:d6:
d8:64:1f:f8:a1:3d:50:5b:47:5f:f6:42:fe:f8:29:5a:ed:9e:
16:38:ec:eb:a7:24:02:c6:7f:77:72:05:6d:bb:0d:9d:b7:41:
a5:1e:ff:a7:49:ed:09:35:5f:72:e8:0f:1f:d5:0f:6d:1a:7e:
e5:2c:77:d3:91:cd:b9:38:29:6c:5e:aa:bb:2d:fd:9a:43:64:
fa:2e:9e:5b:5a:42:5f:46:68:23:8d:eb:da:0a:2e:02:ad:62:
e5:b5:69:e6:da:04:15:51:96:c4:c2:7d:4a:46:ed:aa:cd:85:
c1:1d:e7:09:05:38:f5:7a:6c:6f:8c:ef:8f:70:d8:54:79:e2:
c2:9a:b4:3c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDByGQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNjI3
MDMwMDAwWhcNMjMwNjI3MDMwMDAwWjAzMTEwLwYDVQQDEyhjNDYzOWRhODc4ZjNm
ZTE0MGFhOWVhMTM2NmE2NGNmNGE5MDBkZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqDFYWdYtIZWHFa5vv2hjYF1dyHYfvWjSJ5jqvULTYe/lyvb4
GEMsCTofkernYphMTcG72S91u2hwda+zMQpkWOvjxWz52tcHU7ROiMI2xNOt0xCu
I/63X1o+Bpw/1YbmEK74wS4pHxV2zR7QZS4A0LAODDkR7JjaVKAHqulc6seggdS7
cTzZNVlQZ5iuj8w0FvVdCMUnEjTXQxDl+uZW1FVaZv4suK5e5cKBUgWkMadv6gJ2
Lpxsaq4faBRcmkaHsyhFJKtok12Dqt22wZOTNZ3jiakOIXlQmz1X61z4OCUl9Jeq
c7pZmz0UzCp9doHbGO/hFgAQsEsL+rZrGxte+wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMogcYHnr1nA2nDQnqd6764Tr+i4MB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1L2M0NjM5ZGE4NzhmM2ZlMTQwYWE5ZWExMzY2YTY0Y2Y0YTkwMGRlODcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEACQ2kuSSGsc0zExTF
ipG9IgyDqzYeqBgkwtxVoFhNPXx2YMskA7O2nUeplIx0qXCr/ZKoA+BYA5PnauUs
i/tWSqx2cne4TTh0QF5CMagOuaMP2TjIsBnvqhBe4Y4tpNwLNj1jR9W/MNxoQREi
4JEhWK07FGUCD+H3XvhbEVvW2GQf+KE9UFtHX/ZC/vgpWu2eFjjs66ckAsZ/d3IF
bbsNnbdBpR7/p0ntCTVfcugPH9UPbRp+5Sx305HNuTgpbF6quy39mkNk+i6eW1pC
X0ZoI43r2gouAq1i5bVp5toEFVGWxMJ9Skbtqs2FwR3nCQU49Xpsb4zvj3DYVHni
wpq0PA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org