Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ca3256d3866b8a3dabad597f520f138c25d30391.roa
File: ca3256d3866b8a3dabad597f520f138c25d30391.roa (raw, json)
Hash identifier: Jg0G3Q7yehh2AMyoYIDPLihk9L5xRV+687QFMGi/Wsw=
Subject key identifier: D8:11:DF:EB:1E:E0:39:A0:B4:23:97:EF:74:B6:8A:01:BF:8D:39:E9
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0737A9
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ca3256d3866b8a3dabad597f520f138c25d30391.roa
Signing time: Wed 29 Jun 2022 00:05:52 +0000
ROA not before: Wed 29 Jun 2022 03:00:00 +0000
ROA not after: Thu 29 Jun 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473001 (0x737a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jun 29 03:00:00 2022 GMT
Not After : Jun 29 03:00:00 2023 GMT
Subject: CN=ca3256d3866b8a3dabad597f520f138c25d30391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:bb:2a:bb:af:a4:8b:1b:1f:76:2b:de:ea:
4b:f6:b5:fe:a0:06:d5:4f:c0:3b:33:4c:ef:38:07:
76:aa:bc:06:9c:c7:8a:9e:ea:52:3f:1b:bc:2e:a8:
15:09:67:4a:c9:03:61:ed:27:95:de:0a:a6:38:f8:
7f:27:d2:52:1d:1e:35:24:a5:e4:c8:5f:f6:a4:02:
dd:67:9c:a6:ae:85:8b:c9:e7:43:3a:b0:8c:78:99:
34:ec:9e:2c:2d:66:ee:c3:7f:79:c8:f0:7d:6c:fe:
ab:e2:7c:78:d5:d5:ab:ac:9f:10:17:9b:76:24:70:
38:e9:84:cb:d9:2f:33:0c:79:9b:a1:90:b2:a1:be:
6a:1e:80:f0:23:bf:d8:a0:a4:2e:e3:6d:30:83:67:
ff:62:9c:35:7b:47:29:1e:d4:65:2e:f7:bc:7a:49:
23:04:38:9b:a2:55:3e:25:2e:4c:d4:8f:e5:eb:d1:
35:1a:76:e5:fc:43:7a:f6:e3:00:0a:48:2e:69:a6:
90:e3:b1:5f:8f:18:14:0f:83:c8:1c:05:a8:66:89:
73:d5:b1:b3:ec:3d:1e:8b:65:2a:b0:15:bc:e5:76:
0b:98:82:00:f9:3a:70:9c:e3:9f:8d:e2:7b:a4:b3:
be:cd:7f:f1:93:80:40:d7:de:3b:84:a2:2d:a2:66:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:11:DF:EB:1E:E0:39:A0:B4:23:97:EF:74:B6:8A:01:BF:8D:39:E9
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ca3256d3866b8a3dabad597f520f138c25d30391.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
90:0c:ef:b8:06:f9:93:5d:22:2d:00:27:34:e9:6b:97:c2:39:
05:75:d9:be:5f:ef:8f:26:10:da:1e:94:82:2e:c7:f4:05:35:
58:48:a1:8a:14:67:5c:ef:b8:c9:ca:62:cc:58:de:ad:1d:44:
c4:6e:9a:e5:98:9b:2b:8d:a3:d4:97:86:c3:f5:29:e1:18:0d:
24:ec:6b:df:c6:f9:b9:fd:b5:fd:78:75:e9:38:8e:7d:6b:c4:
6f:b6:9a:ed:76:a7:04:2f:ef:0f:45:d3:32:39:aa:a9:ed:57:
2d:91:23:b1:72:1d:bc:3a:55:90:74:d0:c0:f1:75:e8:40:3c:
d5:f5:bd:36:b3:4d:47:63:ce:9f:10:55:90:17:7c:75:8d:82:
68:1f:70:1f:02:bc:50:0e:3f:72:dd:63:25:76:13:08:04:bf:
10:a7:1a:fb:a2:92:56:f9:b4:08:03:e0:56:f0:64:3e:35:3e:
74:3e:15:6f:e6:f3:f4:20:8e:cb:46:7f:21:99:5b:85:01:6e:
51:c7:96:00:93:bf:1d:b0:9e:0d:1f:f2:18:84:c8:c1:58:8a:
2e:5d:5b:09:1b:fc:c7:2c:19:58:bc:71:e0:56:70:fc:6b:fa:
06:7e:38:b0:e7:fb:9a:e4:46:9f:07:64:d6:c9:30:b4:f0:29:
2a:75:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org