Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ca58a1011417882e2a1749c57bf6191942f0d140.roa
File: ca58a1011417882e2a1749c57bf6191942f0d140.roa (raw, json)
Hash identifier: LemKHukTbbvozYGqoU1dVw+70MVmoQpriTKIcU5ObKQ=
Subject key identifier: 92:73:13:09:25:C8:74:C8:05:62:E3:33:06:2D:6E:2E:8E:1A:D9:FF
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 01D197
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ca58a1011417882e2a1749c57bf6191942f0d140.roa
Signing time: Tue 01 Mar 2022 05:31:50 +0000
ROA not before: Tue 01 Mar 2022 03:00:00 +0000
ROA not after: Wed 01 Mar 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119191 (0x1d197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Mar 1 03:00:00 2022 GMT
Not After : Mar 1 03:00:00 2023 GMT
Subject: CN=ca58a1011417882e2a1749c57bf6191942f0d140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:3d:91:b4:1e:5d:69:4d:5e:6a:fc:04:f2:
fe:ea:2a:6b:77:9a:77:5f:9f:7a:ac:d9:0d:6a:22:
b6:a9:b9:30:77:fc:20:86:7d:8e:ec:d4:95:7a:9f:
65:47:55:63:8d:b7:ec:7b:83:bf:56:13:17:4e:8a:
31:9a:ab:85:d3:7a:5c:4c:5f:18:8b:05:1d:02:ba:
40:0d:c3:9f:fa:4a:01:00:46:bf:5f:06:c9:db:f4:
a5:85:fa:ca:d9:3f:37:b2:37:e5:06:4c:2a:0c:00:
99:5a:ad:50:46:23:c3:a6:ea:cb:6e:af:88:b8:97:
e5:a4:cc:5d:b4:69:11:9e:fb:20:6f:78:57:57:a9:
92:94:fb:db:9b:4b:5a:f2:79:f2:69:54:0c:47:10:
12:65:15:ac:15:fe:02:c6:a6:38:63:82:99:46:73:
92:46:fb:92:af:c8:04:eb:0d:32:4c:ae:c9:a0:92:
57:29:54:eb:fd:c8:ac:8b:42:d5:87:18:1d:b6:24:
34:3c:50:91:92:bf:65:87:04:58:33:91:65:fe:8d:
5f:b0:eb:10:90:ad:3b:ce:d9:2e:68:95:75:4b:9c:
bf:bf:80:17:e6:88:59:f6:5d:f5:b2:ef:15:cc:39:
cd:2b:ce:49:7c:da:22:fb:c0:7f:5e:b5:e7:f1:ab:
cc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:73:13:09:25:C8:74:C8:05:62:E3:33:06:2D:6E:2E:8E:1A:D9:FF
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ca58a1011417882e2a1749c57bf6191942f0d140.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
36:77:13:5d:c7:e2:9e:97:e2:ba:6c:b0:35:5b:1c:80:2d:42:
ac:98:73:ee:19:72:d4:79:b7:0c:eb:3b:ce:32:40:df:11:30:
83:ac:4b:3d:52:66:8d:0e:c8:fc:69:da:54:ba:74:28:80:57:
93:1d:8a:8f:bc:1f:2b:64:d8:cd:e5:a8:ae:3b:f3:f6:39:af:
95:94:a0:dc:31:b1:f4:e4:81:00:b7:b9:81:cc:45:36:26:16:
9f:2c:2a:c1:32:e7:e1:26:f3:44:fd:5f:4f:2e:b4:cb:53:1a:
2d:79:8f:e7:be:a6:bd:c8:f2:a5:2b:4f:06:27:85:ad:68:d0:
67:00:dd:eb:35:2d:9a:d8:2d:a5:49:5f:2d:7a:dd:61:e3:87:
a3:04:e7:6e:30:ad:23:ab:3b:ed:96:40:d3:b7:ff:57:aa:06:
be:40:be:d2:d0:03:9f:ba:35:37:a1:b9:c1:02:5f:80:03:76:
5b:04:96:db:95:ea:af:1d:bb:e2:08:cb:c2:10:8e:8d:c3:ba:
2c:f7:7f:9e:5e:ce:b0:2c:cd:cd:92:36:31:ad:94:41:5b:6f:
22:c2:4a:f8:5f:3f:a9:0f:60:d4:8a:13:ee:4f:48:5e:2d:43:
cc:c6:15:06:da:b0:aa:fa:82:59:b4:0c:76:72:f9:6e:cb:34:
aa:74:f0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org