Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/cd84e34e9fda4c3382337e0625df1bdb44926833.roa
File: cd84e34e9fda4c3382337e0625df1bdb44926833.roa (raw, json)
Hash identifier: k33BCqJ6guaW+SDzjL0sYw/HJ/Y1F6KbV7UzVRSjM14=
Subject key identifier: 95:58:49:E9:D7:0A:DC:BE:7C:2E:89:84:F4:CC:FD:B1:E0:97:61:9D
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 0CEE28
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/cd84e34e9fda4c3382337e0625df1bdb44926833.roa
Signing time: Mon 31 Oct 2022 04:14:32 +0000
ROA not before: Sun 30 Oct 2022 03:00:00 +0000
ROA not after: Tue 31 Oct 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847400 (0xcee28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Oct 30 03:00:00 2022 GMT
Not After : Oct 31 03:00:00 2023 GMT
Subject: CN=cd84e34e9fda4c3382337e0625df1bdb44926833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:74:25:b3:77:79:e6:8e:61:5e:4b:38:cc:
b6:10:ac:b5:b8:d1:9c:11:48:7a:64:0e:15:60:7b:
93:db:49:0f:63:28:bd:4e:0a:78:54:95:ef:eb:9b:
d6:7e:8f:7f:44:c0:d5:a3:68:a1:57:83:81:df:8c:
38:6b:95:8d:45:34:f3:49:19:8b:ca:db:2d:42:95:
8d:92:4f:81:4e:c5:5b:8d:cb:81:a5:ff:a8:22:58:
b2:fc:6b:f6:e3:c1:c8:2a:5c:e7:ab:dc:e9:b2:4d:
f5:01:db:87:25:5b:f6:91:0f:64:79:50:22:1b:ff:
56:db:c2:16:3b:3d:76:23:a6:d5:a3:91:61:40:e4:
a5:cd:3c:99:dd:b5:22:78:b1:4f:07:c5:76:fc:70:
62:dc:fb:7a:56:f1:1f:ec:31:d4:44:27:8f:26:4f:
be:d7:f7:bd:1b:87:f2:b5:32:49:39:3d:d5:89:6b:
d1:07:5c:01:09:d8:fd:01:a0:07:1c:5d:77:25:7e:
52:ff:dc:75:d3:ad:95:9c:d5:ed:b6:c0:4a:a1:69:
4a:0b:cf:b7:de:6d:83:01:4f:b9:d5:21:f0:b8:fc:
03:05:43:4d:e4:a7:0d:f0:89:af:9b:73:56:12:fa:
51:32:31:e3:d6:d4:a0:7e:b6:a1:06:4b:de:7c:db:
86:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:58:49:E9:D7:0A:DC:BE:7C:2E:89:84:F4:CC:FD:B1:E0:97:61:9D
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/cd84e34e9fda4c3382337e0625df1bdb44926833.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
53:92:b5:1c:0c:d0:c1:3e:98:fe:38:82:ae:2f:5b:00:eb:37:
6f:2b:07:a7:19:51:21:95:3f:57:9d:fb:75:30:56:c9:02:5a:
bd:15:08:cf:77:9e:e9:01:f2:3a:a6:6d:5c:59:71:95:c9:09:
7a:43:5f:72:90:65:98:31:c9:9f:f4:e5:06:85:45:8c:41:40:
9a:90:c5:91:e3:a6:9c:b5:2a:ab:5b:07:c4:70:22:62:72:87:
2b:3b:05:e1:6a:fc:5b:59:d7:15:cb:8d:7f:d7:c6:18:cb:6f:
e0:2b:52:39:88:55:a4:d6:d9:ad:89:6f:ef:4c:17:e9:0b:90:
34:a6:3a:3b:66:53:c5:1a:00:fa:92:b3:96:d3:f7:94:ef:6c:
49:26:23:5d:6b:6f:5d:59:e8:fc:dd:5f:1d:71:ee:27:d4:5f:
8c:bf:30:01:f7:ad:e1:4f:a1:f1:d1:89:be:b7:4b:cd:15:a4:
23:84:2e:bb:50:05:ff:12:b4:71:21:b0:07:ba:76:5a:02:2a:
c7:07:e3:06:23:16:e5:56:02:36:2a:9b:36:b2:7e:69:6a:bd:
e6:cf:f8:7a:01:f4:de:25:9b:05:5e:d1:fd:e7:f7:4e:4f:c0:
f5:0f:22:39:3c:31:3e:ee:ab:9b:b9:d5:a8:7c:9e:6b:2d:55:
46:3c:c1:a1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDO4oMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIxMDMw
MDMwMDAwWhcNMjMxMDMxMDMwMDAwWjAzMTEwLwYDVQQDEyhjZDg0ZTM0ZTlmZGE0
YzMzODIzMzdlMDYyNWRmMWJkYjQ0OTI2ODMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAreB0JbN3eeaOYV5LOMy2EKy1uNGcEUh6ZA4VYHuT20kPYyi9
Tgp4VJXv65vWfo9/RMDVo2ihV4OB34w4a5WNRTTzSRmLytstQpWNkk+BTsVbjcuB
pf+oIliy/Gv248HIKlznq9zpsk31AduHJVv2kQ9keVAiG/9W28IWOz12I6bVo5Fh
QOSlzTyZ3bUieLFPB8V2/HBi3Pt6VvEf7DHURCePJk++1/e9G4fytTJJOT3ViWvR
B1wBCdj9AaAHHF13JX5S/9x1062VnNXttsBKoWlKC8+33m2DAU+51SHwuPwDBUNN
5KcN8Imvm3NWEvpRMjHj1tSgfrahBkvefNuG5QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJVYSenXCty+fC6JhPTM/bHgl2GdMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1L2NkODRlMzRlOWZkYTRjMzM4MjMzN2UwNjI1ZGYxYmRiNDQ5MjY4MzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAU5K1HAzQwT6Y/jiC
ri9bAOs3bysHpxlRIZU/V537dTBWyQJavRUIz3ee6QHyOqZtXFlxlckJekNfcpBl
mDHJn/TlBoVFjEFAmpDFkeOmnLUqq1sHxHAiYnKHKzsF4Wr8W1nXFcuNf9fGGMtv
4CtSOYhVpNbZrYlv70wX6QuQNKY6O2ZTxRoA+pKzltP3lO9sSSYjXWtvXVno/N1f
HXHuJ9RfjL8wAfet4U+h8dGJvrdLzRWkI4Quu1AF/xK0cSGwB7p2WgIqxwfjBiMW
5VYCNiqbNrJ+aWq95s/4egH03iWbBV7R/ef3Tk/A9Q8iOTwxPu6rm7nVqHyeay1V
RjzBoQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org