Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d6b2cec2c0979ba3eaeef330333107618d67905c.roa
File: d6b2cec2c0979ba3eaeef330333107618d67905c.roa (raw, json)
Hash identifier: S1ZR/xllyfpomIFevLtEj+H0HEtdbD1VGAhCqC7InbU=
Subject key identifier: F4:BD:EC:AA:9E:C7:8C:B6:0E:C2:AD:BD:2C:D1:A2:D3:AD:D1:6F:68
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 044110
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d6b2cec2c0979ba3eaeef330333107618d67905c.roa
Signing time: Tue 26 Apr 2022 00:07:32 +0000
ROA not before: Tue 26 Apr 2022 03:00:00 +0000
ROA not after: Wed 26 Apr 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278800 (0x44110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Apr 26 03:00:00 2022 GMT
Not After : Apr 26 03:00:00 2023 GMT
Subject: CN=d6b2cec2c0979ba3eaeef330333107618d67905c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:91:17:49:1b:d2:dd:6b:df:57:ed:c9:d6:
b0:93:c5:88:e8:47:11:93:09:77:dc:b1:d8:53:03:
f7:c7:2b:1e:52:5b:fd:58:89:b9:5b:48:d6:e0:44:
97:df:29:fb:2b:dc:fc:a8:0e:0e:8c:ad:8f:43:bd:
f6:30:c8:a6:e7:32:8b:2a:85:37:95:f2:c5:a1:0f:
b5:cb:8b:8a:eb:6a:f2:7f:f4:80:0f:b4:e0:81:1f:
3f:7a:23:8b:b1:30:18:db:1b:ef:d4:66:b5:a4:66:
84:7f:7b:db:a7:bc:70:ee:42:03:9e:88:6f:1e:9b:
05:da:c5:7c:9a:e8:13:fd:d3:d7:fc:e3:d7:9d:92:
1b:fe:dc:21:67:a2:5e:58:18:43:03:5b:c6:b6:7c:
d0:ea:2f:91:ef:44:37:84:c4:08:3a:17:e2:3b:4a:
6d:f2:5b:7d:aa:c4:7c:fd:3f:de:17:56:c0:1d:09:
94:7d:95:cb:68:a7:90:3b:71:a1:ee:2e:1a:00:0c:
40:2d:31:95:45:fb:d9:92:55:03:04:a4:f1:b7:b9:
97:c7:c6:ff:f2:79:89:ea:d2:36:81:a7:ce:b1:95:
1d:dc:36:33:ae:96:65:29:88:9f:6f:41:53:a9:3f:
0c:6e:d3:06:a1:55:a5:0b:f8:e6:32:83:13:63:68:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BD:EC:AA:9E:C7:8C:B6:0E:C2:AD:BD:2C:D1:A2:D3:AD:D1:6F:68
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d6b2cec2c0979ba3eaeef330333107618d67905c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b8:bd:4f:53:48:49:4a:e4:df:4d:9d:1b:44:01:2c:14:ed:
21:9c:45:5f:a1:13:bb:51:3e:43:a4:dc:d9:4a:91:63:b8:c2:
f3:f9:f9:68:be:0a:9f:c2:b5:2e:2f:28:d5:80:c4:ac:4f:81:
17:ed:bc:e9:57:5f:ea:c1:b8:da:5f:17:7c:e9:62:0e:f3:8f:
54:87:29:43:58:39:5c:37:1e:a0:8c:44:e6:f3:4d:75:e1:33:
3c:ff:9d:03:cf:a8:1a:1b:dd:c5:eb:8b:3e:48:cb:09:f2:03:
cd:35:29:30:c8:20:5b:f1:34:76:7e:da:a6:ed:3a:b3:1c:64:
69:2a:9a:37:fa:2a:19:81:bd:03:50:ea:0a:f8:a6:50:c9:bc:
a9:fb:4a:31:9e:38:c5:ee:0a:60:16:e2:cc:c1:a6:03:f5:43:
d1:68:be:47:d4:8e:0d:a4:9b:88:c6:eb:70:cb:cc:ef:e7:43:
bd:f3:e1:36:c2:de:8b:84:4f:8e:99:8f:4c:21:34:91:88:02:
a9:5e:b5:29:5f:f2:6e:c8:29:6e:26:d2:82:0b:94:d9:87:62:
0f:90:81:30:8a:eb:5e:54:01:b4:5d:c9:85:65:62:4e:4e:40:
1c:18:a6:5d:60:91:7e:ce:80:df:6a:60:c3:d5:0e:49:a1:dd:
7b:05:83:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org