Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dc567208ec84c4d721aad9728a700584e0ff427a.roa
File: dc567208ec84c4d721aad9728a700584e0ff427a.roa (raw, json)
Hash identifier: 7Q72PsTmsjuGccxIuYTcqsAod+eSlynnLjNp6RKhPN8=
Subject key identifier: BE:DF:D5:12:D6:46:AF:A0:CD:4F:26:9A:06:DB:FC:92:46:E2:64:57
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 02606F
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dc567208ec84c4d721aad9728a700584e0ff427a.roa
Signing time: Sun 13 Mar 2022 01:22:23 +0000
ROA not before: Sun 13 Mar 2022 03:00:00 +0000
ROA not after: Mon 13 Mar 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155759 (0x2606f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Mar 13 03:00:00 2022 GMT
Not After : Mar 13 03:00:00 2023 GMT
Subject: CN=dc567208ec84c4d721aad9728a700584e0ff427a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b5:57:4b:95:89:cd:6c:11:a8:05:90:19:5d:
8b:ff:17:91:80:c5:23:64:1b:b0:7b:5c:0d:db:3d:
6e:f8:52:e9:b5:fb:76:0f:65:36:f5:a8:34:c9:27:
5f:ba:d2:87:eb:f6:cc:ac:84:85:b6:12:77:51:14:
f3:c9:55:62:89:e5:4f:54:7b:c3:2a:52:84:25:99:
f5:f3:fd:a7:af:f4:c2:04:4c:bf:a4:a9:cb:e3:27:
ff:34:38:8d:91:f2:f5:5c:a6:8b:1c:0b:c7:8e:2e:
f6:09:b3:72:3b:f3:11:35:24:9c:a5:73:84:cd:96:
f3:a0:7d:67:b3:6a:4a:d2:59:5d:18:f6:cb:08:94:
1f:20:9e:38:9a:31:11:18:fb:e2:66:35:8f:4b:73:
a7:41:52:d1:61:af:18:e2:da:5b:e3:07:7c:bf:e7:
1a:c2:8b:bf:8e:85:5c:b0:be:01:97:70:e9:53:53:
dd:a4:88:3e:76:af:12:2c:12:fe:76:3b:aa:e0:d4:
52:6e:7e:e2:4b:18:2c:07:91:7f:78:b3:ab:44:39:
17:40:b8:2d:bd:01:0a:db:2d:03:06:e0:54:53:a8:
aa:f8:39:b2:82:31:34:84:18:19:44:83:96:31:c6:
47:31:1a:e5:77:f1:09:f3:9e:e2:22:11:f2:75:dc:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DF:D5:12:D6:46:AF:A0:CD:4F:26:9A:06:DB:FC:92:46:E2:64:57
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dc567208ec84c4d721aad9728a700584e0ff427a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:9b:a6:5a:81:da:44:78:7d:ee:1a:09:df:62:cd:70:c0:24:
55:33:12:f8:ed:aa:e8:a9:78:f8:6d:db:a0:3d:a3:9a:15:99:
74:61:72:0f:a7:a0:34:26:a4:5c:dc:ab:7d:0f:fd:0d:15:ec:
be:5f:83:22:01:ca:23:03:b1:ee:7d:fa:e4:fd:58:10:a4:3e:
25:06:57:ca:a1:e6:ef:48:91:65:f8:2a:57:02:ca:b1:65:f8:
28:be:ad:5e:30:65:51:df:f6:1e:e9:57:f5:7f:8b:ea:60:b0:
c4:99:c0:2b:9e:08:31:b3:2e:d0:74:bc:b1:b3:4b:0a:9d:59:
04:72:f6:13:c6:87:26:0b:18:2a:52:fa:79:c7:1e:57:83:4c:
fc:8b:cf:ee:62:fc:18:8d:50:82:12:a5:1a:9e:d3:fe:d8:31:
b2:05:70:62:0c:a3:06:f0:4a:cb:1f:b6:c1:0c:0c:60:31:f8:
f1:39:02:92:84:28:20:d8:ac:21:63:fa:e5:24:38:c8:0c:b4:
d1:bd:28:aa:61:c5:eb:98:0d:fe:cb:0a:42:89:0d:5d:87:9c:
6d:73:7a:82:b8:64:3d:92:41:db:ce:33:03:86:4c:1b:8a:80:
f5:e7:48:c1:26:da:7e:53:7d:99:a0:a2:4c:ea:75:54:fa:72:
79:3a:24:70
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAmBvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwMzEz
MDMwMDAwWhcNMjMwMzEzMDMwMDAwWjAzMTEwLwYDVQQDEyhkYzU2NzIwOGVjODRj
NGQ3MjFhYWQ5NzI4YTcwMDU4NGUwZmY0MjdhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgLVXS5WJzWwRqAWQGV2L/xeRgMUjZBuwe1wN2z1u+FLptft2
D2U29ag0ySdfutKH6/bMrISFthJ3URTzyVViieVPVHvDKlKEJZn18/2nr/TCBEy/
pKnL4yf/NDiNkfL1XKaLHAvHji72CbNyO/MRNSScpXOEzZbzoH1ns2pK0lldGPbL
CJQfIJ44mjERGPviZjWPS3OnQVLRYa8Y4tpb4wd8v+cawou/joVcsL4Bl3DpU1Pd
pIg+dq8SLBL+djuq4NRSbn7iSxgsB5F/eLOrRDkXQLgtvQEK2y0DBuBUU6iq+Dmy
gjE0hBgZRIOWMcZHMRrld/EJ857iIhHyddxDEQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFL7f1RLWRq+gzU8mmgbb/JJG4mRXMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1L2RjNTY3MjA4ZWM4NGM0ZDcyMWFhZDk3MjhhNzAwNTg0ZTBmZjQyN2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEASpumWoHaRHh97hoJ
32LNcMAkVTMS+O2q6Kl4+G3boD2jmhWZdGFyD6egNCakXNyrfQ/9DRXsvl+DIgHK
IwOx7n365P1YEKQ+JQZXyqHm70iRZfgqVwLKsWX4KL6tXjBlUd/2HulX9X+L6mCw
xJnAK54IMbMu0HS8sbNLCp1ZBHL2E8aHJgsYKlL6ecceV4NM/IvP7mL8GI1QghKl
Gp7T/tgxsgVwYgyjBvBKyx+2wQwMYDH48TkCkoQoINisIWP65SQ4yAy00b0oqmHF
65gN/ssKQokNXYecbXN6grhkPZJB284zA4ZMG4qA9edIwSbaflN9maCiTOp1VPpy
eTokcA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org