Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e63221b260f32e005523ca7d8b211d077d5fbd3a.roa
File: e63221b260f32e005523ca7d8b211d077d5fbd3a.roa (raw, json)
Hash identifier: BduuzEsFbYcNW6tk5C38ifhj0Znj156j8RGm2lArtME=
Subject key identifier: 22:11:BA:21:27:6A:85:C2:2B:98:44:EB:5D:18:9B:5C:A5:F7:C3:B0
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 05DFD3
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e63221b260f32e005523ca7d8b211d077d5fbd3a.roa
Signing time: Wed 01 Jun 2022 04:46:03 +0000
ROA not before: Wed 01 Jun 2022 03:00:00 +0000
ROA not after: Thu 01 Jun 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384979 (0x5dfd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Jun 1 03:00:00 2022 GMT
Not After : Jun 1 03:00:00 2023 GMT
Subject: CN=e63221b260f32e005523ca7d8b211d077d5fbd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cd:80:53:f2:61:1b:07:d0:54:92:6c:50:82:
c8:d8:75:6e:a7:69:9e:57:9d:bb:8b:ff:d8:cf:b7:
c2:93:f9:23:5b:9f:67:18:1b:b4:01:7c:07:dd:69:
64:23:4b:c6:36:67:03:05:57:19:89:4f:3d:a4:52:
95:3f:79:19:75:3b:fa:ff:00:c4:9b:8a:91:68:15:
7b:e2:09:17:c1:79:68:78:53:65:83:87:91:b9:a0:
ca:c4:50:20:19:8c:73:49:1f:c5:83:76:f8:f0:ce:
94:bf:7b:f0:5c:6d:d1:b9:ae:7b:be:fe:3e:df:8b:
13:6e:ad:0e:9b:a6:2a:19:fc:05:7b:ee:81:e7:6a:
62:0b:f1:cc:49:f9:e7:34:ed:df:55:3a:67:94:91:
14:66:87:28:99:f6:a8:e8:e8:94:01:46:74:d8:4d:
4c:60:5c:2d:e0:1f:0f:8b:b3:a0:9b:09:ab:e7:1e:
59:c7:9b:7f:cb:7c:2d:bd:a2:6b:86:2c:f1:89:66:
b4:40:ba:af:35:97:7c:9b:b8:26:09:b2:08:6a:2d:
9e:ca:26:a7:2c:55:b8:dd:d0:12:a6:b0:03:5e:f4:
39:8b:1e:3b:89:79:a0:be:5c:9a:c2:d3:09:d7:0e:
c4:c7:71:ff:d7:d2:af:c5:21:01:c6:1b:b0:a5:3f:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:11:BA:21:27:6A:85:C2:2B:98:44:EB:5D:18:9B:5C:A5:F7:C3:B0
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e63221b260f32e005523ca7d8b211d077d5fbd3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
70:9f:2a:be:10:c0:2d:9c:7e:7d:22:9a:51:bb:a5:9f:a2:b1:
0c:6d:99:35:28:1f:cc:12:db:81:c4:3c:b9:97:0e:50:0c:25:
06:49:1e:10:e6:3d:96:b8:4c:bc:09:92:55:c2:80:34:bb:ee:
e9:fd:1f:25:21:03:f0:d8:7c:70:96:08:78:84:09:df:25:fa:
a1:af:60:ca:30:8c:42:6b:db:8a:ed:ec:79:04:f7:92:d5:ca:
85:d9:76:5b:78:c6:c2:12:0c:0b:b1:ac:96:93:78:ef:68:7f:
2f:2f:4f:2d:8e:b2:70:52:c1:05:1b:e9:55:89:e5:ce:84:ca:
34:9d:a7:a2:07:69:74:03:93:21:7f:2f:db:9e:4d:6e:e6:0a:
d2:2b:d3:1c:93:26:b9:da:f4:17:84:e3:45:e1:aa:0d:70:d8:
cc:d0:a1:1e:e0:0e:14:7b:ef:0c:8b:33:73:6e:bb:3c:a9:fc:
fa:12:49:64:67:31:9b:5f:eb:e2:ec:43:42:20:2f:8f:9d:8c:
ed:d0:60:0d:86:75:cd:53:00:f9:f1:85:d7:39:8c:68:fe:86:
fe:8c:80:b7:0c:81:b8:6e:d9:6b:41:92:16:43:34:bf:67:14:
d0:f9:8c:92:21:10:f9:ae:91:08:a2:7f:ba:df:41:fe:8e:6d:
1e:d4:f3:d3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBd/TMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNjAx
MDMwMDAwWhcNMjMwNjAxMDMwMDAwWjAzMTEwLwYDVQQDEyhlNjMyMjFiMjYwZjMy
ZTAwNTUyM2NhN2Q4YjIxMWQwNzdkNWZiZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjM2AU/JhGwfQVJJsUILI2HVup2meV527i//Yz7fCk/kjW59n
GBu0AXwH3WlkI0vGNmcDBVcZiU89pFKVP3kZdTv6/wDEm4qRaBV74gkXwXloeFNl
g4eRuaDKxFAgGYxzSR/Fg3b48M6Uv3vwXG3Rua57vv4+34sTbq0Om6YqGfwFe+6B
52piC/HMSfnnNO3fVTpnlJEUZocomfao6OiUAUZ02E1MYFwt4B8Pi7Ogmwmr5x5Z
x5t/y3wtvaJrhizxiWa0QLqvNZd8m7gmCbIIai2eyianLFW43dASprADXvQ5ix47
iXmgvlyawtMJ1w7Ex3H/19KvxSEBxhuwpT9EgwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCIRuiEnaoXCK5hE610Ym1yl98OwMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1L2U2MzIyMWIyNjBmMzJlMDA1NTIzY2E3ZDhiMjExZDA3N2Q1ZmJkM2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAcJ8qvhDALZx+fSKa
Ubuln6KxDG2ZNSgfzBLbgcQ8uZcOUAwlBkkeEOY9lrhMvAmSVcKANLvu6f0fJSED
8Nh8cJYIeIQJ3yX6oa9gyjCMQmvbiu3seQT3ktXKhdl2W3jGwhIMC7GslpN472h/
Ly9PLY6ycFLBBRvpVYnlzoTKNJ2nogdpdAOTIX8v255NbuYK0ivTHJMmudr0F4Tj
ReGqDXDYzNChHuAOFHvvDIszc267PKn8+hJJZGcxm1/r4uxDQiAvj52M7dBgDYZ1
zVMA+fGF1zmMaP6G/oyAtwyBuG7Za0GSFkM0v2cU0PmMkiEQ+a6RCKJ/ut9B/o5t
HtTz0w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org