Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f521189672c65eb079d021fa9e04b8d3dc7976be.roa
File: f521189672c65eb079d021fa9e04b8d3dc7976be.roa (raw, json)
Hash identifier: CjfDrHHIZNxCvDdaK7kWcGmpSaMcUFc9TLQtgCZGv24=
Subject key identifier: 11:5B:94:DA:57:5E:9A:00:9A:5D:98:92:F8:87:47:9D:D9:B5:CE:CF
Certificate issuer: /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial: 02B1DA
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f521189672c65eb079d021fa9e04b8d3dc7976be.roa
Signing time: Mon 21 Mar 2022 05:36:12 +0000
ROA not before: Mon 21 Mar 2022 03:00:00 +0000
ROA not after: Tue 21 Mar 2023 03:00:00 +0000
asID: 3970
IP address blocks: 201.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176602 (0x2b1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Validity
Not Before: Mar 21 03:00:00 2022 GMT
Not After : Mar 21 03:00:00 2023 GMT
Subject: CN=f521189672c65eb079d021fa9e04b8d3dc7976be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:ab:f4:39:f7:9b:0b:e8:2f:f1:cb:22:8d:
36:2f:ae:8a:5e:d2:21:fe:bf:05:cd:33:64:0b:b3:
8d:96:fe:1b:a9:9e:f2:63:10:01:cb:c1:a2:d2:54:
41:c9:60:72:07:a9:c6:87:7e:e3:e3:8b:1f:59:c1:
96:f5:e6:1f:db:77:ce:88:2d:51:8f:89:80:7b:2a:
a4:6b:e6:2d:3e:f1:41:21:f8:56:31:1a:93:9b:a0:
b7:cf:e6:3f:66:17:58:46:b3:ef:6b:b7:37:bc:5f:
30:89:08:15:6e:f8:d8:8b:97:31:d7:68:98:b5:ef:
09:69:07:66:05:c1:15:5b:6d:47:9e:3f:b5:f5:6a:
87:0e:02:42:2f:cd:7d:9e:d2:33:52:c9:24:2c:a8:
e2:a1:df:af:42:03:32:d4:13:66:fd:b2:af:8f:8d:
80:7e:12:f0:e2:78:3a:6f:ff:6a:83:ae:b6:a8:a7:
b9:f9:93:91:26:30:2b:a5:b5:29:a1:d4:ad:7f:42:
18:68:24:3a:23:4e:95:d8:70:b8:1d:b6:3a:4f:c2:
38:81:45:82:39:02:bb:71:7f:d5:3f:9b:07:20:14:
a9:e4:c6:79:fc:66:1e:b1:15:e0:aa:c8:ba:73:8d:
c1:1f:a3:ca:81:76:14:b7:41:2d:15:9d:9a:7c:3a:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5B:94:DA:57:5E:9A:00:9A:5D:98:92:F8:87:47:9D:D9:B5:CE:CF
X509v3 Authority Key Identifier:
keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f521189672c65eb079d021fa9e04b8d3dc7976be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
42:58:21:3e:86:bb:6e:16:ba:56:e6:67:77:1d:ea:9a:3b:ef:
bd:29:9f:69:c0:ff:7c:fc:88:c3:ff:e0:de:35:42:e3:38:78:
39:df:3d:44:de:22:0b:e0:b2:ff:50:69:a4:9b:9b:2b:c8:32:
f8:f9:bd:a1:f4:b1:0f:ed:f8:e1:7e:23:72:77:8a:b8:ca:68:
44:38:74:34:68:cf:a8:d7:0d:d6:29:b6:62:00:38:76:b8:5b:
2f:0d:e5:07:69:e4:22:85:a8:f3:dd:84:cb:be:5e:78:99:04:
52:c4:bb:42:eb:3c:b1:6b:01:dd:a6:73:20:f6:28:98:7b:72:
b6:98:75:fa:cd:5c:d0:22:2e:f1:97:7e:4c:43:8a:c1:a5:6e:
ae:9c:b0:ac:09:5e:54:a3:bd:45:50:17:30:05:b7:94:5e:70:
f0:c5:5d:d3:d0:3d:8f:e6:ce:5b:2c:48:76:aa:89:e3:8a:21:
69:97:8c:f2:09:9c:a0:9a:af:c5:3d:ba:89:a3:c6:b2:ca:9f:
4e:54:d6:80:2d:2e:47:1e:87:53:88:29:b4:ab:3f:88:50:7b:
ae:65:56:c7:92:02:5c:c0:49:c0:b9:66:c4:aa:e5:c1:a2:b6:
61:7d:da:f7:20:5f:1a:ca:28:0f:a2:26:2e:c2:8b:73:21:28:
5a:1a:72:09
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDArHaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwMzIx
MDMwMDAwWhcNMjMwMzIxMDMwMDAwWjAzMTEwLwYDVQQDEyhmNTIxMTg5NjcyYzY1
ZWIwNzlkMDIxZmE5ZTA0YjhkM2RjNzk3NmJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxcqr9Dn3mwvoL/HLIo02L66KXtIh/r8FzTNkC7ONlv4bqZ7y
YxABy8Gi0lRByWByB6nGh37j44sfWcGW9eYf23fOiC1Rj4mAeyqka+YtPvFBIfhW
MRqTm6C3z+Y/ZhdYRrPva7c3vF8wiQgVbvjYi5cx12iYte8JaQdmBcEVW21Hnj+1
9WqHDgJCL819ntIzUskkLKjiod+vQgMy1BNm/bKvj42AfhLw4ng6b/9qg662qKe5
+ZORJjArpbUpodStf0IYaCQ6I06V2HC4HbY6T8I4gUWCOQK7cX/VP5sHIBSp5MZ5
/GYesRXgqsi6c43BH6PKgXYUt0EtFZ2afDpmdwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBFblNpXXpoAml2YkviHR53Ztc7PMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1L2Y1MjExODk2NzJjNjVlYjA3OWQwMjFmYTllMDRiOGQzZGM3OTc2YmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAQlghPoa7bha6VuZn
dx3qmjvvvSmfacD/fPyIw//g3jVC4zh4Od89RN4iC+Cy/1BppJubK8gy+Pm9ofSx
D+344X4jcneKuMpoRDh0NGjPqNcN1im2YgA4drhbLw3lB2nkIoWo892Ey75eeJkE
UsS7Qus8sWsB3aZzIPYomHtytph1+s1c0CIu8Zd+TEOKwaVurpywrAleVKO9RVAX
MAW3lF5w8MVd09A9j+bOWyxIdqqJ44ohaZeM8gmcoJqvxT26iaPGssqfTlTWgC0u
Rx6HU4gptKs/iFB7rmVWx5ICXMBJwLlmxKrlwaK2YX3a9yBfGsooD6ImLsKLcyEo
WhpyCQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org