Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/4e42a3a8408cf702ee37a2e49b87653c9266465f.roa
File: 4e42a3a8408cf702ee37a2e49b87653c9266465f.roa (raw, json)
Hash identifier: ud7LxiQTZ0tIRgPsh8j03sAhdTPXAeVM+39M9VviL8I=
Subject key identifier: C8:E9:BB:24:8D:3D:E4:DF:C6:B4:E2:20:EB:C9:56:5F:5C:D7:ED:C6
Certificate issuer: /CN=0fd41aeb6fb8aebe0877d653310ce6d90a678fb9
Certificate serial: 0CBB
Authority key identifier: A6:58:88:B0:DB:2B:35:05:6A:2A:8C:70:B6:C0:14:BC:4E:66:9F:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/4e42a3a8408cf702ee37a2e49b87653c9266465f.roa
Signing time: Tue 05 Jul 2022 22:42:46 +0000
ROA not before: Tue 05 Jul 2022 03:00:00 +0000
ROA not after: Fri 05 Jul 2024 03:00:00 +0000
asID: 52341
IP address blocks: 168.196.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3259 (0xcbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fd41aeb6fb8aebe0877d653310ce6d90a678fb9
Validity
Not Before: Jul 5 03:00:00 2022 GMT
Not After : Jul 5 03:00:00 2024 GMT
Subject: CN=4e42a3a8408cf702ee37a2e49b87653c9266465f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:82:27:33:6b:41:b0:20:3c:6c:9e:45:71:
b2:7a:9f:60:cf:19:4b:aa:b9:c8:74:8d:d1:c1:9a:
72:a9:be:fa:88:64:d1:ac:82:c2:61:6c:2a:3e:ea:
bf:a6:9f:66:87:02:db:d8:a0:31:e6:ad:ac:1a:fe:
58:59:21:27:80:2d:5c:d3:ed:a6:35:9a:4a:12:fc:
55:e9:8e:fd:85:c9:f8:1c:78:21:e8:d3:b2:cb:b5:
f3:65:7d:78:3a:fb:d0:29:2a:06:21:f1:b0:be:91:
d1:88:61:72:1e:9e:87:13:81:8b:f7:08:8c:50:b6:
2c:0b:0d:fb:cc:f2:98:c1:83:b0:91:b5:ee:ee:7c:
23:8f:c6:45:03:79:88:e1:0a:52:55:0a:79:6f:82:
5f:d9:e7:7a:33:4f:fd:ee:f0:9e:26:7e:81:c6:03:
42:14:d5:36:24:fc:87:88:a4:d9:a3:5d:cc:6b:91:
ea:fa:dc:0d:34:48:57:12:02:e4:95:e3:cf:9e:31:
05:6e:b7:5e:69:43:8d:7e:63:f5:99:c4:81:12:88:
04:29:22:16:a5:92:f3:c6:8a:26:e2:87:e9:a3:a8:
ef:49:cf:71:d7:0d:8b:e3:14:4c:5f:0a:4e:bf:68:
38:67:3e:a3:a9:83:dd:60:7f:be:e2:18:07:c1:f6:
cb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E9:BB:24:8D:3D:E4:DF:C6:B4:E2:20:EB:C9:56:5F:5C:D7:ED:C6
X509v3 Authority Key Identifier:
keyid:A6:58:88:B0:DB:2B:35:05:6A:2A:8C:70:B6:C0:14:BC:4E:66:9F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/4e42a3a8408cf702ee37a2e49b87653c9266465f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.200.0/22
Signature Algorithm: sha256WithRSAEncryption
50:3f:61:c1:56:6a:0d:3b:9a:49:93:e4:d9:d7:a6:ce:d0:9e:
ba:1a:23:64:05:58:3a:82:cd:ea:4f:a5:0e:3f:9c:db:c6:f1:
c7:88:97:72:e0:49:19:53:96:53:0c:c5:27:60:eb:4d:38:67:
e6:c2:02:3d:c7:78:76:1f:5e:e0:03:8a:06:44:8f:14:c6:b6:
43:06:b6:fc:e0:c6:eb:bc:bb:8f:5a:5b:63:7f:18:cd:8f:66:
1d:dd:fa:03:f2:1f:8c:43:0f:31:7a:8e:a9:04:b8:7b:73:ab:
91:16:52:74:37:5b:bf:66:a3:b6:de:9c:20:7e:f4:d5:fa:77:
ed:e6:ef:45:e1:3b:e2:36:50:21:17:07:d5:e3:b7:63:38:e0:
6c:c8:8e:34:56:06:8e:74:29:c1:8f:90:48:c0:f7:e2:72:e9:
b2:b2:67:f8:ba:d5:57:c7:1f:e5:90:17:84:d6:2f:50:3e:e8:
f8:8a:1b:ee:1d:92:14:4d:7d:2b:dd:74:5d:04:1a:ea:de:6f:
2d:4a:62:3b:b0:6d:3c:7e:d9:96:5e:34:bd:38:69:f1:ea:72:
10:1e:16:9d:8b:54:14:70:56:9d:79:49:a2:b2:db:db:b4:19:
76:42:a1:d9:77:40:ce:26:5f:10:6d:5c:17:93:8b:2b:3f:b8:
d3:ec:91:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org