Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/035c67a00fe5afb746ef7819311c3922abb10bda.roa
File: 035c67a00fe5afb746ef7819311c3922abb10bda.roa (raw, json)
Hash identifier: onLWaB97eSCKkEGanfVKuUN3eXGmp+TBPioMncwK3LM=
Subject key identifier: A0:C6:FF:70:60:67:E3:02:FA:CD:38:A7:E6:B5:92:20:CE:D4:30:45
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2DA31F
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/035c67a00fe5afb746ef7819311c3922abb10bda.roa
Signing time: Thu 07 Dec 2023 12:42:14 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 265877
IP address blocks: 200.43.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2990879 (0x2da31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=035c67a00fe5afb746ef7819311c3922abb10bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:f9:85:b5:5f:e9:1f:7d:d7:f2:9b:52:8a:
0e:96:c5:4f:e0:0b:c2:7c:93:4a:9b:fa:f2:6f:a5:
d7:f3:bc:d9:bf:d0:17:b9:41:0c:fb:40:f9:bb:f9:
48:74:38:9c:ca:38:b5:c4:b8:c8:aa:24:50:a5:38:
a7:fd:99:d2:71:1b:d3:85:52:70:a0:c2:94:07:8f:
30:ad:a0:3b:15:90:0e:da:95:db:8b:9d:b3:d5:e8:
d0:fd:89:ef:4d:3d:27:5f:c7:48:94:00:60:43:e2:
aa:9c:78:a5:9c:4f:0c:4c:b1:3d:ad:eb:81:1b:67:
85:3e:6a:bd:9c:c3:5a:b2:f7:54:4e:e0:86:11:ca:
92:bb:6a:b0:ad:6d:2d:7b:71:e7:15:fe:b6:0c:96:
13:e8:94:ed:1b:2f:0c:92:77:76:ab:ea:2c:c6:1d:
0a:91:70:dd:5c:1c:3f:30:f3:77:c3:14:44:0a:a4:
b4:e2:9c:20:83:99:05:6c:ad:f3:76:99:a5:54:62:
ce:50:dd:31:43:40:1c:ba:aa:e5:11:93:05:1e:05:
a8:fd:c3:05:c8:fd:88:c0:a8:e7:a3:5c:21:9e:b9:
78:66:6e:82:3b:48:97:60:f0:1d:f7:85:66:ef:31:
2c:fe:f4:ba:a8:76:7d:33:bb:bd:43:0f:1f:b0:01:
e9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C6:FF:70:60:67:E3:02:FA:CD:38:A7:E6:B5:92:20:CE:D4:30:45
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/035c67a00fe5afb746ef7819311c3922abb10bda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.43.223.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f6:88:f0:40:0b:9d:11:40:99:54:6a:40:ee:b4:4e:58:7d:
fc:f2:52:db:21:cf:48:4d:b3:de:24:d2:33:e0:0f:9a:f6:81:
15:7f:1c:59:49:78:0e:2b:1b:9b:13:8f:c3:1e:2a:1b:a2:ca:
03:ff:8c:85:e1:f7:e2:41:68:a3:e8:d3:7c:33:50:b6:fd:8c:
c9:d2:07:64:36:d0:a4:67:12:6a:70:28:51:5f:16:a9:df:32:
5e:46:4c:45:e8:44:53:10:69:a5:4a:b8:39:05:30:58:a8:c7:
83:a2:2d:1e:ba:f2:e7:bf:c9:82:33:c6:97:e6:92:b4:eb:9e:
04:61:9d:c0:ae:73:fa:a9:fa:e0:2f:8d:1f:2e:ea:ba:46:74:
8d:68:a2:0a:af:42:5c:ff:88:2b:04:d1:c7:58:c4:12:4e:32:
08:ea:25:22:9f:0e:99:76:ee:2f:c1:15:19:e3:a7:ee:32:9c:
0c:18:d9:92:89:6f:bb:5f:12:ed:04:1b:a0:77:24:48:65:09:
9d:d9:cf:ce:b3:93:dc:a5:f2:0d:09:ef:b4:b3:f9:ba:a4:b7:
a0:ad:de:3c:9e:a2:0b:4f:85:f9:ec:74:1d:dc:b7:e8:28:ec:
93:b3:af:eb:93:0c:04:7a:b0:f2:74:df:f2:9d:5d:85:18:bf:
f9:5d:41:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org