Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/153d1df2fe4465a5aac16b072d7b5633f05baa30.roa
File: 153d1df2fe4465a5aac16b072d7b5633f05baa30.roa (raw, json)
Hash identifier: fXKZr+eAQGSA83gWZYGTBM++VrI7UYzhG2mv2dZIL/M=
Subject key identifier: B1:43:3F:29:61:A4:BC:43:61:06:F2:9C:D0:CE:09:2B:B6:CD:A9:6F
Certificate issuer: /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial: 29D004
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/153d1df2fe4465a5aac16b072d7b5633f05baa30.roa
Signing time: Tue 06 Feb 2024 15:37:21 +0000
ROA not before: Tue 06 Feb 2024 15:36:47 +0000
ROA not after: Tue 06 Feb 2029 15:36:47 +0000
asID: 19114
IP address blocks: 200.7.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2740228 (0x29d004)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Validity
Not Before: Feb 6 15:36:47 2024 GMT
Not After : Feb 6 15:36:47 2029 GMT
Subject: CN=153d1df2fe4465a5aac16b072d7b5633f05baa30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:a9:fb:34:33:f6:71:19:44:3d:9a:34:dd:
83:5e:4c:8e:86:bf:5c:66:20:fb:ef:e7:fb:ce:c8:
95:ac:5a:c1:06:f0:9c:80:ab:e3:01:de:33:11:84:
18:b1:8e:43:08:38:0c:5f:45:6b:3f:f1:cd:28:65:
ae:fc:c3:f8:99:f4:b1:c7:fa:17:6d:63:3f:eb:6e:
5e:cd:75:40:5e:06:44:dc:e9:7a:6e:42:4c:27:41:
fd:8f:18:56:69:78:d6:5d:ea:e5:55:81:5c:55:43:
a0:06:0a:c9:13:84:5b:49:52:39:f9:87:8c:1f:66:
7d:8f:93:9e:75:e0:44:e2:02:7f:6f:a1:19:38:ba:
d3:d3:a7:3f:9a:a6:3e:2d:f7:de:b4:23:d9:51:c4:
6f:20:a8:79:b2:07:ba:f4:e4:46:60:8c:19:87:9c:
2c:db:00:25:c7:5d:6c:41:ca:c0:c0:f2:b8:8a:c8:
50:7f:52:b0:71:e8:35:bf:94:62:44:8e:ec:72:dd:
73:30:d1:9c:fa:70:19:2a:4f:61:ba:5d:b3:aa:d1:
0f:f7:cf:18:15:d7:f8:7e:8b:dd:1d:18:b7:42:1d:
7e:62:c2:57:cf:bd:e4:fe:79:3b:1e:df:d5:d0:00:
c7:28:a9:75:92:42:f8:08:69:97:a1:63:1d:23:c8:
0d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:43:3F:29:61:A4:BC:43:61:06:F2:9C:D0:CE:09:2B:B6:CD:A9:6F
X509v3 Authority Key Identifier:
keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/153d1df2fe4465a5aac16b072d7b5633f05baa30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.209.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f4:70:07:30:83:65:01:81:01:70:44:ee:24:f7:08:81:c0:
48:a0:a0:91:2b:3b:47:40:b5:f8:ff:5b:eb:14:e3:d9:ca:bc:
87:16:27:82:1e:d5:ed:9b:bf:18:16:f3:e7:9f:b7:78:48:1b:
ad:2b:8f:46:f9:a3:e4:42:b6:f9:b9:a0:48:29:34:ea:ab:81:
04:0f:6d:39:08:a6:00:1d:e0:ee:a0:18:dd:ba:6d:3d:2b:59:
7f:c8:1a:7a:a0:f6:46:c9:66:24:87:0b:b0:86:51:8b:76:dc:
1e:87:89:08:2b:05:3e:c8:49:54:08:28:86:bf:8d:24:3c:2c:
08:04:14:09:55:fa:35:0b:02:d0:91:80:73:ec:29:7b:0b:33:
bf:75:1d:f7:04:96:bb:c6:33:5f:a1:ad:c3:5c:b2:1c:ce:a4:
2d:a4:9a:0a:e4:1a:ee:8b:a9:53:59:cd:e9:7a:55:b2:64:0f:
3a:1a:11:3b:ec:2c:bc:31:0b:bf:d5:66:05:a1:9a:73:25:b7:
39:80:9e:e1:c7:23:ff:f5:6f:51:c1:40:d4:1c:19:51:72:41:
ae:cd:7b:be:38:ff:85:15:71:75:ce:b2:36:74:ef:f3:07:73:
b4:8d:66:4d:93:f9:ab:0c:96:a3:7a:51:81:50:2c:4e:8f:b8:
76:42:c1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org