Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/25d74293ca7e73750dceb6b716be0ab7cef2c15a.roa
File: 25d74293ca7e73750dceb6b716be0ab7cef2c15a.roa (raw, json)
Hash identifier: 2N2PrQk4Q6H5YWEvGvn4exxY6iLf0qkq4YlsLQfkLK4=
Subject key identifier: 24:5B:54:91:B3:EB:C2:30:6B:12:5C:A7:76:F9:27:DA:2C:43:1B:A1
Certificate issuer: /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial: 29A365
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/25d74293ca7e73750dceb6b716be0ab7cef2c15a.roa
Signing time: Tue 06 Feb 2024 15:37:03 +0000
ROA not before: Tue 06 Feb 2024 15:36:47 +0000
ROA not after: Tue 06 Feb 2029 15:36:47 +0000
asID: 263792
IP address blocks: 200.7.201.0/24 maxlen: 24
200.7.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2728805 (0x29a365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Validity
Not Before: Feb 6 15:36:47 2024 GMT
Not After : Feb 6 15:36:47 2029 GMT
Subject: CN=25d74293ca7e73750dceb6b716be0ab7cef2c15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3b:0c:a0:71:5b:d2:17:75:db:97:9f:e8:22:
d1:85:c7:de:a5:5b:3e:34:82:bd:85:ff:6e:25:87:
07:a0:77:74:c7:38:20:95:2e:71:53:0c:c9:38:8f:
4b:e4:9c:8d:66:f6:9a:88:7f:85:de:7e:80:8a:b1:
ba:f2:a2:21:ef:ed:b2:9a:a4:2f:a1:9d:b8:95:ea:
fe:61:b7:f7:bb:d4:c8:a4:8a:95:93:94:79:ee:e6:
fe:00:a5:b9:6e:b7:75:27:ea:1b:76:59:65:74:55:
d9:00:83:5d:ac:73:dd:70:8c:15:1d:59:59:7f:53:
13:22:61:5b:fa:1d:c6:7f:ae:9f:cf:bc:6e:4d:13:
0a:39:11:4d:a6:b4:9d:38:b5:ce:b4:6b:5e:27:89:
29:b9:4d:8a:f2:61:5e:fc:a7:89:c1:49:1c:26:ae:
df:bc:5d:69:c7:fe:2d:8d:06:ec:97:7c:59:1a:00:
3b:9a:61:6c:4f:d5:66:f7:1a:c0:00:58:87:f0:d0:
56:88:15:a1:50:be:1d:c5:f9:42:ca:ba:ce:e3:cc:
c7:89:3d:01:13:5f:07:97:aa:c5:d6:52:66:3c:98:
6a:01:35:f2:d3:61:53:b2:78:5a:27:80:09:af:61:
70:93:31:bc:c9:53:03:6c:01:eb:30:8d:38:46:66:
01:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5B:54:91:B3:EB:C2:30:6B:12:5C:A7:76:F9:27:DA:2C:43:1B:A1
X509v3 Authority Key Identifier:
keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/25d74293ca7e73750dceb6b716be0ab7cef2c15a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.201.0-200.7.202.255
Signature Algorithm: sha256WithRSAEncryption
32:ce:8f:25:4d:dc:ae:67:0b:00:4d:cc:ab:f4:07:63:8f:6d:
37:1d:ef:b6:5d:d6:ab:7d:a8:08:98:bf:a7:84:ce:17:75:b5:
1b:ac:80:69:d5:f1:7e:4b:c2:b8:fa:1a:8a:dd:c8:f9:45:44:
bc:1e:78:b7:21:33:88:6a:de:bf:42:48:28:0d:94:4e:a4:a6:
af:50:ac:af:9c:59:0d:c6:40:15:73:af:63:4a:53:5f:68:a4:
d1:fe:8c:92:75:8e:86:ac:aa:fa:47:00:54:9c:39:48:a5:e6:
76:37:2a:c0:da:79:fa:5a:63:4c:81:15:c8:30:2e:a5:51:5a:
9a:d2:5a:a9:93:7b:b2:2f:de:cf:67:03:23:94:d6:01:ed:2e:
33:4f:a9:dd:0a:d5:8a:be:53:0b:1a:67:5a:34:49:cb:c0:92:
b4:d0:54:5d:79:af:e0:a9:8d:ba:e7:35:2c:8e:99:a3:bf:50:
89:c8:41:d2:44:2d:4e:15:ae:80:c4:1e:02:9f:ce:9e:fc:75:
e7:ad:f8:fd:a4:15:96:a1:46:be:53:6a:17:71:de:67:67:19:
0f:c2:45:43:45:13:0a:76:bb:c3:71:0b:51:e6:6b:50:eb:80:
28:a7:a8:af:22:da:3d:74:3b:c1:d9:17:f8:ee:ac:a7:35:29:
43:01:a4:2a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDKaNlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQz
YTFkZDQwMzViOGQyOWJhNzU2NmM2NDUyOTYzNGZmNjQ3ODNhNGYwHhcNMjQwMjA2
MTUzNjQ3WhcNMjkwMjA2MTUzNjQ3WjAzMTEwLwYDVQQDEygyNWQ3NDI5M2NhN2U3
Mzc1MGRjZWI2YjcxNmJlMGFiN2NlZjJjMTVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgDsMoHFb0hd125ef6CLRhcfepVs+NIK9hf9uJYcHoHd0xzgg
lS5xUwzJOI9L5JyNZvaaiH+F3n6AirG68qIh7+2ymqQvoZ24ler+Ybf3u9TIpIqV
k5R57ub+AKW5brd1J+obdllldFXZAINdrHPdcIwVHVlZf1MTImFb+h3Gf66fz7xu
TRMKORFNprSdOLXOtGteJ4kpuU2K8mFe/KeJwUkcJq7fvF1px/4tjQbsl3xZGgA7
mmFsT9Vm9xrAAFiH8NBWiBWhUL4dxflCyrrO48zHiT0BE18Hl6rF1lJmPJhqATXy
02FTsnhaJ4AJr2FwkzG8yVMDbAHrMI04RmYBZQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFCRbVJGz68IwaxJcp3b5J9osQxuhMB8GA1UdIwQYMBaAFBDAW2YqV0U2UCDx
1vqPWe9NlP7cMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDNhMWRk
NDAzNWI4ZDI5YmE3NTY2YzY0NTI5NjM0ZmY2NDc4M2E0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThhNzQ1MWYtMjYxNy00ZDBmLTllNzUtNmQyYWU5
Y2NmNTY2LzI1ZDc0MjkzY2E3ZTczNzUwZGNlYjZiNzE2YmUwYWI3Y2VmMmMxNWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGE3NDUxZi0yNjE3LTRkMGYtOWU3NS02ZDJh
ZTljY2Y1NjYvNDNhMWRkNDAzNWI4ZDI5YmE3NTY2YzY0NTI5NjM0ZmY2NDc4M2E0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAyAfJAwQAyAfKMA0GCSqGSIb3DQEBCwUAA4IBAQAyzo8l
TdyuZwsATcyr9Adjj203He+2XdarfagImL+nhM4XdbUbrIBp1fF+S8K4+hqK3cj5
RUS8Hni3ITOIat6/QkgoDZROpKavUKyvnFkNxkAVc69jSlNfaKTR/oySdY6GrKr6
RwBUnDlIpeZ2NyrA2nn6WmNMgRXIMC6lUVqa0lqpk3uyL97PZwMjlNYB7S4zT6nd
CtWKvlMLGmdaNEnLwJK00FRdea/gqY265zUsjpmjv1CJyEHSRC1OFa6AxB4Cn86e
/HXnrfj9pBWWoUa+U2oXcd5nZxkPwkVDRRMKdrvDcQtR5mtQ64Aop6ivIto9dDvB
2Rf47qynNSlDAaQq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org