Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/3f1067dd7bdb88b8abd98de5ba23db7fe8694997.roa
File: 3f1067dd7bdb88b8abd98de5ba23db7fe8694997.roa (raw, json)
Hash identifier: g70eSYwRS1TKT3JWXiLNCxtzYsDZkg03OZMsrMa0mEw=
Subject key identifier: 78:95:D0:1A:AF:6B:72:76:2B:3B:1C:67:78:CD:68:C6:AA:7C:77:30
Certificate issuer: /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial: 2A40F8
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/3f1067dd7bdb88b8abd98de5ba23db7fe8694997.roa
Signing time: Tue 06 Feb 2024 15:38:47 +0000
ROA not before: Tue 06 Feb 2024 15:36:47 +0000
ROA not after: Tue 06 Feb 2029 15:36:47 +0000
asID: 7315
IP address blocks: 200.7.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2769144 (0x2a40f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Validity
Not Before: Feb 6 15:36:47 2024 GMT
Not After : Feb 6 15:36:47 2029 GMT
Subject: CN=3f1067dd7bdb88b8abd98de5ba23db7fe8694997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:f3:5c:d4:9c:36:72:3e:e7:ed:67:0d:ea:
e1:6e:44:f3:c9:6a:6f:4c:97:87:2b:0c:dd:73:ae:
ed:e9:3f:09:1c:59:7b:6d:c3:3c:b5:28:5f:44:cd:
27:35:ac:4f:b6:6e:1e:06:8a:93:e0:43:dc:bb:a6:
36:87:fa:c5:30:c6:eb:ae:45:33:60:cc:80:36:2c:
cd:a1:0e:f3:ea:2b:fc:43:f0:7f:bc:91:62:fd:b7:
bf:51:53:03:d9:50:12:1c:3d:61:f6:27:1d:fa:c0:
ba:6d:41:39:e9:6b:72:9e:35:02:c7:7b:e8:22:19:
98:0c:c0:c1:f3:01:b9:f0:fb:19:4a:9e:bb:04:39:
ca:e6:a0:1d:df:8b:67:7f:f3:8f:a5:f4:10:9d:33:
49:03:43:32:ac:5c:28:bf:37:a6:5d:b5:fd:ab:ad:
34:21:de:d8:48:bd:4f:fe:b6:ec:8b:b9:cb:0a:1b:
0c:e9:f9:0d:a1:65:47:dd:97:97:48:98:01:75:19:
12:f8:e8:ce:40:b9:16:3e:e8:77:be:03:45:57:c1:
53:36:69:2d:58:09:52:b6:85:ca:24:2a:fd:17:bf:
d8:d3:ba:66:90:99:e8:86:42:b5:b2:8b:f8:ce:13:
e8:c8:bb:84:38:63:ee:da:14:a5:20:c5:a3:14:17:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:95:D0:1A:AF:6B:72:76:2B:3B:1C:67:78:CD:68:C6:AA:7C:77:30
X509v3 Authority Key Identifier:
keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/3f1067dd7bdb88b8abd98de5ba23db7fe8694997.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.235.0/24
Signature Algorithm: sha256WithRSAEncryption
46:05:ca:3b:90:4a:c2:e6:21:b0:e7:d2:dd:3e:06:cb:f6:6c:
60:f1:3c:50:10:57:51:d6:eb:d9:61:37:78:8c:94:27:5e:12:
48:53:54:4e:fa:3c:05:7e:9d:52:ca:e0:0c:b9:3e:02:57:27:
e0:10:c8:11:f9:06:f7:e1:8c:2b:c8:d6:86:d8:d3:98:52:3e:
b0:98:92:29:16:10:4e:d9:df:be:37:f1:58:ca:4a:65:d7:e3:
81:76:b5:ee:10:65:06:3a:05:f7:c6:ad:06:4e:ca:67:10:09:
25:94:7f:2a:02:e5:c5:65:0b:24:af:9c:e1:e5:af:14:27:d3:
7f:7b:d8:28:57:8a:32:25:44:ca:67:ec:5c:93:ed:ba:f5:7e:
29:b2:72:09:bb:b7:f5:e4:88:9a:9b:41:e7:40:24:97:14:21:
b8:00:ff:ca:d1:c5:51:31:a2:53:37:f5:bc:18:01:7d:5d:ff:
69:27:8a:9b:c0:3a:40:2b:cb:fb:83:44:0e:3f:54:6e:c4:d1:
8a:74:aa:bc:33:9f:31:15:ae:71:1d:ba:c7:a2:f3:e4:36:28:
70:b4:76:36:1a:94:5e:02:a0:8c:3e:01:c0:73:ff:e7:7b:db:
e8:d5:f2:89:ce:eb:c5:a1:57:b5:c8:f4:fd:d1:fe:a1:f0:34:
17:c2:50:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org