Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99b195d2-4b5c-4a9f-9798-4218af4719ae/43abe658c7dde8e24013f7e713b7ed4f643f8d85.roa
File: 43abe658c7dde8e24013f7e713b7ed4f643f8d85.roa (raw, json)
Hash identifier: 5NWF8j1ZUHgRJG37OLH/7XD2yLuNLbtfYpUPoLQKlP8=
Subject key identifier: 31:ED:F5:38:FF:CE:24:D1:AD:CB:34:D3:B3:0C:F0:6B:95:AA:BE:7B
Certificate issuer: /CN=ef39354a5f38be4ee9b8d3bedf0268e6d321dbe4
Certificate serial: 20AFC9
Authority key identifier: E0:AD:97:2A:32:EC:3F:13:D6:08:8D:F0:11:88:38:BC:17:33:25:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef39354a5f38be4ee9b8d3bedf0268e6d321dbe4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/99b195d2-4b5c-4a9f-9798-4218af4719ae/43abe658c7dde8e24013f7e713b7ed4f643f8d85.roa
Signing time: Fri 05 Jan 2024 19:48:51 +0000
ROA not before: Fri 05 Jan 2024 19:48:51 +0000
ROA not after: Mon 05 Jan 2026 19:48:51 +0000
asID: 27947
IP address blocks: 200.7.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2142153 (0x20afc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef39354a5f38be4ee9b8d3bedf0268e6d321dbe4
Validity
Not Before: Jan 5 19:48:51 2024 GMT
Not After : Jan 5 19:48:51 2026 GMT
Subject: CN=43abe658c7dde8e24013f7e713b7ed4f643f8d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:11:a3:4a:3f:72:80:28:a3:ec:85:31:a5:
00:9c:8c:4c:c8:89:29:09:c1:4d:41:d2:af:6a:fb:
23:7c:ab:3a:0c:92:d1:2e:0f:90:66:28:a9:d3:4a:
bf:47:d3:fb:ce:24:e2:b8:62:e3:2b:1e:c0:6c:a3:
e1:54:c4:32:ae:76:c6:a7:09:52:3c:a1:46:8e:0b:
ae:2a:58:60:9b:a6:45:d4:f7:13:a1:c9:a9:2f:ae:
3d:87:26:ab:81:a7:6e:75:0c:93:7a:0d:c7:e6:63:
69:0e:4e:2c:d1:97:06:2d:74:2e:65:96:ac:5d:68:
fb:95:b9:6a:58:47:bc:80:9c:3c:ce:55:e5:b3:43:
4f:0b:08:c4:2d:91:7b:fe:de:00:cb:51:1d:86:ce:
00:3c:3a:37:b1:cd:30:98:da:15:1e:27:9f:d6:1e:
18:66:b0:17:d7:b4:b3:19:b8:2e:7f:2f:ca:c8:cd:
8b:3f:26:44:ec:5a:7d:c7:20:8f:c8:13:37:17:33:
3f:eb:31:cc:6a:ce:27:28:ba:bc:78:d5:0b:95:53:
c4:92:d1:66:7b:38:e9:52:fe:a4:c3:4c:56:e5:63:
31:12:4a:ff:22:86:14:81:08:57:eb:94:48:e8:f2:
8d:81:b9:54:3d:1c:c6:fb:5d:50:6c:ca:50:2b:d2:
39:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:ED:F5:38:FF:CE:24:D1:AD:CB:34:D3:B3:0C:F0:6B:95:AA:BE:7B
X509v3 Authority Key Identifier:
keyid:E0:AD:97:2A:32:EC:3F:13:D6:08:8D:F0:11:88:38:BC:17:33:25:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef39354a5f38be4ee9b8d3bedf0268e6d321dbe4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99b195d2-4b5c-4a9f-9798-4218af4719ae/43abe658c7dde8e24013f7e713b7ed4f643f8d85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/99b195d2-4b5c-4a9f-9798-4218af4719ae/ef39354a5f38be4ee9b8d3bedf0268e6d321dbe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.82.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a3:6c:91:ee:75:25:13:22:2c:2e:8b:5b:7c:c9:5e:a6:01:
4a:d1:e7:e9:4a:ef:86:7e:e1:f7:e3:d0:f4:80:91:17:fd:66:
7c:cf:e6:8a:89:a0:6a:ea:07:31:41:76:c2:27:d1:0e:9f:91:
bd:4e:81:47:a8:56:a4:91:57:d6:1d:33:69:7e:2f:06:1b:7d:
42:5b:13:44:e9:19:2f:1b:25:4a:13:b1:f5:b0:47:e6:59:41:
5b:71:b8:3f:34:42:87:ef:cb:95:5f:38:da:e6:d0:c5:51:7c:
f9:b9:91:54:d7:37:80:78:68:aa:7a:91:1e:36:5a:55:47:ca:
54:e7:9d:ca:77:d9:a5:33:02:af:b4:a9:74:f3:cb:8c:08:b7:
58:56:72:3f:9c:64:54:0d:5e:44:2d:c4:26:66:6b:82:64:d1:
34:b7:5d:bf:97:cb:17:92:c9:1d:22:21:c4:c9:12:8c:91:18:
67:d8:e7:d6:f2:2d:49:e0:d1:dd:6b:8e:39:71:f0:79:db:bc:
60:2d:12:c9:4a:0c:fc:64:51:9e:79:61:28:95:dd:b3:86:c0:
90:fc:44:aa:78:c2:35:65:97:6c:dc:6f:4e:7e:0b:1e:1d:2e:
1a:04:c3:53:81:20:e3:29:12:ba:d6:a8:de:39:70:31:e8:d0:
41:ac:d4:6e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIK/JMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVm
MzkzNTRhNWYzOGJlNGVlOWI4ZDNiZWRmMDI2OGU2ZDMyMWRiZTQwHhcNMjQwMTA1
MTk0ODUxWhcNMjYwMTA1MTk0ODUxWjAzMTEwLwYDVQQDEyg0M2FiZTY1OGM3ZGRl
OGUyNDAxM2Y3ZTcxM2I3ZWQ0ZjY0M2Y4ZDg1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx2kRo0o/coAoo+yFMaUAnIxMyIkpCcFNQdKvavsjfKs6DJLR
Lg+QZiip00q/R9P7ziTiuGLjKx7AbKPhVMQyrnbGpwlSPKFGjguuKlhgm6ZF1PcT
ocmpL649hyargadudQyTeg3H5mNpDk4s0ZcGLXQuZZasXWj7lblqWEe8gJw8zlXl
s0NPCwjELZF7/t4Ay1Edhs4APDo3sc0wmNoVHief1h4YZrAX17SzGbgufy/KyM2L
PyZE7Fp9xyCPyBM3FzM/6zHMas4nKLq8eNULlVPEktFmezjpUv6kw0xW5WMxEkr/
IoYUgQhX65RI6PKNgblUPRzG+11QbMpQK9I5aQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDHt9Tj/ziTRrcs007MM8GuVqr57MB8GA1UdIwQYMBaAFOCtlyoy7D8T1giN
8BGIOLwXMyXTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWYzOTM1
NGE1ZjM4YmU0ZWU5YjhkM2JlZGYwMjY4ZTZkMzIxZGJlNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTliMTk1ZDItNGI1Yy00YTlmLTk3OTgtNDIxOGFm
NDcxOWFlLzQzYWJlNjU4YzdkZGU4ZTI0MDEzZjdlNzEzYjdlZDRmNjQzZjhkODUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85OWIxOTVkMi00YjVjLTRhOWYtOTc5OC00MjE4
YWY0NzE5YWUvZWYzOTM1NGE1ZjM4YmU0ZWU5YjhkM2JlZGYwMjY4ZTZkMzIxZGJl
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgHUjANBgkqhkiG9w0BAQsFAAOCAQEAWKNske51JRMiLC6L
W3zJXqYBStHn6Urvhn7h9+PQ9ICRF/1mfM/miomgauoHMUF2wifRDp+RvU6BR6hW
pJFX1h0zaX4vBht9QlsTROkZLxslShOx9bBH5llBW3G4PzRCh+/LlV842ubQxVF8
+bmRVNc3gHhoqnqRHjZaVUfKVOedynfZpTMCr7SpdPPLjAi3WFZyP5xkVA1eRC3E
JmZrgmTRNLddv5fLF5LJHSIhxMkSjJEYZ9jn1vItSeDR3WuOOXHwedu8YC0SyUoM
/GRRnnlhKJXds4bAkPxEqnjCNWWXbNxvTn4LHh0uGgTDU4Eg4ykSutao3jlwMejQ
QazUbg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org