Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/43a2605009e1bf5299e80f7251455560f996f9f4.roa
File: 43a2605009e1bf5299e80f7251455560f996f9f4.roa (raw, json)
Hash identifier: upy2wztUj18fUCnXObOic+srDvjtPy89r+WYDBr3Uww=
Subject key identifier: C4:DC:EE:24:33:18:B6:CD:BB:BA:DD:B3:0D:51:02:1F:2E:61:0D:63
Certificate issuer: /CN=bfa1a6cea5071fa02d7426401f14b3d6b3d0da83
Certificate serial: 066278
Authority key identifier: 3A:13:D5:51:2E:F7:7C:6A:F8:FA:C3:BE:15:8C:AD:91:7C:C0:39:34
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/43a2605009e1bf5299e80f7251455560f996f9f4.roa
Signing time: Mon 04 Dec 2023 07:36:23 +0000
ROA not before: Mon 04 Dec 2023 07:36:23 +0000
ROA not after: Mon 04 Dec 2028 07:36:23 +0000
asID: 271908
IP address blocks: 131.255.17.0/24 maxlen: 24
131.255.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418424 (0x66278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa1a6cea5071fa02d7426401f14b3d6b3d0da83
Validity
Not Before: Dec 4 07:36:23 2023 GMT
Not After : Dec 4 07:36:23 2028 GMT
Subject: CN=43a2605009e1bf5299e80f7251455560f996f9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7a:5a:40:e2:3f:a2:2c:9e:f4:02:bb:3b:bd:
e6:a1:81:b3:66:5b:b5:23:95:1a:4f:3d:13:e7:7e:
9a:1e:eb:d5:c2:7e:20:31:2b:0e:83:b6:2a:9e:54:
a1:47:29:73:f7:b6:8e:63:9f:41:ae:0a:f7:29:cd:
c5:8a:77:f5:5f:0c:dd:67:cf:ad:79:15:cd:bf:03:
d5:4a:22:e3:c9:ed:60:22:b4:4d:46:53:cf:0b:57:
1b:93:b8:2c:33:81:09:ad:72:cf:e6:c7:e4:a0:60:
88:a8:0a:d3:af:56:15:84:1c:ef:00:b8:81:ea:45:
eb:dd:3d:95:33:31:5b:a5:e1:10:07:df:a9:ea:31:
62:2d:2c:d0:78:9e:61:d9:11:b3:d5:b4:ee:24:16:
32:76:52:33:5c:80:20:3d:2d:4c:e9:bf:2e:7e:94:
78:3b:ff:85:0d:4d:57:e4:7d:f4:6f:ad:e1:6a:94:
d9:46:07:b6:df:44:75:7a:ae:c2:26:ea:8c:d6:64:
95:f9:a0:1c:50:13:8c:04:6c:11:23:2d:d2:95:e9:
37:f5:f7:ae:33:5e:a2:05:ed:4b:6b:c0:09:13:fe:
c9:40:94:2f:12:9e:e2:c9:02:f7:9c:c9:3d:d0:1e:
3f:82:78:37:c9:73:9f:04:73:85:da:e0:69:2e:f4:
69:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DC:EE:24:33:18:B6:CD:BB:BA:DD:B3:0D:51:02:1F:2E:61:0D:63
X509v3 Authority Key Identifier:
keyid:3A:13:D5:51:2E:F7:7C:6A:F8:FA:C3:BE:15:8C:AD:91:7C:C0:39:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/43a2605009e1bf5299e80f7251455560f996f9f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.17.0-131.255.19.255
Signature Algorithm: sha256WithRSAEncryption
26:7f:56:ff:69:3a:e2:6b:b0:db:4c:5c:49:3f:f9:dd:0e:f4:
e0:2f:21:c3:6f:14:11:ab:a1:37:a6:da:b4:5b:aa:f1:c2:7a:
a5:62:60:40:cd:cc:1c:27:d8:ef:d5:f2:58:09:20:55:30:96:
20:bd:df:11:dd:bf:76:6d:4f:01:95:6b:cc:2e:6f:00:bb:4a:
be:76:d1:2a:9c:57:75:35:a9:53:f7:f3:dc:6b:52:ff:a6:fd:
82:73:75:9d:11:4e:87:2f:dd:c6:17:ff:02:a9:ca:90:ca:53:
7e:5b:f3:39:37:24:fd:8c:a1:9d:16:96:37:b9:bd:c0:db:e8:
77:79:4d:78:89:f8:59:06:d9:90:8f:8c:02:0f:9d:43:55:43:
dd:1e:36:b4:51:50:7d:fb:d9:67:49:4c:f9:f8:d9:23:32:96:
1c:8d:55:9e:34:a2:1d:53:ae:e4:a4:7e:dc:bd:da:fe:45:15:
c3:4c:6c:73:e3:6b:41:1b:21:b5:2d:2f:65:d7:99:fe:75:a6:
92:d9:b1:e8:de:24:95:00:43:d2:00:7d:c1:42:8b:c0:25:12:
73:5c:9a:8b:32:8e:dc:eb:a0:e5:1d:69:c4:c2:60:86:02:ca:
d8:7e:2c:1f:37:13:db:2e:c1:75:5d:d5:70:13:67:e6:55:93:
70:a7:1b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 12:25:36 2023 by rpki-client on console-ams.rpki-client.org