Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/43135b5437df837acb854d1f6beec9b868056bad.roa
File: 43135b5437df837acb854d1f6beec9b868056bad.roa (raw, json)
Hash identifier: 52198w6GtmDE8ps2KvID0DhSPnmAY7UbUG5/mcMxy/k=
Subject key identifier: 3E:96:D8:CD:D0:1C:4C:B5:B4:60:BD:1C:D2:C5:25:72:30:E3:1A:F5
Certificate issuer: /CN=fd59a2161d14de91096d6cf6cd532d586f95771c
Certificate serial: 0DEAFF
Authority key identifier: 45:61:FF:81:E1:21:65:FD:CB:8B:02:06:F2:A5:43:43:B3:F5:59:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd59a2161d14de91096d6cf6cd532d586f95771c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/43135b5437df837acb854d1f6beec9b868056bad.roa
Signing time: Thu 09 Dec 2021 17:58:22 +0000
ROA not before: Thu 09 Dec 2021 03:00:00 +0000
ROA not after: Fri 03 Jan 2025 03:00:00 +0000
asID: 269924
IP address blocks: 207.191.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912127 (0xdeaff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd59a2161d14de91096d6cf6cd532d586f95771c
Validity
Not Before: Dec 9 03:00:00 2021 GMT
Not After : Jan 3 03:00:00 2025 GMT
Subject: CN=43135b5437df837acb854d1f6beec9b868056bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:74:26:45:f2:6a:8c:df:8c:40:88:bc:f1:bd:
05:42:04:54:96:25:e4:2c:c6:9c:c5:33:9c:95:35:
b6:78:db:14:c9:b3:3b:ef:42:46:38:3b:48:8c:cc:
3d:83:38:63:cb:de:0c:b2:bb:bf:b3:c7:1f:4b:af:
a7:bb:6d:c5:01:4c:fa:e6:85:f8:7c:57:2e:65:09:
72:bd:0c:0e:d3:27:39:19:61:3f:4a:6e:dd:3f:19:
e8:60:d6:be:c5:4b:33:3d:9a:8f:d4:89:0a:b8:f7:
a1:60:70:8a:ff:95:76:d9:ca:10:7f:43:99:7e:c2:
a2:47:14:3e:0e:93:94:65:88:99:89:49:bc:92:20:
33:49:f4:ec:9b:2f:01:46:50:42:d7:64:ae:99:91:
99:eb:5a:40:aa:53:21:ab:a1:da:bf:2b:e1:05:3d:
a9:bd:47:db:08:b0:52:c2:43:ea:bd:f5:22:11:3c:
23:d2:f7:d4:22:e4:e8:ad:d2:72:f1:76:e8:57:a3:
5e:e5:49:01:ad:ae:61:a4:ec:94:2a:9f:2b:25:4b:
4b:d5:59:70:c2:f3:27:8e:46:c1:0a:71:65:cd:28:
e6:30:9b:d1:a3:53:37:63:7f:62:75:de:f2:f6:e0:
46:48:1b:44:60:df:50:57:41:92:12:0a:ac:f6:1c:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:96:D8:CD:D0:1C:4C:B5:B4:60:BD:1C:D2:C5:25:72:30:E3:1A:F5
X509v3 Authority Key Identifier:
keyid:45:61:FF:81:E1:21:65:FD:CB:8B:02:06:F2:A5:43:43:B3:F5:59:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd59a2161d14de91096d6cf6cd532d586f95771c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/43135b5437df837acb854d1f6beec9b868056bad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/fd59a2161d14de91096d6cf6cd532d586f95771c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.191.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c0:98:6c:14:50:e5:b3:ee:12:26:97:4c:16:49:2a:a6:da:
0f:16:53:6a:b9:d2:87:7a:b2:25:d8:85:92:bb:da:8a:42:4b:
b0:b1:ce:df:38:42:a5:31:16:57:dc:e4:34:fb:d5:39:5f:51:
7f:14:c1:34:68:96:93:d9:fe:69:0a:ee:30:96:84:3c:a9:48:
99:5d:62:5b:96:79:6b:0f:c4:b1:fb:6b:c4:be:2f:07:15:50:
79:78:41:22:b6:77:36:ce:09:b6:d2:cd:69:2d:8d:b3:d4:e5:
e4:e0:dc:f9:a2:2d:9a:b4:59:35:80:23:d5:54:3b:8b:f2:00:
88:47:9c:ff:53:1e:96:e6:9a:41:32:a0:01:db:b5:b8:e1:ea:
d6:29:73:67:03:99:46:e1:b5:bd:91:a7:bb:72:fc:77:b2:66:
ae:ec:86:e4:0f:4d:7c:1b:0c:9e:0b:fe:02:9b:cf:98:62:4f:
bc:3c:7f:e7:4c:5c:c9:7b:a3:c0:cc:ef:4e:5b:29:09:2e:68:
d1:fc:7d:bc:c8:5f:aa:c0:bc:52:95:9b:93:be:04:53:a3:62:
f5:35:fd:d0:15:6e:21:58:18:20:6b:fe:1e:35:ea:70:1d:7d:
7a:8b:4d:92:fd:1c:be:b3:03:43:f6:85:90:71:e3:50:74:ec:
1f:84:67:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 21:28:23 2023 by rpki-client on console-ams.rpki-client.org