Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/91b07ff1bcfeb72346c2b423f1ecbd78641e20a1.roa
File: 91b07ff1bcfeb72346c2b423f1ecbd78641e20a1.roa (raw, json)
Hash identifier: o/7tJiVe6ZbRjOoLZ8X5mk0R5pao4EYJnVwYA+SCdNo=
Subject key identifier: DB:1C:83:06:83:A5:CB:7C:B5:75:9B:F6:3E:CF:2E:40:7D:0D:D1:13
Certificate issuer: /CN=14aa226f3e8286e21bf2ec937c2c6159eabfda4f
Certificate serial: 28BE
Authority key identifier: 5B:D5:C5:14:F4:A8:BF:0A:7F:F0:E8:35:13:24:59:EE:24:E8:BF:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/91b07ff1bcfeb72346c2b423f1ecbd78641e20a1.roa
Signing time: Sat 02 Mar 2024 00:34:46 +0000
ROA not before: Sat 02 Mar 2024 00:34:46 +0000
ROA not after: Mon 02 Mar 2026 00:34:46 +0000
asID: 20473
IP address blocks: 2806:419::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10430 (0x28be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14aa226f3e8286e21bf2ec937c2c6159eabfda4f
Validity
Not Before: Mar 2 00:34:46 2024 GMT
Not After : Mar 2 00:34:46 2026 GMT
Subject: CN=91b07ff1bcfeb72346c2b423f1ecbd78641e20a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:89:a2:12:1f:34:d4:81:1c:77:66:32:90:
72:26:61:b8:92:85:7f:f9:81:3a:92:af:7c:67:97:
b7:c0:6b:70:06:20:e6:33:54:4b:db:26:fc:53:01:
f4:c6:3a:84:18:19:90:e2:0f:15:78:b6:ce:60:37:
89:bb:91:25:a4:86:95:bf:ab:b2:09:35:b2:45:7e:
bf:c2:54:60:a9:8b:f5:a6:87:1e:a0:e6:bb:70:81:
61:05:39:ca:65:10:32:77:df:a2:ec:45:58:a0:3a:
cc:36:e4:ec:13:d6:11:92:35:e0:59:9e:83:14:92:
b3:bf:79:1a:19:62:05:93:1a:9a:85:eb:8d:04:8e:
2d:64:9f:3b:2f:40:4f:2e:e3:e6:e1:05:7c:75:78:
13:51:ed:bc:37:04:a3:b8:c3:2b:0f:ea:39:fc:e5:
8d:ec:ff:f4:4b:f4:64:e2:49:42:29:8c:0f:d1:c7:
66:01:ef:65:06:26:74:01:8a:7a:aa:00:5c:8e:67:
7c:f2:39:b0:15:f9:e6:eb:6f:17:ae:1c:90:35:32:
1f:08:7e:6c:a3:6f:bb:da:e2:4d:9a:f2:f9:ad:c3:
52:8e:21:c1:47:e4:7a:fc:31:5e:0c:8b:95:54:ea:
02:65:9b:ee:47:b0:44:73:b9:4b:ae:fa:34:82:fc:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1C:83:06:83:A5:CB:7C:B5:75:9B:F6:3E:CF:2E:40:7D:0D:D1:13
X509v3 Authority Key Identifier:
keyid:5B:D5:C5:14:F4:A8:BF:0A:7F:F0:E8:35:13:24:59:EE:24:E8:BF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/91b07ff1bcfeb72346c2b423f1ecbd78641e20a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:419::/48
Signature Algorithm: sha256WithRSAEncryption
73:5b:88:29:7e:29:90:5f:26:cf:e5:3a:cf:b9:ef:8d:b2:49:
1d:d5:df:2c:a4:c1:d7:e1:82:ce:ec:80:d1:23:15:fc:6d:e0:
60:d2:4a:1e:7a:7b:be:bc:3d:14:98:d3:f9:37:52:f6:ac:ef:
0e:ba:2f:59:e6:fd:c3:a1:79:8e:a7:20:bf:5f:79:57:af:d4:
d6:53:72:46:3b:4f:53:08:2d:9a:0e:c6:a0:9c:f9:47:de:a5:
6d:3a:8f:74:5e:4b:8b:00:cb:03:55:ad:47:ca:03:75:3f:77:
f1:a5:b6:52:3c:4b:62:32:04:a3:f7:d4:97:a0:cb:50:6e:5d:
76:fe:9c:8b:79:f6:ce:33:f0:23:36:7b:9a:f0:ca:3d:6f:b5:
52:2d:b8:ad:bf:79:22:e0:1e:5f:87:87:7f:3d:3f:3d:7d:ff:
db:ae:4a:83:8c:2e:d3:aa:5c:30:6c:02:34:6c:29:4b:3f:0a:
ae:35:54:a0:da:05:99:de:b8:83:96:36:91:f8:f5:48:75:2b:
be:78:f1:19:20:f0:50:0e:08:2a:85:4e:2c:65:c6:c5:60:40:
85:f2:0d:2a:14:63:7c:fd:90:69:bf:a1:2c:24:ef:30:10:f4:
04:b0:45:27:3a:d9:af:bb:73:2c:55:30:50:25:76:74:8c:6d:
0d:6c:9e:8a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICKL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTRh
YTIyNmYzZTgyODZlMjFiZjJlYzkzN2MyYzYxNTllYWJmZGE0ZjAeFw0yNDAzMDIw
MDM0NDZaFw0yNjAzMDIwMDM0NDZaMDMxMTAvBgNVBAMTKDkxYjA3ZmYxYmNmZWI3
MjM0NmMyYjQyM2YxZWNiZDc4NjQxZTIwYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjiomiEh801IEcd2YykHImYbiShX/5gTqSr3xnl7fAa3AGIOYz
VEvbJvxTAfTGOoQYGZDiDxV4ts5gN4m7kSWkhpW/q7IJNbJFfr/CVGCpi/Wmhx6g
5rtwgWEFOcplEDJ336LsRVigOsw25OwT1hGSNeBZnoMUkrO/eRoZYgWTGpqF640E
ji1knzsvQE8u4+bhBXx1eBNR7bw3BKO4wysP6jn85Y3s//RL9GTiSUIpjA/Rx2YB
72UGJnQBinqqAFyOZ3zyObAV+ebrbxeuHJA1Mh8Ifmyjb7va4k2a8vmtw1KOIcFH
5Hr8MV4Mi5VU6gJlm+5HsERzuUuu+jSC/Ca9AgMBAAGjggJeMIICWjAdBgNVHQ4E
FgQU2xyDBoOly3y1dZv2Ps8uQH0N0RMwHwYDVR0jBBgwFoAUW9XFFPSovwp/8Og1
EyRZ7iTov8swDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8xNGFhMjI2
ZjNlODI4NmUyMWJmMmVjOTM3YzJjNjE1OWVhYmZkYTRmLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wZjBmNzU1MS0xZDViLTQ0NzQtYmUxMi1iMDE0YTMz
NzcwZjcvOTFiMDdmZjFiY2ZlYjcyMzQ2YzJiNDIzZjFlY2JkNzg2NDFlMjBhMS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzBmMGY3NTUxLTFkNWItNDQ3NC1iZTEyLWIwMTRh
MzM3NzBmNy8xNGFhMjI2ZjNlODI4NmUyMWJmMmVjOTM3YzJjNjE1OWVhYmZkYTRm
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcAKAYEGQAAMA0GCSqGSIb3DQEBCwUAA4IBAQBzW4gpfimQXybP
5TrPue+Nskkd1d8spMHX4YLO7IDRIxX8beBg0koeenu+vD0UmNP5N1L2rO8Oui9Z
5v3DoXmOpyC/X3lXr9TWU3JGO09TCC2aDsagnPlH3qVtOo90XkuLAMsDVa1HygN1
P3fxpbZSPEtiMgSj99SXoMtQbl12/pyLefbOM/AjNnua8Mo9b7VSLbitv3ki4B5f
h4d/PT89ff/brkqDjC7TqlwwbAI0bClLPwquNVSg2gWZ3riDljaR+PVIdSu+ePEZ
IPBQDggqhU4sZcbFYECF8g0qFGN8/ZBpv6EsJO8wEPQEsEUnOtmvu3MsVTBQJXZ0
jG0NbJ6K
-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:35 2024 by rpki-client on console-fra.rpki-client.org