Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/b156bc458b90c078bc451fed6ccd9ad54f4707e8.roa
File: b156bc458b90c078bc451fed6ccd9ad54f4707e8.roa (raw, json)
Hash identifier: FAYMp02SrVMl3UThLFZ5Rn6JXktnmTsvZ+fpTuV3k/s=
Subject key identifier: F3:BB:60:30:D1:72:65:E1:45:B3:0E:D0:FC:29:80:88:5D:98:7F:28
Certificate issuer: /CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
Certificate serial: 277AC7
Authority key identifier: 5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/b156bc458b90c078bc451fed6ccd9ad54f4707e8.roa
Signing time: Thu 15 Feb 2024 18:37:24 +0000
ROA not before: Thu 15 Feb 2024 18:37:24 +0000
ROA not after: Sun 15 Feb 2026 18:37:24 +0000
asID: 14080
IP address blocks: 2800:800:970::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2587335 (0x277ac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
Validity
Not Before: Feb 15 18:37:24 2024 GMT
Not After : Feb 15 18:37:24 2026 GMT
Subject: CN=b156bc458b90c078bc451fed6ccd9ad54f4707e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:76:e4:df:98:1a:0e:0d:19:ee:22:38:0a:
49:2c:e3:2a:cc:d1:7d:d9:85:83:89:ef:26:71:c2:
fd:50:7e:85:f6:f1:02:23:ca:77:ed:52:ff:9a:b0:
e1:ce:ba:3c:5c:28:7e:6a:3e:9e:02:e0:74:5d:87:
b7:49:d5:67:5b:d0:54:f6:8d:01:60:d9:7e:dd:5a:
45:78:6b:95:69:5e:40:ff:09:c8:f6:a8:94:80:5e:
31:51:5b:aa:cb:c5:d5:19:9e:28:e5:54:03:fe:4a:
27:3c:b7:fa:46:b6:fc:d2:59:d7:3a:57:53:b5:a6:
b5:d2:e1:49:8c:fe:77:90:7d:20:88:78:e7:2b:37:
08:00:7b:9a:4b:bc:5c:b8:59:b1:2e:2e:8e:48:72:
8c:a6:79:c0:72:c1:76:01:7c:92:1a:90:c7:da:45:
92:95:da:3a:a5:a7:92:de:4c:fe:e9:b7:14:fd:e0:
93:86:7d:a7:26:a7:ad:ef:d9:9b:5e:ba:44:45:5a:
87:1b:94:79:86:e5:f9:b2:64:88:22:e3:20:b4:8f:
6f:05:2e:2b:27:a2:f9:cf:ba:a6:13:92:f9:7a:b5:
49:9c:26:87:75:af:91:62:d8:d4:7b:db:f7:38:1c:
e3:41:ba:77:ce:4c:76:0b:4c:0b:7f:1a:55:6c:68:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BB:60:30:D1:72:65:E1:45:B3:0E:D0:FC:29:80:88:5D:98:7F:28
X509v3 Authority Key Identifier:
keyid:5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/b156bc458b90c078bc451fed6ccd9ad54f4707e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:800:970::/48
Signature Algorithm: sha256WithRSAEncryption
0e:56:c8:a7:38:2c:ec:d1:31:9d:9f:df:ad:7c:05:a2:d3:48:
57:06:14:97:67:ff:bd:6f:be:2f:e8:8c:a0:37:69:09:af:9f:
a0:01:d8:3f:2c:95:2c:d3:d2:6a:a1:0b:79:1c:8f:d9:44:33:
73:64:8a:0e:35:f0:fc:5e:05:21:e8:f0:60:c4:1a:89:7f:7b:
f1:46:f3:c6:9d:9a:01:53:f3:43:7c:97:74:e2:3a:94:87:76:
8d:20:f6:49:00:6b:13:13:2e:e8:5d:1d:96:ee:08:c5:db:78:
5b:73:ae:fc:a0:75:7a:72:53:2f:33:e6:62:7f:1b:91:ba:b3:
bd:95:78:b5:0f:4f:3c:28:3b:14:7d:39:41:f2:00:1f:bf:c3:
0b:24:7b:b1:93:9c:0b:b6:03:10:d4:9b:5a:05:f5:51:8d:36:
89:dc:8b:7d:41:02:f6:78:40:9e:f4:57:e9:1e:06:5f:5b:c3:
19:1c:50:fc:05:1c:f7:38:65:59:da:6b:73:6e:24:b6:da:b1:
c4:e7:9e:c0:96:db:81:03:48:13:98:3b:31:b0:12:c2:17:f4:
4d:46:79:bc:05:8f:a4:49:d7:0b:82:e0:3d:26:07:1c:21:f1:
a8:71:cc:95:c9:5c:a7:b3:0f:c7:b9:ec:ed:35:3d:49:29:ab:
e6:a8:ee:31
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDJ3rHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE2
OGFjYTk0NWU1YjRlMGZhNTc1YmJlMDNiMWFmNjUxNDZlZjBiNmYwHhcNMjQwMjE1
MTgzNzI0WhcNMjYwMjE1MTgzNzI0WjAzMTEwLwYDVQQDEyhiMTU2YmM0NThiOTBj
MDc4YmM0NTFmZWQ2Y2NkOWFkNTRmNDcwN2U4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmvN25N+YGg4NGe4iOApJLOMqzNF92YWDie8mccL9UH6F9vEC
I8p37VL/mrDhzro8XCh+aj6eAuB0XYe3SdVnW9BU9o0BYNl+3VpFeGuVaV5A/wnI
9qiUgF4xUVuqy8XVGZ4o5VQD/konPLf6Rrb80lnXOldTtaa10uFJjP53kH0giHjn
KzcIAHuaS7xcuFmxLi6OSHKMpnnAcsF2AXySGpDH2kWSldo6paeS3kz+6bcU/eCT
hn2nJqet79mbXrpERVqHG5R5huX5smSIIuMgtI9vBS4rJ6L5z7qmE5L5erVJnCaH
da+RYtjUe9v3OBzjQbp3zkx2C0wLfxpVbGg56wIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFPO7YDDRcmXhRbMO0PwpgIhdmH8oMB8GA1UdIwQYMBaAFFxQ5QNp/Z+ZppL2
iLlivHesiqnLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTY4YWNh
OTQ1ZTViNGUwZmE1NzViYmUwM2IxYWY2NTE0NmVmMGI2Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTgyMTgwNmMtMGU4Mi00MjA0LThiM2MtZGRlN2Mw
ZmM4ZDYyL2IxNTZiYzQ1OGI5MGMwNzhiYzQ1MWZlZDZjY2Q5YWQ1NGY0NzA3ZTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xODIxODA2Yy0wZTgyLTQyMDQtOGIzYy1kZGU3
YzBmYzhkNjIvYTY4YWNhOTQ1ZTViNGUwZmE1NzViYmUwM2IxYWY2NTE0NmVmMGI2
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgACAAJcDANBgkqhkiG9w0BAQsFAAOCAQEADlbIpzgs7NEx
nZ/frXwFotNIVwYUl2f/vW++L+iMoDdpCa+foAHYPyyVLNPSaqELeRyP2UQzc2SK
DjXw/F4FIejwYMQaiX978Ubzxp2aAVPzQ3yXdOI6lId2jSD2SQBrExMu6F0dlu4I
xdt4W3Ou/KB1enJTLzPmYn8bkbqzvZV4tQ9PPCg7FH05QfIAH7/DCyR7sZOcC7YD
ENSbWgX1UY02idyLfUEC9nhAnvRX6R4GX1vDGRxQ/AUc9zhlWdprc24kttqxxOee
wJbbgQNIE5g7MbASwhf0TUZ5vAWPpEnXC4LgPSYHHCHxqHHMlclcp7MPx7ns7TU9
SSmr5qjuMQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org