Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5c4b0cbe-d923-4a1b-8166-eb9b84398ccd/ecb41270c577143596d52ca9d6bf1f1611bc1f18.roa
File: ecb41270c577143596d52ca9d6bf1f1611bc1f18.roa (raw, json)
Hash identifier: qoetuxvMcJ8HOePp5rjg/4HmCwCk0Gnd7irxTjAPSFs=
Subject key identifier: 00:B8:F3:9E:C6:5D:5A:5E:E8:2A:D6:F3:7D:85:F6:12:BE:59:C3:45
Certificate issuer: /CN=a4cd8b3b1ed64faa792f1a7c857c169d8e5c4067
Certificate serial: 99
Authority key identifier: C6:B0:16:87:4F:9F:72:2B:5D:95:07:39:75:8C:7A:D7:38:13:C6:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a4cd8b3b1ed64faa792f1a7c857c169d8e5c4067.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5c4b0cbe-d923-4a1b-8166-eb9b84398ccd/ecb41270c577143596d52ca9d6bf1f1611bc1f18.roa
Signing time: Mon 29 Nov 2021 15:08:28 +0000
ROA not before: Mon 29 Nov 2021 03:00:00 +0000
ROA not after: Wed 29 Nov 2023 03:00:00 +0000
asID: 19429
IP address blocks: 2801:121::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cd8b3b1ed64faa792f1a7c857c169d8e5c4067
Validity
Not Before: Nov 29 03:00:00 2021 GMT
Not After : Nov 29 03:00:00 2023 GMT
Subject: CN=ecb41270c577143596d52ca9d6bf1f1611bc1f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:be:97:63:d3:28:58:ef:a3:53:c0:ef:6c:
eb:40:8f:89:94:62:28:1e:47:d2:41:5f:1d:63:55:
50:7d:7c:60:eb:06:17:d3:05:d6:dd:2c:66:28:3e:
6c:cf:0f:aa:d3:4a:dd:28:34:27:1a:54:30:ac:8b:
b2:ea:0b:0d:ed:a7:f0:89:b8:a9:8d:3a:b8:1d:8a:
ea:83:67:b3:19:c9:10:1f:79:8f:0b:40:2c:e8:fc:
97:d4:bc:b8:ac:fe:ef:c6:c8:3b:70:6d:ec:fa:e7:
b3:0d:f4:30:20:2a:5b:c1:b6:f9:a5:c0:10:5c:57:
ba:49:be:f6:6c:e6:29:4a:0c:a8:59:6f:c6:44:54:
5d:dc:e7:cd:ca:ed:5e:11:a6:d3:ab:4d:4d:b6:69:
f0:91:32:9a:c8:7e:51:f7:c4:2d:02:57:0a:f3:25:
ce:65:c1:00:a0:77:1a:47:19:af:48:9d:cb:6d:14:
25:88:63:b0:a0:a0:9d:50:d6:0a:9a:ac:81:2b:0b:
67:14:30:1e:0e:39:c3:e9:ba:03:31:19:aa:53:c3:
f4:0a:2b:2d:d5:4a:44:c3:3f:b1:b9:3e:c1:60:5c:
b2:89:28:8e:56:6b:f1:e7:07:32:cb:d4:e4:cd:67:
9a:dc:9b:79:1b:f8:ba:4c:6e:df:16:17:22:3f:20:
20:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B8:F3:9E:C6:5D:5A:5E:E8:2A:D6:F3:7D:85:F6:12:BE:59:C3:45
X509v3 Authority Key Identifier:
keyid:C6:B0:16:87:4F:9F:72:2B:5D:95:07:39:75:8C:7A:D7:38:13:C6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a4cd8b3b1ed64faa792f1a7c857c169d8e5c4067.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5c4b0cbe-d923-4a1b-8166-eb9b84398ccd/ecb41270c577143596d52ca9d6bf1f1611bc1f18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5c4b0cbe-d923-4a1b-8166-eb9b84398ccd/a4cd8b3b1ed64faa792f1a7c857c169d8e5c4067.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:121::/48
Signature Algorithm: sha256WithRSAEncryption
6a:c3:71:6b:ee:d8:e8:03:c0:89:f9:82:fb:f3:7a:40:1d:4e:
89:b7:a0:ed:da:2a:67:66:d8:3b:22:b6:76:80:ee:f4:42:2e:
8e:1e:7c:51:af:03:d8:f2:fb:e9:94:a8:d6:96:fd:62:8a:8a:
7c:10:fe:80:bd:c7:8b:42:e8:0c:d8:a8:9e:34:d7:27:5f:c3:
f9:b2:bf:74:ff:26:ce:ae:8e:cc:75:9c:c0:59:6f:dc:fe:0a:
73:2f:de:07:8c:e9:ed:54:ab:13:bb:22:48:03:55:f3:36:30:
44:85:3f:03:a4:f4:3a:85:a1:04:e7:25:59:66:0a:3a:d6:dd:
d1:dc:af:ff:92:93:a7:9e:b9:84:87:7f:27:5d:67:18:16:8b:
aa:5f:26:54:70:10:c1:d8:1d:4a:f1:0f:0b:79:ef:8e:18:43:
b3:a1:84:3d:85:da:7c:75:8a:02:63:0e:da:24:bd:a8:5b:8a:
bc:27:b4:e2:ef:e5:45:17:00:e9:80:7c:e4:0f:bc:2a:d8:1b:
5d:1d:9d:8a:21:ac:96:c8:48:b2:07:80:78:f9:29:0d:34:19:
fe:fc:31:c2:b9:e4:81:a3:23:e5:79:a9:f7:ad:82:9b:4d:b0:
d9:f0:cf:66:fc:d2:3a:5c:eb:8a:df:6a:40:87:f0:db:60:e8:
e1:05:70:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org