Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/02bfc6c3e7856dc4bb8d52b9850c2195f95c05ae.roa
File: 02bfc6c3e7856dc4bb8d52b9850c2195f95c05ae.roa (raw, json)
Hash identifier: I84WnHb61CLu+BXxJACsKKOg6VEViG2RAnvKNjltBKo=
Subject key identifier: D7:CE:0C:C1:C7:82:3D:0C:65:BF:39:9A:41:0E:4C:D8:6E:8E:38:F5
Certificate issuer: /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial: 0BF300
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/02bfc6c3e7856dc4bb8d52b9850c2195f95c05ae.roa
Signing time: Mon 22 Aug 2022 05:09:03 +0000
ROA not before: Mon 22 Aug 2022 03:00:00 +0000
ROA not after: Tue 22 Aug 2023 03:00:00 +0000
asID: 3970
IP address blocks: 2801:1e:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 783104 (0xbf300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Validity
Not Before: Aug 22 03:00:00 2022 GMT
Not After : Aug 22 03:00:00 2023 GMT
Subject: CN=02bfc6c3e7856dc4bb8d52b9850c2195f95c05ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2b:58:b1:09:64:02:29:c6:f7:e0:88:b1:bb:
0b:44:89:50:20:43:19:af:f1:52:dd:18:3f:11:f4:
b2:e6:1e:1c:c6:93:4e:5c:92:14:0a:cc:1e:b7:3a:
ce:27:c4:79:5e:ed:e3:74:d3:ab:99:8c:6d:6c:c8:
be:b9:b5:18:b8:f8:7b:db:2d:9f:83:2d:52:54:74:
52:95:4e:1b:3c:cf:bd:e1:1c:30:76:7a:d5:08:1a:
fb:44:7b:3e:3e:b8:b2:45:4f:a7:7a:fc:07:ce:1a:
6d:06:d8:ff:d2:8b:a1:0a:4d:1a:34:ad:05:c7:0e:
ef:03:20:21:9b:e4:f0:a2:99:88:e7:6f:d8:d9:11:
ab:c5:cc:29:b4:8c:a2:9c:76:75:4f:dc:a3:2c:21:
20:ea:c4:b0:4f:2c:92:f1:97:a7:1a:07:d4:48:3c:
0f:71:7f:48:45:65:c3:ad:41:c7:a6:80:74:63:d1:
a3:8b:80:a8:51:a3:1e:d4:00:79:fc:65:32:6b:15:
6e:8f:5a:1c:2b:68:74:d7:aa:07:df:e8:9a:75:a2:
ef:ef:62:00:07:7a:25:14:11:ca:b1:54:29:87:47:
c8:1e:0d:a2:2f:ce:3b:06:80:f7:4d:b2:7f:65:b6:
2d:80:ef:51:6f:22:bc:aa:2c:0a:4f:73:52:3b:66:
e2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CE:0C:C1:C7:82:3D:0C:65:BF:39:9A:41:0E:4C:D8:6E:8E:38:F5
X509v3 Authority Key Identifier:
keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/02bfc6c3e7856dc4bb8d52b9850c2195f95c05ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:1801::/48
Signature Algorithm: sha256WithRSAEncryption
94:76:7f:5a:8b:eb:52:b0:51:48:52:1e:74:b8:cd:29:d9:2a:
d4:0d:9d:e0:0a:5c:e9:53:80:29:3b:d3:65:80:86:d1:12:a7:
b4:da:c6:e5:8f:26:43:38:ed:9c:be:11:09:8f:fd:55:9e:3a:
d3:f2:07:07:2b:8c:e8:1b:ee:4f:c1:21:3d:4c:d7:b7:42:71:
da:6f:81:ac:87:15:2f:ee:24:b6:6e:5b:d0:72:ff:53:3f:6b:
88:40:41:2f:02:0f:e3:58:e7:14:59:18:ed:cb:72:40:45:dd:
21:02:ec:f4:ac:04:83:63:8a:30:e4:54:b4:c9:9e:33:23:7c:
38:8e:85:a0:19:b8:82:2e:0c:a6:6d:7c:fd:32:4c:46:11:1b:
91:2d:af:cb:8c:79:25:a1:a8:51:b1:fc:ed:34:4b:06:bb:5c:
f8:7c:06:ce:68:23:fc:6f:0a:30:f3:18:9b:33:4f:4d:f8:20:
5a:79:03:17:29:3a:cd:d5:c6:1a:04:f8:d5:21:36:ca:07:40:
87:54:36:7b:42:cf:c2:62:77:fc:64:34:83:6f:05:17:95:36:
af:cc:f2:f1:cc:96:7f:71:88:22:a4:a7:c1:c4:16:eb:2f:7d:
ce:a2:7d:50:24:9d:d6:06:19:90:9b:6a:8e:49:07:24:84:80:
e5:81:27:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-ams.rpki-client.org