Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d6ab356cf8738a48f25f947d220d2b17408e0f18.roa
File: d6ab356cf8738a48f25f947d220d2b17408e0f18.roa (raw, json)
Hash identifier: WXU88cuqfsbPWt5GTVMM+GgObCvC8bIIQdf7jbkObBA=
Subject key identifier: 04:FA:1D:6F:8B:F8:7E:5E:20:68:EA:DB:B4:BE:03:B9:10:4E:2F:08
Certificate issuer: /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial: 0445CB
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d6ab356cf8738a48f25f947d220d2b17408e0f18.roa
Signing time: Fri 04 Mar 2022 05:48:25 +0000
ROA not before: Fri 04 Mar 2022 03:00:00 +0000
ROA not after: Sat 04 Mar 2023 03:00:00 +0000
asID: 3970
IP address blocks: 2801:1e:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280011 (0x445cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Validity
Not Before: Mar 4 03:00:00 2022 GMT
Not After : Mar 4 03:00:00 2023 GMT
Subject: CN=d6ab356cf8738a48f25f947d220d2b17408e0f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:86:d2:c5:65:07:bb:18:a1:2b:3b:90:4c:18:
22:f5:46:08:58:94:58:88:68:c0:07:0f:d1:34:fb:
65:e3:4c:93:bf:ba:a6:39:63:7b:ef:57:1a:93:9d:
f3:0c:04:b8:23:ad:3e:f4:6b:ff:97:90:36:63:b9:
46:50:fa:e5:d8:c3:d0:e1:07:d2:8c:f7:c0:87:77:
b3:42:22:5b:dc:48:7d:87:65:62:13:15:87:96:91:
03:98:23:8b:2a:21:3c:91:1d:89:81:82:d1:ac:c6:
1a:c6:78:13:3c:f8:af:8c:2e:f7:3c:d9:7a:7a:78:
0a:90:c8:5c:29:fc:5c:09:ef:64:e2:17:a0:a7:0f:
45:33:08:d8:0a:34:47:e4:76:f8:90:fc:82:fb:c3:
58:b4:c5:8f:a5:50:ab:58:fa:00:de:81:9f:82:61:
53:89:e0:d4:b4:f3:c3:39:0a:76:08:44:0f:20:78:
0c:a5:fe:67:2e:fc:8f:87:ee:cd:90:db:e5:96:68:
29:f6:56:b1:75:8d:55:87:47:bf:dc:2a:00:f5:81:
6e:16:40:d2:c3:f8:30:96:c5:9b:c1:5c:28:9f:08:
d9:e4:90:66:f2:a7:9c:2b:11:2c:39:ff:33:aa:f0:
55:d8:e1:bd:68:b4:4d:83:7f:51:a4:c6:69:a6:50:
85:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FA:1D:6F:8B:F8:7E:5E:20:68:EA:DB:B4:BE:03:B9:10:4E:2F:08
X509v3 Authority Key Identifier:
keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d6ab356cf8738a48f25f947d220d2b17408e0f18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:1801::/48
Signature Algorithm: sha256WithRSAEncryption
8e:53:d1:b0:51:7c:0a:5c:87:43:f4:f7:6d:b2:10:b8:25:08:
c5:5c:c7:db:d0:4f:c4:91:f5:c5:9b:a3:b7:90:bb:bb:09:b7:
fc:40:42:56:c5:4a:55:a4:34:82:e0:6f:b8:ac:0c:bb:7d:12:
b2:6a:50:88:bf:c0:05:3f:92:31:c9:9c:34:3c:db:53:a8:64:
55:ee:99:eb:80:7c:9e:8e:81:44:4c:12:66:57:98:2c:ab:a7:
86:e4:e8:a6:36:68:3b:3d:09:b7:7c:c2:4d:fd:b2:d0:b2:99:
06:86:c9:44:a8:ae:0b:eb:8e:d2:33:19:d7:8d:08:78:55:fa:
0a:f2:29:72:64:a0:2c:41:ed:47:f7:e3:c9:03:ef:67:d6:91:
e9:bb:1a:7a:06:8e:d2:42:b1:b2:97:68:9b:39:17:57:58:15:
20:cc:91:15:22:9d:be:9e:b1:20:63:70:0d:fc:e4:e0:dc:f0:
02:cb:2d:b2:96:e7:33:ad:fc:25:4e:0f:9c:aa:c0:72:e2:7c:
6a:d8:6c:c6:02:e2:67:74:15:07:9a:5c:86:0d:67:8a:23:9a:
e8:63:bf:51:10:ba:d1:de:8a:01:c2:0d:7a:65:7f:bd:35:59:
c4:b4:8a:c5:74:44:3b:db:b3:25:88:98:74:76:25:8e:08:46:
79:1f:0f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org