Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/daf18457a89f294a2d83219214584bca7cb2d7f8.roa
File: daf18457a89f294a2d83219214584bca7cb2d7f8.roa (raw, json)
Hash identifier: rxhYef1DfiXTkecNMm0cT8AW1mOIiHF+3ZhIZd4s0cg=
Subject key identifier: 31:C6:A4:88:FC:AC:38:D3:D8:C1:1D:FB:CC:F3:39:3E:B7:8B:09:86
Certificate issuer: /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial: 075886
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/daf18457a89f294a2d83219214584bca7cb2d7f8.roa
Signing time: Sun 08 May 2022 02:51:44 +0000
ROA not before: Sun 08 May 2022 03:00:00 +0000
ROA not after: Mon 08 May 2023 03:00:00 +0000
asID: 3970
IP address blocks: 2801:1e:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481414 (0x75886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Validity
Not Before: May 8 03:00:00 2022 GMT
Not After : May 8 03:00:00 2023 GMT
Subject: CN=daf18457a89f294a2d83219214584bca7cb2d7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cc:0a:85:8c:0b:4a:74:2c:cf:8a:a3:6e:eb:
40:77:9a:6d:1a:a5:a8:aa:14:cb:63:96:59:4e:2d:
e9:4f:d1:91:b1:03:0b:81:d4:8e:8c:a2:bb:35:13:
64:73:0f:56:de:23:69:be:04:6c:42:e3:25:64:3d:
d6:83:d0:6c:ef:52:95:c1:d4:a4:42:f9:e8:03:69:
53:98:4a:76:65:e3:f9:08:c1:60:3a:ec:0d:26:af:
e0:17:de:6e:61:b7:86:06:d7:2f:cd:b5:6a:1a:1e:
a9:af:c3:bf:07:ea:4d:f8:fc:96:e4:5d:52:4c:cd:
4d:99:5b:da:64:41:63:a0:1e:7b:bc:84:3b:ce:c9:
00:4f:88:9e:b8:6f:f4:48:ba:a1:ef:53:8f:ac:9d:
98:94:d8:8c:f9:ad:de:19:2d:0d:24:98:7c:80:2c:
16:8a:7d:9d:79:65:bc:0e:3b:5a:0e:e6:fd:d3:46:
3f:29:ef:90:55:26:28:8b:d3:9a:09:ac:7c:c7:d5:
f8:ba:cb:a8:37:75:92:f7:a8:4d:e8:84:ae:89:d7:
74:97:9f:e4:91:ef:d1:f9:2b:cc:82:59:96:c7:e2:
d3:da:b3:27:a7:08:c9:d9:e0:b2:70:da:2d:06:d6:
30:32:87:8e:ed:38:02:c8:f7:78:a3:7b:bd:31:a8:
13:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C6:A4:88:FC:AC:38:D3:D8:C1:1D:FB:CC:F3:39:3E:B7:8B:09:86
X509v3 Authority Key Identifier:
keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/daf18457a89f294a2d83219214584bca7cb2d7f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:1801::/48
Signature Algorithm: sha256WithRSAEncryption
6d:a0:9c:89:23:20:0a:55:be:14:2c:4c:8b:4b:8f:2b:73:8a:
14:3d:9d:07:e0:1a:92:1f:43:bb:1a:d0:58:4b:c9:cc:41:e0:
b7:5b:01:f7:65:75:58:39:79:dc:cd:89:c0:e8:87:b3:33:63:
3b:01:16:55:96:17:07:4b:7e:d5:8f:ea:c8:4b:d1:32:18:01:
81:a5:1c:d7:33:85:9b:3c:e5:22:a2:3a:c8:8c:26:ff:23:60:
c6:d0:87:da:16:dd:ba:cd:52:01:09:a1:10:12:03:9c:b7:84:
05:70:59:6c:16:ac:82:e4:75:bf:2d:d3:bd:68:8b:41:af:fa:
cf:67:0f:68:e1:e0:11:46:75:7a:d5:d9:37:26:8b:e4:be:87:
54:8a:16:2e:4d:59:72:ca:17:ee:68:b9:1d:44:49:66:e1:28:
3e:58:98:ca:0f:97:cd:8e:06:c3:b2:ae:de:57:35:ec:2a:fe:
ff:3d:77:2e:e2:68:0f:5a:b4:10:33:48:ce:17:b2:74:b0:8f:
da:d6:1a:a6:cb:00:6e:22:27:2c:02:e8:1b:1f:a3:0c:af:c2:
f8:16:d2:90:b3:bb:0b:ad:c6:9b:80:1a:b5:10:8e:b0:ee:e4:
3b:7a:4b:ad:e1:9f:6b:9f:69:df:11:13:99:e7:b8:9d:43:80:
47:91:d4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org