Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/3a71e826457b7de5faef78ee497c5288c8dd3348.roa
File: 3a71e826457b7de5faef78ee497c5288c8dd3348.roa (raw, json)
Hash identifier: I/qxitwB/7gCnpCdWXVLzyXzwjK08ridegJXHIejJo0=
Subject key identifier: 45:F9:AE:2B:41:DE:14:D6:89:59:D3:B3:AD:FC:88:84:BD:F6:DB:01
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 199324
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/3a71e826457b7de5faef78ee497c5288c8dd3348.roa
Signing time: Fri 18 Mar 2022 21:21:18 +0000
ROA not before: Fri 18 Mar 2022 03:00:00 +0000
ROA not after: Mon 18 Mar 2024 03:00:00 +0000
asID: 10620
IP address blocks: 2800:482:4002::/48 maxlen: 48
2800:480:ff52::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1676068 (0x199324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Mar 18 03:00:00 2022 GMT
Not After : Mar 18 03:00:00 2024 GMT
Subject: CN=3a71e826457b7de5faef78ee497c5288c8dd3348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9a:0c:84:cd:b1:87:d7:15:70:12:96:22:e6:
76:8a:5e:41:62:67:89:ec:f9:fc:34:81:d1:27:ec:
00:15:b2:63:4d:f1:ab:4b:91:ff:c1:30:89:b6:74:
2a:71:d1:3a:e7:91:cc:c9:3a:2c:0f:2c:ea:c6:6f:
4c:97:ad:2a:a8:59:bf:48:73:97:c7:11:d6:6c:e9:
47:7b:8a:2a:fb:1c:de:54:eb:8a:be:fb:5a:df:2c:
68:1c:1c:d2:92:bc:6f:eb:70:f3:28:6d:f8:1d:e5:
e4:44:cd:7c:f3:79:4c:52:0f:61:e4:3d:5a:4b:49:
46:65:bd:9b:e2:d8:c1:06:35:2b:ff:4c:3b:52:2e:
a1:b9:57:a9:fd:c7:11:0f:20:a9:b4:38:e4:b8:fa:
c6:65:7a:55:17:3a:c3:7c:32:db:50:1c:e7:a5:54:
4a:6b:f8:77:d2:44:bd:ef:7f:9a:79:65:f4:64:05:
65:9f:d5:e8:dd:d9:33:f7:88:4b:9d:ed:d4:d3:15:
86:db:95:10:91:f8:d7:e8:f1:03:fe:5f:52:d5:7e:
35:96:3f:d6:c9:47:ee:ff:83:59:a6:ca:73:1d:78:
62:77:52:d2:5b:3c:4f:e3:49:bf:c0:b3:b1:d9:10:
ce:fd:fc:18:55:76:22:8b:2e:9d:f3:74:5e:ef:88:
56:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F9:AE:2B:41:DE:14:D6:89:59:D3:B3:AD:FC:88:84:BD:F6:DB:01
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/3a71e826457b7de5faef78ee497c5288c8dd3348.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:480:ff52::/48
2800:482:4002::/48
Signature Algorithm: sha256WithRSAEncryption
78:d4:e2:90:a6:a1:93:7b:2f:82:6b:60:36:61:8c:ff:6f:90:
f5:d8:25:ea:46:7f:13:73:d3:c7:c2:3e:18:02:d4:90:1c:9c:
f4:af:4d:41:55:b5:89:57:5b:19:99:f0:04:c7:e7:2b:5a:43:
e1:92:d4:c4:9a:88:67:da:13:64:66:97:5b:21:1f:21:44:91:
cb:18:eb:e0:97:6f:97:97:da:48:fd:2b:49:b4:2a:87:8f:c6:
d4:72:f2:7e:a9:17:c9:1d:5e:e1:e5:1d:6e:fe:1f:9c:43:41:
e7:17:07:58:65:7e:d2:46:89:e3:f1:a2:de:f5:7d:ce:81:7e:
cb:22:e1:e2:a5:21:5e:0a:03:a0:94:19:f3:77:24:8a:12:d3:
3d:5e:76:40:53:17:02:17:1b:e8:b3:94:40:d1:80:06:d9:a2:
02:14:f5:71:63:54:53:b7:6a:0c:39:83:50:3d:60:6c:ff:7f:
68:0b:7e:6c:45:94:cb:58:8c:2c:80:20:75:a9:fa:22:b2:0c:
9e:61:75:a0:b3:09:6e:93:23:20:88:9a:80:3b:5d:32:7b:14:
ea:45:5a:28:a0:c0:91:39:a1:cd:d6:b0:80:74:63:de:e0:fc:
33:1d:5d:60:bf:79:8d:db:41:55:92:e3:ec:88:62:80:c5:c0:
30:97:44:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org