Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/af3fafe120c6187c6740608f3ff6686c8d1d4842.roa
File: af3fafe120c6187c6740608f3ff6686c8d1d4842.roa (raw, json)
Hash identifier: /havApq0ozAcIKkCBBch0Xr2wsF+moE6xoJmIC6ob/U=
Subject key identifier: AE:CF:4E:93:00:0A:6A:76:A8:D3:58:BA:BD:11:21:D0:F1:40:3D:53
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 0DD479
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/af3fafe120c6187c6740608f3ff6686c8d1d4842.roa
Signing time: Wed 24 Mar 2021 14:34:36 +0000
ROA not before: Wed 24 Mar 2021 14:34:35 +0000
ROA not after: Tue 24 Mar 2026 14:34:35 +0000
asID: 10620
IP address blocks: 2800:485:fe00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906361 (0xdd479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Mar 24 14:34:35 2021 GMT
Not After : Mar 24 14:34:35 2026 GMT
Subject: CN=af3fafe120c6187c6740608f3ff6686c8d1d4842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:b3:2e:fa:24:a4:15:75:b4:a6:8e:ac:d9:
7c:f7:de:05:38:f7:6b:55:bc:f7:8d:4d:06:02:ab:
f7:7e:ab:c8:7e:8d:3b:21:33:cb:c1:7d:bd:80:b4:
b6:07:73:ae:9a:f4:ac:47:f5:0b:4e:e8:5c:b2:c1:
6a:83:fd:f4:eb:82:29:a8:5d:8b:2e:e2:5a:75:89:
09:01:49:6b:8e:fc:f6:dd:90:64:29:6d:cb:a8:6f:
10:bf:06:b9:65:fb:90:db:f0:44:c4:b5:bf:52:24:
6c:d7:0a:76:3b:2e:57:11:3a:22:f3:18:66:06:a1:
aa:17:a5:50:02:ae:af:a4:85:d4:dd:9d:65:32:7b:
eb:a0:c3:5c:e5:ee:c4:8e:1f:89:fc:86:24:da:79:
c4:9d:b5:40:94:d8:04:e8:eb:33:f4:a3:5d:7d:17:
07:2a:fc:a1:8a:a8:0c:05:d5:f8:f7:b0:fe:2f:74:
32:d1:02:d7:47:1e:c2:48:1e:ba:b7:ce:1b:e1:ff:
4a:3e:c5:ce:4b:bd:b6:48:7f:29:c6:e7:4a:5a:87:
b1:47:7c:82:91:d5:32:93:65:0a:ed:b4:1b:c4:0b:
9c:43:07:b0:80:43:19:0e:49:af:7e:84:80:ee:cf:
9b:5b:39:9a:31:2a:75:de:ec:6f:55:47:89:a5:ef:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CF:4E:93:00:0A:6A:76:A8:D3:58:BA:BD:11:21:D0:F1:40:3D:53
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/af3fafe120c6187c6740608f3ff6686c8d1d4842.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:485:fe00::/48
Signature Algorithm: sha256WithRSAEncryption
6b:5b:15:73:a7:ed:c1:25:c8:93:d3:71:10:3a:be:6f:5e:48:
aa:40:24:8e:ed:16:dd:9e:44:3f:8c:47:40:db:5d:f1:d5:eb:
2d:c4:aa:22:65:a8:b8:55:93:82:52:3d:16:ab:25:87:ae:6e:
68:19:31:0d:4d:4b:53:e6:ab:30:f4:15:b2:c5:b7:ba:2d:08:
de:d5:cd:6b:72:f4:1b:16:6a:a7:99:f9:c1:6a:b3:4a:c9:cf:
72:3d:d0:01:ee:c2:0a:58:b1:0b:2c:36:fb:c3:2b:96:d2:1a:
87:35:93:b9:68:a4:20:56:7a:3a:79:fd:83:66:9e:75:f8:23:
b6:1e:ba:07:69:75:7d:8b:1f:2b:98:1d:4a:de:d3:40:fd:6a:
df:d5:2e:49:99:3a:ca:ba:5e:49:7c:84:56:e9:61:32:fa:ff:
a7:ef:20:17:45:db:72:c3:19:b2:87:f3:0b:f5:23:99:6b:f9:
02:b2:68:69:15:75:2b:a9:fa:41:76:58:5f:ef:c2:51:bc:0f:
ad:72:4c:30:10:d6:e8:87:d8:67:d0:9f:d2:61:5d:15:e5:83:
3b:8a:0a:ea:a9:cf:5a:1d:b3:86:36:d4:cb:d3:1b:5b:c3:62:
70:35:2f:33:d0:c4:37:59:a0:77:da:ec:44:17:0c:72:6c:9b:
07:bb:1b:68
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDdR5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
ZjY4ZWNkMzg5NmIzMjg4ZjgzYzI5YTJjM2RhNDRjODIxYzc2ODQwHhcNMjEwMzI0
MTQzNDM1WhcNMjYwMzI0MTQzNDM1WjAzMTEwLwYDVQQDEyhhZjNmYWZlMTIwYzYx
ODdjNjc0MDYwOGYzZmY2Njg2YzhkMWQ0ODQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoIazLvokpBV1tKaOrNl8994FOPdrVbz3jU0GAqv3fqvIfo07
ITPLwX29gLS2B3OumvSsR/ULTuhcssFqg/3064IpqF2LLuJadYkJAUlrjvz23ZBk
KW3LqG8Qvwa5ZfuQ2/BExLW/UiRs1wp2Oy5XEToi8xhmBqGqF6VQAq6vpIXU3Z1l
MnvroMNc5e7Ejh+J/IYk2nnEnbVAlNgE6Osz9KNdfRcHKvyhiqgMBdX497D+L3Qy
0QLXRx7CSB66t84b4f9KPsXOS722SH8pxudKWoexR3yCkdUyk2UK7bQbxAucQwew
gEMZDkmvfoSA7s+bWzmaMSp13uxvVUeJpe8QiwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFK7PTpMACmp2qNNYur0RIdDxQD1TMB8GA1UdIwQYMBaAFKhzgywDCRS4/QD1
P69G5JXZcRs8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFmNjhl
Y2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhL2FmM2ZhZmUxMjBjNjE4N2M2NzQwNjA4ZjNmZjY2ODZjOGQxZDQ4NDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvYzFmNjhlY2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgABIX+ADANBgkqhkiG9w0BAQsFAAOCAQEAa1sVc6ftwSXI
k9NxEDq+b15IqkAkju0W3Z5EP4xHQNtd8dXrLcSqImWouFWTglI9Fqslh65uaBkx
DU1LU+arMPQVssW3ui0I3tXNa3L0GxZqp5n5wWqzSsnPcj3QAe7CClixCyw2+8Mr
ltIahzWTuWikIFZ6Onn9g2aedfgjth66B2l1fYsfK5gdSt7TQP1q39UuSZk6yrpe
SXyEVulhMvr/p+8gF0XbcsMZsofzC/UjmWv5ArJoaRV1K6n6QXZYX+/CUbwPrXJM
MBDW6IfYZ9Cf0mFdFeWDO4oK6qnPWh2zhjbUy9MbW8NicDUvM9DEN1mgd9rsRBcM
cmybB7sbaA==
-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org