Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2af073aa-d765-4230-9aca-1f2851f77ae3/357affb835c2a8eaa702aaef77eb7452f75ce847.roa
File: 357affb835c2a8eaa702aaef77eb7452f75ce847.roa (raw, json)
Hash identifier: a1n/NsNCQbGusjpLylAlqTnExmFn7NxREiz0SGltijs=
Subject key identifier: D2:1A:22:B0:7A:70:18:6D:84:20:95:9D:23:D5:B1:5B:C5:AF:80:BB
Certificate issuer: /CN=58bf8ff08351b2f713c258d0a9c2aa0ce58706d5
Certificate serial: 05CF29
Authority key identifier: 55:1A:C3:56:8E:7C:DD:C1:2F:DB:1F:26:81:74:20:F7:A9:C1:7A:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58bf8ff08351b2f713c258d0a9c2aa0ce58706d5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2af073aa-d765-4230-9aca-1f2851f77ae3/357affb835c2a8eaa702aaef77eb7452f75ce847.roa
Signing time: Sat 13 Apr 2024 18:50:52 +0000
ROA not before: Sat 13 Apr 2024 18:50:52 +0000
ROA not after: Mon 13 Apr 2026 18:50:52 +0000
asID: 272977
IP address blocks: 2803:d590::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380713 (0x5cf29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf8ff08351b2f713c258d0a9c2aa0ce58706d5
Validity
Not Before: Apr 13 18:50:52 2024 GMT
Not After : Apr 13 18:50:52 2026 GMT
Subject: CN=357affb835c2a8eaa702aaef77eb7452f75ce847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:66:94:b8:01:6b:bc:ae:24:21:27:88:ea:2b:
53:e6:c5:d6:62:d0:54:27:2f:92:8b:b4:16:21:78:
3c:64:14:2c:13:c0:9e:f1:4b:80:3f:1b:60:e7:67:
09:2d:07:3f:b9:a3:f5:2b:fa:b7:aa:df:7f:e6:96:
ff:64:ec:88:05:3b:5b:e2:6b:d4:bc:25:84:a4:b7:
e0:e2:7c:10:65:7c:81:35:b1:3b:96:00:cc:db:21:
e6:7c:2b:26:d9:21:6b:31:66:fe:bb:a7:b2:be:ce:
ac:36:ba:d5:fc:d1:b0:c8:59:56:ed:b7:5d:bf:ed:
a4:01:e3:33:90:52:a6:87:58:6f:8c:d5:32:c2:7b:
44:06:57:1f:f8:33:70:17:de:74:2a:ba:2b:9b:81:
b0:7c:81:1b:a7:71:12:64:da:6e:9f:7d:10:84:77:
c4:07:ca:09:87:3a:2c:11:a1:5d:3f:27:9a:81:4e:
79:66:14:e8:45:4f:ca:c8:36:07:5e:34:7f:4b:3b:
6f:8b:be:ae:13:76:ef:b6:4b:46:6b:83:59:56:88:
42:c6:93:17:1d:30:6c:33:33:e7:65:4e:11:07:bc:
a1:0f:c0:88:34:ad:cf:6e:34:3b:26:2d:a9:53:63:
0e:3f:58:8f:ff:76:0a:d8:02:d0:07:f8:f7:38:fc:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1A:22:B0:7A:70:18:6D:84:20:95:9D:23:D5:B1:5B:C5:AF:80:BB
X509v3 Authority Key Identifier:
keyid:55:1A:C3:56:8E:7C:DD:C1:2F:DB:1F:26:81:74:20:F7:A9:C1:7A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58bf8ff08351b2f713c258d0a9c2aa0ce58706d5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2af073aa-d765-4230-9aca-1f2851f77ae3/357affb835c2a8eaa702aaef77eb7452f75ce847.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2af073aa-d765-4230-9aca-1f2851f77ae3/58bf8ff08351b2f713c258d0a9c2aa0ce58706d5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d590::/32
Signature Algorithm: sha256WithRSAEncryption
64:53:05:6f:dd:d9:e3:8c:0f:ea:51:17:52:11:cd:8c:99:d4:
68:ad:c4:5f:bf:4e:c8:fc:df:08:92:9c:e8:20:d1:7e:e1:51:
9f:0f:b0:c3:79:36:c6:06:cc:95:05:d8:e5:6d:56:1d:c2:26:
4f:2b:fb:36:33:19:1d:e2:45:43:17:d9:46:1d:0f:c9:4f:7a:
c3:98:5c:e3:5b:53:c1:96:3d:87:e1:88:1a:1b:34:51:71:ec:
b1:8d:46:6f:1c:f5:4a:1f:e6:d9:49:b6:6b:63:d1:c6:ec:5f:
46:02:8b:34:0b:20:f6:78:f4:db:85:3e:2c:75:b4:39:32:2c:
0c:a7:8d:2c:d3:db:3b:4f:43:62:e2:83:9b:a2:79:9c:e9:65:
cd:44:4a:eb:61:4d:03:d6:e2:a0:3e:2a:21:e1:23:7d:e3:3d:
cf:7e:7d:f4:2a:82:fb:aa:d4:0b:6f:8f:b1:86:db:d4:e4:bc:
23:d8:70:f4:c4:5e:f7:5b:58:61:06:3f:8b:e7:e2:66:fb:32:
35:2c:8a:6f:57:16:b4:39:20:c2:28:f2:2e:bd:85:fc:5b:54:
a6:9f:44:8e:f0:2e:99:80:20:f1:83:41:bb:5b:e0:8b:74:ee:
40:98:27:16:c1:96:b4:45:b3:ef:05:6a:f0:8a:54:a5:3b:e9:
3b:f4:6a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org