Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/7703818e3d491e48483482f1e1e90aed6fdaab24.roa
File: 7703818e3d491e48483482f1e1e90aed6fdaab24.roa (raw, json)
Hash identifier: nY8n1cX95oNmWecV0q3x3QxF/w5NUwmrvN34Gc/KR7A=
Subject key identifier: A9:88:B6:AA:2C:98:63:5F:C3:4E:0A:E9:31:29:85:92:8F:48:4C:F8
Certificate issuer: /CN=904a59874ab57a97e46cd1d939a2312a85fe9c71
Certificate serial: 21C151
Authority key identifier: 4E:23:5A:F0:59:C4:DE:77:9B:DA:BA:DA:4D:17:2F:37:34:F3:E2:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/904a59874ab57a97e46cd1d939a2312a85fe9c71.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/7703818e3d491e48483482f1e1e90aed6fdaab24.roa
Signing time: Tue 27 Jun 2023 08:30:01 +0000
ROA not before: Mon 26 Jun 2023 08:30:01 +0000
ROA not after: Wed 25 Jun 2025 08:30:01 +0000
asID: 271923
IP address blocks: 2803:87c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2212177 (0x21c151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=904a59874ab57a97e46cd1d939a2312a85fe9c71
Validity
Not Before: Jun 26 08:30:01 2023 GMT
Not After : Jun 25 08:30:01 2025 GMT
Subject: CN=7703818e3d491e48483482f1e1e90aed6fdaab24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:cb:96:83:41:25:7e:93:02:73:30:a6:b1:57:
b2:5d:de:88:5a:8f:b8:c4:a1:2a:50:13:39:b5:02:
b0:56:47:65:05:c2:a8:a6:85:87:b9:2e:c0:d6:6d:
66:2a:4a:53:d0:64:bf:7c:dc:a8:77:b0:b8:1e:6a:
58:0d:ca:a2:a6:c9:c1:6c:fd:f0:7a:d5:dc:b5:63:
cb:a4:9f:da:e7:4e:90:e5:9a:a2:22:5f:77:bf:a5:
f9:1b:13:b8:49:77:e6:0b:03:58:90:2f:42:5b:b8:
25:82:15:93:a0:79:51:be:5a:31:b2:cb:ad:e2:75:
0e:b8:17:cd:50:62:b3:55:94:80:03:e1:4c:e2:d3:
9d:5e:92:0c:54:ed:6e:2e:a2:00:15:f9:f8:c7:fa:
48:9a:a4:2b:31:57:c8:06:44:b8:81:67:3d:27:03:
39:25:eb:e8:aa:0d:c7:66:d6:a9:66:32:e3:9d:0d:
1b:53:74:dd:6a:33:5c:3d:f8:3b:20:97:08:88:c8:
cd:2a:db:fa:d0:43:0e:5b:72:bf:3e:c7:c8:9c:ea:
68:0c:89:81:37:f7:d5:5d:ee:e7:67:30:90:a5:ed:
d4:c6:dc:b6:91:35:a0:85:bc:a4:0d:11:80:f3:9f:
20:e5:ac:9a:19:d6:e6:13:0a:64:f9:93:23:90:27:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:88:B6:AA:2C:98:63:5F:C3:4E:0A:E9:31:29:85:92:8F:48:4C:F8
X509v3 Authority Key Identifier:
keyid:4E:23:5A:F0:59:C4:DE:77:9B:DA:BA:DA:4D:17:2F:37:34:F3:E2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/904a59874ab57a97e46cd1d939a2312a85fe9c71.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/7703818e3d491e48483482f1e1e90aed6fdaab24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/904a59874ab57a97e46cd1d939a2312a85fe9c71.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:87c0::/32
Signature Algorithm: sha256WithRSAEncryption
63:80:96:d7:39:be:19:cd:d5:cd:46:51:6a:59:bb:c0:c2:63:
70:b2:72:ea:ed:e5:e2:ba:a3:db:34:37:eb:da:58:75:dc:8a:
cc:8f:51:b4:6a:a0:68:df:49:35:59:7c:9f:83:b0:70:e9:74:
7e:df:2b:56:2e:be:57:5c:f0:70:12:70:d8:31:3e:c7:38:fc:
6b:77:80:6c:6f:43:49:f2:13:2c:f8:6b:a4:0b:5b:ed:f3:93:
07:55:7e:e0:50:d9:1b:f0:7d:7d:c3:d1:bc:06:a0:01:24:c5:
f5:5f:a9:c1:82:62:33:24:82:c1:83:0c:f0:da:a7:5e:c6:9c:
e9:6d:5d:ab:b2:b2:ff:51:54:47:e6:89:d6:6c:66:aa:5e:0d:
05:c1:d5:7c:5c:03:53:bc:71:d1:b3:1e:37:c7:43:11:cf:b3:
a9:f4:89:28:d1:00:29:43:1f:99:b8:c3:25:d6:b4:4b:5e:f5:
32:a7:43:8d:b5:ed:11:3a:73:5a:9d:04:80:29:56:c4:ac:e7:
24:0a:e0:28:97:5c:df:49:68:fb:44:33:05:d0:b4:0e:64:b9:
de:fd:14:5b:6d:7c:ee:12:86:d0:65:f3:b2:ed:af:e3:1e:90:
ac:1e:ec:e2:cd:88:e3:aa:b9:95:f9:fa:8c:b6:8d:bc:c8:78:
89:c3:c3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org