Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/3b889223a77298ce34b54098d3cab20f3f72ff38.roa
File: 3b889223a77298ce34b54098d3cab20f3f72ff38.roa (raw, json)
Hash identifier: W35B7lFVGjAgF6zP5XbmCIbus4aivBBnYKHBY4s8O4E=
Subject key identifier: 6C:73:6D:0F:84:17:21:21:AC:B2:21:67:1F:B8:50:6D:6D:CE:0F:69
Certificate issuer: /CN=346499a0d70b33b00e436c219a652ef2db03ca4c
Certificate serial: 206217
Authority key identifier: CC:08:8B:DE:ED:44:CF:D1:B7:12:CD:70:8F:32:5A:A0:CE:70:3A:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/346499a0d70b33b00e436c219a652ef2db03ca4c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/3b889223a77298ce34b54098d3cab20f3f72ff38.roa
Signing time: Fri 28 Apr 2023 08:30:01 +0000
ROA not before: Thu 27 Apr 2023 08:30:01 +0000
ROA not after: Sat 26 Apr 2025 08:30:01 +0000
asID: 271804
IP address blocks: 2803:f780::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2122263 (0x206217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346499a0d70b33b00e436c219a652ef2db03ca4c
Validity
Not Before: Apr 27 08:30:01 2023 GMT
Not After : Apr 26 08:30:01 2025 GMT
Subject: CN=3b889223a77298ce34b54098d3cab20f3f72ff38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:db:ca:f4:7f:16:cb:82:71:ef:66:61:b9:
96:91:20:ab:12:34:ec:45:a9:38:9c:69:3a:52:4a:
b3:7b:62:8b:93:e5:66:ea:09:5e:dc:27:cf:58:21:
70:d5:68:68:70:51:fa:20:d5:d7:7b:0c:90:15:c7:
57:e8:53:b0:bb:d2:1d:6b:1d:e1:4c:fa:14:e0:7c:
33:4c:40:e0:f7:a6:8b:7d:21:e8:d8:05:ea:8c:c6:
f2:82:25:52:ad:d0:14:d6:4e:0b:c6:da:5b:38:9d:
ac:68:33:e9:13:e1:db:25:3e:fd:7f:c9:27:01:82:
28:0a:1d:0f:0c:9f:85:59:a8:6c:eb:eb:8f:0c:37:
90:f9:85:f5:12:c1:ba:4c:f9:60:69:c7:3c:a7:47:
19:40:e3:b9:87:a0:1b:8a:3b:17:f3:91:de:6e:43:
fc:6f:83:49:3b:74:cd:76:e7:fe:52:20:49:ab:7a:
eb:e8:5a:07:cc:5b:86:0a:20:08:de:2d:68:b0:28:
cc:33:e5:c1:a5:da:b4:0f:51:66:f1:f9:15:35:ee:
b2:b0:2d:12:a6:bf:37:45:14:e4:13:70:fa:8a:d3:
e6:06:2f:58:3d:2b:5e:c5:23:bd:1e:40:16:9b:eb:
30:9a:ed:b0:72:3d:75:db:80:70:da:2c:e2:86:45:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:6D:0F:84:17:21:21:AC:B2:21:67:1F:B8:50:6D:6D:CE:0F:69
X509v3 Authority Key Identifier:
keyid:CC:08:8B:DE:ED:44:CF:D1:B7:12:CD:70:8F:32:5A:A0:CE:70:3A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/346499a0d70b33b00e436c219a652ef2db03ca4c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/3b889223a77298ce34b54098d3cab20f3f72ff38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/346499a0d70b33b00e436c219a652ef2db03ca4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f780::/32
Signature Algorithm: sha256WithRSAEncryption
5c:ae:b7:a0:e0:70:03:dd:e6:8f:59:43:d3:b1:90:41:b9:fc:
18:48:c0:4b:7d:bd:9f:97:8c:70:29:5a:a0:48:d3:02:07:33:
3e:d2:28:9b:ac:c8:d9:b4:c0:bb:39:7f:66:08:91:df:47:8c:
e0:8d:e7:dd:26:6b:50:6a:f3:05:3e:b2:32:27:3b:e4:bd:a5:
3e:62:11:e5:b1:31:d2:45:4f:75:df:2e:ef:15:df:bb:ba:67:
48:49:d1:c7:a7:51:03:58:3e:f8:7e:f1:ee:68:68:13:c6:25:
c6:fe:18:fe:9f:30:5f:0b:d7:83:46:dc:c2:6f:32:eb:32:9b:
01:eb:a1:70:83:4f:a1:49:d4:b9:fd:78:a9:d9:c7:84:b3:f2:
03:51:07:47:86:0a:a6:d4:d5:4a:44:11:7f:01:d9:d8:f7:eb:
6f:27:70:d2:52:fe:75:33:36:7b:dc:0e:78:72:b4:b4:b4:c4:
be:cb:f1:07:9b:18:41:86:81:25:8e:1a:f4:8a:ca:53:71:0b:
77:6f:6a:b8:d6:11:a6:df:0e:08:71:8a:c5:c5:5e:68:dd:a2:
21:10:ed:3d:c7:13:d0:9b:7c:3c:4f:3e:6e:2d:a3:06:e1:49:
ae:9c:60:8b:ef:0c:4b:22:d8:6b:03:af:05:f7:50:bd:19:4e:
30:09:da:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org