Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/901bafbeb048ef24753238b149d850931fd866a9.roa
File: 901bafbeb048ef24753238b149d850931fd866a9.roa (raw, json)
Hash identifier: g4kKLZXQQ0/vAKihD1Xg3Ere1oqIiNKQHBkg030/cUI=
Subject key identifier: 6E:FC:67:21:BB:F7:18:8A:79:8A:63:31:62:CE:CA:46:1A:73:B8:D7
Certificate issuer: /CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
Certificate serial: 03F2D3
Authority key identifier: CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/901bafbeb048ef24753238b149d850931fd866a9.roa
Signing time: Sat 11 Mar 2023 20:45:40 +0000
ROA not before: Fri 10 Mar 2023 20:45:19 +0000
ROA not after: Tue 11 Mar 2025 21:45:19 +0000
asID: 272875
IP address blocks: 2803:4a90:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258771 (0x3f2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
Validity
Not Before: Mar 10 20:45:19 2023 GMT
Not After : Mar 11 21:45:19 2025 GMT
Subject: CN=901bafbeb048ef24753238b149d850931fd866a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6f:24:fd:25:5c:23:1e:72:43:76:06:f7:f7:
f4:cf:da:a4:8f:a1:e0:90:59:18:96:fd:09:c3:63:
e8:03:34:ed:0e:72:6d:e2:77:94:0b:6a:c5:47:35:
fb:d3:26:5c:b2:c6:d9:41:b9:c1:b2:3b:aa:ea:53:
64:a7:b3:75:8f:97:a7:da:e4:cf:c0:94:9b:c6:37:
d4:7d:40:43:81:e9:70:bd:d5:2a:5f:7d:ed:a7:3f:
8f:8d:fa:09:68:dd:fe:4b:9c:0b:64:bc:8b:59:a6:
9a:f8:5b:24:56:61:87:e9:33:5d:cf:1f:74:04:02:
96:6c:b9:83:17:23:30:e6:57:f1:1d:fe:90:ef:d3:
c3:07:d7:9a:39:db:91:2d:90:b9:16:18:da:ef:bc:
bb:a7:12:d3:ff:05:54:15:46:71:51:1b:25:63:7a:
8c:91:a6:85:22:88:ff:db:38:92:54:4c:68:4a:82:
cf:09:59:30:02:da:5a:76:88:1d:59:c1:c8:1e:d7:
b2:51:27:a8:ca:af:e1:14:03:db:1f:b9:e7:ba:28:
39:45:d0:9f:ce:c4:65:cd:b5:23:64:3c:5a:eb:0a:
24:3a:ba:6e:0e:53:61:b3:f8:55:62:85:eb:b8:f6:
c3:50:7f:3a:4c:73:47:e9:5b:a4:1d:1b:03:b1:11:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FC:67:21:BB:F7:18:8A:79:8A:63:31:62:CE:CA:46:1A:73:B8:D7
X509v3 Authority Key Identifier:
keyid:CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/901bafbeb048ef24753238b149d850931fd866a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/43d1351614e693788211d4b7aaaf7f8f5d919d3d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4a90:5::/48
Signature Algorithm: sha256WithRSAEncryption
45:69:1d:c8:e4:fe:06:80:e6:50:ea:72:52:ae:cc:d7:71:28:
b0:9d:d3:1f:07:e3:5f:cb:4c:6c:f7:b1:3d:aa:fa:bf:0e:9b:
d7:a5:60:9f:db:52:6a:c0:42:48:3f:62:3d:43:c8:1c:0e:a8:
c0:50:fa:83:9d:90:cb:2b:32:1b:27:67:fe:4e:1d:f5:29:64:
ec:75:ad:22:af:47:2e:9d:9a:92:b6:81:7e:ff:06:9d:86:0c:
07:11:68:33:9e:b6:c2:35:95:9a:ab:24:5c:28:83:be:fb:95:
6b:46:e6:17:25:ba:e3:79:4a:cf:b7:d5:cf:4b:9b:8c:d1:8f:
31:c8:90:84:ca:d0:de:38:a7:be:55:48:2a:8a:53:98:88:51:
f7:0a:17:35:79:63:7a:8d:7b:f3:23:6b:67:fa:5d:5b:de:22:
c3:be:f7:81:84:43:cd:0d:1b:90:76:3a:ff:41:96:d0:de:45:
39:f1:d0:d9:09:a5:c9:79:ff:5f:ef:91:ce:1f:e0:20:81:2b:
1c:b4:b1:04:50:8d:06:fa:33:a7:2a:b3:35:3d:ca:02:89:c9:
f7:e2:fa:5d:94:e4:1e:d7:3a:1a:1c:50:a7:5c:18:2a:90:3d:
7c:d7:d5:d5:7f:8c:4b:92:6e:0c:e6:ca:8d:c3:0e:b9:62:0d:
44:03:a2:d9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDA/LTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQz
ZDEzNTE2MTRlNjkzNzg4MjExZDRiN2FhYWY3ZjhmNWQ5MTlkM2QwHhcNMjMwMzEw
MjA0NTE5WhcNMjUwMzExMjE0NTE5WjAzMTEwLwYDVQQDEyg5MDFiYWZiZWIwNDhl
ZjI0NzUzMjM4YjE0OWQ4NTA5MzFmZDg2NmE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoW8k/SVcIx5yQ3YG9/f0z9qkj6HgkFkYlv0Jw2PoAzTtDnJt
4neUC2rFRzX70yZcssbZQbnBsjuq6lNkp7N1j5en2uTPwJSbxjfUfUBDgelwvdUq
X33tpz+PjfoJaN3+S5wLZLyLWaaa+FskVmGH6TNdzx90BAKWbLmDFyMw5lfxHf6Q
79PDB9eaOduRLZC5Fhja77y7pxLT/wVUFUZxURslY3qMkaaFIoj/2ziSVExoSoLP
CVkwAtpadogdWcHIHteyUSeoyq/hFAPbH7nnuig5RdCfzsRlzbUjZDxa6wokOrpu
DlNhs/hVYoXruPbDUH86THNH6VukHRsDsRHb0QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFG78ZyG79xiKeYpjMWLOykYac7jXMB8GA1UdIwQYMBaAFMtoXPeF8BIhN71/
v67T7/dcPScAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDNkMTM1
MTYxNGU2OTM3ODgyMTFkNGI3YWFhZjdmOGY1ZDkxOWQzZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDNkOWNhMzUtN2ZjMS00Yzc5LTlhZWEtZTk2Yjc0
NjlkMzZiLzkwMWJhZmJlYjA0OGVmMjQ3NTMyMzhiMTQ5ZDg1MDkzMWZkODY2YTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80M2Q5Y2EzNS03ZmMxLTRjNzktOWFlYS1lOTZi
NzQ2OWQzNmIvNDNkMTM1MTYxNGU2OTM3ODgyMTFkNGI3YWFhZjdmOGY1ZDkxOWQz
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDSpAABTANBgkqhkiG9w0BAQsFAAOCAQEARWkdyOT+BoDm
UOpyUq7M13EosJ3THwfjX8tMbPexPar6vw6b16Vgn9tSasBCSD9iPUPIHA6owFD6
g52QyysyGydn/k4d9Slk7HWtIq9HLp2akraBfv8GnYYMBxFoM562wjWVmqskXCiD
vvuVa0bmFyW643lKz7fVz0ubjNGPMciQhMrQ3jinvlVIKopTmIhR9woXNXljeo17
8yNrZ/pdW94iw773gYRDzQ0bkHY6/0GW0N5FOfHQ2QmlyXn/X++Rzh/gIIErHLSx
BFCNBvozpyqzNT3KAonJ9+L6XZTkHtc6GhxQp1wYKpA9fNfV1X+MS5JuDObKjcMO
uWINRAOi2Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org