Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e4d9cc451043a90505f82ac7cf933f36e12997b3.roa
File: e4d9cc451043a90505f82ac7cf933f36e12997b3.roa (raw, json)
Hash identifier: 1el/+UJLOPN/qTBsdb2Hi88bsnoTUTOOq+vSKfJU01c=
Subject key identifier: 5D:B7:72:DA:20:18:41:DF:B6:CA:4D:97:26:AE:B0:42:83:45:31:5A
Certificate issuer: /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial: 08297B
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e4d9cc451043a90505f82ac7cf933f36e12997b3.roa
Signing time: Wed 07 Sep 2022 22:16:17 +0000
ROA not before: Wed 20 Jul 2022 03:00:00 +0000
ROA not after: Wed 30 Apr 2025 03:00:00 +0000
asID: 271891
IP address blocks: 2801:151:11::/48 maxlen: 48
2801:151:57::/48 maxlen: 48
2801:151:58::/48 maxlen: 48
2801:151:59::/48 maxlen: 48
2801:151:a3::/48 maxlen: 48
2801:151:a4::/48 maxlen: 48
2801:151:a2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534907 (0x8297b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Validity
Not Before: Jul 20 03:00:00 2022 GMT
Not After : Apr 30 03:00:00 2025 GMT
Subject: CN=e4d9cc451043a90505f82ac7cf933f36e12997b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:60:10:d3:9f:2b:84:10:8b:60:17:8c:ec:4e:
f1:b0:42:4b:9d:14:ba:9a:74:ee:06:5c:88:7d:a3:
b8:6c:6a:92:1f:c1:ba:bd:3d:17:f9:07:13:b7:8d:
fb:00:bc:e5:a2:6d:23:c4:ce:87:21:89:53:55:66:
10:ac:15:5c:5b:95:d2:15:31:80:b0:fe:b4:0a:b8:
f6:f9:1e:a1:b7:f2:1f:8d:47:50:21:cc:69:8d:90:
68:bb:8f:63:8f:9c:32:79:32:a7:40:98:e2:b8:24:
10:bc:f4:49:a2:b4:33:72:9b:51:90:a2:11:9e:8f:
1e:13:8d:10:e7:9d:fb:32:c1:c7:00:94:75:ac:1e:
ef:99:bc:23:0d:cb:06:fe:61:61:51:8d:11:36:74:
4c:87:88:5c:15:92:3a:d9:ff:ff:c8:4f:e3:11:d6:
65:69:30:3b:a2:d7:11:d9:db:04:af:c7:4f:a5:b3:
ac:b4:32:09:7b:c9:fe:67:85:f8:c6:a2:bd:5c:2f:
2e:63:9f:e7:1f:22:d4:d6:0c:dd:0e:7a:fc:0b:b1:
17:11:6d:b7:37:2c:eb:25:5a:df:cd:74:4c:9d:4d:
89:c0:99:c0:41:44:ca:64:8c:88:8c:d2:d8:dd:dc:
13:3b:c2:87:78:1a:dd:70:2a:fb:f7:cf:f3:c0:a9:
c7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B7:72:DA:20:18:41:DF:B6:CA:4D:97:26:AE:B0:42:83:45:31:5A
X509v3 Authority Key Identifier:
keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e4d9cc451043a90505f82ac7cf933f36e12997b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:151:11::/48
2801:151:57::-2801:151:59:ffff:ffff:ffff:ffff:ffff
2801:151:a2::-2801:151:a4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
04:46:00:0c:40:63:b9:4a:cf:73:56:e7:c9:77:06:2c:19:2f:
da:0c:68:93:66:10:fd:b2:85:f4:6b:9d:e0:16:4b:50:b6:45:
e4:80:ce:b6:dc:fa:03:c0:69:1c:05:22:b1:b1:dd:ba:2c:20:
58:ab:43:11:2b:ee:62:29:5a:92:b5:4e:0c:f4:05:4e:5a:2b:
d0:6f:fb:97:ca:55:ca:06:00:20:73:37:9e:c7:fe:62:03:8c:
95:37:e3:2b:b8:89:5e:e1:1a:01:d4:57:19:0c:79:de:50:d6:
97:93:4d:de:d4:9b:72:3a:27:58:53:07:54:d1:bc:fe:40:b9:
ea:36:a3:e7:70:72:30:bd:f4:fa:d7:ac:e0:91:e8:b5:f3:c8:
7d:e4:79:59:a7:55:d7:03:6d:8b:df:5d:3e:27:a5:70:ed:16:
79:22:60:ec:d5:1d:b6:3b:73:ec:39:55:df:9a:c5:25:31:77:
4c:1e:3e:e0:2e:12:e7:e0:f1:13:d0:bf:3b:0a:12:08:43:71:
0e:b0:6c:ae:e2:86:f4:61:77:b9:e3:e7:27:55:9d:91:1c:a7:
14:32:98:51:74:0c:62:68:0b:30:23:d3:38:31:99:4c:88:03:
3c:9e:06:d2:5f:f2:ec:7d:ef:50:6d:07:ad:f0:b7:26:46:a0:
e4:1c:c8:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org