Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492f9657-b80c-42d7-812a-95ad7eaef2d6/45bfbe4858c9aa633f1de1903f9f3fa86eb95790.roa
File: 45bfbe4858c9aa633f1de1903f9f3fa86eb95790.roa (raw, json)
Hash identifier: S6uUK6kBtqW6qhB6buEbfvkIbWx8q4qLM7HoPpFTbFA=
Subject key identifier: 97:B3:68:8E:02:3C:81:C7:3C:6C:2F:BF:F7:D9:39:07:1B:2E:FF:36
Certificate issuer: /CN=cdc8573130e1327056b89de50d0c1eb4f850cc0a
Certificate serial: 02A9
Authority key identifier: 93:40:24:38:40:BD:B5:11:ED:25:98:8A:85:89:6D:A2:CE:82:ED:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdc8573130e1327056b89de50d0c1eb4f850cc0a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/492f9657-b80c-42d7-812a-95ad7eaef2d6/45bfbe4858c9aa633f1de1903f9f3fa86eb95790.roa
Signing time: Fri 05 Aug 2022 03:32:55 +0000
ROA not before: Fri 05 Aug 2022 03:32:19 +0000
ROA not after: Mon 05 Aug 2024 03:32:19 +0000
asID: 271934
IP address blocks: 2803:ba10::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 681 (0x2a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc8573130e1327056b89de50d0c1eb4f850cc0a
Validity
Not Before: Aug 5 03:32:19 2022 GMT
Not After : Aug 5 03:32:19 2024 GMT
Subject: CN=45bfbe4858c9aa633f1de1903f9f3fa86eb95790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ce:a6:7a:93:2e:c0:50:eb:00:46:76:9b:21:
35:30:79:f7:28:6b:ff:8e:b8:ed:4e:ae:15:6b:01:
1f:45:a3:c1:43:8d:ae:f2:ac:2a:63:8a:7d:f3:82:
35:1c:0f:73:7e:e2:fc:61:ef:90:2e:1c:e2:78:90:
d2:de:f2:47:50:dd:cb:d6:a2:a9:19:e6:dd:ae:5d:
c5:b5:12:ca:ce:43:24:20:fd:ec:57:1e:a1:52:78:
e7:c2:6c:e7:e4:f3:00:d7:4d:be:02:ee:08:e4:9f:
17:f1:a8:bc:33:0e:26:9b:b1:b7:9a:dd:d0:43:57:
7d:32:12:e1:0d:97:86:86:d5:c4:03:8d:31:98:73:
fe:bd:4d:ed:a7:79:a8:05:a9:06:65:d7:4e:4e:19:
5a:c8:af:53:98:81:67:23:4d:d0:7b:c1:38:cd:9f:
a3:1b:dd:95:85:e9:3d:e6:8b:2d:60:40:b3:e2:0d:
d2:5c:11:bf:0f:ee:ec:8b:50:22:1c:cf:bc:19:e0:
26:e1:e0:81:58:89:1e:65:6f:10:04:ca:10:3e:dd:
46:60:7b:dc:f7:40:69:02:47:33:49:7f:be:19:32:
34:17:ae:4f:df:dc:20:84:f7:31:c0:f7:c6:1f:e6:
fc:af:c1:b4:1c:6c:35:81:c1:ad:c7:a9:1e:cc:14:
bb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B3:68:8E:02:3C:81:C7:3C:6C:2F:BF:F7:D9:39:07:1B:2E:FF:36
X509v3 Authority Key Identifier:
keyid:93:40:24:38:40:BD:B5:11:ED:25:98:8A:85:89:6D:A2:CE:82:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdc8573130e1327056b89de50d0c1eb4f850cc0a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492f9657-b80c-42d7-812a-95ad7eaef2d6/45bfbe4858c9aa633f1de1903f9f3fa86eb95790.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/492f9657-b80c-42d7-812a-95ad7eaef2d6/cdc8573130e1327056b89de50d0c1eb4f850cc0a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:ba10::/32
Signature Algorithm: sha256WithRSAEncryption
1d:bb:65:c1:8f:ca:eb:0b:5a:bf:91:9e:e9:5a:1c:9b:1a:91:
b4:57:bf:3e:cf:0d:51:eb:65:de:3a:33:99:81:55:11:9a:50:
d4:93:13:e1:52:31:40:c5:65:8d:ce:bb:14:f1:01:bd:32:5d:
b9:d2:11:42:73:85:7c:a4:49:be:ee:7c:d7:60:23:3b:b6:b2:
ee:44:04:56:bb:ac:9e:c5:d5:56:44:bc:1c:8a:eb:85:18:b2:
4e:9b:fb:4a:3d:ba:7a:d0:51:73:e7:c4:87:0f:11:5d:c6:7c:
38:36:92:90:67:fe:ff:2c:f0:0c:61:07:46:4b:71:1a:b1:eb:
73:57:a1:13:39:c2:82:b0:1d:61:61:a5:6b:c3:74:f5:8d:c5:
13:e4:1c:98:fb:f6:fd:a9:5c:12:33:e4:d2:e0:d4:06:94:26:
8a:9a:9b:f3:b7:65:7f:a5:00:f6:8b:6c:4e:56:ad:4c:32:fd:
8d:bc:58:bd:06:e6:70:27:82:45:33:fe:32:4c:57:36:ef:2f:
19:4e:b2:cb:07:af:bc:9f:03:de:1e:de:e7:47:0f:8c:9d:09:
f2:8e:b8:05:dc:77:4f:dc:e4:bf:f1:0e:5f:73:2f:3f:15:96:
9d:95:14:2d:4f:c7:8d:ac:f5:0c:20:f1:64:47:84:16:bb:38:
f7:4a:58:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:16 2024 by rpki-client on console-fra.rpki-client.org