Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fa0169d-f82f-420c-b689-0a6640618fe1/bcff21260fe2acdda71322ce4a28b7b4f77d2774.roa
File: bcff21260fe2acdda71322ce4a28b7b4f77d2774.roa (raw, json)
Hash identifier: T95Zdfd9vh2A9HFmnEA0qBbxXVW0uH6PwsTKRqEgdn0=
Subject key identifier: 1A:21:73:93:C3:30:6E:C3:3D:C3:C8:F1:4F:1B:E6:C5:07:80:90:FD
Certificate issuer: /CN=1f366347be3551a900ee22a8f8e9e1de8ffa1d31
Certificate serial: 05E768
Authority key identifier: 3A:84:D3:30:17:CD:30:A3:7B:9C:43:B2:87:E2:2F:23:32:B6:26:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f366347be3551a900ee22a8f8e9e1de8ffa1d31.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4fa0169d-f82f-420c-b689-0a6640618fe1/bcff21260fe2acdda71322ce4a28b7b4f77d2774.roa
Signing time: Mon 17 Jul 2023 22:13:01 +0000
ROA not before: Sun 16 Jul 2023 22:13:00 +0000
ROA not after: Thu 17 Jul 2025 22:13:00 +0000
asID: 270037
IP address blocks: 2803:15e0::/40 maxlen: 40
2803:15e0:100::/40 maxlen: 40
2803:15e0:200::/40 maxlen: 40
2803:15e0:300::/40 maxlen: 40
2803:15e0:400::/40 maxlen: 40
2803:15e0:500::/40 maxlen: 40
2803:15e0:600::/40 maxlen: 40
2803:15e0:700::/40 maxlen: 40
2803:15e0:800::/40 maxlen: 40
2803:15e0:900::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386920 (0x5e768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f366347be3551a900ee22a8f8e9e1de8ffa1d31
Validity
Not Before: Jul 16 22:13:00 2023 GMT
Not After : Jul 17 22:13:00 2025 GMT
Subject: CN=bcff21260fe2acdda71322ce4a28b7b4f77d2774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:20:2b:c7:76:d5:48:87:d6:04:21:3b:b6:1b:
c8:a1:ac:30:2c:02:7d:9d:df:b6:3d:ba:74:0d:f0:
7e:10:4f:98:e7:33:83:d6:a4:98:5b:33:68:e6:21:
69:6c:98:4d:8b:a1:dc:d1:fd:f2:60:52:f9:57:63:
65:ee:bb:ea:a5:1d:c4:c2:54:62:c3:38:b9:cd:99:
ca:ba:2e:cb:9b:aa:30:5d:51:0f:43:3b:61:ea:58:
5a:2d:7c:32:cf:fc:dc:48:72:34:e8:c7:ea:74:12:
89:9c:e8:b4:5a:c9:61:97:3a:48:60:0b:48:b6:6b:
e4:a8:d8:47:50:ae:d9:df:e0:a8:51:eb:60:b8:4f:
21:1b:15:19:f0:55:cb:b8:3e:be:26:7f:8f:9e:79:
cd:95:7f:0a:ab:23:1f:de:9b:e9:57:67:21:09:26:
b2:d5:d8:91:5e:ec:0c:af:8f:30:56:11:d6:00:b4:
f6:d8:e9:4e:f1:1d:eb:19:00:5d:64:52:a8:cd:5f:
af:ee:fe:92:fd:54:17:87:97:b4:74:c9:90:0a:b5:
82:9f:4c:54:92:d0:8e:f1:cb:4d:05:ae:99:f9:38:
40:2d:fd:6a:79:7f:97:c1:9e:ad:9c:8d:c8:0f:8c:
b1:87:d2:a5:2d:4f:bd:cb:52:01:8d:dd:76:3f:95:
8b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:21:73:93:C3:30:6E:C3:3D:C3:C8:F1:4F:1B:E6:C5:07:80:90:FD
X509v3 Authority Key Identifier:
keyid:3A:84:D3:30:17:CD:30:A3:7B:9C:43:B2:87:E2:2F:23:32:B6:26:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f366347be3551a900ee22a8f8e9e1de8ffa1d31.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fa0169d-f82f-420c-b689-0a6640618fe1/bcff21260fe2acdda71322ce4a28b7b4f77d2774.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4fa0169d-f82f-420c-b689-0a6640618fe1/1f366347be3551a900ee22a8f8e9e1de8ffa1d31.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:15e0::-2803:15e0:9ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5c:7c:8b:3a:e1:36:cd:38:bd:97:e6:07:6f:5f:af:b3:e3:c5:
ca:34:1f:89:e0:b0:b4:eb:d6:c7:c4:cb:73:dd:bc:c6:d1:8b:
8b:9f:74:3b:5b:3f:2f:ef:86:b4:9f:c4:9c:59:68:6b:84:b1:
49:b0:49:da:cf:5c:d1:75:c1:5c:68:be:2a:c8:e6:5e:b9:98:
0a:3f:6f:96:9d:93:d8:a4:46:49:b4:2a:e1:8c:ee:9e:37:cf:
51:bf:ee:53:db:d8:db:d2:50:d6:41:6d:c1:31:33:fc:f4:ff:
d6:e0:5b:6f:2e:ef:d9:f7:13:30:02:e9:f7:d5:d5:54:a8:38:
ca:11:bc:57:7e:ef:c2:96:3b:59:a9:d9:e9:17:f4:5e:36:76:
74:8f:94:a2:a7:70:47:0b:c6:a1:32:90:37:f6:9a:e2:b9:43:
08:a8:27:1d:5f:a3:81:75:69:70:86:2a:c4:ae:ca:ba:aa:d1:
fb:39:0e:64:17:9f:7b:60:8f:43:dc:b2:12:a8:0d:8b:df:2f:
00:29:89:81:2d:1a:d2:f0:d0:4b:1e:4f:37:de:33:99:17:d3:
1d:b0:9c:50:39:a6:92:fb:2e:3a:7b:49:e8:86:b3:e4:36:d3:
01:db:23:af:78:ae:5e:ac:82:0b:9d:83:df:42:95:a1:db:25:
cd:30:43:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org