Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/5708a420d91a14b829b5adcc07a188cff942c9b6.roa
File: 5708a420d91a14b829b5adcc07a188cff942c9b6.roa (raw, json)
Hash identifier: HocI3gQSsh/fHXYLVwvEsCJguXh2DHMjLuCJnaxF5LM=
Subject key identifier: 15:6B:B7:71:B2:B1:EF:48:F3:52:97:55:B5:34:6B:19:04:6C:7C:13
Certificate issuer: /CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
Certificate serial: 207F18
Authority key identifier: 35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/5708a420d91a14b829b5adcc07a188cff942c9b6.roa
Signing time: Thu 25 May 2023 08:30:03 +0000
ROA not before: Wed 24 May 2023 08:30:03 +0000
ROA not after: Fri 23 May 2025 08:30:03 +0000
asID: 26210
IP address blocks: 2800:88:11::/48 maxlen: 48
2800:88:12::/48 maxlen: 48
2800:88:13::/48 maxlen: 48
2800:88:1a00::/40 maxlen: 48
2800:88:1b00::/40 maxlen: 48
2800:88:40::/48 maxlen: 48
2800:88:d::/48 maxlen: 48
2800:88:e::/48 maxlen: 48
2800:88:f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2129688 (0x207f18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
Validity
Not Before: May 24 08:30:03 2023 GMT
Not After : May 23 08:30:03 2025 GMT
Subject: CN=5708a420d91a14b829b5adcc07a188cff942c9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6c:63:c1:cb:1c:fe:18:16:70:bc:29:78:3f:
b4:57:6e:59:5f:94:bb:26:5c:b6:65:84:e0:60:78:
7b:16:5b:e8:d8:dd:b4:e9:c6:41:1a:85:08:08:0b:
ce:64:b7:0c:44:44:86:05:c5:fc:00:b6:40:3b:6a:
f8:0a:0c:a7:28:4b:da:52:67:fd:99:72:bb:ec:fe:
41:5e:60:28:9b:06:cd:68:d3:dc:30:c7:5e:38:93:
ef:13:1e:b3:71:27:32:f5:e4:90:c5:b5:b8:39:d3:
4a:a5:bb:62:35:ae:51:57:18:3d:8b:74:7d:1a:cb:
9c:cd:78:0e:aa:86:aa:77:41:a8:48:67:04:f1:9c:
05:24:18:a9:a6:0f:57:08:b1:6e:95:34:20:52:8a:
2a:43:1b:d6:4d:bd:c6:e2:1b:3f:d1:a2:78:e8:44:
7e:80:f3:c9:da:fc:5b:52:ef:97:7f:4e:7d:f5:b7:
53:87:a2:a3:0b:3b:cb:d4:46:82:a7:d7:3f:a6:26:
f9:24:18:38:dc:15:af:a7:64:6f:22:36:fe:7c:83:
75:b0:9e:a4:0d:c8:45:8e:df:4f:cc:86:80:2f:bf:
5c:c5:83:cd:67:d8:14:91:5c:31:55:b5:e3:88:92:
01:a5:ba:43:47:d5:b7:ac:9c:09:3e:8a:9a:67:cf:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6B:B7:71:B2:B1:EF:48:F3:52:97:55:B5:34:6B:19:04:6C:7C:13
X509v3 Authority Key Identifier:
keyid:35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/5708a420d91a14b829b5adcc07a188cff942c9b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/be51756b3d6021dd6ee3d4415280c6f6b7603b86.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:88:d::-2800:88:f:ffff:ffff:ffff:ffff:ffff
2800:88:11::-2800:88:13:ffff:ffff:ffff:ffff:ffff
2800:88:40::/48
2800:88:1a00::/39
Signature Algorithm: sha256WithRSAEncryption
3e:7b:27:4d:39:16:1a:1e:f5:05:32:fb:50:49:1c:cc:2c:e8:
70:e8:bb:58:8b:66:39:fa:32:a0:4c:9e:8f:7b:88:d4:76:c7:
0d:31:08:3d:17:1f:d6:f1:05:5d:c9:f2:85:b6:98:03:b6:11:
bb:1e:36:50:f6:00:b3:26:d2:b0:79:9b:e1:9d:db:1d:9a:18:
a8:8a:02:39:23:03:1d:44:59:af:7b:e8:68:73:42:63:50:b4:
a4:b6:2f:fd:87:b1:45:33:8e:fe:73:c4:0f:37:20:a5:16:1d:
ac:0b:db:41:12:30:5a:d7:72:61:5f:85:83:14:55:99:8c:35:
70:d9:4b:a0:1b:f1:73:60:b0:22:15:67:66:1c:44:cc:a6:f1:
e5:47:5f:01:5f:ed:2a:4d:a3:3f:0d:50:57:32:ec:fe:81:af:
00:ca:d6:86:76:67:d9:57:6d:0a:a0:03:24:4d:54:0a:a7:36:
5d:02:f1:16:a9:5f:e8:d4:14:fd:7d:e5:87:b4:bf:5b:e6:9c:
3b:90:5c:93:7b:71:ee:98:95:1a:85:f3:e4:a5:91:8b:a8:90:
28:48:7e:85:e0:ba:e3:91:76:e5:a1:e5:94:0c:aa:62:a9:b4:
1b:39:76:d5:41:59:57:00:00:d6:93:ea:1c:46:e6:5a:75:d2:
88:ef:0f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org