Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/8a869267cddf7f9711e47f1ee22c144cf4f904e5.roa
File: 8a869267cddf7f9711e47f1ee22c144cf4f904e5.roa (raw, json)
Hash identifier: DRGnB2PmPhv7NaToqr2VkGa0nX+Zy+uD4IbsQUtA4EY=
Subject key identifier: 88:A1:EB:A9:EE:5F:E6:09:F7:E2:5F:24:31:D2:49:AC:61:20:5D:1C
Certificate issuer: /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial: 20A57C
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/8a869267cddf7f9711e47f1ee22c144cf4f904e5.roa
Signing time: Wed 07 Feb 2024 17:29:51 +0000
ROA not before: Wed 07 Feb 2024 17:29:51 +0000
ROA not after: Sat 07 Feb 2026 17:29:51 +0000
asID: 272978
IP address blocks: 2803:b0e0:800c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2139516 (0x20a57c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Validity
Not Before: Feb 7 17:29:51 2024 GMT
Not After : Feb 7 17:29:51 2026 GMT
Subject: CN=8a869267cddf7f9711e47f1ee22c144cf4f904e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:a8:e6:30:8d:be:6a:a1:fe:b4:33:8e:37:
22:ef:77:2f:8c:a0:d4:15:61:bc:27:2b:fd:37:60:
55:bf:19:6d:17:8c:d0:79:f8:46:a1:49:f6:e0:85:
5a:18:57:91:eb:2c:ee:75:b9:14:c4:64:c8:97:d6:
d7:1a:77:fa:0d:2b:82:9c:85:e2:9a:ab:e0:47:db:
7a:40:e0:b5:5b:51:59:0f:78:f9:11:c0:2e:f8:8b:
45:ba:8a:88:61:bf:85:9d:2d:92:38:d6:9d:d7:b1:
78:2a:6a:9e:99:f8:9e:35:7e:e8:6a:8d:f2:da:8e:
5b:d2:3b:57:44:6b:58:1e:0c:47:fd:76:51:80:92:
b1:fd:4d:90:0d:a4:a0:62:46:07:5e:05:e3:72:92:
f2:67:fd:a8:ec:01:8d:61:5d:ee:a3:a4:eb:37:c1:
1a:9c:cd:10:41:e8:33:bb:ba:60:c8:eb:64:04:53:
b5:08:9c:0f:39:16:e9:e6:f3:d1:10:fb:1a:20:ef:
4b:21:f8:81:73:e7:d4:49:ef:9e:68:7d:48:32:26:
af:dd:35:a0:4b:0e:aa:ed:1c:28:1e:dc:ec:0b:39:
bf:34:28:c3:ca:85:2a:4b:63:42:f4:6b:f7:2e:21:
4a:c3:61:36:8b:63:6c:0b:48:e8:05:07:92:c0:f3:
df:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A1:EB:A9:EE:5F:E6:09:F7:E2:5F:24:31:D2:49:AC:61:20:5D:1C
X509v3 Authority Key Identifier:
keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/8a869267cddf7f9711e47f1ee22c144cf4f904e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:b0e0:800c::/48
Signature Algorithm: sha256WithRSAEncryption
45:82:c5:f3:cc:79:bd:7c:9b:58:d0:59:27:7d:83:e7:c8:a6:
63:64:c1:c5:db:5c:0d:86:1e:e2:7d:74:92:3d:02:06:d8:a7:
72:cb:41:79:3d:40:81:a6:1e:7d:1d:b2:72:b9:41:fd:c1:dd:
18:db:3d:71:80:96:9e:60:4b:de:b6:55:96:8d:e8:5b:53:d8:
86:59:24:2f:77:b1:c9:bb:c3:41:17:44:f1:df:07:3f:99:0d:
2a:35:1a:c0:14:da:bc:9b:27:6d:f4:c8:33:aa:d7:53:9f:f1:
d0:27:c7:72:d9:cb:87:59:3e:f6:5e:45:59:c6:e8:3a:3d:9c:
c5:1f:31:78:9f:a4:97:ec:51:a3:ee:7c:fd:5e:eb:b1:39:79:
32:44:40:6f:1f:d8:c6:e8:6c:a6:e9:5c:96:b4:35:62:51:53:
60:2a:ad:d0:46:0a:23:03:b6:09:af:99:98:ad:12:86:e6:79:
51:d7:2e:d1:df:43:2a:44:5e:f5:ca:a2:80:2e:25:30:8d:ce:
e7:a7:02:2d:d5:c8:01:75:0b:f9:43:ac:e4:a6:07:66:cf:1a:
0e:9c:61:dc:24:30:42:95:5d:08:ba:eb:43:1e:e3:94:40:26:
af:36:16:fe:a1:63:a1:29:ea:ea:b9:29:8d:52:d4:d8:5e:52:
92:be:eb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org