Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/14dfa707509b53ae645f181afddeb22c9b9528dd.roa
File: 14dfa707509b53ae645f181afddeb22c9b9528dd.roa (raw, json)
Hash identifier: X/y5K8MJum0y6AhLMhJpcDg+rCtAyf2h9L0gzsT3Jc4=
Subject key identifier: EB:57:84:33:67:A3:3B:56:AD:C0:8D:43:3F:0C:A3:28:E5:7D:40:29
Certificate issuer: /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial: 047023
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/14dfa707509b53ae645f181afddeb22c9b9528dd.roa
Signing time: Mon 07 Mar 2022 01:45:35 +0000
ROA not before: Mon 07 Mar 2022 03:00:00 +0000
ROA not after: Tue 07 Mar 2023 03:00:00 +0000
asID: 3970
IP address blocks: 2801:1e:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290851 (0x47023)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Validity
Not Before: Mar 7 03:00:00 2022 GMT
Not After : Mar 7 03:00:00 2023 GMT
Subject: CN=14dfa707509b53ae645f181afddeb22c9b9528dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ea:5b:a9:d3:2f:cc:66:f6:38:f3:58:a9:b3:
4b:26:2b:08:07:8e:9f:03:5f:b2:c9:c7:2f:58:07:
dc:bb:dc:b2:90:01:e3:e9:f5:9e:e4:fb:dd:ec:49:
af:47:65:b6:2b:70:60:13:9e:c0:b3:4a:4a:41:f2:
39:ac:73:31:81:45:2e:3a:64:9c:ec:f3:fa:8e:a4:
1f:25:60:6b:55:d1:5a:bb:9c:0f:98:5b:d8:9c:33:
01:ee:ae:ca:8e:3e:09:d7:2b:06:3d:ca:de:37:28:
f6:d2:4a:bc:d4:21:45:e5:d4:7e:77:59:0e:fd:c4:
73:77:e8:34:d6:eb:33:02:28:06:40:0f:67:64:5c:
35:10:68:65:79:0b:1e:00:f4:b1:fe:64:69:6c:9a:
49:64:5e:1f:7f:e0:83:fc:38:1f:02:ac:ca:6a:ce:
c4:2d:c4:0a:34:27:d6:07:11:b4:c7:5e:e5:8e:35:
db:b4:66:08:49:dc:c8:0c:4b:43:8b:36:b3:b5:3e:
fc:7d:19:e1:b3:be:e5:8d:bb:fa:f4:50:8a:6a:f6:
bc:63:53:d1:17:d4:da:34:98:b1:bf:a0:49:60:20:
5f:c4:b6:b7:b0:f7:20:57:6a:8c:4e:c6:af:d2:3d:
7d:86:74:13:00:57:e3:17:be:05:c0:67:f0:e1:7d:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:57:84:33:67:A3:3B:56:AD:C0:8D:43:3F:0C:A3:28:E5:7D:40:29
X509v3 Authority Key Identifier:
keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/14dfa707509b53ae645f181afddeb22c9b9528dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:1801::/48
Signature Algorithm: sha256WithRSAEncryption
a6:ce:64:c6:2d:8e:5f:d7:0d:32:cd:9d:9e:f0:15:d2:d5:71:
75:b9:e3:c4:f3:9d:fe:3c:a6:e5:b6:cd:8f:a3:24:06:66:44:
b5:19:5c:18:06:3a:a3:00:e1:3a:cd:4e:3c:f2:f8:22:10:3c:
84:d0:38:c8:fc:04:c1:26:e5:a4:ca:dc:ad:54:38:7a:aa:3b:
7b:fd:fa:cd:6b:b8:fb:29:85:3f:e8:d3:65:b3:e4:99:40:a3:
70:30:fa:74:dd:fd:20:bb:be:02:cd:9e:c7:2c:62:a3:12:f9:
84:e4:01:e9:75:e4:b2:18:16:a7:82:70:d3:65:e8:47:4f:cf:
81:b2:38:7a:88:00:e2:7f:16:0e:f6:fc:33:eb:ab:1b:bb:97:
1b:f2:26:c5:98:e9:eb:b2:0f:c1:b6:f2:54:2a:cf:12:28:3d:
d6:96:a2:d3:38:ec:61:9f:30:62:0e:b4:ce:92:21:37:7b:d4:
21:29:f5:da:33:5b:7b:65:10:6d:1f:28:d3:a9:3b:05:33:cb:
2e:fe:fc:83:d4:8d:ab:20:0e:65:36:77:bd:3f:46:b3:87:90:
b2:19:55:f0:84:9e:c0:73:50:1d:92:d0:32:08:90:5a:cd:33:
f0:df:24:a6:5e:b3:91:84:48:0f:ba:12:75:4d:88:e3:73:e4:
53:6f:a2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org