Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/204d09b68f6b5d3f069355acbbdf1bbe66cc2db9.roa
File: 204d09b68f6b5d3f069355acbbdf1bbe66cc2db9.roa (raw, json)
Hash identifier: Xmdl/o4PQsrgKf41FXumT6tmlRX9jhgC26VaTn02FD4=
Subject key identifier: 77:1C:6A:2D:37:A7:26:25:65:FE:39:8B:17:B7:6D:5A:C2:07:40:FD
Certificate issuer: /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial: 02F54D
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/204d09b68f6b5d3f069355acbbdf1bbe66cc2db9.roa
Signing time: Tue 01 Feb 2022 04:23:25 +0000
ROA not before: Tue 01 Feb 2022 03:00:00 +0000
ROA not after: Wed 01 Feb 2023 03:00:00 +0000
asID: 3970
IP address blocks: 2801:1e:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193869 (0x2f54d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Validity
Not Before: Feb 1 03:00:00 2022 GMT
Not After : Feb 1 03:00:00 2023 GMT
Subject: CN=204d09b68f6b5d3f069355acbbdf1bbe66cc2db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:a8:5f:5d:45:e1:08:38:84:11:62:9f:c5:
91:a2:51:8f:35:2f:32:7b:00:bc:51:b9:9d:49:c8:
9b:47:01:ff:29:dd:ec:92:42:e7:d5:2b:86:40:3a:
d4:2c:f5:5d:c8:07:5d:41:d8:eb:e0:a7:77:a3:9c:
61:2c:13:07:ce:ff:7c:33:fe:51:66:dc:10:92:48:
70:15:19:f7:ad:bc:fe:17:c1:85:6d:55:9a:fc:c1:
5a:22:b2:4a:a9:ec:f4:33:33:49:69:58:57:9f:22:
a9:cb:04:94:47:8b:b4:c9:be:b7:6a:bd:36:ea:db:
00:e2:12:9e:7c:5c:57:2e:95:16:62:2d:3b:82:ec:
70:c5:36:c5:08:22:eb:15:10:7a:5f:fe:57:44:eb:
fe:4e:b2:42:4a:c8:3e:f7:07:eb:88:1d:e3:ed:bc:
96:0f:42:e0:cf:83:6d:29:8e:6e:63:d4:cb:51:43:
8a:15:4a:40:73:6b:2b:67:19:29:08:80:75:e5:13:
be:62:69:6f:ea:78:d6:10:fd:bb:4c:ee:c5:40:73:
4a:84:2d:77:25:70:08:14:07:56:0b:d9:52:f9:8c:
59:01:4c:4e:97:12:48:ce:b8:c6:53:ca:18:1c:0b:
52:3a:5b:62:7d:9f:d3:7f:a3:d2:ff:9a:32:ca:6f:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1C:6A:2D:37:A7:26:25:65:FE:39:8B:17:B7:6D:5A:C2:07:40:FD
X509v3 Authority Key Identifier:
keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/204d09b68f6b5d3f069355acbbdf1bbe66cc2db9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:1801::/48
Signature Algorithm: sha256WithRSAEncryption
6c:71:27:85:c1:3d:4d:c3:d0:15:86:55:df:79:6d:8c:7c:38:
6f:aa:5b:77:1a:fb:34:b1:a4:fe:10:91:55:95:c9:4f:83:83:
72:10:fe:ce:97:2f:ed:7a:17:dc:d5:3c:31:7a:ca:02:34:66:
a3:c0:47:0a:8b:e0:1d:3e:af:d0:38:34:e5:a7:de:6c:92:05:
7a:8d:80:26:38:f4:bb:5c:c4:ea:21:93:dd:08:9a:04:63:a2:
c3:c8:0b:fc:de:92:aa:d2:81:50:80:8d:11:f9:ef:d5:a6:a2:
02:dc:bf:80:3f:e1:51:11:a6:12:4d:6c:8c:4a:48:57:94:ca:
89:69:d6:3e:6e:8d:41:2c:e1:98:29:4b:a7:50:ce:0c:a2:17:
96:db:47:93:1e:55:4a:36:13:e2:59:a5:dc:c6:1b:e8:11:8c:
b6:a7:f7:d2:71:a0:10:7b:11:6a:a4:b4:a1:47:0d:61:26:6d:
92:31:b8:72:8d:77:46:07:cb:de:6b:90:2f:80:93:1f:e1:96:
4e:56:d0:00:89:2b:5a:c5:d4:5a:30:aa:bb:a0:7f:f4:c0:80:
75:45:9e:4e:52:c1:f4:8e:b4:36:d0:da:c2:4f:b8:fa:d1:22:
51:52:b9:62:4e:83:5a:37:2b:2e:8f:91:ec:3c:5c:0c:d3:78:
87:6c:99:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org