Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2955cab76e12260e172733a37cbdba833f8eb173.roa
File: 2955cab76e12260e172733a37cbdba833f8eb173.roa (raw, json)
Hash identifier: cGUwngG/fyw8IOgBHEqpSnG7AoadYIhEhrO/LmVc1jQ=
Subject key identifier: 18:4A:32:E6:4C:FF:DA:12:BF:42:9E:A2:F3:1B:B0:F8:91:0B:56:C1
Certificate issuer: /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial: 03349E
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2955cab76e12260e172733a37cbdba833f8eb173.roa
Signing time: Tue 08 Feb 2022 01:35:49 +0000
ROA not before: Tue 08 Feb 2022 03:00:00 +0000
ROA not after: Wed 08 Feb 2023 03:00:00 +0000
asID: 3970
IP address blocks: 2801:1e:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210078 (0x3349e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Validity
Not Before: Feb 8 03:00:00 2022 GMT
Not After : Feb 8 03:00:00 2023 GMT
Subject: CN=2955cab76e12260e172733a37cbdba833f8eb173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:90:41:8d:72:c7:7c:6d:8d:c5:1d:50:7f:
cf:66:e8:ad:9e:2a:41:72:3b:56:67:66:7e:96:7f:
f1:7d:cd:34:d1:81:ed:7e:22:de:12:60:13:a8:90:
f5:13:32:a0:91:45:9a:96:be:67:6c:e1:0c:7b:89:
05:66:00:eb:e1:2c:b5:2f:ed:8d:bc:78:77:2a:8c:
ed:d3:97:f5:64:a8:cf:47:f2:4b:66:8c:76:6c:ad:
25:44:4e:e8:80:06:ff:d0:8b:db:34:36:f3:eb:fe:
b6:9c:64:b6:32:e0:a3:d9:76:3c:72:87:c1:e9:ea:
5f:89:00:29:86:e9:4f:c2:62:bd:d0:4c:a0:00:40:
65:c5:45:ef:9c:29:db:99:79:c5:8a:51:27:61:a0:
a7:0b:0c:4d:ac:25:aa:70:d8:24:a9:64:9f:a3:30:
a7:07:dc:f1:6a:bf:95:ea:a7:9f:be:cb:34:90:49:
11:27:82:f8:9f:c7:ad:40:68:72:6d:81:70:d7:29:
21:86:0a:d0:bf:8a:82:34:cd:09:69:73:6c:46:c7:
a9:1c:c5:42:43:3f:7c:1e:6d:b4:cf:ce:f0:fe:39:
be:4a:53:07:bf:49:24:ed:e7:94:bd:3a:4f:bc:8a:
f6:98:90:ed:8f:26:23:36:32:1e:6b:e8:94:8c:8a:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4A:32:E6:4C:FF:DA:12:BF:42:9E:A2:F3:1B:B0:F8:91:0B:56:C1
X509v3 Authority Key Identifier:
keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2955cab76e12260e172733a37cbdba833f8eb173.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:1801::/48
Signature Algorithm: sha256WithRSAEncryption
c6:43:a5:21:b4:2d:9f:2c:e2:d0:5e:0e:fb:6e:ec:70:78:22:
ce:f9:29:c3:d5:fb:dd:e7:80:7c:ec:d2:60:3a:73:8c:d9:c2:
cc:4f:23:bd:8a:fa:45:e3:9a:e0:60:b4:9d:26:8e:2a:f4:d2:
b3:78:af:6e:34:09:c7:25:3e:f2:76:ec:22:fc:e7:ed:a3:a3:
91:23:df:cb:e9:e4:10:3a:5f:a0:a8:20:2d:8d:5e:38:48:09:
4e:13:07:cb:47:ed:0c:97:a2:ce:d0:4c:a7:df:c8:af:5a:91:
fa:8a:ef:fe:19:32:ca:0b:4e:fa:a7:cf:be:4a:69:88:ec:5d:
a4:bc:b9:f3:11:db:f9:a1:86:ec:69:14:38:82:43:67:65:e3:
d7:57:1a:34:e0:89:81:e4:ad:a8:b9:42:6c:5b:aa:a0:8b:9c:
de:6c:a9:d6:f2:78:d7:d1:68:8c:03:3c:53:fe:99:c3:12:41:
f8:e3:02:e1:8c:5a:5b:7c:a3:46:72:2e:bd:0a:68:81:a9:63:
7e:7e:c8:e6:c5:7a:ed:3f:1b:a5:63:a3:4e:5e:1f:94:76:af:
14:6f:1a:7d:1f:a9:0b:6b:99:81:56:4a:0b:6c:56:73:97:af:
99:2b:21:1b:9a:52:82:05:91:b9:d2:50:2f:85:6d:69:35:00:
8b:8a:60:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org