Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/493de12850b0423da761e9f50dd24236af924d6f.roa
File: 493de12850b0423da761e9f50dd24236af924d6f.roa (raw, json)
Hash identifier: J2NCD3lSJ7s0WaE9V3AOwTUmXs7xZ4abaVj4fywQohg=
Subject key identifier: 0E:16:EC:9A:4C:CF:B8:A9:60:B7:AC:08:7D:78:11:DF:51:A8:82:8F
Certificate issuer: /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial: 06F69D
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/493de12850b0423da761e9f50dd24236af924d6f.roa
Signing time: Mon 02 May 2022 03:07:24 +0000
ROA not before: Mon 02 May 2022 03:00:00 +0000
ROA not after: Tue 02 May 2023 03:00:00 +0000
asID: 3970
IP address blocks: 2801:1e:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456349 (0x6f69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Validity
Not Before: May 2 03:00:00 2022 GMT
Not After : May 2 03:00:00 2023 GMT
Subject: CN=493de12850b0423da761e9f50dd24236af924d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c0:03:0d:b7:1c:73:95:1c:b8:38:97:4a:6f:
bf:9c:f3:45:5c:d6:d7:31:bf:1c:c6:66:d8:18:e7:
91:9b:d2:6f:56:ac:68:5b:47:b0:46:56:a0:b4:5b:
6c:4c:6d:ed:61:0c:07:63:06:32:99:55:82:d7:7c:
4d:01:1e:bc:ba:64:f8:78:7e:c1:4b:16:9b:b6:fa:
b0:19:b9:da:b2:3b:a4:b3:3d:bf:7b:2a:c5:aa:ed:
84:66:92:55:84:13:7e:37:12:50:6d:be:5b:58:e4:
ea:a4:77:ca:9e:f4:8d:49:3a:c2:2c:78:4d:5c:98:
f4:8c:4d:72:07:24:f7:7a:40:97:5d:aa:10:4e:09:
73:df:6b:35:49:28:f4:fc:8b:d9:67:37:8a:5b:35:
fa:70:95:22:bf:d5:89:84:ca:6a:f3:82:cc:50:e5:
ad:db:2f:c2:28:9a:62:bd:ec:e8:b0:9a:6d:27:d7:
91:9d:24:36:f6:4f:ae:d9:2e:a0:35:b0:2b:a7:e2:
b5:ef:60:8c:c4:0e:86:ec:a8:85:7c:0c:29:0f:45:
e6:b1:f7:b6:d7:b1:c5:9a:75:4e:0c:f3:16:18:a0:
8b:72:85:12:20:3b:3c:8d:87:f4:f8:8d:56:a6:d6:
31:6d:8e:1d:a8:63:ff:b5:55:75:51:de:42:ba:1d:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:16:EC:9A:4C:CF:B8:A9:60:B7:AC:08:7D:78:11:DF:51:A8:82:8F
X509v3 Authority Key Identifier:
keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/493de12850b0423da761e9f50dd24236af924d6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:1801::/48
Signature Algorithm: sha256WithRSAEncryption
52:eb:c2:b3:13:78:d4:25:62:c3:c7:f4:22:08:ef:4e:18:c0:
eb:fc:82:9c:bf:29:5a:9a:b9:a4:9f:0e:b7:db:ff:8a:bb:ea:
c9:ef:3e:50:5e:02:54:d0:a9:b5:d5:1a:5d:ff:b0:ab:e9:66:
23:e2:ce:c3:0b:aa:b8:2a:35:f6:c3:fb:8c:a5:57:27:6e:87:
8c:c7:b9:2b:88:df:ed:a2:7c:c4:ab:62:87:38:3d:24:c5:ae:
fb:ea:5c:69:6a:f7:37:c8:88:23:82:32:13:76:23:08:78:91:
06:45:bc:3e:af:c5:56:30:d1:8c:c1:f7:33:8a:17:a2:e1:e8:
4c:6f:bc:56:ed:72:0e:fd:ff:ad:7b:4e:3e:32:39:28:4f:fe:
13:5e:07:80:0f:53:3c:75:5b:8f:29:0a:60:3c:6f:bb:04:5f:
cf:3a:76:4c:d4:70:2b:2d:25:67:be:8e:93:0c:89:e1:5b:ee:
57:e1:13:bd:d9:59:8f:a1:09:02:4c:45:4f:d4:d1:b0:2b:3e:
f8:2e:b6:af:7c:f9:20:b6:81:35:19:45:59:21:2d:da:8f:30:
2c:39:6e:28:22:6b:15:31:61:b3:4e:bf:20:01:50:12:a1:32:
02:1f:8b:b9:5f:3b:b2:6f:63:7f:c8:81:f4:6e:21:3a:58:f3:
5b:f7:39:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-ams.rpki-client.org