Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/67f3e915ca5ab861b1c1b11677c44f180d94eec1.roa
File: 67f3e915ca5ab861b1c1b11677c44f180d94eec1.roa (raw, json)
Hash identifier: dSdQYBdCHxQtdnpWC2Ynhw4rBz0gvl6OW3HC3hi/ehQ=
Subject key identifier: 26:5B:C6:FA:FC:56:72:87:00:CB:DE:24:29:05:EA:D0:07:06:02:84
Certificate issuer: /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial: 09CF3A
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/67f3e915ca5ab861b1c1b11677c44f180d94eec1.roa
Signing time: Tue 05 Jul 2022 04:18:03 +0000
ROA not before: Tue 05 Jul 2022 03:00:00 +0000
ROA not after: Wed 05 Jul 2023 03:00:00 +0000
asID: 3970
IP address blocks: 2801:1e:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642874 (0x9cf3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Validity
Not Before: Jul 5 03:00:00 2022 GMT
Not After : Jul 5 03:00:00 2023 GMT
Subject: CN=67f3e915ca5ab861b1c1b11677c44f180d94eec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:0b:6c:e3:f7:0b:ca:6d:57:a9:47:11:38:
c7:d4:c0:1f:70:a4:1b:0e:d2:05:d0:cf:6d:b6:49:
c0:55:9c:fb:76:f4:f7:95:33:ac:2d:97:77:3b:e7:
16:3b:cf:bd:35:cb:99:6e:75:ed:24:d3:9a:fb:69:
12:9f:f7:3c:8b:b4:e7:1b:ec:d4:21:18:51:32:8a:
05:16:a7:11:77:c8:2b:a8:9b:85:08:1e:d1:97:70:
ec:71:70:25:2d:d7:25:c2:fe:e1:a5:b6:fb:a5:9f:
52:e3:39:ed:33:46:73:5d:34:3b:8d:26:1e:ab:97:
08:17:2e:5d:b8:a9:33:cc:6c:5d:a6:bc:ef:b9:bf:
e7:c1:f6:fc:37:5b:36:76:10:6f:72:aa:34:a7:67:
29:0f:8f:16:aa:cf:28:da:bb:08:0b:e7:e4:fe:17:
cf:95:84:8e:61:5c:13:0a:dd:a7:b0:fa:14:67:9c:
c1:d5:a8:e8:d4:85:11:89:64:14:eb:a2:93:b2:b0:
f0:8f:21:f4:54:33:1d:75:7e:60:cb:a8:a4:85:3e:
51:43:c5:91:1c:f8:cd:04:54:c2:56:fd:c4:14:52:
23:75:57:28:7b:69:37:bc:86:a7:e3:ad:cd:51:56:
35:31:ac:f2:b9:96:18:09:0f:43:67:1e:f4:cd:f1:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5B:C6:FA:FC:56:72:87:00:CB:DE:24:29:05:EA:D0:07:06:02:84
X509v3 Authority Key Identifier:
keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/67f3e915ca5ab861b1c1b11677c44f180d94eec1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:1801::/48
Signature Algorithm: sha256WithRSAEncryption
b8:68:38:19:07:c3:70:80:3b:8b:e6:d0:b4:91:32:f9:1f:66:
51:9f:35:0f:a6:ff:46:31:a2:f5:0f:5a:7b:e6:b1:fa:db:a1:
94:44:15:75:b9:e0:f4:97:8a:8d:90:ec:8a:ee:9f:3d:8e:27:
f3:eb:bd:4d:b7:59:eb:2b:da:51:70:a8:7c:c1:26:d6:73:eb:
f4:94:ab:d5:b7:2a:0d:72:05:b2:94:2d:1c:23:be:bc:98:8d:
88:0f:53:a6:a3:ba:4a:e3:3c:39:c8:b7:df:c5:d5:95:2c:9d:
85:7a:38:1b:24:25:8a:16:b9:c0:46:cd:86:c4:29:83:74:ad:
43:fb:c5:70:f7:88:2f:b0:99:7d:59:44:70:4f:65:38:6d:23:
e1:b0:f6:8b:b7:d9:93:08:b0:8a:46:41:31:8a:9d:ff:3a:fd:
62:2e:60:e5:91:c0:ac:54:3b:2a:a5:53:6b:a1:61:a4:54:fe:
58:86:4e:f1:08:1e:da:70:f3:06:99:dd:51:67:0b:3d:f1:a5:
02:47:41:82:62:76:0d:d0:b8:bf:94:5a:31:68:42:64:6c:df:
11:91:79:29:62:94:03:89:24:fc:62:76:df:30:53:a1:81:17:
0e:17:76:3e:57:74:74:60:cc:ab:02:b3:e8:35:49:3b:c4:fd:
e6:21:d4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org