Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/932fab1793d3500a9b7885e53456f1cfeff0015e.roa
File: 932fab1793d3500a9b7885e53456f1cfeff0015e.roa (raw, json)
Hash identifier: JcbCskH6bUMkERXKg7Qr5LXbhocPzcyEj2qtlB302ac=
Subject key identifier: 09:65:B6:51:26:5B:0C:0D:37:17:81:AA:26:FD:A3:CA:24:04:4A:17
Certificate issuer: /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial: 09A00C
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/932fab1793d3500a9b7885e53456f1cfeff0015e.roa
Signing time: Fri 01 Jul 2022 00:42:24 +0000
ROA not before: Fri 01 Jul 2022 03:00:00 +0000
ROA not after: Sat 01 Jul 2023 03:00:00 +0000
asID: 3970
IP address blocks: 2801:1e:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 630796 (0x9a00c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Validity
Not Before: Jul 1 03:00:00 2022 GMT
Not After : Jul 1 03:00:00 2023 GMT
Subject: CN=932fab1793d3500a9b7885e53456f1cfeff0015e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:de:8a:9f:c1:f0:c5:cb:fe:c5:7d:3a:13:
66:55:4c:a5:39:22:b3:c2:b4:11:32:e2:9f:4d:c2:
00:58:e9:7c:22:4e:77:10:86:11:4c:a1:85:48:f4:
73:31:be:de:05:30:17:72:6f:1b:74:40:c4:71:18:
31:0a:40:08:fc:40:04:ba:24:7e:75:06:89:b3:57:
ad:b3:fe:a6:7e:b5:ad:64:fe:b3:06:d4:fd:50:c5:
89:13:10:1b:18:ec:d7:5a:67:fc:ff:00:8f:1b:3a:
6c:a6:8b:d8:94:f3:61:d2:23:af:64:d4:be:48:cc:
dc:50:1b:35:6d:6d:e5:b8:91:19:a0:74:9c:28:45:
2e:34:5d:94:84:b7:47:4b:91:d7:da:d1:76:b2:8c:
49:43:0a:d8:9a:ec:6c:e2:54:25:02:d7:71:12:81:
cb:0b:8f:e8:bb:ff:5c:27:cf:1c:82:b6:81:dd:08:
e8:7d:9c:4c:e3:ee:03:d5:45:b9:9d:e8:ad:67:04:
4d:bd:5b:31:63:0a:91:3f:fd:e8:5b:75:c6:63:a1:
91:ca:0f:bb:ee:28:a1:19:c9:08:28:db:d0:1b:03:
67:11:2b:47:e6:bf:e8:9c:6d:05:dd:63:20:96:38:
33:f7:95:ec:d0:6a:8d:41:5d:6e:60:60:5a:24:31:
2b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:65:B6:51:26:5B:0C:0D:37:17:81:AA:26:FD:A3:CA:24:04:4A:17
X509v3 Authority Key Identifier:
keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/932fab1793d3500a9b7885e53456f1cfeff0015e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:1801::/48
Signature Algorithm: sha256WithRSAEncryption
77:dd:bf:35:23:4a:e6:8d:f8:cd:be:c9:73:84:76:81:bd:4a:
ec:89:31:77:e8:bf:cc:f4:30:c2:9d:6e:4f:1b:c7:7f:dd:94:
4b:af:ec:37:7c:fb:75:65:a0:ed:96:ee:45:05:e9:29:61:b1:
1e:17:00:24:80:39:27:22:10:c4:1d:14:f8:c3:a0:2f:ea:8d:
02:37:96:57:de:37:cf:81:21:d6:06:f8:1b:b0:b4:99:10:89:
cc:45:e1:98:c9:f5:66:e3:ae:24:f6:89:56:d8:88:17:d5:77:
a2:16:2e:4e:10:bb:86:12:8b:cd:60:bf:be:b9:5c:21:c8:9d:
41:83:47:da:95:a7:70:12:48:56:aa:43:8f:b5:0f:b1:c7:65:
81:07:ce:6f:fa:e8:cb:45:6e:21:d9:5c:53:9c:24:24:d5:70:
40:ba:84:fd:72:79:64:e0:a5:8e:82:2b:7d:2f:25:9e:8f:23:
0e:b5:6a:a4:69:25:36:1a:93:c6:fd:21:66:d0:97:33:52:51:
56:a0:7a:eb:55:04:f5:ec:98:c5:72:34:b0:e9:c1:21:01:b6:
8e:a2:6c:dc:fd:26:57:14:64:e8:8e:e7:a5:6a:ef:e7:9e:ad:
ca:2b:df:29:a2:c6:ec:05:03:9c:bc:25:72:e2:fb:70:24:cc:
b9:e1:26:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org