Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a3d6ff749f4df4f5088847cc55c07c90449e7b4c.roa
File: a3d6ff749f4df4f5088847cc55c07c90449e7b4c.roa (raw, json)
Hash identifier: Q0AnHcq3+t8xH1cQ+0M44HSKEac6t6EODhISujUwPwQ=
Subject key identifier: 29:60:3D:CE:A8:E4:6B:06:E4:4A:47:41:F8:3B:A2:16:7B:97:D2:BD
Certificate issuer: /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial: 0A87ED
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a3d6ff749f4df4f5088847cc55c07c90449e7b4c.roa
Signing time: Fri 22 Jul 2022 00:01:16 +0000
ROA not before: Fri 22 Jul 2022 03:00:00 +0000
ROA not after: Sat 22 Jul 2023 03:00:00 +0000
asID: 3970
IP address blocks: 2801:1e:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690157 (0xa87ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Validity
Not Before: Jul 22 03:00:00 2022 GMT
Not After : Jul 22 03:00:00 2023 GMT
Subject: CN=a3d6ff749f4df4f5088847cc55c07c90449e7b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9a:1e:6a:54:b3:3d:13:fd:e1:b0:3b:b0:eb:
11:2c:fa:f4:fc:5f:23:0f:aa:59:78:da:18:37:fb:
1e:df:89:2b:02:4f:9b:2d:51:67:7a:87:b6:d1:c8:
f2:ba:0f:6d:be:f6:98:46:58:f9:21:df:79:33:9b:
3c:d2:04:54:9f:6a:96:2e:26:c9:f0:41:bc:3c:03:
de:64:44:fc:c7:f7:4f:4f:f2:39:94:57:27:1e:1f:
85:ee:81:2a:55:d1:dd:a3:2c:78:8f:42:c1:d9:83:
2d:c6:8d:40:c3:43:8f:b4:e8:3e:67:a5:af:f8:44:
0d:84:48:a7:85:34:63:a2:f9:17:82:32:e8:cb:65:
c3:51:1f:40:40:b4:fc:24:ca:02:18:5b:ed:e4:eb:
81:ac:81:fd:da:87:d1:35:75:11:a9:20:be:60:13:
2b:e6:b4:81:9a:59:26:22:33:be:bf:67:09:d3:0b:
74:0d:b3:66:ec:5a:38:99:03:54:3f:a2:59:85:0a:
fa:dd:43:8f:4f:df:37:a2:22:58:8a:67:a5:29:82:
1d:1f:a6:28:e1:31:af:42:57:bb:6f:64:a0:0f:70:
98:62:af:8e:ed:75:70:9a:2a:75:5d:f3:79:ee:fe:
cd:00:f6:f5:ce:20:cc:b4:3b:f6:f6:83:4d:28:f8:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:60:3D:CE:A8:E4:6B:06:E4:4A:47:41:F8:3B:A2:16:7B:97:D2:BD
X509v3 Authority Key Identifier:
keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a3d6ff749f4df4f5088847cc55c07c90449e7b4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:1801::/48
Signature Algorithm: sha256WithRSAEncryption
7e:d6:60:3a:01:8a:68:3c:89:9b:ea:57:65:e0:50:54:e4:60:
79:1a:69:0d:a5:07:de:ba:e4:69:96:d9:13:5a:34:8c:1c:fb:
45:06:08:82:61:01:9d:21:38:57:17:36:da:06:6c:65:ec:b9:
50:04:72:30:9e:78:09:ad:b7:ee:49:29:cd:d6:24:4c:63:62:
e4:19:45:6c:bb:03:52:b5:c5:3a:9c:bb:a6:2f:b7:24:12:66:
d2:b8:44:80:a8:30:2f:c8:35:06:50:91:88:d0:ac:9a:7c:17:
b2:9c:32:cb:c8:96:19:c5:40:f2:72:88:80:cf:c6:d9:22:55:
27:0f:3a:57:1e:ca:b7:d5:94:2c:fa:64:ab:20:9c:27:9d:5f:
38:fb:9f:35:0f:2c:a3:76:63:eb:ec:be:65:1b:e0:41:17:cb:
97:df:c4:33:f9:2a:62:24:29:eb:0a:b6:8b:c7:48:72:d3:af:
17:81:aa:97:97:1e:28:e5:b1:29:fc:c0:43:93:08:3d:5d:a0:
cc:b3:fc:9f:c4:4e:d4:8a:d0:b9:ad:f2:b3:cb:a8:f2:8b:a4:
09:03:1c:9e:ff:bd:cc:ad:a6:a6:94:c2:a9:48:ab:a7:eb:1b:
b5:9e:3d:1b:1b:a1:fd:ab:89:5e:34:43:21:9b:d0:fa:2f:0a:
21:98:da:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-ams.rpki-client.org