Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b71d79205378a419f479f95f11c002995642aa1f.roa
File: b71d79205378a419f479f95f11c002995642aa1f.roa (raw, json)
Hash identifier: N2VeEP4fBoMDFSxxqZ+R+QUhzvH/ETirZJ2XcXiN8Jk=
Subject key identifier: BA:2B:F4:A3:1D:92:79:4A:25:17:1D:8F:A9:D6:96:3F:97:81:52:4D
Certificate issuer: /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial: 09E274
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b71d79205378a419f479f95f11c002995642aa1f.roa
Signing time: Thu 07 Jul 2022 01:44:50 +0000
ROA not before: Thu 07 Jul 2022 03:00:00 +0000
ROA not after: Fri 07 Jul 2023 03:00:00 +0000
asID: 3970
IP address blocks: 2801:1e:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 647796 (0x9e274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Validity
Not Before: Jul 7 03:00:00 2022 GMT
Not After : Jul 7 03:00:00 2023 GMT
Subject: CN=b71d79205378a419f479f95f11c002995642aa1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:d3:96:e7:dc:0c:c4:56:0c:f8:62:ea:19:
3c:45:86:49:af:b7:3f:29:a0:67:48:99:ea:a6:70:
86:d5:94:87:70:f8:83:f4:a3:3d:c3:20:43:84:37:
e0:49:2d:28:6b:48:b9:f3:33:e1:e1:4d:37:81:35:
84:5f:9e:3f:04:30:5e:a5:d9:bc:a4:a5:37:f2:c4:
b3:f2:f2:8e:c5:57:95:10:09:37:d2:8d:06:94:f0:
c3:26:cd:85:92:d1:1e:ad:23:52:04:15:7a:22:b7:
8d:f2:a4:3c:fd:1b:5d:5a:b0:95:7b:07:04:c6:08:
91:b4:ed:a4:c4:c9:6e:da:ff:47:30:82:79:be:91:
ec:25:6e:c6:91:9e:af:2a:98:dc:c2:68:2a:cf:52:
24:91:32:8b:e0:11:07:30:18:d3:af:dd:04:be:6d:
fe:da:5e:ed:ab:0d:bd:b5:39:fd:54:ee:8b:77:18:
46:70:8b:36:e6:28:0d:60:67:dc:46:5d:c3:2a:3d:
d6:55:7c:d6:32:e3:15:d0:e7:7d:ed:c4:9c:2b:7d:
1b:82:04:29:db:b1:07:7a:26:cc:db:bc:68:a0:c0:
dd:07:f3:9b:6c:5b:3c:63:84:74:b5:74:ef:be:30:
0c:0b:09:b2:3f:4d:8f:d6:ba:c1:c1:88:a1:ae:0b:
08:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2B:F4:A3:1D:92:79:4A:25:17:1D:8F:A9:D6:96:3F:97:81:52:4D
X509v3 Authority Key Identifier:
keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b71d79205378a419f479f95f11c002995642aa1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:1801::/48
Signature Algorithm: sha256WithRSAEncryption
a8:85:b7:f9:e1:e0:d8:be:3b:ef:fd:2d:9e:fd:ee:b2:83:1c:
48:01:a0:c0:f2:8e:5a:9f:15:31:29:7a:c7:ea:a6:cb:ab:b5:
e2:11:2b:4b:bb:5f:86:83:2b:a9:ff:47:c8:fc:e6:68:75:6a:
17:06:5a:c8:0f:28:8b:ae:36:c3:5c:68:e3:b2:17:22:92:1a:
ac:b5:53:2d:25:df:3c:ca:12:b2:23:90:b7:20:e2:41:37:ac:
86:48:12:62:98:c0:78:38:b5:23:82:d0:36:70:07:47:cc:e4:
64:8d:20:39:46:db:29:0d:58:83:8e:ac:1a:ac:1f:b8:a3:6f:
55:40:7a:12:a6:44:dc:a6:12:93:ec:df:1b:f6:4b:f8:2c:a6:
4f:fd:40:b7:d0:ec:12:f4:7c:fb:ee:dc:76:36:7b:f5:a5:25:
dc:dc:ca:bd:05:a0:29:b2:0e:6f:74:e6:70:c5:00:c5:b1:3d:
b1:21:79:7b:84:85:de:e1:f0:50:62:3a:35:f6:3f:d1:51:3e:
64:f5:80:f1:32:b3:46:88:cd:3f:37:fa:5b:7e:45:d8:57:b4:
28:72:12:0a:8d:c8:d7:f5:54:7c:ab:5c:8e:28:a3:ed:83:c5:
b2:21:87:b6:53:5f:3e:71:53:e6:3e:6d:a0:07:a2:f9:65:04:
c6:ce:05:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org