Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ba0680546eba538f1b36d9fa0574ccea24cfb230.roa
File: ba0680546eba538f1b36d9fa0574ccea24cfb230.roa (raw, json)
Hash identifier: KJpljz+0VJcSVykCWVC6yN6l4P80S0tqPq63U6rl1sM=
Subject key identifier: B1:0C:3F:5A:9E:8B:8B:3D:B4:F5:5D:62:60:1E:15:16:05:D0:61:6A
Certificate issuer: /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial: 045EF1
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ba0680546eba538f1b36d9fa0574ccea24cfb230.roa
Signing time: Sun 06 Mar 2022 00:16:49 +0000
ROA not before: Sun 06 Mar 2022 03:00:00 +0000
ROA not after: Mon 06 Mar 2023 03:00:00 +0000
asID: 3970
IP address blocks: 2801:1e:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286449 (0x45ef1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Validity
Not Before: Mar 6 03:00:00 2022 GMT
Not After : Mar 6 03:00:00 2023 GMT
Subject: CN=ba0680546eba538f1b36d9fa0574ccea24cfb230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5b:b4:1a:cc:7c:b7:d7:22:7c:bf:5b:89:b4:
13:94:fc:38:47:cb:84:32:87:3c:9c:9f:ab:21:be:
39:ce:e7:e4:f5:df:6d:2b:46:84:d1:14:e1:09:fa:
8a:12:06:21:19:08:05:ae:d5:72:dd:f9:1d:f6:f2:
a0:22:66:e0:2f:ba:88:bc:da:f4:c7:78:08:a3:f9:
f1:cd:3b:3d:9a:4f:ec:94:57:75:cb:6d:bc:c7:e7:
7e:3e:f0:41:24:b0:6a:0f:bf:44:5b:66:fd:6e:c3:
c4:9d:99:54:f8:7e:63:6f:ff:d3:0a:a9:4a:b0:a3:
f1:36:26:5b:1f:d3:d1:6b:19:3d:3b:30:bf:37:5c:
cf:1d:b9:06:d7:09:5f:fd:6d:07:db:b0:6b:52:cb:
87:70:b6:f2:29:f7:a6:c5:03:7d:5c:f5:b5:e0:81:
7d:16:fb:41:26:e7:a1:23:79:d1:4a:90:e2:58:3e:
6c:26:2b:b9:48:6d:62:cd:01:d4:65:b5:df:e2:57:
08:b7:1b:41:bc:b1:5a:e4:7a:fe:76:5c:d5:2f:f3:
13:8b:5a:bc:b3:7a:82:64:21:bc:e4:b9:51:77:38:
fc:b4:84:b5:3f:e7:c8:6b:1f:d7:7b:d0:bb:b8:eb:
f8:61:f9:2b:ee:ae:02:a2:17:73:31:b6:2d:86:e4:
a8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0C:3F:5A:9E:8B:8B:3D:B4:F5:5D:62:60:1E:15:16:05:D0:61:6A
X509v3 Authority Key Identifier:
keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ba0680546eba538f1b36d9fa0574ccea24cfb230.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:1801::/48
Signature Algorithm: sha256WithRSAEncryption
84:1f:65:f2:03:7a:11:0e:89:e2:b5:28:4b:95:92:e0:fd:c9:
1d:5a:b7:c4:df:1f:df:ef:a4:d5:58:12:dc:da:89:aa:97:19:
e2:b1:ad:6e:f3:90:50:31:c7:e9:50:f7:be:e1:cf:1a:d1:f8:
11:a3:c8:81:ab:bf:e4:a9:fc:30:4e:f0:c5:17:20:22:0a:52:
c7:85:ed:64:58:8a:bf:80:07:b9:a8:c0:95:0c:6f:26:b6:7b:
80:64:15:b5:2d:14:33:77:00:54:c0:46:ae:03:d0:7b:27:17:
40:10:b1:19:05:dc:be:be:25:3a:0e:df:b6:5c:a5:e9:7f:c6:
59:f2:20:f9:d5:44:b5:ec:2e:9e:62:8f:a8:5a:35:d2:eb:a0:
8b:ff:e9:f5:aa:b7:06:e0:e6:41:15:ac:44:b5:c4:96:f8:c9:
cf:5a:87:2a:23:e2:96:d0:9c:b1:a4:e4:46:0b:17:66:33:ca:
ef:ed:31:79:5a:5d:73:ff:82:1c:d4:a2:be:04:c3:c6:1f:9b:
52:41:da:f2:2c:8d:b5:01:6e:25:f2:9f:ec:68:61:cb:be:b0:
97:54:12:05:99:9b:18:e4:29:b6:7a:5f:ae:e8:e1:cf:af:b3:
3d:3f:19:cf:71:ef:6b:ac:20:43:fe:ca:f5:2e:ff:f7:8c:16:
7b:a9:a3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org