Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e8eb543e88800c46aca8f6e47229a1860b598905.roa
File: e8eb543e88800c46aca8f6e47229a1860b598905.roa (raw, json)
Hash identifier: L+Lg4LVF/of+pmrBQT7z57vL2iR7qdVgKEE8eKenbYA=
Subject key identifier: 1A:46:CA:44:5A:FB:49:E2:B4:E9:1B:70:99:D3:C5:8B:23:6E:6D:9E
Certificate issuer: /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial: 05B52C
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e8eb543e88800c46aca8f6e47229a1860b598905.roa
Signing time: Sun 03 Apr 2022 00:37:03 +0000
ROA not before: Sun 03 Apr 2022 03:00:00 +0000
ROA not after: Mon 03 Apr 2023 03:00:00 +0000
asID: 3970
IP address blocks: 2801:1e:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374060 (0x5b52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Validity
Not Before: Apr 3 03:00:00 2022 GMT
Not After : Apr 3 03:00:00 2023 GMT
Subject: CN=e8eb543e88800c46aca8f6e47229a1860b598905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:c8:17:60:16:e7:ce:ea:c5:fa:79:81:a4:
83:ed:c8:fb:73:b5:7c:cb:04:18:71:c3:51:32:76:
a4:29:fe:8e:89:e4:31:c9:1e:f9:7a:33:e3:4b:1e:
6f:18:3c:34:6d:df:e5:91:fc:ee:fd:9c:53:02:18:
70:51:87:95:82:66:86:aa:01:58:b0:58:02:27:d3:
bd:d3:2c:0d:e1:b5:03:54:c6:11:b9:73:f6:32:d8:
75:f7:1f:20:11:6f:14:36:dc:63:2e:3e:97:e0:92:
3e:7e:03:f9:84:f0:f4:72:b2:96:ed:77:9e:c2:42:
f3:af:6d:6c:e0:f0:ae:09:27:4c:ae:69:65:31:a0:
72:66:a4:69:fc:df:23:5b:dc:25:03:07:ae:21:49:
81:3b:0b:98:a3:55:17:7a:ed:5b:60:25:07:d1:76:
ed:4a:93:e6:a3:c0:2a:c0:82:49:76:ce:84:11:18:
9e:5c:bb:72:59:74:a0:b5:6d:ad:0e:13:0f:5e:56:
d4:4f:59:98:d5:aa:83:78:1c:0e:79:d9:50:b5:11:
6b:5a:ef:af:d1:90:41:4a:4d:4f:6d:49:3d:e6:a4:
e8:a0:b9:10:22:d7:24:4d:8a:0a:b6:37:55:df:7c:
5f:5e:36:de:33:76:f8:ff:bf:f2:e8:02:c9:1b:ee:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:46:CA:44:5A:FB:49:E2:B4:E9:1B:70:99:D3:C5:8B:23:6E:6D:9E
X509v3 Authority Key Identifier:
keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e8eb543e88800c46aca8f6e47229a1860b598905.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:1801::/48
Signature Algorithm: sha256WithRSAEncryption
7e:6a:4f:48:32:85:38:0f:50:85:39:3b:2b:17:04:a2:f4:f0:
3d:61:79:b3:3d:65:19:33:f1:43:e7:78:0d:27:bb:41:13:32:
b6:36:08:49:dc:fd:1b:32:60:01:fb:e1:09:63:9e:2c:c4:48:
c2:61:58:14:9c:70:61:c2:52:88:c0:9f:09:d8:8c:6c:24:53:
45:b8:88:24:a2:f1:80:05:97:00:5b:e8:46:70:55:d7:1b:74:
60:1b:79:34:f9:89:2b:e9:de:7b:94:4a:47:d9:9b:3f:16:18:
1d:02:92:92:7b:36:c6:10:64:7b:ed:a1:45:74:38:f9:7b:db:
45:23:06:92:ab:54:42:d0:32:0b:6e:80:67:a3:dd:4b:f0:b6:
42:e7:6a:70:1d:18:56:c3:26:be:09:29:5a:16:ef:2d:40:71:
e5:2e:be:01:ba:4a:66:53:82:c9:6d:25:c9:45:8e:49:d1:9b:
6f:ad:6a:a8:4d:1a:4d:ff:8d:10:f7:a8:25:2c:b0:c7:76:90:
89:7e:8e:61:aa:f6:5e:db:b7:2f:7e:6e:22:5c:58:b5:71:a1:
4b:2b:95:24:d7:fe:42:05:b0:79:a0:17:10:6d:76:fa:c2:cb:
fc:34:cd:d9:8b:b7:67:d9:3a:26:2d:80:2b:14:ed:cd:80:95:
5f:6e:dd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org