Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/3a2576a21326e0cc15cee167efaabbedb67caf79.roa
File: 3a2576a21326e0cc15cee167efaabbedb67caf79.roa (raw, json)
Hash identifier: /+yTv+FRNm0/xAsj76THkrqI5k5gDTgLrTVn4iLmA4o=
Subject key identifier: 78:53:16:F4:56:90:D6:80:BF:6D:98:62:84:F1:0E:BA:BF:94:96:F1
Certificate issuer: /CN=fc6cb1153f9d2823a345e050aa08a59869c1972e
Certificate serial: 0E98AB
Authority key identifier: B1:91:4D:1E:D5:69:1F:1F:92:2C:EE:5F:8A:E0:F6:18:CE:1D:37:16
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6cb1153f9d2823a345e050aa08a59869c1972e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/3a2576a21326e0cc15cee167efaabbedb67caf79.roa
Signing time: Mon 20 Nov 2023 16:56:09 +0000
ROA not before: Mon 20 Nov 2023 16:56:08 +0000
ROA not after: Thu 20 Nov 2025 16:56:08 +0000
asID: 19429
IP address blocks: 2801:1d:8801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 956587 (0xe98ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc6cb1153f9d2823a345e050aa08a59869c1972e
Validity
Not Before: Nov 20 16:56:08 2023 GMT
Not After : Nov 20 16:56:08 2025 GMT
Subject: CN=3a2576a21326e0cc15cee167efaabbedb67caf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:55:f4:76:78:85:2d:75:c8:20:66:b6:0c:
c3:07:d1:f2:b1:89:12:21:82:f8:ab:94:d2:55:ac:
10:70:b6:38:94:19:7a:c0:7d:d0:30:60:c9:0d:f2:
92:32:00:30:00:23:e0:45:d6:79:40:62:70:03:6a:
36:5c:37:13:53:7d:da:a7:e5:7f:0c:31:d3:b9:92:
82:b5:af:1f:e4:d6:39:84:be:f6:3c:a6:c7:79:70:
5a:87:61:13:70:21:ff:39:3f:71:97:e3:31:51:2f:
47:86:66:ab:00:5c:1c:41:12:96:0c:45:00:80:9d:
f1:74:cb:c7:ea:82:c6:1e:6b:6e:bf:57:cb:64:b1:
c9:76:b7:db:13:4d:6d:50:9f:9f:54:7e:88:b2:89:
79:9e:75:c1:47:eb:6c:b1:ba:fd:16:41:4c:18:3d:
55:45:15:15:67:ba:33:c2:00:63:c0:c1:c3:e9:c5:
6b:88:80:37:ce:88:fa:c8:3c:c4:ab:0b:68:1d:a6:
54:8a:23:54:0f:ee:6d:84:e2:f2:85:8b:83:a3:66:
cc:69:e9:f5:64:ee:28:67:e0:e5:2d:09:47:d0:53:
3c:f9:28:68:5f:4e:73:45:39:ba:84:d8:41:89:27:
29:e2:31:de:d6:c9:fb:3d:d6:ac:5c:5a:44:57:2b:
f8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:53:16:F4:56:90:D6:80:BF:6D:98:62:84:F1:0E:BA:BF:94:96:F1
X509v3 Authority Key Identifier:
keyid:B1:91:4D:1E:D5:69:1F:1F:92:2C:EE:5F:8A:E0:F6:18:CE:1D:37:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6cb1153f9d2823a345e050aa08a59869c1972e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/3a2576a21326e0cc15cee167efaabbedb67caf79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/fc6cb1153f9d2823a345e050aa08a59869c1972e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1d:8801::/48
Signature Algorithm: sha256WithRSAEncryption
09:d3:53:b1:63:89:1b:54:f1:a1:f4:42:68:4b:bc:2c:af:d5:
e7:55:14:19:14:7d:dd:ae:59:9a:a7:49:8c:00:1c:9c:32:7b:
b3:e4:4d:5d:b0:94:da:83:b8:76:0c:b8:df:46:31:6b:99:31:
12:15:69:2a:b3:24:d0:67:9c:ff:82:8a:17:83:0c:ea:c5:35:
8d:b3:0b:17:58:d3:0b:9c:36:66:3d:0a:13:3a:66:a8:36:de:
6e:ae:74:2e:00:4a:69:63:78:27:4f:85:b3:dc:81:c4:3f:3b:
38:a7:16:bb:8e:3b:a9:2f:8e:1e:f9:db:41:76:8c:94:0c:4c:
a7:12:dc:14:39:9a:fb:1e:b7:65:0c:4e:b8:cc:1a:ed:fe:e7:
b8:5d:c4:5c:80:a0:d6:3c:8d:28:ba:11:9d:50:e2:2e:ff:82:
71:0a:29:a0:d0:e7:b3:b2:50:df:8e:ae:4c:d6:05:f1:db:24:
fe:95:a8:3c:62:95:23:55:3a:cc:76:df:5a:e6:83:82:ad:74:
9d:fa:f3:4a:37:77:78:9b:ae:de:b9:48:a6:40:3d:9a:34:1d:
40:d6:e4:93:cb:be:3e:a4:6d:42:aa:ad:57:dc:ba:3e:a2:b1:
ee:9a:45:0c:ec:6a:52:12:9e:cb:0a:d6:d0:a3:67:9d:45:6e:
d5:c8:3e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:06:15 2025 by rpki-client