Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/ab38452fea467828db905d74d56ca0a5c7c0dead.roa
File: ab38452fea467828db905d74d56ca0a5c7c0dead.roa (raw, json)
Hash identifier: AP95sp47xRpYD+Qpk/WgL+OjVJPrribHgRUtKDsqE6k=
Subject key identifier: 8F:67:FF:68:A8:24:DE:A0:19:6C:2C:13:B3:AA:F3:FA:3D:BD:13:79
Certificate issuer: /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial: 22EF1F
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/ab38452fea467828db905d74d56ca0a5c7c0dead.roa
Signing time: Thu 11 May 2023 00:00:15 +0000
ROA not before: Wed 10 May 2023 00:00:15 +0000
ROA not after: Sun 11 May 2025 00:00:15 +0000
asID: 28002
IP address blocks: 2001:13c7:7020::/44 maxlen: 49
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289439 (0x22ef1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Validity
Not Before: May 10 00:00:15 2023 GMT
Not After : May 11 00:00:15 2025 GMT
Subject: CN=ab38452fea467828db905d74d56ca0a5c7c0dead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:62:29:5b:93:13:27:52:e0:33:25:98:a4:c2:
7f:4d:4c:97:bf:59:75:9e:95:0c:08:80:7b:5c:b6:
68:1f:5c:87:19:61:95:82:fe:bf:72:59:99:88:35:
d5:9f:c4:89:bd:cf:fe:75:a1:3e:69:7c:2c:f4:9a:
9e:f7:c3:bc:94:a7:72:93:6e:34:2a:de:fb:aa:48:
83:5c:85:2f:c9:8e:0d:8e:b4:b9:17:80:ec:22:cb:
ec:c1:44:8c:a9:df:91:92:f0:63:c1:f3:7a:d8:3e:
d1:1a:55:f4:5a:63:76:9f:9f:92:dd:fd:11:13:d0:
b3:bb:9b:2a:c4:88:a1:8b:18:52:d1:ad:d1:e8:9a:
d6:42:54:ac:2a:d2:40:a2:50:a7:68:3e:12:56:fe:
52:0f:20:28:a6:02:b9:2e:84:d2:a6:96:23:53:5b:
5d:a1:bb:dc:18:3e:60:63:36:33:b9:72:f4:87:c8:
5b:62:0c:43:b3:0c:04:b3:12:66:a5:6a:be:97:61:
23:ba:e5:b1:74:a2:04:f4:75:14:4d:5a:e7:df:db:
ce:b3:dd:99:66:cc:33:d3:cd:70:0e:5e:74:47:da:
26:19:6c:1f:03:02:ec:e6:56:64:5f:df:95:9e:71:
1a:b4:b3:69:d8:12:98:8b:c0:06:e0:e6:7e:dc:12:
19:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:FF:68:A8:24:DE:A0:19:6C:2C:13:B3:AA:F3:FA:3D:BD:13:79
X509v3 Authority Key Identifier:
keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/ab38452fea467828db905d74d56ca0a5c7c0dead.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:13c7:7020::/44
Signature Algorithm: sha256WithRSAEncryption
4b:77:9c:df:24:ba:2d:9b:0f:0c:47:b0:5a:03:38:d9:50:6d:
43:6a:64:88:c7:56:66:fd:d3:2d:64:83:a7:5c:2c:b1:c2:dd:
18:6e:fa:0c:a6:ad:c0:0b:81:df:07:af:7f:9f:1b:c7:8e:49:
24:fc:57:25:d2:fa:1e:14:e1:a0:fc:6b:88:ca:a8:75:e9:59:
7b:58:32:c9:5c:bb:61:db:d8:86:5e:5c:bf:f4:fa:66:4b:9a:
ad:0f:cb:60:e3:3b:cd:56:51:15:5c:41:a9:25:84:5d:56:f6:
e0:6f:85:86:0a:18:91:e4:69:41:b1:e3:c7:0f:75:35:49:c0:
27:e6:64:e0:17:da:f9:f6:fa:31:f2:89:1e:df:a0:8c:0c:ff:
43:e6:49:a2:5d:90:a6:04:78:52:43:c3:65:61:db:71:08:c1:
e3:41:89:d9:9c:a8:d1:ef:29:e1:6b:bb:15:43:66:2e:f5:a5:
b0:03:61:49:ca:d1:18:bd:e0:0d:55:b9:e6:75:9b:68:1b:a6:
2d:02:17:9f:26:d7:04:2e:20:5e:60:09:86:c7:fa:25:22:8e:
ce:70:dd:fb:1a:25:52:bf:5a:25:be:b5:5a:48:f7:5e:4e:6f:
27:2c:3c:48:a3:f7:e1:ea:7f:84:32:0d:0c:70:25:54:72:a5:
a2:e2:36:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:32:49 2025 by rpki-client