Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/b7949d20e5fae19e3e337123b99ec9d2d3349a20.roa
File: b7949d20e5fae19e3e337123b99ec9d2d3349a20.roa (raw, json)
Hash identifier: S1pNRaARvKHXOrYTCyfCCyMdvddWPQRwBCt8YTOW9jQ=
Subject key identifier: 63:E4:8B:B3:FC:BD:34:1C:E3:CF:B5:AF:B4:DA:D5:84:6E:B4:24:1B
Certificate issuer: /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial: 21AB3E
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/b7949d20e5fae19e3e337123b99ec9d2d3349a20.roa
Signing time: Thu 06 Apr 2023 12:03:00 +0000
ROA not before: Wed 05 Apr 2023 12:03:00 +0000
ROA not after: Sun 06 Apr 2025 12:03:00 +0000
asID: 394353
IP address blocks: 2001:13c7:702f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2206526 (0x21ab3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Validity
Not Before: Apr 5 12:03:00 2023 GMT
Not After : Apr 6 12:03:00 2025 GMT
Subject: CN=b7949d20e5fae19e3e337123b99ec9d2d3349a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:20:10:27:7d:87:3b:b1:24:4f:a8:32:67:
3b:48:49:0d:15:f9:94:c8:07:8f:04:41:0e:aa:6b:
a4:e9:d3:95:da:6a:15:94:69:ec:36:bd:eb:d7:1a:
f8:64:ef:4b:7d:1e:a7:f5:1c:47:95:aa:b1:78:69:
47:d4:b8:1f:54:07:61:ba:81:f3:be:5e:b2:8c:31:
4c:d9:6d:d4:90:69:37:85:18:5a:df:6d:f9:1d:0c:
9e:ea:a7:8d:e3:b0:20:ec:d6:44:72:16:94:49:90:
65:d7:96:57:86:ac:b2:3e:0c:ad:78:19:b0:38:35:
16:94:f3:f4:7f:1b:a0:d7:11:85:c5:c6:e9:fd:5b:
a7:40:20:b0:19:cd:80:34:b5:42:ab:95:3e:c8:22:
64:a0:0b:cb:19:59:af:e3:0b:d8:12:ef:8f:4e:09:
ca:50:b8:92:27:50:f1:81:b0:3f:ea:38:aa:52:f3:
b9:2b:26:d7:a1:a5:fd:8f:c9:18:db:c3:c5:c4:da:
3f:4a:ee:35:82:53:d0:52:68:56:46:87:bb:28:7c:
c7:fa:ac:4c:fa:c6:76:e8:66:c4:43:24:f6:df:f3:
44:6b:ad:a3:80:80:89:c0:ff:5c:5b:cc:3b:b4:a7:
17:95:0b:3b:ef:f6:3c:86:82:15:72:0c:59:59:88:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E4:8B:B3:FC:BD:34:1C:E3:CF:B5:AF:B4:DA:D5:84:6E:B4:24:1B
X509v3 Authority Key Identifier:
keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/b7949d20e5fae19e3e337123b99ec9d2d3349a20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:13c7:702f::/48
Signature Algorithm: sha256WithRSAEncryption
3d:dc:49:d5:3c:ac:ac:b1:e6:04:0b:0b:c6:02:4f:62:46:59:
ae:74:6d:a0:81:af:9f:fe:ff:bf:6b:6a:c8:58:d2:20:f8:d0:
2d:cb:0c:7a:2a:fd:cc:54:81:cc:31:2d:cb:69:27:e7:e8:bf:
6a:4a:19:d1:0b:07:5f:73:34:48:a7:66:f9:4b:80:fd:13:b9:
9e:89:2b:af:99:e2:39:27:af:69:79:62:f5:1b:02:26:4e:92:
17:99:26:07:2b:5b:76:89:9b:88:d6:41:ac:f4:a8:1e:e0:3e:
a7:a3:e7:d1:8c:39:c9:15:79:47:25:c3:36:9e:ca:37:09:db:
c7:1c:c5:a5:a6:98:fc:0a:30:bd:17:08:28:f9:33:61:a9:68:
6f:53:7b:3b:44:cb:b8:49:4d:35:13:a0:6b:e5:95:1c:75:2e:
6a:b1:45:56:15:1f:0a:b8:ff:f0:1d:18:72:69:59:19:90:5a:
5f:1f:be:fd:96:bc:60:42:17:7e:0b:9a:89:65:11:dd:04:44:
ba:28:c0:b0:32:ce:17:f9:f6:c7:0c:d7:f3:a1:a8:04:02:89:
74:89:38:48:16:8d:5f:26:f2:f7:8d:97:02:38:e4:0d:33:93:
54:78:d2:81:a1:70:5f:48:a8:2c:6e:38:c4:a1:e3:5e:c7:6b:
e8:ed:fa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 19:07:25 2024 by rpki-client on console-fra.rpki-client.org