Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/3aeb7ccd6b401e20b7e794f307cca5b6f35860f2.roa
File: 3aeb7ccd6b401e20b7e794f307cca5b6f35860f2.roa (raw, json)
Hash identifier: KmuFrnhRHcWPLR3cIT3GBqzkU4OgZSZyYoTKCRJwV08=
Subject key identifier: 56:7B:5D:74:72:9D:65:E9:6D:91:F3:28:E6:FE:AF:45:A1:63:88:B7
Certificate issuer: /CN=61678bdd44acebd11355abc32f79a39e0ab6e968
Certificate serial: 0D18C7
Authority key identifier: 53:0E:FD:DD:FD:ED:EC:BC:CC:76:B3:41:B4:AF:50:A5:DA:0F:08:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61678bdd44acebd11355abc32f79a39e0ab6e968.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/3aeb7ccd6b401e20b7e794f307cca5b6f35860f2.roa
Signing time: Wed 24 Mar 2021 14:33:03 +0000
ROA not before: Wed 24 Mar 2021 14:33:02 +0000
ROA not after: Tue 24 Mar 2026 14:33:02 +0000
asID: 263824
IP address blocks: 2803:9a40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858311 (0xd18c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61678bdd44acebd11355abc32f79a39e0ab6e968
Validity
Not Before: Mar 24 14:33:02 2021 GMT
Not After : Mar 24 14:33:02 2026 GMT
Subject: CN=3aeb7ccd6b401e20b7e794f307cca5b6f35860f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a8:be:02:a0:7c:bb:96:f5:89:ea:6c:9e:13:
ce:0a:c9:53:cd:b2:a8:8e:fa:5d:65:46:b8:b9:b1:
0f:d4:6b:de:61:cb:e1:b4:4f:3f:87:12:68:b0:57:
37:d8:f8:cd:08:51:5d:a3:bc:5b:a5:a0:56:d0:ae:
41:14:32:9c:8a:83:4d:a2:1f:c3:be:ca:18:d1:11:
31:19:36:67:97:43:7b:16:d7:9c:9e:ef:54:d9:ec:
ec:3e:e7:7b:fd:59:3d:c9:48:25:99:38:d3:19:d7:
73:73:61:d5:fb:ac:fc:49:2c:a3:db:ee:c8:38:3b:
b3:bb:d5:dc:57:69:ed:2c:81:34:a3:31:09:5c:f5:
c6:c7:44:ee:34:fa:a6:62:24:af:03:8b:32:82:a9:
b5:02:a7:b6:25:3d:05:89:b5:98:6a:8c:64:4f:08:
0a:fb:b4:dd:40:63:8c:e7:92:a4:fb:b1:d9:94:05:
db:70:41:0b:be:70:4c:4c:9b:8e:f6:52:dc:39:1c:
5c:0b:32:06:1e:88:23:95:1c:88:61:3a:4c:53:7b:
08:b3:6d:f2:34:07:c2:9d:cb:eb:7b:d5:76:01:1a:
22:2e:c2:18:7f:ef:49:0b:dd:7a:1a:6c:7c:66:27:
c1:11:d1:12:66:af:7e:21:73:31:a0:0b:28:42:bb:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7B:5D:74:72:9D:65:E9:6D:91:F3:28:E6:FE:AF:45:A1:63:88:B7
X509v3 Authority Key Identifier:
keyid:53:0E:FD:DD:FD:ED:EC:BC:CC:76:B3:41:B4:AF:50:A5:DA:0F:08:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61678bdd44acebd11355abc32f79a39e0ab6e968.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/3aeb7ccd6b401e20b7e794f307cca5b6f35860f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/61678bdd44acebd11355abc32f79a39e0ab6e968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:9a40::/32
Signature Algorithm: sha256WithRSAEncryption
54:11:5c:b6:cd:9a:66:b8:4c:03:a3:47:12:95:ad:48:90:a7:
49:0f:22:65:d1:54:6e:c9:fd:87:52:62:e3:2e:bb:c6:85:53:
fb:90:4b:6a:bf:03:1a:59:5b:d1:49:31:c9:bd:f5:71:f4:57:
b1:ff:69:f9:e4:2f:67:b2:82:96:cd:b8:e6:90:3c:73:ce:fd:
7d:57:d8:b1:42:53:a4:f9:43:7f:ed:82:8d:cb:ff:b6:fb:2a:
06:db:d7:a5:d1:db:0d:ca:d6:7d:a8:7e:66:17:e6:c6:d9:8f:
d9:d9:68:38:8f:da:bd:77:02:f2:8f:7b:21:f0:df:62:e2:7d:
84:dc:d8:69:7b:f2:31:da:24:23:77:8a:e5:56:b2:fd:7a:06:
32:2c:16:20:ab:cb:1c:31:cf:5f:7e:12:30:b8:e7:a1:56:52:
a5:82:5b:4b:ca:53:7c:dd:52:1b:94:38:25:8e:39:3a:81:df:
1f:29:45:c0:5c:87:fb:c3:69:7f:96:44:f4:0e:9f:56:67:69:
90:39:ff:cc:73:06:3d:fb:c8:53:64:1c:33:9e:c5:58:eb:61:
1e:e5:cc:3b:33:79:ae:d7:20:50:f2:4a:97:3d:71:d6:cc:3d:
a1:4e:e0:aa:e5:b0:3a:ec:38:e6:ec:ed:5d:95:ce:6b:c2:63:
91:5e:53:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org