Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/b1450b51587490c5c32eb950e80e9403297a9899.roa
File: b1450b51587490c5c32eb950e80e9403297a9899.roa (raw, json)
Hash identifier: 6LXUBD9MfrqpS5DVX+TCU0e+A+TYUygKu9lfWDQADOM=
Subject key identifier: 03:51:BA:96:06:86:10:24:6D:B8:7E:5A:1A:E2:F7:7C:E8:2C:DB:D5
Certificate issuer: /CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
Certificate serial: 23EE88
Authority key identifier: AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/b1450b51587490c5c32eb950e80e9403297a9899.roa
Signing time: Wed 04 Oct 2023 00:03:12 +0000
ROA not before: Tue 03 Oct 2023 00:03:12 +0000
ROA not after: Sat 04 Oct 2025 01:03:12 +0000
asID: 52458
IP address blocks: 2803:480:22::/47 maxlen: 64
2803:480:23::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2354824 (0x23ee88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
Validity
Not Before: Oct 3 00:03:12 2023 GMT
Not After : Oct 4 01:03:12 2025 GMT
Subject: CN=b1450b51587490c5c32eb950e80e9403297a9899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:80:08:c2:2e:1a:10:e6:b2:40:5b:a6:80:b5:
b0:bd:9f:47:33:75:a7:da:92:5c:06:e3:9d:d5:37:
de:7b:73:29:d7:43:69:79:f8:ba:76:c6:70:5b:01:
ec:ab:1b:74:53:ee:32:7e:18:bb:50:f4:25:2e:fd:
cb:24:22:01:be:22:7a:64:ec:c7:14:35:cc:2e:db:
21:2e:60:e5:13:1d:55:29:34:1a:0f:54:f2:1e:8c:
2f:0e:9a:0a:57:b2:91:b4:da:70:93:f6:36:9e:c7:
97:36:d5:4d:14:cc:2b:f7:b2:ae:97:e5:60:71:83:
f3:ad:b7:bb:73:60:3a:59:2e:27:7f:d3:16:1b:0b:
93:e5:a6:5b:08:81:6a:4c:25:ab:20:10:17:37:81:
db:bf:89:54:64:e0:07:27:3a:a9:59:c4:41:ec:16:
63:35:0a:f0:a7:41:c5:22:75:d7:02:b4:e1:07:ab:
7a:c8:14:51:36:b9:7d:ca:42:b4:a2:0a:64:7f:76:
12:bc:7e:e0:f3:55:82:11:58:30:f0:f2:b1:e7:1d:
ed:8c:0c:28:b8:f2:76:fc:c2:f4:4e:a7:aa:60:70:
2b:c2:ed:3c:11:71:aa:ba:49:8a:8b:50:fd:77:f2:
95:15:4c:43:37:e2:20:17:f0:49:e3:13:88:25:d5:
eb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:51:BA:96:06:86:10:24:6D:B8:7E:5A:1A:E2:F7:7C:E8:2C:DB:D5
X509v3 Authority Key Identifier:
keyid:AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/b1450b51587490c5c32eb950e80e9403297a9899.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:480:22::/47
Signature Algorithm: sha256WithRSAEncryption
32:7c:72:2f:aa:e7:0e:dd:05:cf:0d:2a:fa:17:54:a1:07:ac:
1e:c7:81:8f:0e:11:99:5b:24:5e:2f:55:c6:04:3a:bb:8f:b7:
ed:85:6f:ae:6e:6c:bc:7b:a6:eb:f9:3e:db:2c:63:63:cc:c5:
29:ce:fb:aa:2e:ba:91:c9:b6:45:68:af:85:ef:1d:93:34:e2:
77:42:1b:38:ad:22:58:5c:4f:d1:d0:89:41:48:03:16:66:a7:
bf:43:78:29:7a:1f:77:57:76:0e:79:9b:d4:20:2c:55:86:05:
7f:a1:6d:ae:8a:4e:01:29:1e:58:a6:aa:2c:a0:5e:25:95:94:
83:83:ae:64:f5:60:5c:c3:52:05:60:b4:ec:b2:b8:35:09:cf:
e5:8c:41:2c:e9:d1:9c:a1:1c:19:e7:af:37:35:26:c7:ef:3a:
66:c0:35:f7:ff:5e:fb:6e:2c:70:c5:35:a8:e7:e5:4d:08:9e:
e8:89:94:96:e6:0f:a5:01:76:de:64:7b:be:26:b6:dd:df:c4:
82:39:66:d7:d5:a4:26:af:12:0a:57:f8:9e:a0:56:03:53:40:
2f:bf:76:45:54:1f:bf:58:a5:3e:ed:c3:7d:0f:60:48:e8:cf:
dc:7c:6a:b1:80:70:18:9a:be:92:2a:29:6e:da:e7:ed:c5:b0:
aa:ac:7a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org