Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/3a42fe32894125093a651fa6d41b1732d21c15d9.roa
File: 3a42fe32894125093a651fa6d41b1732d21c15d9.roa (raw, json)
Hash identifier: 7sSESqsyFdGG2myUbcZ7aJpOsyPFTN90RXzXpoQ+R/o=
Subject key identifier: A3:29:33:59:56:F5:00:48:B6:7C:6E:68:8C:F2:5C:AD:22:64:AD:3D
Certificate issuer: /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial: 0D238D
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/3a42fe32894125093a651fa6d41b1732d21c15d9.roa
Signing time: Wed 24 Mar 2021 14:46:05 +0000
ROA not before: Wed 24 Mar 2021 14:46:05 +0000
ROA not after: Tue 24 Mar 2026 14:46:05 +0000
asID: 64120
IP address blocks: 2803:f080::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 861069 (0xd238d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Validity
Not Before: Mar 24 14:46:05 2021 GMT
Not After : Mar 24 14:46:05 2026 GMT
Subject: CN=3a42fe32894125093a651fa6d41b1732d21c15d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f9:e2:54:e3:85:4d:82:78:9f:49:45:ea:38:
05:ff:b6:aa:37:2f:9f:53:3f:25:20:56:69:6b:52:
97:6a:31:96:7e:5f:29:9e:3f:e3:cb:79:ca:be:fa:
85:6e:00:d2:31:80:5c:55:e5:78:f0:f5:5b:47:76:
a4:00:a9:e1:46:60:ad:82:33:1b:7f:b7:f3:e3:16:
e2:54:2c:e9:9e:62:93:31:78:e7:45:7e:94:27:b7:
46:48:61:4b:b7:5f:c6:b2:46:54:d1:b3:24:1b:c4:
02:c3:ab:9b:df:0f:69:66:44:4c:0c:ce:3d:f8:99:
0f:be:55:9d:50:12:11:69:ec:e6:04:04:14:b5:ae:
ea:61:ed:2f:04:b0:79:55:ac:66:16:a4:3c:c3:7d:
7e:4b:4a:61:d4:e9:a9:35:3f:ef:c2:fd:09:15:61:
dc:0f:fb:1f:9e:c1:25:0d:c1:1d:cc:a3:34:71:3a:
a6:20:ca:80:32:38:0f:3b:81:27:00:16:c1:d2:19:
59:a8:bb:3e:45:88:77:77:de:a4:03:0f:84:f1:86:
89:06:6e:d9:3e:11:b7:e6:00:39:1b:7d:ca:40:6c:
9f:80:97:b0:31:31:24:91:b8:5e:1c:01:bf:5f:88:
e7:49:f4:51:69:d6:c5:ec:78:ae:3d:67:30:ab:91:
25:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:29:33:59:56:F5:00:48:B6:7C:6E:68:8C:F2:5C:AD:22:64:AD:3D
X509v3 Authority Key Identifier:
keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/3a42fe32894125093a651fa6d41b1732d21c15d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f080::/33
Signature Algorithm: sha256WithRSAEncryption
1e:5e:4d:d8:0f:20:4f:b0:62:7c:35:0d:40:01:28:97:b7:39:
de:86:e7:47:13:b5:46:34:ff:78:bb:61:94:14:50:52:85:f7:
62:43:e4:9f:60:aa:3d:68:aa:24:c2:1e:92:9b:b7:aa:50:c4:
58:b8:98:ef:73:b0:7b:b7:c4:b4:6f:c3:83:71:55:c5:e2:49:
6e:50:a5:a6:01:71:32:ff:3b:44:32:00:ea:a2:a7:1c:a3:8b:
cd:46:87:d5:e3:19:f7:59:5b:2b:8d:1b:ca:c2:35:b4:c9:93:
84:ff:81:fe:06:64:50:4d:d6:22:4c:22:15:92:12:e6:cd:5a:
51:58:6d:89:b0:e1:83:a2:ac:4b:ce:a8:e4:a4:6d:66:1c:c3:
0e:55:f8:c2:ad:2a:bf:cb:3c:17:ed:4e:03:af:1a:50:27:14:
56:ef:15:d4:e8:0e:0c:d8:e6:bb:57:ba:eb:2c:df:0d:d2:9a:
7a:fe:50:b9:c3:8e:3f:0f:c1:5b:a0:72:c2:85:fa:c1:0c:39:
37:a7:fb:a3:07:8b:c5:46:16:b1:2a:1a:98:79:34:ea:28:3d:
66:56:b9:12:34:e2:39:cd:7b:4b:fb:b3:f9:34:a9:5f:97:79:
69:67:68:76:ec:8b:c9:35:6d:33:6b:f4:59:75:3f:1d:b2:de:
5b:84:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org