Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/b5961285671411cd7813c3cf348765a02ca8d0e0.roa
File: b5961285671411cd7813c3cf348765a02ca8d0e0.roa (raw, json)
Hash identifier: AELXXiEnQmz+E/eRF0gFh/l52HMayZxvNRJaeyuTnGg=
Subject key identifier: 89:E1:8A:D7:28:5F:D9:76:40:D4:3A:47:D7:75:2D:33:A1:FD:98:42
Certificate issuer: /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial: 0D926C
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/b5961285671411cd7813c3cf348765a02ca8d0e0.roa
Signing time: Wed 24 Mar 2021 14:37:06 +0000
ROA not before: Wed 24 Mar 2021 14:37:05 +0000
ROA not after: Tue 24 Mar 2026 14:37:05 +0000
asID: 52423
IP address blocks: 2803:6900:574::/48 maxlen: 48
2803:6900:581::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889452 (0xd926c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Validity
Not Before: Mar 24 14:37:05 2021 GMT
Not After : Mar 24 14:37:05 2026 GMT
Subject: CN=b5961285671411cd7813c3cf348765a02ca8d0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:de:36:f7:5d:22:1c:69:a6:9b:62:8c:4d:
d3:64:8d:74:9e:dd:3d:f6:67:0e:08:8a:9e:31:cc:
6d:dd:87:6c:f9:db:2f:c9:6f:2f:7b:c2:48:14:b8:
0b:ff:00:c4:62:77:79:0b:86:45:a9:4c:ff:ec:31:
f4:a9:b0:da:65:cd:87:f8:e2:13:d2:a4:75:a0:05:
3f:40:1b:04:a3:65:47:61:ed:fc:0c:a0:79:91:b6:
61:28:68:74:b7:f8:a5:0f:30:77:1f:6c:ed:92:8d:
99:92:0f:9f:aa:ba:fb:3d:9a:82:b9:ef:12:34:a2:
f2:b9:56:d7:0a:e9:08:49:ce:ec:0b:97:ac:91:a9:
29:0a:b2:57:c3:a7:70:74:73:0d:3f:a0:14:d7:87:
f3:53:11:a2:87:4f:db:6d:f0:f3:4c:c2:3f:61:e3:
e4:85:12:ab:41:a1:89:9f:ab:84:fe:9c:bf:3f:bc:
f4:32:c2:53:81:9e:b6:b7:01:ad:66:95:2f:0d:66:
fe:81:b4:a6:1f:e0:7b:71:5c:1b:f7:41:30:59:9f:
87:39:f4:92:fc:2d:52:e6:24:22:6e:7e:72:1f:b2:
d1:0c:4e:e4:62:c0:1d:b1:83:69:87:23:6e:1a:d6:
41:28:fd:8c:f4:1b:e6:3c:36:56:91:27:2c:ad:f3:
70:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E1:8A:D7:28:5F:D9:76:40:D4:3A:47:D7:75:2D:33:A1:FD:98:42
X509v3 Authority Key Identifier:
keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/b5961285671411cd7813c3cf348765a02ca8d0e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:6900:574::/48
2803:6900:581::/48
Signature Algorithm: sha256WithRSAEncryption
3f:b0:0d:40:d5:9f:99:ed:19:d7:ff:1d:1e:d3:a0:06:1a:aa:
8b:42:ae:d4:5b:d0:1d:50:07:f6:7d:57:2e:11:e0:a8:4c:62:
25:08:66:70:86:a6:ef:2a:33:89:7a:6a:ac:54:0d:eb:88:f6:
ee:41:cc:9c:02:b2:80:1d:05:ff:55:7b:e4:00:c6:c9:a7:3b:
48:0e:c8:8d:b8:b3:76:91:6a:98:71:cd:68:25:93:fa:86:3a:
a9:fd:10:40:08:f5:45:6a:af:f9:58:16:5c:20:b0:cd:4c:da:
79:ae:1b:97:05:8d:27:52:36:eb:b7:8e:80:52:dd:ed:d6:69:
a9:13:90:be:2e:4b:56:b6:7e:ec:d6:8a:46:2a:16:d2:6b:76:
b1:ba:f8:09:58:35:c9:76:0d:82:8f:8b:3b:85:31:20:31:66:
f1:d0:0a:e3:c1:c7:51:8a:be:06:01:34:9e:b1:0a:e0:67:35:
c2:f6:04:32:ee:d0:d7:21:8b:48:8e:82:80:66:8b:cf:6b:5c:
e1:1d:3c:d5:55:1c:11:fb:50:42:04:cf:44:64:3e:3f:3c:ab:
b1:da:7f:58:bd:d8:ed:bf:4e:bf:5d:20:4e:cf:d2:07:bd:7b:
44:b7:9c:66:f1:f7:14:b2:5d:3f:a1:3f:7d:80:24:7c:d8:b8:
2e:88:bb:b9
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDDZJsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
YTBmZjZlNjdiZDEzOTQ1YmJiMmM1NTlkNTIxNzZmNTgwMWY4ODMwHhcNMjEwMzI0
MTQzNzA1WhcNMjYwMzI0MTQzNzA1WjAzMTEwLwYDVQQDEyhiNTk2MTI4NTY3MTQx
MWNkNzgxM2MzY2YzNDg3NjVhMDJjYThkMGUwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx6PeNvddIhxppptijE3TZI10nt099mcOCIqeMcxt3Yds+dsv
yW8ve8JIFLgL/wDEYnd5C4ZFqUz/7DH0qbDaZc2H+OIT0qR1oAU/QBsEo2VHYe38
DKB5kbZhKGh0t/ilDzB3H2ztko2Zkg+fqrr7PZqCue8SNKLyuVbXCukISc7sC5es
kakpCrJXw6dwdHMNP6AU14fzUxGih0/bbfDzTMI/YePkhRKrQaGJn6uE/py/P7z0
MsJTgZ62twGtZpUvDWb+gbSmH+B7cVwb90EwWZ+HOfSS/C1S5iQibn5yH7LRDE7k
YsAdsYNphyNuGtZBKP2M9BvmPDZWkScsrfNwoQIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFInhitcoX9l2QNQ6R9d1LTOh/ZhCMB8GA1UdIwQYMBaAFNSvsG+BwMJ5Bok5
NeKQRr2CIBiUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDlhMGZm
NmU2N2JkMTM5NDViYmIyYzU1OWQ1MjE3NmY1ODAxZjg4My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzFhNzA2YWItZDNjZS00YmFjLThiNTEtMjY5NjM5
NDc1OTBlL2I1OTYxMjg1NjcxNDExY2Q3ODEzYzNjZjM0ODc2NWEwMmNhOGQwZTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MWE3MDZhYi1kM2NlLTRiYWMtOGI1MS0yNjk2
Mzk0NzU5MGUvMDlhMGZmNmU2N2JkMTM5NDViYmIyYzU1OWQ1MjE3NmY1ODAxZjg4
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAIwEgMHACgDaQAFdAMHACgDaQAFgTANBgkqhkiG9w0BAQsFAAOCAQEA
P7ANQNWfme0Z1/8dHtOgBhqqi0Ku1FvQHVAH9n1XLhHgqExiJQhmcIam7yoziXpq
rFQN64j27kHMnAKygB0F/1V75ADGyac7SA7IjbizdpFqmHHNaCWT+oY6qf0QQAj1
RWqv+VgWXCCwzUzaea4blwWNJ1I267eOgFLd7dZpqROQvi5LVrZ+7NaKRioW0mt2
sbr4CVg1yXYNgo+LO4UxIDFm8dAK48HHUYq+BgE0nrEK4Gc1wvYEMu7Q1yGLSI6C
gGaLz2tc4R081VUcEftQQgTPRGQ+Pzyrsdp/WL3Y7b9Ov10gTs/SB717RLecZvH3
FLJdP6E/fYAkfNi4Loi7uQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org