Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/cb5f349cf7476f9259324ecfae33cd1985f8dd7b.roa
File: cb5f349cf7476f9259324ecfae33cd1985f8dd7b.roa (raw, json)
Hash identifier: 0OSxqizkCNKHz6jUwElrpCWX7ZqMCBG1kgG/2ekv1OU=
Subject key identifier: B2:A3:8E:CE:DB:62:70:E9:A7:EE:21:FD:38:76:B2:C9:41:CB:C3:9F
Certificate issuer: /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial: 0D951E
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/cb5f349cf7476f9259324ecfae33cd1985f8dd7b.roa
Signing time: Wed 24 Mar 2021 14:37:06 +0000
ROA not before: Wed 24 Mar 2021 14:37:05 +0000
ROA not after: Tue 24 Mar 2026 14:37:05 +0000
asID: 52423
IP address blocks: 2803:6900:574::/48 maxlen: 48
2803:6900:581::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890142 (0xd951e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Validity
Not Before: Mar 24 14:37:05 2021 GMT
Not After : Mar 24 14:37:05 2026 GMT
Subject: CN=cb5f349cf7476f9259324ecfae33cd1985f8dd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bf:aa:58:13:88:7c:76:96:5a:d8:a0:58:77:
64:31:1e:e1:e4:a8:80:3e:43:4d:38:18:cf:27:35:
53:9b:05:cf:93:a4:24:e5:5c:49:2d:cd:df:25:23:
26:7c:c7:3e:dd:f3:89:bb:05:d5:b7:2f:22:70:c3:
8e:c1:05:61:45:c4:d4:0b:e8:f0:42:0f:bd:61:a4:
a5:82:56:f3:b1:c1:3a:47:23:56:6b:b1:19:04:72:
c0:1a:fd:eb:ab:9f:1a:2b:6b:f9:f2:c8:07:a8:65:
f3:bc:22:b5:48:a8:dc:58:f0:83:fa:26:a0:21:71:
e6:ee:36:7d:8f:7b:31:64:71:dd:fe:ac:62:29:12:
bc:34:cc:6e:9a:38:f5:7b:15:91:16:5e:79:bd:92:
df:d8:c6:6f:5a:f6:b4:46:e9:01:1c:1d:0d:c4:4b:
fe:58:0d:46:e2:5d:ab:fe:7e:e5:39:a8:5f:a2:ca:
d0:ee:ca:c7:2b:65:92:4b:11:8a:b2:5a:c7:7a:b0:
8f:88:8d:a1:a5:94:33:9b:fe:4e:4d:de:05:06:da:
d4:3d:69:ec:58:c8:86:c1:c0:66:53:03:1c:76:77:
a8:88:fb:62:45:e2:74:db:36:95:c8:cd:2f:ad:38:
89:b2:8c:98:5e:24:c8:cd:d1:90:d0:58:fd:84:42:
1c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A3:8E:CE:DB:62:70:E9:A7:EE:21:FD:38:76:B2:C9:41:CB:C3:9F
X509v3 Authority Key Identifier:
keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/cb5f349cf7476f9259324ecfae33cd1985f8dd7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:6900:574::/48
2803:6900:581::/48
Signature Algorithm: sha256WithRSAEncryption
75:bb:cb:d5:e8:eb:d9:9a:da:63:64:da:e8:97:06:71:aa:f8:
28:c7:12:d2:6e:4c:eb:6f:4b:89:18:a3:37:f3:4d:94:4c:dd:
a5:5d:c6:7e:f7:86:73:c6:99:43:1b:71:ef:97:2c:82:25:ad:
d7:9c:c5:08:e5:dd:6e:c0:14:99:f5:d3:7b:0a:00:d1:2a:ca:
2c:69:86:03:b7:28:7c:1e:8d:4e:d0:61:14:f3:30:cc:3c:a1:
99:ca:f7:c9:58:1c:d4:8f:0c:24:47:d2:c8:ec:50:2e:a4:f6:
23:7f:c2:07:3a:44:b0:bf:7b:c5:6a:7f:43:7a:0f:0f:c7:ad:
40:2e:88:af:53:eb:d1:af:d5:6b:ab:e6:9d:19:8f:aa:a7:af:
a5:a9:2c:e3:81:c5:e2:df:f1:03:1c:e6:22:a9:8a:87:3c:77:
dd:95:0b:b2:90:2c:f5:74:71:35:3a:02:6c:93:bf:05:2d:70:
85:b3:91:29:4f:f4:e4:77:03:f2:2c:4a:1f:74:eb:06:33:44:
e9:91:17:b5:c7:3b:b1:be:08:29:e4:07:70:f4:17:56:26:6a:
5b:f5:1c:9d:c7:e1:79:9d:f7:4a:44:37:ae:33:14:26:8a:c1:
72:35:79:1b:69:11:c2:fd:85:66:81:14:f0:e0:b3:cb:0d:ce:
75:78:2d:c0
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDDZUeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
YTBmZjZlNjdiZDEzOTQ1YmJiMmM1NTlkNTIxNzZmNTgwMWY4ODMwHhcNMjEwMzI0
MTQzNzA1WhcNMjYwMzI0MTQzNzA1WjAzMTEwLwYDVQQDEyhjYjVmMzQ5Y2Y3NDc2
ZjkyNTkzMjRlY2ZhZTMzY2QxOTg1ZjhkZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkb+qWBOIfHaWWtigWHdkMR7h5KiAPkNNOBjPJzVTmwXPk6Qk
5VxJLc3fJSMmfMc+3fOJuwXVty8icMOOwQVhRcTUC+jwQg+9YaSlglbzscE6RyNW
a7EZBHLAGv3rq58aK2v58sgHqGXzvCK1SKjcWPCD+iagIXHm7jZ9j3sxZHHd/qxi
KRK8NMxumjj1exWRFl55vZLf2MZvWva0RukBHB0NxEv+WA1G4l2r/n7lOahfosrQ
7srHK2WSSxGKslrHerCPiI2hpZQzm/5OTd4FBtrUPWnsWMiGwcBmUwMcdneoiPti
ReJ02zaVyM0vrTiJsoyYXiTIzdGQ0Fj9hEIcawIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFLKjjs7bYnDpp+4h/Th2sslBy8OfMB8GA1UdIwQYMBaAFNSvsG+BwMJ5Bok5
NeKQRr2CIBiUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDlhMGZm
NmU2N2JkMTM5NDViYmIyYzU1OWQ1MjE3NmY1ODAxZjg4My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzFhNzA2YWItZDNjZS00YmFjLThiNTEtMjY5NjM5
NDc1OTBlL2NiNWYzNDljZjc0NzZmOTI1OTMyNGVjZmFlMzNjZDE5ODVmOGRkN2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MWE3MDZhYi1kM2NlLTRiYWMtOGI1MS0yNjk2
Mzk0NzU5MGUvMDlhMGZmNmU2N2JkMTM5NDViYmIyYzU1OWQ1MjE3NmY1ODAxZjg4
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAIwEgMHACgDaQAFdAMHACgDaQAFgTANBgkqhkiG9w0BAQsFAAOCAQEA
dbvL1ejr2ZraY2Ta6JcGcar4KMcS0m5M629LiRijN/NNlEzdpV3GfveGc8aZQxtx
75csgiWt15zFCOXdbsAUmfXTewoA0SrKLGmGA7cofB6NTtBhFPMwzDyhmcr3yVgc
1I8MJEfSyOxQLqT2I3/CBzpEsL97xWp/Q3oPD8etQC6Ir1Pr0a/Va6vmnRmPqqev
paks44HF4t/xAxzmIqmKhzx33ZULspAs9XRxNToCbJO/BS1whbORKU/05HcD8ixK
H3TrBjNE6ZEXtcc7sb4IKeQHcPQXViZqW/UcncfheZ33SkQ3rjMUJorBcjV5G2kR
wv2FZoEU8OCzyw3OdXgtwA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org