Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e5c180f-ad69-4685-857d-60da248b236d/e29f85d453d5e73d72f0c32da98e7294777f2a3a.roa
File: e29f85d453d5e73d72f0c32da98e7294777f2a3a.roa (raw, json)
Hash identifier: Q+6iuxR1KUx+Fr9k+w/EdWm3aBni6+4Fr4dN898xyUM=
Subject key identifier: AB:13:3F:B3:B7:91:53:ED:36:2F:59:F2:4A:73:7F:41:03:B8:EC:16
Certificate issuer: /CN=033367e5ad5492626298a00d7acc4757c59b9b8b
Certificate serial: 02BC
Authority key identifier: 71:1E:07:4E:6A:25:14:F3:AC:18:7B:69:8A:E7:F8:14:46:CB:6E:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/033367e5ad5492626298a00d7acc4757c59b9b8b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8e5c180f-ad69-4685-857d-60da248b236d/e29f85d453d5e73d72f0c32da98e7294777f2a3a.roa
Signing time: Mon 20 Feb 2023 18:35:45 +0000
ROA not before: Sun 19 Feb 2023 18:35:19 +0000
ROA not after: Thu 20 Feb 2025 18:35:19 +0000
asID: 252689
IP address blocks: 2801:14:3800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 700 (0x2bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=033367e5ad5492626298a00d7acc4757c59b9b8b
Validity
Not Before: Feb 19 18:35:19 2023 GMT
Not After : Feb 20 18:35:19 2025 GMT
Subject: CN=e29f85d453d5e73d72f0c32da98e7294777f2a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:10:25:af:70:e7:b6:66:00:77:ee:e2:cc:
88:73:25:a4:63:eb:02:27:02:f3:37:a6:71:05:4e:
aa:3a:3e:a0:85:e6:7c:44:61:b4:ab:74:0a:b9:a1:
e8:8e:1a:96:da:d7:48:35:4c:c5:e0:fa:04:cc:aa:
b1:b3:34:b9:4a:59:7d:55:35:73:9d:fa:b4:41:7c:
44:18:e1:e7:bf:ce:4d:02:88:1a:e9:9e:1f:bb:fa:
0d:1c:96:a0:93:6d:3b:27:37:9b:6c:41:23:af:69:
3e:28:1d:2a:55:43:3e:27:cf:bf:62:52:21:a4:05:
ff:7c:72:51:01:de:d5:84:28:b5:ad:8d:14:51:7b:
ec:a9:32:46:52:ce:e5:0d:57:88:1d:0a:4e:be:e1:
6a:fc:25:7e:ef:21:49:3d:71:16:01:d3:66:b1:b6:
87:6d:fb:13:43:ba:73:20:c3:96:5e:ab:d0:76:21:
33:dd:47:15:62:9d:02:6c:e8:d0:0f:1a:0f:c2:0c:
c1:d7:24:28:d9:bf:88:a7:c7:8b:37:19:8d:9e:e6:
47:97:01:c4:7b:c1:1d:20:b9:c3:47:25:10:43:2c:
ac:a8:a7:c5:ea:e1:79:81:74:b6:b8:78:ba:7b:ca:
1f:54:b3:bb:d8:db:df:fc:0f:f6:c9:92:16:c8:52:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:13:3F:B3:B7:91:53:ED:36:2F:59:F2:4A:73:7F:41:03:B8:EC:16
X509v3 Authority Key Identifier:
keyid:71:1E:07:4E:6A:25:14:F3:AC:18:7B:69:8A:E7:F8:14:46:CB:6E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/033367e5ad5492626298a00d7acc4757c59b9b8b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e5c180f-ad69-4685-857d-60da248b236d/e29f85d453d5e73d72f0c32da98e7294777f2a3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8e5c180f-ad69-4685-857d-60da248b236d/033367e5ad5492626298a00d7acc4757c59b9b8b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:14:3800::/48
Signature Algorithm: sha256WithRSAEncryption
15:ce:2e:a1:8f:f5:34:2b:c2:c6:1a:43:83:9d:a1:be:4d:2a:
b3:9d:1c:86:7b:9e:e0:c7:06:af:9f:31:12:12:0d:03:28:ad:
40:c9:a1:ca:d4:ba:29:9f:a0:04:92:f3:f8:83:84:69:4d:be:
a1:8b:f8:eb:51:d1:96:47:54:4c:ed:da:8e:0c:16:90:df:82:
6d:2d:59:91:44:40:ac:47:0b:57:6e:f3:32:35:07:11:6c:98:
eb:42:3b:51:f5:0f:8c:4a:17:2c:04:a6:27:28:b8:4f:4d:ba:
dc:a7:c6:ce:b5:94:e7:90:30:a2:79:61:38:87:f8:aa:8b:6d:
04:cd:ae:81:35:61:4f:bd:bd:cb:87:0f:12:4b:17:70:62:12:
50:17:a1:46:78:25:36:e3:c2:10:0e:95:5c:0c:98:8d:57:0a:
66:eb:96:f2:2a:42:4f:a2:eb:53:48:17:9b:f0:91:b2:d8:f9:
4c:57:e6:40:88:15:97:fb:35:06:16:ed:94:73:b1:87:65:0c:
14:16:38:33:9f:74:09:12:3e:dc:6b:78:c7:38:01:1a:a0:98:
cc:60:f2:7b:93:21:1b:af:b3:3b:3c:8d:ab:13:bd:0c:13:ff:
5f:c5:5b:b8:64:e3:26:ee:3e:bc:5a:f3:5d:8a:ee:54:b4:69:
c0:8f:94:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org