Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ff43340-66a0-4919-8cbf-4d14ffc22b0b/42442551be7e729190ab44084049f27b0eea0bb1.roa
File: 42442551be7e729190ab44084049f27b0eea0bb1.roa (raw, json)
Hash identifier: R6dHa6QY+U8ybQMdcq6P6LhLm7mJnOx/8e6DolxeaSQ=
Subject key identifier: 02:B1:7B:F3:A7:48:03:82:92:F7:8E:96:12:64:6C:0C:6D:C1:38:7F
Certificate issuer: /CN=ae946cc9c707e5ce6195524f720cf4743e0df128
Certificate serial: 1FD4
Authority key identifier: E0:C9:83:E4:EF:EB:7E:D3:0D:9B:A5:50:DF:0A:58:BF:FA:CB:4C:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae946cc9c707e5ce6195524f720cf4743e0df128.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8ff43340-66a0-4919-8cbf-4d14ffc22b0b/42442551be7e729190ab44084049f27b0eea0bb1.roa
Signing time: Wed 09 Aug 2023 21:00:21 +0000
ROA not before: Tue 08 Aug 2023 21:00:21 +0000
ROA not after: Sat 09 Aug 2025 21:00:21 +0000
asID: 270190
IP address blocks: 2806:409::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8148 (0x1fd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae946cc9c707e5ce6195524f720cf4743e0df128
Validity
Not Before: Aug 8 21:00:21 2023 GMT
Not After : Aug 9 21:00:21 2025 GMT
Subject: CN=42442551be7e729190ab44084049f27b0eea0bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:03:e1:02:db:de:6a:77:4a:c0:f3:ae:57:
48:27:c1:73:c9:b6:c5:db:6e:9f:cf:9d:ac:14:0e:
ef:73:b0:35:5d:67:ac:2f:d0:09:2a:dd:c1:ed:e8:
d0:97:e1:88:7a:23:29:54:59:91:e6:37:a5:13:4d:
a5:76:f9:c2:ec:e1:8c:47:2c:1f:db:84:6c:77:7b:
ae:8c:a0:79:21:9f:bc:7a:5a:22:c2:03:70:d9:2f:
d0:b5:95:31:e2:9c:8d:61:bc:fe:e6:d5:51:6d:e7:
58:c1:96:81:73:08:21:6c:2c:d1:d1:e7:6d:72:59:
dd:34:aa:42:a9:36:c5:fa:aa:33:f8:0a:1e:68:ec:
33:e7:ce:84:36:7f:a8:e9:20:b1:ce:90:a1:fa:ab:
e2:e8:28:95:ff:b8:83:fb:5b:a7:ef:46:d5:b8:5b:
82:da:e2:8b:48:b7:eb:50:37:89:5e:9c:7e:bc:29:
1d:14:61:f2:a1:89:e5:9f:b2:37:19:fb:91:12:7c:
dd:4a:5e:17:23:60:74:91:f1:4d:ab:6a:94:04:58:
f9:4c:ed:c8:fb:2e:ff:48:ff:2f:5e:f2:62:0e:e6:
11:12:a5:35:ac:b6:63:ec:63:7a:c6:71:7e:74:ba:
5b:78:91:69:87:ed:a9:60:b0:92:da:ef:5b:ba:57:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B1:7B:F3:A7:48:03:82:92:F7:8E:96:12:64:6C:0C:6D:C1:38:7F
X509v3 Authority Key Identifier:
keyid:E0:C9:83:E4:EF:EB:7E:D3:0D:9B:A5:50:DF:0A:58:BF:FA:CB:4C:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae946cc9c707e5ce6195524f720cf4743e0df128.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ff43340-66a0-4919-8cbf-4d14ffc22b0b/42442551be7e729190ab44084049f27b0eea0bb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8ff43340-66a0-4919-8cbf-4d14ffc22b0b/ae946cc9c707e5ce6195524f720cf4743e0df128.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:409::/32
Signature Algorithm: sha256WithRSAEncryption
98:e2:e4:01:5d:a6:da:c1:d5:8d:71:24:ab:6f:01:97:76:fc:
32:d2:26:44:ec:8c:a6:3e:98:35:d7:ea:b7:ab:b6:f7:b3:d4:
0d:6f:89:f0:ce:34:6f:f3:2c:ea:41:e6:74:56:87:b6:2b:c5:
57:ab:50:7c:21:85:e5:67:0c:13:26:4c:d9:e5:71:47:61:2b:
3a:4e:59:3b:23:80:3c:7f:25:06:54:5d:0e:0d:88:8f:fd:08:
8e:39:ed:49:17:c8:73:71:6d:83:1e:06:eb:b6:f6:bd:22:ca:
40:07:42:ca:20:2c:f4:bb:ca:7c:1b:95:fb:37:08:cc:c6:8a:
c9:af:35:41:47:b2:aa:5a:e1:94:ed:59:e9:89:96:66:da:0f:
7b:0a:44:37:f9:4d:fb:d8:bd:48:20:ca:77:62:ac:df:63:7c:
33:b8:5c:ea:26:22:2d:e8:70:af:9c:c5:82:77:5d:b9:41:fc:
30:ab:62:3a:30:1f:cb:0e:70:d0:92:c2:e4:a7:6e:d3:79:8c:
38:dc:4d:1e:bf:1e:3f:eb:de:b0:4f:30:aa:57:c8:14:14:13:
2c:68:d9:4c:13:d6:68:6c:43:3a:ef:ea:63:1d:85:a6:69:cf:
50:2e:1d:2f:6a:ac:6b:28:e7:f5:ee:0a:77:87:23:07:1c:86:
6e:da:a2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org