Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/b78b10f51f36a54a4239e82eeb827f506b64ee69.roa
File: b78b10f51f36a54a4239e82eeb827f506b64ee69.roa (raw, json)
Hash identifier: jbNpPIHotUFyPB6BIwgYkpIouV3iCVXSP1pPGjwkY1o=
Subject key identifier: 62:F5:E2:04:89:89:1E:DE:86:06:B7:8B:A4:24:1B:DF:55:BB:CD:1C
Certificate issuer: /CN=ff21b6b8874efa4815d9d8305ad936329fe73ac8
Certificate serial: 018310
Authority key identifier: 94:8F:91:BF:DF:A7:DC:66:1E:61:BA:45:90:97:AB:DD:15:5C:22:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff21b6b8874efa4815d9d8305ad936329fe73ac8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/b78b10f51f36a54a4239e82eeb827f506b64ee69.roa
Signing time: Tue 09 May 2023 23:01:29 +0000
ROA not before: Mon 08 May 2023 23:01:28 +0000
ROA not after: Fri 09 May 2025 23:01:28 +0000
asID: 3816
IP address blocks: 2801:1f9:3::/48 maxlen: 48
2801:1f9:9::/48 maxlen: 48
2801:1f9:7::/48 maxlen: 48
2801:1f9::/48 maxlen: 48
2801:1f9:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99088 (0x18310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff21b6b8874efa4815d9d8305ad936329fe73ac8
Validity
Not Before: May 8 23:01:28 2023 GMT
Not After : May 9 23:01:28 2025 GMT
Subject: CN=b78b10f51f36a54a4239e82eeb827f506b64ee69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:68:e6:3a:e0:04:7c:c6:c4:d4:57:97:f2:
53:23:11:cd:39:a8:cc:c5:ca:ff:7a:7e:55:96:cd:
c4:79:26:f2:f5:02:7f:5d:43:50:75:fc:7e:b4:51:
c8:6f:21:03:2e:71:6b:39:68:16:41:c4:a7:cb:eb:
a0:a1:0a:bf:e9:48:58:58:32:74:f5:ca:10:69:b6:
3b:dc:3e:91:30:f9:c7:93:dc:0b:22:6c:ff:ad:2f:
be:d6:6c:9f:79:71:61:bb:f8:c7:4a:3c:ae:a6:7a:
dc:42:9a:88:1f:d4:63:90:98:81:fa:46:41:ab:e6:
63:65:aa:7f:52:85:15:26:13:d0:e4:41:e7:cd:1b:
8c:0f:9e:5f:96:fe:92:e1:d8:26:98:26:80:26:a1:
64:77:1e:3e:e7:79:4a:9a:f6:c3:ae:f5:ec:e4:48:
ed:52:47:96:12:07:ab:57:7e:52:16:36:26:eb:99:
66:14:92:3a:15:26:dc:f4:62:0c:f1:0a:bf:1e:4d:
05:6b:b1:9d:d8:42:80:90:0b:f1:fa:c7:fc:71:96:
ff:c4:83:3d:7a:7d:e6:4f:b3:4b:71:85:a6:46:ac:
53:86:56:dc:2a:bb:1a:c1:63:1d:1e:fe:58:a3:29:
a6:09:3c:4e:28:8f:37:b8:eb:3e:65:1a:a4:55:9a:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F5:E2:04:89:89:1E:DE:86:06:B7:8B:A4:24:1B:DF:55:BB:CD:1C
X509v3 Authority Key Identifier:
keyid:94:8F:91:BF:DF:A7:DC:66:1E:61:BA:45:90:97:AB:DD:15:5C:22:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff21b6b8874efa4815d9d8305ad936329fe73ac8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/b78b10f51f36a54a4239e82eeb827f506b64ee69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/ff21b6b8874efa4815d9d8305ad936329fe73ac8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1f9::/48
2801:1f9:3::/48
2801:1f9:5::/48
2801:1f9:7::/48
2801:1f9:9::/48
Signature Algorithm: sha256WithRSAEncryption
8f:0d:86:51:43:0c:1c:45:9e:6f:b9:0b:ba:ac:b0:49:ea:7c:
4c:48:9d:5b:f0:ee:98:c4:f7:62:4e:9f:51:a3:1a:8b:6d:c9:
9a:c6:4c:8e:5f:98:d5:1c:8d:f8:63:06:ee:5c:65:17:b5:72:
0e:77:a0:8a:71:3a:d1:c3:ba:e2:0e:8d:bf:fb:ee:69:96:1e:
85:4b:0b:d6:84:ac:d5:ec:01:bb:00:3d:7d:e7:43:6e:e9:8c:
4c:7a:e5:3a:a2:00:ca:e0:ea:6f:67:e0:03:38:90:c6:cf:b7:
76:37:b0:d9:12:98:fe:2e:f9:2f:24:ae:40:c9:96:13:2e:c3:
28:53:d4:45:fb:42:5f:8d:2e:1d:fe:31:6a:2c:31:be:55:45:
c4:d7:aa:ca:e8:41:9b:81:ce:7c:d8:d4:30:3e:00:5e:ee:ae:
3b:12:c2:b4:1e:d3:ea:8f:21:c9:29:2a:1d:f4:ab:5c:e1:32:
c3:19:d7:68:6c:a7:d4:0a:fc:1b:d5:58:a8:0b:2f:2a:45:ef:
d9:09:22:ae:4f:65:2d:d1:c2:2d:ad:c7:0a:6e:2f:9a:67:e3:
7c:90:79:1d:07:28:4d:82:73:d3:74:a6:cc:d4:01:10:f2:7d:
11:6e:99:10:ba:f7:32:b8:06:e6:fc:f6:cb:77:4c:07:1f:0b:
bd:34:d5:54
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIDAYMQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZm
MjFiNmI4ODc0ZWZhNDgxNWQ5ZDgzMDVhZDkzNjMyOWZlNzNhYzgwHhcNMjMwNTA4
MjMwMTI4WhcNMjUwNTA5MjMwMTI4WjAzMTEwLwYDVQQDEyhiNzhiMTBmNTFmMzZh
NTRhNDIzOWU4MmVlYjgyN2Y1MDZiNjRlZTY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr5to5jrgBHzGxNRXl/JTIxHNOajMxcr/en5Vls3EeSby9QJ/
XUNQdfx+tFHIbyEDLnFrOWgWQcSny+ugoQq/6UhYWDJ09coQabY73D6RMPnHk9wL
Imz/rS++1myfeXFhu/jHSjyupnrcQpqIH9RjkJiB+kZBq+ZjZap/UoUVJhPQ5EHn
zRuMD55flv6S4dgmmCaAJqFkdx4+53lKmvbDrvXs5EjtUkeWEgerV35SFjYm65lm
FJI6FSbc9GIM8Qq/Hk0Fa7Gd2EKAkAvx+sf8cZb/xIM9en3mT7NLcYWmRqxThlbc
KrsawWMdHv5YoymmCTxOKI83uOs+ZRqkVZob5wIDAQABo4ICgjCCAn4wHQYDVR0O
BBYEFGL14gSJiR7ehga3i6QkG99Vu80cMB8GA1UdIwQYMBaAFJSPkb/fp9xmHmG6
RZCXq90VXCJzMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYyMWI2
Yjg4NzRlZmE0ODE1ZDlkODMwNWFkOTM2MzI5ZmU3M2FjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWEwNTVhY2YtNmIwNS00MjMyLThmMTctYTY3NDAx
MDUwMzU1L2I3OGIxMGY1MWYzNmE1NGE0MjM5ZTgyZWViODI3ZjUwNmI2NGVlNjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YTA1NWFjZi02YjA1LTQyMzItOGYxNy1hNjc0
MDEwNTAzNTUvZmYyMWI2Yjg4NzRlZmE0ODE1ZDlkODMwNWFkOTM2MzI5ZmU3M2Fj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBGBggrBgEFBQcBBwEB/wQ3
MDUwMwQCAAIwLQMHACgBAfkAAAMHACgBAfkAAwMHACgBAfkABQMHACgBAfkABwMH
ACgBAfkACTANBgkqhkiG9w0BAQsFAAOCAQEAjw2GUUMMHEWeb7kLuqywSep8TEid
W/DumMT3Yk6fUaMai23JmsZMjl+Y1RyN+GMG7lxlF7VyDneginE60cO64g6Nv/vu
aZYehUsL1oSs1ewBuwA9fedDbumMTHrlOqIAyuDqb2fgAziQxs+3djew2RKY/i75
LySuQMmWEy7DKFPURftCX40uHf4xaiwxvlVFxNeqyuhBm4HOfNjUMD4AXu6uOxLC
tB7T6o8hySkqHfSrXOEywxnXaGyn1Ar8G9VYqAsvKkXv2Qkirk9lLdHCLa3HCm4v
mmfjfJB5HQcoTYJz03SmzNQBEPJ9EW6ZELr3MrgG5vz2y3dMBx8LvTTVVA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org