Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/8d2ff8bde85f47589fe034c16ca6d9b780234e52.roa
File: 8d2ff8bde85f47589fe034c16ca6d9b780234e52.roa (raw, json)
Hash identifier: Qj5PJ2Ws6/Gl4O31IklWFBJno3/SJiiHLZXCPdOZlRc=
Subject key identifier: F0:22:76:37:EF:D6:22:8C:45:B8:9C:58:FB:40:A0:11:A7:CE:35:98
Certificate issuer: /CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
Certificate serial: 200DC7
Authority key identifier: 65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/8d2ff8bde85f47589fe034c16ca6d9b780234e52.roa
Signing time: Sun 09 Apr 2023 08:30:02 +0000
ROA not before: Sat 08 Apr 2023 08:30:02 +0000
ROA not after: Mon 07 Apr 2025 08:30:02 +0000
asID: 12956
IP address blocks: 2803:b2c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2100679 (0x200dc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
Validity
Not Before: Apr 8 08:30:02 2023 GMT
Not After : Apr 7 08:30:02 2025 GMT
Subject: CN=8d2ff8bde85f47589fe034c16ca6d9b780234e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:94:cf:6a:a3:51:06:7e:59:74:27:da:3f:
db:e0:b4:22:8d:7a:ca:9b:32:94:ae:d1:7c:e5:6c:
74:2e:e3:88:05:7a:0d:c8:6b:35:fb:e8:f6:b4:04:
6b:32:21:b3:f6:12:7d:2a:81:0d:dc:0b:81:c3:0c:
4d:9f:23:9d:26:2d:08:ac:53:09:64:de:7c:9c:98:
53:73:88:76:9f:17:ac:72:60:72:67:28:24:8a:a8:
df:fc:2b:35:67:4f:9c:fb:47:7f:20:a8:ac:13:1a:
c5:48:ad:83:62:b3:69:e9:61:cb:d5:aa:cc:32:b8:
5e:f6:47:41:5e:23:4f:a3:9b:2d:3f:91:f2:20:99:
60:26:6c:5a:bd:37:c7:70:2d:ed:64:e9:31:be:ae:
d2:b8:0d:ef:3a:ca:f9:13:df:be:09:8f:ce:25:95:
71:95:1a:cd:a0:c9:55:9e:6c:9f:fb:42:45:2e:d3:
bc:40:3d:28:02:d6:ac:ce:8d:84:b5:ea:43:58:a9:
06:78:03:3b:a0:28:bc:04:d0:ea:c7:5a:59:eb:c6:
3d:e8:02:7a:18:fe:a6:af:b8:ca:a2:8f:ba:58:0e:
e5:9a:d5:f1:c6:81:80:ad:dd:3c:0b:2d:17:6b:c4:
3b:1b:f2:a5:33:33:12:2a:d8:e3:08:08:af:58:a8:
3b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:22:76:37:EF:D6:22:8C:45:B8:9C:58:FB:40:A0:11:A7:CE:35:98
X509v3 Authority Key Identifier:
keyid:65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/8d2ff8bde85f47589fe034c16ca6d9b780234e52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/f4a582f6c7807f5fdd31b69ae270f85d00c39706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:b2c0::/32
Signature Algorithm: sha256WithRSAEncryption
a5:33:8f:3f:df:94:d2:d0:16:d5:c3:87:e0:6a:ed:73:d1:7e:
32:43:b8:0a:37:ed:24:27:1b:9c:22:80:68:72:aa:cb:d0:5c:
02:2a:e4:4a:9e:ee:39:2b:1e:c2:98:3a:23:43:c9:89:b2:40:
ca:bd:da:d1:d9:a6:3e:41:37:2b:50:36:aa:33:aa:0a:66:b7:
16:6e:7a:c7:1b:2a:ae:31:1a:94:77:ba:e9:5b:f4:7e:a6:51:
5d:62:43:0f:e1:40:38:67:32:b0:98:60:71:a3:6a:37:48:2f:
a2:fe:b1:85:b7:95:4c:a2:b7:3f:89:92:3e:d3:6f:a1:f5:36:
d6:22:30:95:dd:75:04:69:d7:a9:53:38:de:49:47:0e:de:f8:
c6:b1:0b:32:95:72:09:23:7c:f1:be:92:dc:61:e5:b3:d5:9b:
0f:58:d9:b4:61:af:4e:28:75:94:d5:cc:34:8c:e5:06:53:84:
38:10:ca:f3:c4:6e:ca:63:13:d4:8e:0e:30:2e:66:f9:29:5c:
e2:41:9c:c4:37:1a:92:11:ef:09:d9:bd:d2:83:bc:4f:4a:96:
88:64:cf:b8:03:e3:f0:3e:48:85:00:73:3a:14:a4:5d:2a:e5:
0b:a8:20:22:ac:e2:b7:bf:b8:38:1f:e0:32:9f:7f:ae:05:8f:
1c:4d:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org