Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/4fb43d02a9169a8dbb277b8eeaaa31cd6e154c41.roa
File: 4fb43d02a9169a8dbb277b8eeaaa31cd6e154c41.roa (raw, json)
Hash identifier: 2O5MAVHerp9i7QnbWeKozgyMFMeBb2t7f5iLGcvMRng=
Subject key identifier: 31:FC:7D:B7:B2:8A:10:66:6E:5B:66:67:02:07:67:1A:6A:28:6F:BD
Certificate issuer: /CN=bfbdd559af6aac3348d7a10caf850960a448f10d
Certificate serial: 0DA663
Authority key identifier: 1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/4fb43d02a9169a8dbb277b8eeaaa31cd6e154c41.roa
Signing time: Wed 24 Mar 2021 14:32:36 +0000
ROA not before: Wed 24 Mar 2021 14:32:36 +0000
ROA not after: Tue 24 Mar 2026 14:32:36 +0000
asID: 264683
IP address blocks: 2801:0:141::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894563 (0xda663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbdd559af6aac3348d7a10caf850960a448f10d
Validity
Not Before: Mar 24 14:32:36 2021 GMT
Not After : Mar 24 14:32:36 2026 GMT
Subject: CN=4fb43d02a9169a8dbb277b8eeaaa31cd6e154c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:47:bb:76:21:00:19:f7:ee:77:99:24:90:
c2:58:19:53:80:86:bb:17:df:26:15:ee:29:8c:24:
e1:ea:a3:b5:de:ac:82:97:ca:23:18:55:ca:e4:8f:
7b:15:ca:b1:f4:3f:0f:cd:b8:98:5b:98:fc:42:79:
df:5d:56:e4:e5:82:fa:6c:8c:1b:33:c6:26:8e:90:
c8:ca:32:9e:37:37:82:ea:5e:a0:f3:6e:f1:2e:50:
7b:fd:17:8f:17:14:30:82:f4:dc:bc:ed:90:9c:c2:
8d:7c:51:30:65:d7:48:37:cc:c5:34:18:a9:ab:60:
85:f0:10:17:0b:f6:7a:18:f9:68:7f:ec:af:51:0a:
9e:e8:a2:f0:c3:76:09:76:8f:5d:22:9d:ed:98:65:
fb:52:95:72:f4:1e:85:86:19:04:4a:ef:9e:71:ce:
76:3a:43:90:dc:ef:96:9d:4d:55:a7:05:f2:0f:24:
bb:b6:a9:ea:27:ea:ae:ba:b1:44:f8:96:60:f6:41:
94:fe:ca:bc:48:66:de:db:41:92:ee:60:ce:41:1e:
51:c3:6f:46:fe:c1:ed:fc:c1:1e:52:76:99:c8:56:
16:c7:82:9f:00:f1:a6:49:c7:ff:0d:db:c8:54:17:
f8:f6:8e:88:9e:a8:42:c2:cd:4d:70:4d:98:ba:9e:
ac:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FC:7D:B7:B2:8A:10:66:6E:5B:66:67:02:07:67:1A:6A:28:6F:BD
X509v3 Authority Key Identifier:
keyid:1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/4fb43d02a9169a8dbb277b8eeaaa31cd6e154c41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/bfbdd559af6aac3348d7a10caf850960a448f10d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:0:141::/48
Signature Algorithm: sha256WithRSAEncryption
00:48:a9:20:71:4d:93:fa:e7:14:66:58:d1:07:4d:06:09:c0:
51:68:5c:7a:5f:10:e4:18:43:37:27:11:64:a1:e0:65:85:e8:
68:0e:57:91:41:63:d6:53:0c:1e:35:01:21:0b:0e:ca:de:85:
03:28:80:a3:f2:61:38:df:32:8b:72:02:45:06:63:bc:15:ae:
5b:3a:99:04:ac:f3:9e:ed:36:59:ec:09:89:72:e1:a4:47:48:
fa:0b:8d:ea:b7:57:3a:17:aa:9f:e4:8e:db:92:24:36:b5:60:
73:4e:65:90:fd:18:8a:ba:dc:0d:cb:a4:22:a5:60:c8:ee:eb:
4d:a0:77:27:fe:52:00:80:05:c5:e3:34:5c:e8:05:c0:88:93:
bf:f1:22:ee:11:6a:82:22:22:b5:01:11:c1:8d:85:32:f2:ba:
8d:49:c4:ae:b4:d6:f7:45:46:2d:78:f8:59:0d:5b:e9:fe:26:
2f:71:49:e2:45:6f:bf:a7:fc:00:ea:35:9b:f4:7f:8d:36:8e:
24:fb:32:e7:16:b5:13:40:b2:af:b2:9e:47:db:c4:07:02:8d:
44:64:d4:b5:2c:48:80:37:1a:15:a0:52:9a:47:70:58:8d:c6:
a8:c6:c1:1c:d7:d1:d7:8d:83:f9:5b:fc:4d:17:23:c3:ec:8d:
38:43:c7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org