Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/0b27acc45d2ac1808b9b342fb5dfaa153904c9bc.roa
File: 0b27acc45d2ac1808b9b342fb5dfaa153904c9bc.roa (raw, json)
Hash identifier: CQuiq8D1arMw8rjN4iGtR534MXhSDP8zm4w7MFYB4t8=
Subject key identifier: B6:0C:94:98:DA:DB:A9:64:BF:65:B7:81:99:F8:2D:7D:4A:F5:8B:0B
Certificate issuer: /CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
Certificate serial: 21D4B5
Authority key identifier: 95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/0b27acc45d2ac1808b9b342fb5dfaa153904c9bc.roa
Signing time: Tue 19 Sep 2023 03:40:31 +0000
ROA not before: Mon 18 Sep 2023 03:40:31 +0000
ROA not after: Fri 19 Sep 2025 03:40:31 +0000
asID: 14080
IP address blocks: 2803:bfa0:ff00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2217141 (0x21d4b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
Validity
Not Before: Sep 18 03:40:31 2023 GMT
Not After : Sep 19 03:40:31 2025 GMT
Subject: CN=0b27acc45d2ac1808b9b342fb5dfaa153904c9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:95:4f:a2:7b:2f:94:bc:41:65:72:92:8a:
bc:f2:8d:56:8e:cf:77:f9:6a:bb:f5:47:6d:bc:5c:
ae:ac:2f:1c:cf:98:47:44:d0:f4:72:10:f7:87:19:
8b:1d:cc:1e:f9:2b:d7:dc:0e:7b:53:9e:e0:44:1e:
be:eb:f1:b5:a3:d5:f3:b3:29:9e:91:b1:d6:b5:25:
97:b2:04:6d:12:46:d2:a9:3c:00:93:1e:d1:9b:cf:
3d:92:c0:b3:03:d6:83:7f:ea:54:a7:05:4a:c5:a4:
23:91:4f:d8:42:d1:78:c7:a1:99:0e:3e:83:97:0b:
52:49:2e:c1:f3:07:55:c0:39:8d:ff:d7:0d:96:76:
1a:4e:66:0f:3b:0d:61:97:43:6f:a8:30:72:13:63:
df:d0:15:6c:09:b6:c5:a4:2a:bb:a8:65:47:18:01:
86:d4:7f:84:03:3e:41:ed:9e:59:86:48:10:1f:89:
5e:af:d0:fa:ab:72:c6:95:f3:49:87:90:9d:ba:5d:
bb:67:0c:d9:1c:73:e9:36:dc:c9:94:c3:73:b9:2d:
28:33:97:38:c5:c8:7a:a3:d7:49:54:d3:9f:92:be:
47:2a:ab:d7:ab:35:36:58:e2:9b:d1:41:3a:40:20:
22:8b:fe:e5:32:8f:31:68:93:9e:33:3c:85:a2:1e:
8d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0C:94:98:DA:DB:A9:64:BF:65:B7:81:99:F8:2D:7D:4A:F5:8B:0B
X509v3 Authority Key Identifier:
keyid:95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/0b27acc45d2ac1808b9b342fb5dfaa153904c9bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:bfa0:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
0e:76:64:02:af:02:97:d6:33:d2:ad:95:8c:e3:ef:fb:44:d9:
21:40:95:5f:c9:48:50:89:5f:81:da:c1:18:73:57:c5:ba:fb:
b6:eb:83:70:99:11:e8:79:10:8e:09:bb:28:0f:19:63:09:1b:
1c:81:c2:ef:50:fc:cf:77:0b:37:51:8e:40:f2:18:cf:7d:de:
78:24:61:bd:bc:78:67:b1:2a:98:84:53:c2:6d:08:46:f5:16:
5b:68:a7:d2:bb:f0:88:61:d8:b7:58:da:cf:80:e2:91:4e:a2:
31:a8:f3:ca:9c:ba:62:54:99:83:fd:35:98:dd:c1:98:8b:17:
8b:b1:80:bc:0f:4a:c7:85:66:b9:20:53:98:48:76:10:fc:84:
70:15:81:87:18:b2:c1:6c:9d:92:33:00:3d:86:6b:82:ec:d6:
f7:27:ba:24:c3:59:c3:7f:ce:44:d4:3f:c8:72:d0:f0:f3:51:
99:e4:bc:20:37:64:d1:ca:5a:48:38:c2:96:ee:f4:ec:b8:6c:
91:18:41:4f:91:ca:9d:27:3f:c5:9d:0b:f4:c6:23:50:60:8e:
a7:c3:e3:38:e8:84:74:6b:c7:ec:ee:27:74:e6:02:dc:b9:91:
d3:83:25:fe:39:03:18:3c:a6:63:c7:ea:fb:d8:cc:05:1b:3c:
ce:fd:ce:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org