Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/609756a35670524ebdd18631efa6418485206312.roa
File: 609756a35670524ebdd18631efa6418485206312.roa (raw, json)
Hash identifier: RY3aa7gDXiQXSZlQ/X+6At8nYTLglYLcrTcXpu9IFrE=
Subject key identifier: 3D:3D:47:BE:0C:1A:C4:16:BD:B4:2C:89:49:FD:C0:34:75:7C:BB:C3
Certificate issuer: /CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Certificate serial: 18645C
Authority key identifier: E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/609756a35670524ebdd18631efa6418485206312.roa
Signing time: Tue 14 Jun 2022 17:25:58 +0000
ROA not before: Tue 14 Jun 2022 03:00:00 +0000
ROA not after: Fri 14 Jun 2024 03:00:00 +0000
asID: 265855
IP address blocks: 2803:da20:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1598556 (0x18645c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Validity
Not Before: Jun 14 03:00:00 2022 GMT
Not After : Jun 14 03:00:00 2024 GMT
Subject: CN=609756a35670524ebdd18631efa6418485206312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:3e:77:57:08:e0:75:a4:eb:50:77:47:ff:
3c:99:70:d1:a7:fe:d6:e1:48:81:3f:a0:73:1c:a1:
d7:c7:22:8a:6a:a9:ec:c9:73:ad:73:01:3f:cd:49:
d6:3c:1f:7d:4a:6d:12:8f:8b:f8:cc:c5:22:2a:70:
a0:39:cb:05:2d:5b:42:d6:f6:76:d8:25:fc:26:18:
58:fe:3c:53:68:46:dc:d3:25:7a:64:e9:d0:9f:94:
99:38:81:49:1c:78:28:d4:de:25:5b:5c:ea:7b:6a:
1f:08:59:54:c1:20:51:b3:81:32:34:bd:9d:dc:5d:
05:6c:83:49:c5:b8:20:77:91:c6:3c:74:e5:b2:77:
c1:76:b8:4d:5c:39:cf:0a:6a:fc:d7:18:ca:38:ae:
6b:e5:a0:e7:23:ba:a6:ff:08:f0:45:b4:b7:ea:c8:
08:ec:a1:6e:71:c0:6d:e0:4c:1b:e2:7b:d5:a3:2a:
70:4e:10:d5:c4:b5:2c:47:5d:f7:08:09:7c:b6:1c:
78:78:12:ee:5b:e4:01:58:9f:6c:36:ef:cc:03:8b:
07:1a:fa:2e:da:37:37:86:67:d3:a4:88:80:b9:fd:
3f:45:d2:e2:3c:de:19:ea:73:bc:11:d7:35:0e:34:
c3:04:46:e7:ee:51:82:22:2e:0e:75:24:13:8f:1c:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3D:47:BE:0C:1A:C4:16:BD:B4:2C:89:49:FD:C0:34:75:7C:BB:C3
X509v3 Authority Key Identifier:
keyid:E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/609756a35670524ebdd18631efa6418485206312.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:da20:200::/40
Signature Algorithm: sha256WithRSAEncryption
c5:31:7a:e7:45:ef:57:a5:da:dc:2a:15:5b:5f:42:c4:ad:0f:
70:29:cc:6f:76:a5:7f:14:25:c3:60:99:bf:5c:51:28:16:1b:
9d:81:97:a9:3b:c2:a5:f4:b7:d0:74:db:ac:bc:f4:29:d6:a6:
79:ee:7e:c9:61:91:27:67:61:ba:38:22:de:aa:b8:93:81:3f:
de:f7:92:05:bf:f8:bc:61:2d:97:79:87:60:07:23:18:fa:0f:
84:1f:5b:7d:3d:00:d5:d1:50:e6:66:82:83:8e:14:80:a9:36:
94:87:72:cf:55:48:44:7e:68:4f:14:34:94:9b:17:4a:56:2f:
86:66:a0:cf:77:27:41:f3:f7:18:3f:ff:05:be:54:d8:98:00:
f4:97:7f:a0:d0:16:ca:c5:cf:8e:89:0a:75:8b:ed:a0:3a:80:
83:34:63:4e:ae:9b:d2:a5:ee:1b:77:a6:d0:89:cc:29:22:55:
8e:ae:0c:8c:2c:4b:90:75:00:1e:5e:c7:08:9b:1a:24:4d:cf:
53:09:2e:1f:86:f6:27:3c:46:73:85:08:de:76:ff:14:84:97:
c9:23:b3:1d:ba:f9:01:b6:51:bc:9f:49:e6:29:39:f4:7f:9f:
e1:74:0d:d8:8e:0b:74:e4:1e:68:fe:4d:02:7b:8c:e0:e6:86:
a8:33:e2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org