Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c0b454ef-e2b9-4322-9458-ef54d85dc31b/524831ec9894155a0f5e180c7abafbb345d152fa.roa
File: 524831ec9894155a0f5e180c7abafbb345d152fa.roa (raw, json)
Hash identifier: OjxWkLP7OcnuMP55eNyWnWwn7x4zdH0LEyahWvzabWI=
Subject key identifier: B3:53:0E:DC:C6:E1:45:CD:B0:BE:0E:4E:32:8E:A7:5A:68:91:CC:45
Certificate issuer: /CN=2c52586abdd0ae9da3ca04fdbf08734527e2aadb
Certificate serial: 01BF7C
Authority key identifier: B7:7B:74:EC:88:6A:1C:57:81:8F:74:72:5C:A4:7C:FE:FA:36:28:2E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c52586abdd0ae9da3ca04fdbf08734527e2aadb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c0b454ef-e2b9-4322-9458-ef54d85dc31b/524831ec9894155a0f5e180c7abafbb345d152fa.roa
Signing time: Wed 03 Apr 2024 13:26:57 +0000
ROA not before: Wed 03 Apr 2024 13:26:57 +0000
ROA not after: Fri 03 Apr 2026 13:26:57 +0000
asID: 272119
IP address blocks: 2803:cf10::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114556 (0x1bf7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c52586abdd0ae9da3ca04fdbf08734527e2aadb
Validity
Not Before: Apr 3 13:26:57 2024 GMT
Not After : Apr 3 13:26:57 2026 GMT
Subject: CN=524831ec9894155a0f5e180c7abafbb345d152fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:90:f5:b5:fa:c1:7f:8d:9d:58:13:9a:6c:c0:
d8:f5:14:86:97:e8:72:36:20:d2:18:02:a9:b6:7f:
a1:df:7b:c6:ff:b6:5d:eb:1f:ed:4f:5f:6c:17:2e:
06:e9:08:bb:ca:e1:62:c7:db:2c:d2:ef:90:4e:cf:
9b:66:e4:55:10:52:12:06:60:4e:46:76:42:5b:d2:
c0:12:e3:e5:65:8a:b5:92:6c:72:d5:a9:8d:86:9d:
0d:f7:57:6d:9e:0e:d6:ce:3f:72:08:44:04:ca:b2:
57:b9:45:6c:22:2b:a0:a0:59:ff:8c:98:66:6d:d1:
67:89:b0:a1:d7:31:60:23:07:a6:01:da:c2:29:3b:
c4:f5:18:a1:27:0d:b8:3c:18:a8:39:12:99:89:c5:
51:86:98:a0:98:b9:1d:65:c7:d9:27:00:f9:5b:98:
10:dd:cd:b2:13:af:29:c2:b0:81:1b:8f:e3:24:cd:
9c:eb:be:37:f5:8d:7c:2f:6c:7e:9d:64:ed:83:4f:
b9:20:7d:81:27:12:04:58:57:7f:79:90:be:07:43:
f5:0f:2e:43:57:96:63:d4:6e:b0:61:85:5d:4d:2b:
bf:97:8f:4f:d3:0b:2f:1c:d5:2f:c7:33:98:e4:22:
c2:e9:f8:dd:0c:4b:88:77:e5:d2:4a:8f:50:9e:ee:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:53:0E:DC:C6:E1:45:CD:B0:BE:0E:4E:32:8E:A7:5A:68:91:CC:45
X509v3 Authority Key Identifier:
keyid:B7:7B:74:EC:88:6A:1C:57:81:8F:74:72:5C:A4:7C:FE:FA:36:28:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c52586abdd0ae9da3ca04fdbf08734527e2aadb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c0b454ef-e2b9-4322-9458-ef54d85dc31b/524831ec9894155a0f5e180c7abafbb345d152fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c0b454ef-e2b9-4322-9458-ef54d85dc31b/2c52586abdd0ae9da3ca04fdbf08734527e2aadb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:cf10::/32
Signature Algorithm: sha256WithRSAEncryption
69:59:b5:34:56:1a:16:c9:8f:91:f3:32:ba:89:72:36:47:b7:
ee:ca:67:af:df:60:e8:fd:8d:5a:b2:37:e3:7a:a5:02:22:8b:
a1:78:f9:27:d3:7e:20:80:51:59:79:0f:50:20:ef:4e:30:2e:
72:62:d8:03:d7:6b:2f:44:78:03:67:b6:ec:7f:0c:cf:c8:0d:
c4:89:61:11:7e:ca:f3:cd:10:9b:81:99:2f:21:84:2f:55:9f:
5d:8c:cb:81:5e:ea:2c:23:53:87:e2:85:59:5b:7c:a5:60:75:
07:00:28:e0:e5:ab:45:3a:f3:75:15:89:12:33:d4:21:2d:d5:
c2:f0:a3:57:6f:56:d3:45:0b:8b:c6:58:60:25:1b:42:c7:32:
86:11:2a:e3:7a:0b:ca:68:1d:2a:3b:36:d6:28:71:a5:05:8d:
e7:ef:32:b9:86:b5:1a:5f:46:af:30:d6:f6:91:ba:70:c1:2d:
01:13:67:e3:12:83:62:0d:63:ca:50:1a:3a:8f:00:ac:4b:4c:
61:9b:96:78:68:72:d7:c6:49:91:a2:f1:81:97:96:bf:6c:1c:
87:e8:a1:db:d5:b1:25:90:20:cf:4b:3f:4b:6f:1e:69:53:2f:
b7:38:11:de:57:48:6e:36:7a:63:9f:37:c4:43:21:ea:cc:8b:
03:aa:6d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-ams.rpki-client.org