Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/bf02cb610690a1d325baa3a7d99086b8376b9a4a.roa
File: bf02cb610690a1d325baa3a7d99086b8376b9a4a.roa (raw, json)
Hash identifier: xTzWhL7dY5dggpj1SbKPwfX10bCPgN+U6MiB87pLRJE=
Subject key identifier: 7E:38:05:4F:91:A7:4E:E4:65:9D:D5:74:7C:D4:A6:FA:F6:53:29:1C
Certificate issuer: /CN=491991f40dab281b295c3cc5d691493655fc7e8d
Certificate serial: 242904
Authority key identifier: A3:F9:36:28:6E:C6:CC:E2:32:2D:F0:25:B1:C8:67:74:63:9B:B7:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491991f40dab281b295c3cc5d691493655fc7e8d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/bf02cb610690a1d325baa3a7d99086b8376b9a4a.roa
Signing time: Wed 13 Sep 2023 10:59:16 +0000
ROA not before: Tue 12 Sep 2023 10:59:16 +0000
ROA not after: Sat 13 Sep 2025 10:59:16 +0000
asID: 264830
IP address blocks: 2803:2c0:f200::/41 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2369796 (0x242904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491991f40dab281b295c3cc5d691493655fc7e8d
Validity
Not Before: Sep 12 10:59:16 2023 GMT
Not After : Sep 13 10:59:16 2025 GMT
Subject: CN=bf02cb610690a1d325baa3a7d99086b8376b9a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:1e:c8:0e:28:b3:75:04:2e:93:2c:60:2d:
1b:58:da:64:d3:02:b2:a2:03:15:9c:58:13:11:36:
7a:b1:ef:73:0d:f5:b4:56:83:d7:95:d0:4e:8e:12:
de:80:ea:df:54:b4:21:ca:20:a9:1c:59:54:24:54:
1a:c8:58:44:cc:55:fd:6b:1c:6f:f4:15:95:10:aa:
f9:f9:08:1e:5f:e1:71:bf:93:cb:2e:d1:95:36:b2:
84:a9:7c:b4:2c:9c:fc:5e:6a:e9:c2:1a:82:14:9a:
0d:aa:df:8a:03:a8:12:d3:d3:21:99:e0:a9:b3:2b:
e4:71:e2:ac:30:a7:61:a9:64:1f:57:89:3b:5d:5a:
c6:64:dc:bc:27:3c:bc:e5:e0:c7:80:1c:89:e1:29:
00:6d:a4:91:94:69:98:17:35:47:10:2e:f2:3c:0d:
13:6e:6d:59:37:4c:27:d1:fd:52:1b:07:05:02:b1:
b4:11:c9:0e:ca:25:d4:e0:84:25:0e:32:aa:e6:eb:
fb:24:c0:9b:a7:20:98:68:22:8e:21:79:a2:30:6d:
7c:16:d5:95:bf:f8:24:9e:0a:61:a1:b5:1b:63:b4:
9f:8d:16:97:f4:27:3b:f9:70:0c:fe:14:d5:90:58:
b7:89:bd:34:4c:aa:9f:5a:6d:ce:5c:c8:e4:65:4a:
85:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:38:05:4F:91:A7:4E:E4:65:9D:D5:74:7C:D4:A6:FA:F6:53:29:1C
X509v3 Authority Key Identifier:
keyid:A3:F9:36:28:6E:C6:CC:E2:32:2D:F0:25:B1:C8:67:74:63:9B:B7:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491991f40dab281b295c3cc5d691493655fc7e8d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/bf02cb610690a1d325baa3a7d99086b8376b9a4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/491991f40dab281b295c3cc5d691493655fc7e8d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2c0:f200::/41
Signature Algorithm: sha256WithRSAEncryption
3f:bc:60:6e:8f:ea:0c:c5:67:a1:68:b2:a5:9a:3b:90:ab:32:
81:45:ba:41:ce:3d:ac:76:8b:e1:90:df:38:bc:dc:43:ad:15:
82:71:c0:22:64:fc:49:ef:72:f4:23:f9:61:65:bf:7a:1d:84:
3a:90:95:d6:c2:65:41:f7:be:39:c4:61:2f:dc:5f:6c:60:b3:
ba:d9:cf:04:fd:af:bd:0e:d9:e2:37:9a:ae:2f:19:37:86:73:
d9:be:2d:5c:92:99:66:5f:91:bf:a2:f8:88:31:78:40:7d:77:
8a:86:9d:3f:d3:00:cf:50:3f:9c:34:53:d9:ee:12:23:16:86:
04:89:d5:3a:bb:cf:4b:91:0f:36:e6:65:46:5f:4f:29:c1:54:
5a:2b:75:72:60:5a:17:28:fd:b0:33:4e:68:57:94:1c:21:89:
ea:53:85:93:d5:c5:74:8f:29:9f:dd:8d:7f:58:91:6d:25:01:
fb:b0:ec:ff:cb:b8:74:40:ff:7f:fe:a3:9a:c9:82:f3:c1:61:
f6:36:ee:a9:99:5c:7e:01:55:11:7e:f1:b2:5d:6f:fc:0f:0d:
c3:4b:e9:1f:87:54:c6:46:82:22:08:8b:f8:5c:21:83:50:2d:
76:6f:dc:7f:32:2f:4c:b7:cf:f0:08:64:ee:71:a2:a8:4a:1b:
d2:1f:c2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org