Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d3f781fd-dcc7-48d6-b483-3cbf0920ea22/3ea6e7824c10376d45298243219fd3003ec5b029.roa
File: 3ea6e7824c10376d45298243219fd3003ec5b029.roa (raw, json)
Hash identifier: kRGnO3NDGzjpxyVlQqEhR8WSrjJ29n/QFJUcS4+zN+U=
Subject key identifier: 6C:55:46:CB:B8:66:1B:9C:58:CA:10:F5:89:EC:4D:5F:F5:1B:51:A0
Certificate issuer: /CN=aa9626805288e743eebc32afd6c5d414b8f13c2d
Certificate serial: 073F28
Authority key identifier: F9:64:EC:EE:24:59:60:D9:D0:46:23:3D:B0:F9:5D:D9:DC:E6:DA:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa9626805288e743eebc32afd6c5d414b8f13c2d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d3f781fd-dcc7-48d6-b483-3cbf0920ea22/3ea6e7824c10376d45298243219fd3003ec5b029.roa
Signing time: Mon 01 Apr 2024 20:08:40 +0000
ROA not before: Mon 01 Apr 2024 20:08:40 +0000
ROA not after: Wed 01 Apr 2026 20:08:40 +0000
asID: 271890
IP address blocks: 2801:19e::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474920 (0x73f28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9626805288e743eebc32afd6c5d414b8f13c2d
Validity
Not Before: Apr 1 20:08:40 2024 GMT
Not After : Apr 1 20:08:40 2026 GMT
Subject: CN=3ea6e7824c10376d45298243219fd3003ec5b029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:74:79:e9:27:94:c8:12:f0:ff:3f:5f:66:
91:f3:47:bd:4c:b6:83:f9:c0:73:ed:f3:b5:35:8f:
5f:a4:e3:00:1c:66:63:a2:65:14:d0:3d:e7:be:e7:
c3:66:25:da:44:66:e1:33:c3:e0:c6:68:7c:5b:5c:
b1:a9:90:bb:4d:85:d9:84:aa:46:5e:bb:51:33:0b:
40:ad:ea:0f:f3:06:a2:79:69:58:dd:a1:88:4f:1e:
c0:7d:24:6c:ab:00:b4:30:83:25:cd:62:7a:e1:c1:
1b:4a:c7:fd:fc:88:94:c0:b2:fa:bb:20:f5:96:bc:
4b:67:d2:c3:c2:a0:b1:8a:3e:5c:92:b1:5a:3e:e7:
0e:66:37:b3:ef:1b:c9:7c:c1:57:14:36:02:5d:af:
f6:05:e8:ec:61:77:44:f6:33:a6:4b:24:b4:d4:34:
ce:e4:24:76:a0:13:ec:b7:98:97:c0:02:e0:e2:0d:
c8:29:b9:ad:07:d0:f4:85:60:11:d9:c9:bf:c6:10:
f5:ac:bd:c2:c8:aa:bd:19:11:13:80:0e:a0:f8:b3:
c7:ab:e1:3e:be:7a:f2:6b:94:0b:47:94:02:1c:aa:
41:98:77:5b:49:c6:bb:90:a4:53:35:aa:c3:e9:92:
6e:86:36:8c:a5:f3:8c:c1:0f:92:f4:46:25:26:a3:
7e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:55:46:CB:B8:66:1B:9C:58:CA:10:F5:89:EC:4D:5F:F5:1B:51:A0
X509v3 Authority Key Identifier:
keyid:F9:64:EC:EE:24:59:60:D9:D0:46:23:3D:B0:F9:5D:D9:DC:E6:DA:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa9626805288e743eebc32afd6c5d414b8f13c2d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d3f781fd-dcc7-48d6-b483-3cbf0920ea22/3ea6e7824c10376d45298243219fd3003ec5b029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d3f781fd-dcc7-48d6-b483-3cbf0920ea22/aa9626805288e743eebc32afd6c5d414b8f13c2d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:19e::/44
Signature Algorithm: sha256WithRSAEncryption
97:da:b3:b0:e6:2b:87:09:32:0d:07:e4:ee:d2:bf:67:9d:57:
f9:a8:57:d5:45:67:9e:60:24:a1:50:2a:0a:c5:4f:ef:5e:a1:
64:d9:40:55:9e:b8:00:47:31:12:8c:ac:0d:fb:10:ba:e6:3b:
41:8a:11:98:61:7d:43:1a:cc:5e:ee:c7:07:64:57:dc:c6:75:
7c:e6:4d:45:15:6c:51:13:52:1e:97:ed:35:92:01:b3:23:39:
94:38:e7:de:ce:68:ad:b8:5c:ac:86:e0:40:3f:d5:e2:8a:cf:
dc:55:16:db:85:1f:57:bd:34:b8:76:41:ee:d6:27:16:f8:c8:
59:52:96:64:46:e2:28:b6:dd:c5:b6:94:0f:28:e5:2b:e4:05:
10:67:ec:3f:b1:9e:3f:a4:f4:dc:bc:94:f0:09:53:65:a9:6c:
90:46:f6:bf:c4:f4:20:c5:67:ac:64:6b:33:a1:c7:1e:af:18:
49:80:a2:b9:85:c2:0f:85:f7:01:a8:e9:88:6e:70:44:bd:78:
51:7d:43:91:e2:68:8a:e2:00:64:87:3a:98:12:13:c2:8f:3c:
3c:91:82:6c:33:c8:29:34:06:fe:74:89:cb:17:81:dd:27:05:
d5:5a:fe:49:3b:f4:d1:6a:a5:a1:e6:d1:b5:82:ba:ad:49:83:
5d:06:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org