Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc4e8873-c82b-420c-934c-156137893e40/8458c03b12abc0c0acffcf656ed17b246fecb209.roa
File: 8458c03b12abc0c0acffcf656ed17b246fecb209.roa (raw, json)
Hash identifier: 9vfKTz6YGyTfa1D3YjjLkLRbDoHwTbx8f/sIWOysDiI=
Subject key identifier: 5A:4E:21:8B:C5:B2:1F:4B:48:4E:42:AF:FF:78:56:BA:94:8D:BF:1A
Certificate issuer: /CN=768d3f90fddd18cca90c45a0e35a0f1d95e50766
Certificate serial: 03C3DA
Authority key identifier: 52:25:CF:6E:70:AE:7D:37:71:DA:15:52:DF:6B:2E:A3:B1:53:EE:71
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/768d3f90fddd18cca90c45a0e35a0f1d95e50766.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/dc4e8873-c82b-420c-934c-156137893e40/8458c03b12abc0c0acffcf656ed17b246fecb209.roa
Signing time: Sat 06 Jan 2024 12:34:35 +0000
ROA not before: Sat 06 Jan 2024 12:34:34 +0000
ROA not after: Tue 06 Jan 2026 12:34:34 +0000
asID: 272886
IP address blocks: 2803:7a90::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246746 (0x3c3da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768d3f90fddd18cca90c45a0e35a0f1d95e50766
Validity
Not Before: Jan 6 12:34:34 2024 GMT
Not After : Jan 6 12:34:34 2026 GMT
Subject: CN=8458c03b12abc0c0acffcf656ed17b246fecb209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e7:66:17:5f:0c:01:9a:6e:d8:ac:7b:31:9e:
a8:12:d2:df:0c:3b:76:01:69:a3:34:57:74:99:6b:
c6:7a:a8:f9:2b:d6:ec:bf:df:74:e7:71:d5:5e:64:
72:cf:33:7e:63:d9:ed:e7:18:c8:7b:d0:03:d2:98:
24:2d:61:62:f4:25:43:a8:af:f2:d3:fa:be:cf:e4:
51:78:83:0e:97:85:66:2a:f4:6f:bf:65:6d:bb:b9:
10:ea:19:4f:18:36:77:c7:48:30:4c:a7:45:cb:c6:
cb:55:ab:06:8e:6f:da:1e:12:0c:b5:7d:1e:60:54:
e7:f1:43:44:0b:de:c3:db:b7:37:6c:52:e2:38:d0:
bb:01:d6:2b:ac:d9:c8:a3:24:34:da:0a:aa:c7:f8:
be:ad:9c:c0:df:bd:02:99:3b:04:d9:bd:50:71:7f:
40:23:9d:8a:5f:da:96:77:e3:85:8e:d7:56:11:a7:
87:15:77:ad:34:ca:9f:63:93:63:70:aa:43:9f:65:
d5:bf:7a:57:26:38:13:23:85:bf:80:d1:20:2a:ab:
7f:53:27:df:43:1e:5f:65:42:82:8c:13:dd:15:0b:
95:45:5c:3f:29:71:ad:e2:4d:a6:b5:02:31:3b:ff:
1e:7f:0d:e5:26:28:0b:d5:10:19:76:aa:c9:ea:54:
2b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4E:21:8B:C5:B2:1F:4B:48:4E:42:AF:FF:78:56:BA:94:8D:BF:1A
X509v3 Authority Key Identifier:
keyid:52:25:CF:6E:70:AE:7D:37:71:DA:15:52:DF:6B:2E:A3:B1:53:EE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/768d3f90fddd18cca90c45a0e35a0f1d95e50766.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc4e8873-c82b-420c-934c-156137893e40/8458c03b12abc0c0acffcf656ed17b246fecb209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/dc4e8873-c82b-420c-934c-156137893e40/768d3f90fddd18cca90c45a0e35a0f1d95e50766.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:7a90::/32
Signature Algorithm: sha256WithRSAEncryption
4c:12:ac:6e:4c:7c:75:ea:4c:7b:3b:08:55:4e:a3:86:9b:3a:
7c:99:f6:14:db:98:8a:96:0e:5b:d4:d0:0f:af:7b:3d:5c:d7:
85:d7:31:de:d4:e9:bd:15:c9:aa:6e:ed:b0:78:a5:50:58:e7:
51:96:57:a9:8d:4c:2d:d1:ea:33:53:73:e9:fe:3e:1e:59:a6:
63:8e:4c:30:b6:69:84:69:3a:d7:65:da:b1:79:0e:d6:6c:11:
77:ee:7a:cf:18:c3:06:1b:72:25:40:61:73:26:f7:96:bc:19:
2f:65:f4:d7:a0:af:39:4f:bb:d8:43:5e:3b:36:1d:1f:82:1c:
09:48:f9:50:9d:4b:5d:bb:fb:79:e1:14:89:59:14:31:1f:6c:
35:d3:fb:81:ae:90:76:73:f1:b3:e8:3c:26:22:2f:8b:16:f8:
70:77:9f:87:2b:4b:64:49:bf:9c:e9:20:19:74:ea:cd:cb:37:
cc:91:ec:53:57:b0:dc:7c:cc:79:09:1e:ea:be:e3:8d:c9:14:
d4:6c:a7:95:48:63:a8:87:12:24:29:cd:9a:8d:5a:37:a0:32:
0a:50:65:a7:e7:4a:46:12:8b:a7:b1:50:11:ff:f1:64:5f:f2:
fb:56:94:c5:51:6a:f1:31:10:2c:a7:ec:77:a2:ff:8a:43:56:
1b:28:8f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org