Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/cae8f9ab53e11910830704f087d1b63bda2b426e.roa
File: cae8f9ab53e11910830704f087d1b63bda2b426e.roa (raw, json)
Hash identifier: /HwCGOIT3x907S4UH7fHq6Va+NMUXVgOrZ/1srac3rY=
Subject key identifier: 1E:E8:5F:1D:EC:D0:11:FE:80:FF:15:15:0A:8A:C9:E8:6E:D6:9E:D9
Certificate issuer: /CN=285c4851f123355e1dfc7c41d72c849598bfbf31
Certificate serial: 17050B
Authority key identifier: FA:6B:CD:9E:98:AC:70:13:19:5F:EA:8D:58:F0:86:83:7D:57:5D:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/285c4851f123355e1dfc7c41d72c849598bfbf31.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/cae8f9ab53e11910830704f087d1b63bda2b426e.roa
Signing time: Thu 26 May 2022 21:14:23 +0000
ROA not before: Thu 26 May 2022 03:00:00 +0000
ROA not after: Sun 26 May 2024 03:00:00 +0000
asID: 267790
IP address blocks: 2803:6fa0::/48 maxlen: 48
2803:6fa0:2::/48 maxlen: 48
2803:6fa0:6::/48 maxlen: 48
2803:6fa0:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1508619 (0x17050b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285c4851f123355e1dfc7c41d72c849598bfbf31
Validity
Not Before: May 26 03:00:00 2022 GMT
Not After : May 26 03:00:00 2024 GMT
Subject: CN=cae8f9ab53e11910830704f087d1b63bda2b426e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:d7:36:6c:b5:6f:07:4a:05:f5:94:59:52:
3f:64:83:ed:42:1a:26:6d:e8:5f:5d:43:f3:19:aa:
29:77:af:58:6e:c4:e7:8e:27:f4:3e:a6:db:fb:09:
2b:d9:fa:48:4d:36:79:9d:4f:0d:21:e5:0b:60:86:
d3:e9:69:f1:06:5c:e9:de:b6:f3:89:2e:cd:e8:d1:
ac:f7:9c:15:2d:9a:9a:14:51:6a:74:f5:e8:7c:72:
f1:cb:c5:7d:ef:23:e0:4b:17:bb:be:ea:df:c5:6e:
fb:bf:56:8e:f7:37:42:95:3c:78:f3:31:81:d2:ab:
8d:f2:1f:82:a2:78:86:8a:46:b8:e1:bc:3c:1c:ae:
6e:0c:21:71:b0:d7:03:a6:ae:43:cd:5d:c6:91:ec:
2b:9c:9d:9d:a4:5e:f2:65:9e:5d:6e:36:9a:70:b1:
01:92:6d:8c:29:48:39:56:b0:56:a1:ee:f1:b0:aa:
1d:f6:33:d3:24:e1:8b:db:17:f7:90:ce:42:1e:2e:
81:d4:38:82:e8:a5:31:38:6c:09:fe:42:55:8e:4d:
35:e3:7d:4e:08:20:6d:dd:c7:7c:c7:ea:7e:ff:7b:
66:5d:4d:8f:f6:a7:fe:42:dd:59:a5:1a:4a:94:eb:
f9:d1:e2:83:8b:a3:7b:da:98:f4:0b:a3:99:0f:d5:
e9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E8:5F:1D:EC:D0:11:FE:80:FF:15:15:0A:8A:C9:E8:6E:D6:9E:D9
X509v3 Authority Key Identifier:
keyid:FA:6B:CD:9E:98:AC:70:13:19:5F:EA:8D:58:F0:86:83:7D:57:5D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/285c4851f123355e1dfc7c41d72c849598bfbf31.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/cae8f9ab53e11910830704f087d1b63bda2b426e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/285c4851f123355e1dfc7c41d72c849598bfbf31.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:6fa0::/48
2803:6fa0:2::/48
2803:6fa0:6::/48
2803:6fa0:100::/48
Signature Algorithm: sha256WithRSAEncryption
5d:fc:d7:7a:69:c1:d0:da:54:07:db:88:91:29:a4:1e:a3:a1:
0b:2b:0f:9e:cc:96:9d:68:99:bf:3b:41:d1:57:04:30:65:b2:
00:17:da:fc:00:c3:ee:5e:f2:17:42:3b:0c:7b:fc:a5:ef:76:
2f:b1:dd:4f:fe:21:e0:f9:d0:47:d2:81:02:7c:ee:c8:a7:42:
29:8c:fd:7d:e2:b6:58:a8:d0:84:78:2e:94:3a:36:a6:2e:5d:
03:72:9a:9b:69:02:81:00:4d:ee:3b:d5:e6:73:59:f1:85:ea:
04:ee:28:8c:18:00:d6:de:48:fd:a8:a3:f1:68:1d:21:79:16:
71:84:ad:60:51:cc:9e:4e:85:f8:eb:5c:b8:76:b7:79:39:8d:
37:cd:65:72:f6:d4:38:42:d5:b1:ea:01:ba:84:d4:82:c5:1a:
e0:e5:1a:a1:42:42:d0:86:79:36:1a:4e:de:fb:29:0d:1d:e0:
33:80:4d:0f:7e:70:95:24:30:0e:c6:da:1a:17:0b:86:30:93:
ea:bd:a4:40:69:74:00:b9:a3:fe:e9:a3:f3:41:0b:59:f5:7f:
69:9e:b5:d7:01:e6:03:21:aa:85:5a:8f:f8:a2:2b:3d:60:63:
2e:32:ec:06:ca:4c:7f:fe:22:29:29:fe:a5:a9:fa:c3:e2:a1:
5a:bc:ba:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org