Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/4f869c127b510dae90c2eb20f373765604ec0cb1.roa
File: 4f869c127b510dae90c2eb20f373765604ec0cb1.roa (raw, json)
Hash identifier: jchgoKKSe71fKSscFySzZDoqWpTgV/VVrsn7WLhANks=
Subject key identifier: 51:F8:F2:DB:59:00:A0:CE:24:02:BF:AB:13:D5:B8:50:55:0C:94:AD
Certificate issuer: /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial: 1EEEEC
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/4f869c127b510dae90c2eb20f373765604ec0cb1.roa
Signing time: Fri 20 Jan 2023 15:32:29 +0000
ROA not before: Thu 19 Jan 2023 15:30:38 +0000
ROA not after: Mon 20 Jan 2025 15:30:38 +0000
asID: 28075
IP address blocks: 2803:6604:e000::/35 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2027244 (0x1eeeec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Validity
Not Before: Jan 19 15:30:38 2023 GMT
Not After : Jan 20 15:30:38 2025 GMT
Subject: CN=4f869c127b510dae90c2eb20f373765604ec0cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:31:65:75:07:e6:47:2e:e9:45:39:6c:58:42:
ae:20:29:84:70:e8:9c:13:d2:5a:01:c1:60:47:0d:
9c:a9:2a:b8:23:b2:11:b7:c7:b1:e6:4e:a9:14:18:
26:15:3e:6f:71:b4:e0:2c:eb:e9:b8:fb:d2:55:f0:
94:38:60:fa:fa:3e:1e:49:25:aa:f6:07:b4:7d:3b:
8e:2e:19:b2:85:a8:4a:0e:1e:45:3b:15:d2:4c:f0:
89:6d:b6:44:f7:e6:a8:01:ba:e7:28:f6:13:2e:1a:
cc:a9:03:c5:af:39:43:43:f0:2a:99:00:da:a2:e7:
c4:d3:7f:0d:0a:d3:8e:72:0b:59:09:69:6c:99:08:
ae:25:73:08:21:1d:dd:5a:95:4a:de:f1:c8:e8:8c:
4b:dc:3b:50:f6:ee:8f:5b:6b:40:ec:6d:41:0f:4d:
db:71:0b:ae:ec:af:48:ad:02:b0:a8:34:65:cc:ea:
6c:b4:80:ba:3d:b3:67:6c:b1:04:5e:0e:cf:d2:61:
9a:e2:67:e0:3d:a2:43:6e:ee:fe:51:47:97:5b:bf:
09:9b:5c:31:68:14:06:89:b8:9d:ba:90:d9:c5:fa:
2c:98:7b:b2:cc:9b:35:b7:1f:16:02:55:22:ae:36:
d4:61:9f:a2:af:a9:60:e8:e7:c0:a3:d4:e8:64:78:
ed:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F8:F2:DB:59:00:A0:CE:24:02:BF:AB:13:D5:B8:50:55:0C:94:AD
X509v3 Authority Key Identifier:
keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/4f869c127b510dae90c2eb20f373765604ec0cb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:6604:e000::/35
Signature Algorithm: sha256WithRSAEncryption
6b:12:86:c4:05:a9:60:f2:56:6d:02:9e:53:e0:df:9f:4c:8e:
71:eb:57:f1:cf:c4:c9:0b:21:40:9c:4d:a6:85:6e:02:88:fa:
74:c9:8b:e8:85:fc:ad:1a:92:2e:3d:85:29:65:90:75:69:08:
b2:f6:ca:27:fc:58:84:13:0a:4f:c5:59:55:b4:c9:b5:f2:57:
fe:1b:4d:29:ac:33:e9:8e:1d:e5:23:dc:d4:64:38:6f:47:3b:
11:75:19:fb:15:6d:11:c4:fa:a2:bf:14:48:78:9e:c6:50:c1:
a3:ab:9c:4d:7d:d8:51:98:aa:63:80:7f:ed:d3:99:df:77:cc:
aa:9b:16:d6:a4:4d:27:bc:60:ae:7c:94:54:02:9c:5c:be:2c:
25:d2:61:9a:1a:46:aa:e1:fb:c5:49:c1:b0:95:c4:d1:80:aa:
60:90:26:7e:63:20:98:2c:04:4c:27:e0:7d:5d:a4:61:7a:de:
ce:d3:4f:b7:da:74:b7:a9:85:fe:e7:94:49:b5:0c:81:48:62:
1c:26:7d:15:39:1e:d3:84:43:2a:49:63:62:dd:b9:d6:ac:d1:
91:3e:cb:12:67:54:12:6e:c3:d1:9b:4a:b4:c6:04:9a:07:60:
d0:05:2f:1b:e7:18:4f:69:d0:63:8f:2a:ed:aa:d4:04:8d:6e:
23:5f:5d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:45:39 2025 by rpki-client