Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/34352e3139312e38382e302f32322d3234203d3e20323639383837.roa
File: 34352e3139312e38382e302f32322d3234203d3e20323639383837.roa (raw, json)
Hash identifier: xdR9lX6ZkMpd2xxt3M2/ezTIY1wCqjhbMMe+1PCvvb4=
Subject key identifier: 00:B2:E2:CA:66:C9:99:2C:99:4A:19:97:34:07:35:BB:F3:C4:97:88
Certificate issuer: /CN=9F12506BED8DAFE7AD724FA19BA1A600CB9F1459
Certificate serial: 4012C1277217330F4E2536B5322882F7EF8E5472
Authority key identifier: 9F:12:50:6B:ED:8D:AF:E7:AD:72:4F:A1:9B:A1:A6:00:CB:9F:14:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/34352e3139312e38382e302f32322d3234203d3e20323639383837.roa
Signing time: Tue 05 Mar 2024 18:05:21 +0000
ROA not before: Tue 05 Mar 2024 18:00:21 +0000
ROA not after: Tue 04 Mar 2025 18:05:21 +0000
asID: 269887
IP address blocks: 45.191.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:12:c1:27:72:17:33:0f:4e:25:36:b5:32:28:82:f7:ef:8e:54:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F12506BED8DAFE7AD724FA19BA1A600CB9F1459
Validity
Not Before: Mar 5 18:00:21 2024 GMT
Not After : Mar 4 18:05:21 2025 GMT
Subject: CN=00B2E2CA66C9992C994A1997340735BBF3C49788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:73:a8:21:38:98:8e:1d:b9:fc:a1:2f:03:
27:9b:cd:41:81:62:c1:8a:41:d5:54:ea:a2:9d:73:
4f:2b:8b:42:42:43:4a:44:73:d9:69:c6:21:11:6f:
2e:18:12:c8:c6:ff:54:df:31:2e:87:cb:80:6c:00:
33:33:ec:58:e6:7e:a9:8f:f9:a0:2d:75:7d:9f:a3:
44:d3:17:3a:65:00:ee:b2:ff:b2:45:2d:57:67:eb:
1e:bc:89:26:90:47:cd:1c:f1:ad:ce:b7:67:60:38:
f0:e0:40:1f:01:6d:4c:19:f2:fe:d6:4e:7b:4b:97:
1a:66:a4:e0:d6:9c:4a:f1:bb:27:3e:a3:b8:86:8a:
86:c0:eb:9d:04:78:42:af:f2:a6:1b:cc:b3:e5:42:
a3:bf:0b:96:2d:2c:c0:d7:41:f5:2c:50:99:5c:3b:
48:28:28:51:93:b1:8c:75:50:e4:32:de:ac:82:07:
4b:e7:10:ad:ec:5e:1e:e7:b4:2e:48:6c:4b:24:2b:
2e:e5:e5:13:8f:9a:ef:4b:97:80:96:09:8e:f3:75:
16:5b:79:db:1e:d5:8e:db:28:80:50:76:93:0c:b5:
83:f2:8f:26:e4:78:71:4c:c3:f6:91:55:49:c2:b7:
49:f3:2e:36:f1:2b:7a:22:46:eb:2f:e2:e7:ad:27:
61:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B2:E2:CA:66:C9:99:2C:99:4A:19:97:34:07:35:BB:F3:C4:97:88
X509v3 Authority Key Identifier:
keyid:9F:12:50:6B:ED:8D:AF:E7:AD:72:4F:A1:9B:A1:A6:00:CB:9F:14:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/34352e3139312e38382e302f32322d3234203d3e20323639383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.88.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:2c:bb:d8:d8:52:af:d4:56:93:bf:5d:53:2c:e4:37:42:04:
0e:50:40:9f:f1:c0:b2:93:11:18:07:2e:ed:c4:e3:63:9b:63:
31:f6:6b:06:a3:0d:32:3a:4d:ed:16:37:6e:45:28:92:4c:d1:
89:f2:0d:7b:41:c9:b9:e2:99:8f:d8:6a:a6:29:59:6a:33:bd:
13:f4:ff:17:e9:d5:bc:a9:e0:81:1a:be:96:00:48:ab:62:19:
6a:4b:f1:c5:2f:06:54:07:77:98:9b:05:da:79:3f:19:d1:b1:
e4:a6:67:2b:f0:ef:f5:22:40:1d:8a:0a:70:ac:a1:2a:ed:ac:
f5:ff:fc:8d:9a:ab:9d:ce:14:20:00:63:1c:63:58:85:94:39:
bb:70:3f:74:e6:30:e3:66:e0:ba:bb:12:04:79:49:fa:4e:6e:
19:0d:95:35:40:82:b7:f9:48:6d:38:f5:60:88:be:f7:1c:2c:
00:37:dd:d3:60:6a:3d:07:15:71:1d:41:74:30:5b:74:c6:dc:
97:84:1b:3d:b7:10:bb:1a:e0:f3:0a:ee:4e:43:6b:5e:15:e1:
6f:b6:63:07:35:de:15:29:95:83:20:17:be:12:64:ca:5e:b7:
05:1c:af:3f:3c:c7:60:8f:67:0a:27:08:0b:c8:21:ab:ad:ec:
c2:86:7b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:11:43 2025 by rpki-client