Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3134332e3133372e3136382e302f32322d3232203d3e20323633373434.roa
File: 3134332e3133372e3136382e302f32322d3232203d3e20323633373434.roa (raw, json)
Hash identifier: 2uxf5auFrcEPMF3Nn2u+5uCUYYUpDrVZb0y6dwWyW9k=
Subject key identifier: 46:A4:4C:FC:02:E3:AE:8D:89:B8:32:8E:64:07:08:14:BE:64:8D:15
Certificate issuer: /CN=632D71062751773B5FA51AC0AB69127826F756A2
Certificate serial: 27CC32397B2BDE94580FF2107A8A5AE7ECA8E2B9
Authority key identifier: 63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3134332e3133372e3136382e302f32322d3232203d3e20323633373434.roa
Signing time: Tue 05 Mar 2024 17:45:14 +0000
ROA not before: Tue 05 Mar 2024 17:40:14 +0000
ROA not after: Tue 04 Mar 2025 17:45:14 +0000
asID: 263744
IP address blocks: 143.137.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:cc:32:39:7b:2b:de:94:58:0f:f2:10:7a:8a:5a:e7:ec:a8:e2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632D71062751773B5FA51AC0AB69127826F756A2
Validity
Not Before: Mar 5 17:40:14 2024 GMT
Not After : Mar 4 17:45:14 2025 GMT
Subject: CN=46A44CFC02E3AE8D89B8328E64070814BE648D15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:96:23:11:18:74:b0:9b:a2:23:0b:ad:62:
8e:4e:47:e3:71:90:c0:88:90:6f:b7:77:6b:cd:5d:
12:81:df:47:dd:77:80:ca:da:89:36:2b:8a:05:37:
9b:e2:12:62:d5:39:aa:22:28:86:b5:b7:b7:d1:ba:
dd:36:3e:43:74:63:2b:8a:dc:c7:26:ee:7a:27:d0:
21:25:d6:97:36:d7:f9:2b:7f:7c:3b:a6:2b:37:2a:
84:ee:ad:99:9b:33:1d:49:1d:d3:e2:fb:83:e6:3f:
b0:93:4c:56:05:cf:56:fe:1f:24:97:e7:fb:f9:6d:
c2:4c:2d:c5:70:b3:a4:5f:75:e0:fd:ea:d8:45:5a:
76:fe:6f:84:ef:a3:b2:ba:e7:7b:84:89:dd:5a:7f:
d5:c7:ca:79:81:0b:b3:cc:90:c5:50:a2:39:b7:82:
53:26:17:ed:56:fd:c1:83:ce:26:bf:fa:d6:d0:0f:
d8:15:4f:c5:6d:c8:8e:bd:fe:c2:e7:18:41:ad:70:
0f:d7:c4:62:36:5f:9d:82:fc:52:5d:53:98:85:1b:
67:2a:e5:54:d2:aa:29:51:c6:af:4d:6d:db:bc:bc:
b9:28:1c:8b:3c:31:b2:e7:67:bf:d7:24:4d:6b:0f:
fa:0a:14:49:d4:2d:fd:2a:4b:37:d5:e6:47:3a:ee:
92:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A4:4C:FC:02:E3:AE:8D:89:B8:32:8E:64:07:08:14:BE:64:8D:15
X509v3 Authority Key Identifier:
keyid:63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3134332e3133372e3136382e302f32322d3232203d3e20323633373434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.168.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:7a:8d:87:96:5d:18:57:19:dd:68:39:9d:59:26:0c:32:62:
31:97:9a:15:1b:c5:6d:c8:b0:7f:b2:c1:f6:a5:7a:45:a1:5d:
59:fa:83:1e:23:a6:2f:c3:27:c3:2d:ba:35:85:f2:bd:6b:0b:
93:db:a9:a2:f2:a1:aa:70:72:eb:2c:2e:ef:13:c7:2f:d6:4e:
57:3c:79:2c:92:40:9e:75:82:83:dc:5b:72:67:cc:65:d6:8e:
67:87:f7:5a:12:4a:09:e9:b2:19:f1:fc:db:77:d0:fe:00:ef:
89:de:3a:23:82:25:c1:a5:99:99:5f:18:00:b1:39:13:df:4b:
8d:7f:52:54:ef:63:94:4c:33:44:75:25:75:c8:8f:62:37:d9:
ca:0c:e9:38:84:b0:cf:fa:91:87:b2:65:3f:a5:09:aa:f6:6e:
c3:de:f6:72:23:16:ee:c8:a7:9a:80:e1:5c:a0:ed:43:1e:c0:
27:83:f4:52:00:29:da:3d:b6:f1:99:93:b9:96:90:20:91:8c:
ab:97:aa:3d:14:5e:74:96:ef:c5:a7:ea:ae:b6:3b:42:0b:01:
0c:bd:01:84:64:ad:85:a7:79:0d:b5:15:e2:d1:c3:69:0d:f1:
ce:5d:48:3f:ec:47:77:02:09:8c:a4:9c:a2:0d:99:ce:76:57:
9a:f4:2d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:24:49 2025 by rpki-client