Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31332e302f32342d3234203d3e20323636383337.roa
File: 34352e3233382e31332e302f32342d3234203d3e20323636383337.roa (raw, json)
Hash identifier: TweF547cK5kyXGGllFG6TgNJS/zTO+zo/byH9dKqEag=
Subject key identifier: 46:D1:12:AE:5F:BB:82:23:5F:2D:54:F6:7C:66:F5:AD:E3:15:99:E2
Certificate issuer: /CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
Certificate serial: 08407CFC50FCA180E0B2689E268C0FE8D46D7E24
Authority key identifier: 3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31332e302f32342d3234203d3e20323636383337.roa
Signing time: Wed 21 Aug 2024 21:05:00 +0000
ROA not before: Wed 21 Aug 2024 21:00:00 +0000
ROA not after: Wed 20 Aug 2025 21:05:00 +0000
asID: 266837
IP address blocks: 45.238.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:40:7c:fc:50:fc:a1:80:e0:b2:68:9e:26:8c:0f:e8:d4:6d:7e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
Validity
Not Before: Aug 21 21:00:00 2024 GMT
Not After : Aug 20 21:05:00 2025 GMT
Subject: CN=46D112AE5FBB82235F2D54F67C66F5ADE31599E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:da:1c:55:4f:1a:c4:cd:17:69:9f:69:07:
5d:b6:87:b6:11:6a:77:be:2d:05:df:12:06:73:23:
79:e9:46:87:4a:1f:17:60:d9:fb:75:5e:2e:03:4b:
5b:b7:da:08:cd:d0:c9:0a:ff:a4:3a:fd:0c:d1:e7:
12:61:0b:fc:8a:f4:3a:af:35:3c:a1:df:6b:19:2b:
35:cb:88:ce:d5:99:28:33:c3:bc:2d:1c:ff:76:00:
be:df:2a:01:fd:2c:1c:99:b2:ad:04:d0:82:ac:23:
93:fa:87:2e:c6:d2:cf:a0:fd:46:d1:c8:f7:2f:f4:
d8:a9:38:35:cb:77:2a:53:c4:bf:e5:cc:b1:57:c4:
69:c7:cd:06:82:56:86:fc:77:1b:f8:3d:fc:5f:c7:
c8:99:be:e0:03:c5:77:c6:fe:3d:fd:0f:3a:64:99:
eb:2f:58:46:a0:de:4d:0a:03:8c:a5:48:0e:f2:8d:
56:d5:d8:9e:bc:d3:0c:a0:d6:27:2e:34:22:3a:3b:
af:bc:63:63:bb:c0:62:b3:fc:ef:4e:23:ec:68:46:
a3:ca:a0:e6:53:4f:fc:0f:1c:17:23:5b:92:80:fd:
32:3f:63:e2:6d:26:b1:f4:1c:96:30:8f:9c:ad:21:
f1:c1:c7:77:24:73:26:8f:8d:4d:39:db:20:cb:15:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D1:12:AE:5F:BB:82:23:5F:2D:54:F6:7C:66:F5:AD:E3:15:99:E2
X509v3 Authority Key Identifier:
keyid:3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31332e302f32342d3234203d3e20323636383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ca:cd:f9:00:57:ff:f7:2b:1b:d2:04:d0:bb:bd:81:ba:ab:
e7:d1:3e:7f:3e:63:88:da:bb:70:1b:4f:b9:b5:f9:5e:25:c0:
53:16:ac:00:12:13:1d:b3:1a:e9:55:a9:b8:24:d2:34:3d:ee:
df:7b:23:df:2a:c8:ea:c8:cd:fa:91:e5:0b:3e:90:e9:56:38:
ce:61:c1:16:c4:ba:65:73:25:bb:55:5e:98:9c:35:a2:62:86:
4f:35:67:e2:1f:da:bd:0e:46:3c:aa:0c:35:33:9b:a0:cf:af:
38:57:95:bd:d5:0d:e2:59:ae:94:6d:8b:7f:e5:2b:5c:27:9e:
63:ad:f3:99:2c:6d:65:85:f1:29:16:8d:2c:0c:70:2f:6f:d8:
9e:75:4b:09:bb:20:1e:23:d6:6a:62:e3:76:7d:6a:01:e6:6c:
1c:75:7b:cf:3e:51:d2:2b:89:94:4f:9d:0d:a9:64:41:19:71:
21:ee:b2:c7:cd:51:20:57:ce:72:8d:ef:a1:75:46:ea:f7:3c:
e4:c1:44:d6:0a:c0:24:4d:f0:de:34:9d:3f:56:12:3a:84:df:
9b:ef:d5:f2:0b:46:71:bb:00:f0:be:06:2e:c7:5e:c3:8f:ff:
7c:19:ef:58:6a:d1:78:02:b0:2f:6d:84:35:1a:64:ad:c3:2c:
76:53:2e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:58:38 2025 by rpki-client