Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/34352e3138392e3230302e302f32322d3234203d3e20323639383732.roa
File: 34352e3138392e3230302e302f32322d3234203d3e20323639383732.roa (raw, json)
Hash identifier: iQ6qzw4Ey498WPtGjQYGdBag1jIRahdSCVQrPitSpFc=
Subject key identifier: 09:3E:9A:38:18:E1:52:2F:50:51:CA:5E:C3:E7:86:0E:48:B3:49:77
Certificate issuer: /CN=D30B668CCFD504504370BC862A490DCA5B1FADDC
Certificate serial: 29FAC74F00D1F76508F317A16683264057F4D227
Authority key identifier: D3:0B:66:8C:CF:D5:04:50:43:70:BC:86:2A:49:0D:CA:5B:1F:AD:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/34352e3138392e3230302e302f32322d3234203d3e20323639383732.roa
Signing time: Tue 05 Mar 2024 18:05:35 +0000
ROA not before: Tue 05 Mar 2024 18:00:35 +0000
ROA not after: Tue 04 Mar 2025 18:05:35 +0000
asID: 269872
IP address blocks: 45.189.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:fa:c7:4f:00:d1:f7:65:08:f3:17:a1:66:83:26:40:57:f4:d2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D30B668CCFD504504370BC862A490DCA5B1FADDC
Validity
Not Before: Mar 5 18:00:35 2024 GMT
Not After : Mar 4 18:05:35 2025 GMT
Subject: CN=093E9A3818E1522F5051CA5EC3E7860E48B34977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d5:b0:7d:e2:81:64:9b:43:38:9d:60:a5:7f:
ea:48:de:93:26:b6:16:fd:bd:ee:b5:3b:a9:ed:d3:
4f:15:42:0e:b7:b4:cd:79:fc:87:42:6a:52:3d:cf:
d2:43:d3:6c:db:5e:31:84:57:e0:8d:7c:9d:9b:c4:
26:24:d0:b1:36:2f:40:83:11:51:41:f7:6c:7e:df:
5e:44:75:40:06:0e:d3:7a:a3:30:d3:3e:53:ec:21:
73:c6:6f:c8:bc:4d:f6:fe:ee:8e:2f:81:15:d5:b3:
0c:d1:96:72:6c:a0:e7:d4:4b:c9:03:7a:20:9e:d1:
6f:ba:4f:03:ab:94:96:04:f5:07:03:fe:a7:05:5b:
6b:e1:97:be:9a:9a:2e:76:5a:ab:cc:a4:d3:31:b4:
37:3d:2d:ff:f7:0b:8b:15:4d:87:fb:02:f0:97:df:
45:be:32:dd:d0:ef:81:05:79:4e:73:c5:9e:8f:79:
6e:65:d4:44:25:3e:19:30:e5:be:52:12:6a:8b:d0:
cc:62:78:bb:76:1b:c5:e3:c2:db:fa:26:d1:65:4b:
f0:46:12:67:48:93:9d:9b:90:bf:3b:c3:b7:50:3e:
fb:20:a1:d2:0b:83:68:16:06:02:ad:43:75:86:04:
67:f9:78:48:df:9b:e4:4e:b4:b8:23:c9:2a:81:4e:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3E:9A:38:18:E1:52:2F:50:51:CA:5E:C3:E7:86:0E:48:B3:49:77
X509v3 Authority Key Identifier:
keyid:D3:0B:66:8C:CF:D5:04:50:43:70:BC:86:2A:49:0D:CA:5B:1F:AD:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/34352e3138392e3230302e302f32322d3234203d3e20323639383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.200.0/22
Signature Algorithm: sha256WithRSAEncryption
53:ad:f1:3a:a1:a1:76:fa:60:e5:f6:f3:c5:24:5f:e5:58:c4:
37:31:1f:db:3b:69:99:aa:1a:87:6f:03:7e:6f:c2:67:af:74:
5b:da:3f:83:89:bc:b4:1b:09:c6:1e:0a:8e:3e:a3:e8:8f:03:
dc:0f:5a:e2:c9:55:b1:96:66:28:3f:1c:7f:69:d5:e7:3b:e7:
84:61:c8:d3:39:96:be:f3:54:91:43:c5:f0:dc:ed:06:bb:50:
3d:92:7c:76:c7:9c:01:eb:72:12:e0:c4:16:cb:33:99:55:13:
0b:de:d2:8c:0d:32:7c:3f:44:a5:b0:ce:3e:51:80:d6:21:2e:
33:45:66:21:af:1f:ff:43:9b:f3:f8:c2:8a:c0:b6:c7:43:ba:
9e:2a:e7:1d:92:7a:77:c1:6f:41:8b:a1:45:dc:2f:d1:09:28:
55:98:1f:c2:98:b0:0f:43:76:5e:79:6c:9a:5c:48:1f:6f:7f:
34:ea:69:5e:46:c5:d3:45:94:ee:a0:20:44:33:8f:33:3b:c7:
e1:19:90:3e:57:15:b8:29:55:6c:85:a7:fc:2a:2d:8b:f3:cb:
88:d1:4f:16:45:a5:a5:31:21:57:23:07:7a:3d:a9:ed:f0:b8:
9e:91:11:68:74:2a:75:3a:4f:0c:7b:98:3c:5b:7b:73:25:11:
29:04:66:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:29:44 2025 by rpki-client