Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/34352e3139312e34382e302f32322d3234203d3e20323632323133.roa
File: 34352e3139312e34382e302f32322d3234203d3e20323632323133.roa (raw, json)
Hash identifier: /k6eFtjkWqmTF/Qmqffm4SD419bGtRx4XzWn/TOsc6M=
Subject key identifier: 45:DB:68:89:6F:52:FB:4E:6E:70:67:CB:82:64:A1:3A:9E:9F:95:4B
Certificate issuer: /CN=5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D
Certificate serial: 3BAAC1538749370524A5BE6A576B8D1BA39019EA
Authority key identifier: 5E:20:38:E8:41:92:BA:FB:E7:BC:D3:AC:CA:5B:C5:B4:3E:61:DA:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/34352e3139312e34382e302f32322d3234203d3e20323632323133.roa
Signing time: Tue 05 Mar 2024 18:06:27 +0000
ROA not before: Tue 05 Mar 2024 18:01:27 +0000
ROA not after: Tue 04 Mar 2025 18:06:27 +0000
asID: 262213
IP address blocks: 45.191.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:aa:c1:53:87:49:37:05:24:a5:be:6a:57:6b:8d:1b:a3:90:19:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D
Validity
Not Before: Mar 5 18:01:27 2024 GMT
Not After : Mar 4 18:06:27 2025 GMT
Subject: CN=45DB68896F52FB4E6E7067CB8264A13A9E9F954B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:21:04:33:5d:a5:44:5c:23:46:2f:96:4e:
8f:e3:12:72:72:01:9f:37:36:83:ef:70:29:78:de:
7e:55:74:6a:91:01:13:0d:c4:4a:d7:db:b0:41:fb:
8b:82:b3:cf:07:8c:80:80:5e:04:53:dd:b8:80:76:
c1:0c:e3:56:5e:d8:aa:52:f8:1b:ab:a3:64:a2:96:
f8:80:16:64:32:fa:90:bf:86:75:24:49:96:74:39:
2a:78:ae:2b:b7:13:da:14:25:26:0e:da:ad:d2:86:
cb:2a:76:16:27:d4:ea:bb:52:c7:9a:3d:fb:c7:52:
e7:bd:7c:ee:7e:b8:5a:f9:ac:ef:20:f0:34:0f:91:
8d:a4:d6:13:66:19:a3:56:17:6d:b5:a7:56:67:f2:
66:af:e1:cd:c8:31:bc:44:ed:36:e5:df:e4:8d:c7:
24:e4:ee:e2:36:1d:9d:06:f6:d3:d0:11:32:42:ee:
58:26:57:17:a0:70:a2:79:a4:7b:51:49:71:4d:e6:
61:61:17:9f:3d:46:a0:95:08:31:98:e9:a6:2f:bd:
0e:22:8b:a0:4d:76:04:0a:98:9b:0f:f6:ff:0d:3d:
65:0b:b7:61:1e:87:d0:19:9b:92:a1:de:0c:b2:a4:
34:6e:24:ce:e2:67:84:6d:db:c3:96:1e:cc:b1:c1:
18:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DB:68:89:6F:52:FB:4E:6E:70:67:CB:82:64:A1:3A:9E:9F:95:4B
X509v3 Authority Key Identifier:
keyid:5E:20:38:E8:41:92:BA:FB:E7:BC:D3:AC:CA:5B:C5:B4:3E:61:DA:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/34352e3139312e34382e302f32322d3234203d3e20323632323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.48.0/22
Signature Algorithm: sha256WithRSAEncryption
47:de:cb:11:d9:21:90:de:ef:b5:22:53:84:95:b9:5c:0b:b5:
14:b7:af:a0:f9:0b:28:a2:52:79:29:4a:c2:a2:2d:b0:ad:65:
94:e1:c0:53:13:33:de:cf:31:1e:a2:d0:4f:a8:a4:77:e0:06:
34:98:32:94:51:0a:fe:12:c4:8e:43:fc:d7:64:c9:3b:d3:db:
fa:3d:93:bb:d6:e3:db:3d:b1:29:05:72:6c:f7:2e:d9:43:8d:
3b:c7:6e:85:be:b0:7b:b0:81:2c:ea:32:db:8f:ef:56:81:6f:
01:e2:13:54:bf:fa:0c:76:82:c9:8e:3d:72:6b:c7:19:b3:cf:
37:a7:cc:07:e4:e3:df:4f:74:ac:e8:04:1b:ab:37:b6:2b:09:
42:d9:03:a6:0e:2c:e5:7c:90:bf:d4:eb:fe:07:d7:7c:ea:0c:
48:ce:0d:8d:00:da:86:69:2d:2c:8d:b5:8b:fd:af:bd:3d:f2:
d6:a6:36:88:f3:bc:16:9f:b2:3d:6f:5d:97:de:06:9c:7c:0f:
0c:a6:e7:5f:9e:70:6b:94:bc:6f:1c:da:71:73:de:2c:bb:51:
95:4f:3e:ca:74:da:e8:b6:b0:66:f1:35:40:b7:4d:72:23:32:
6b:99:00:ca:0d:10:cb:e4:91:d6:9b:d1:ab:b0:29:64:97:73:
1d:7d:da:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:30:39 2025 by rpki-client