Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa
File: 34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa (raw, json)
Hash identifier: Q/j5xCoBRXt8jGLsC4Y7gmuQPkp+XeqX5JNbt6Ip558=
Subject key identifier: 94:B9:C2:90:A8:FF:0D:BC:E4:90:03:0F:C6:BB:74:F8:8B:74:3B:DD
Certificate issuer: /CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Certificate serial: 1538B86C73A228CB1C3182D434E0CAFB7135216C
Authority key identifier: C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa
Signing time: Tue 05 Mar 2024 18:19:56 +0000
ROA not before: Tue 05 Mar 2024 18:14:56 +0000
ROA not after: Tue 04 Mar 2025 18:19:56 +0000
asID: 266780
IP address blocks: 45.234.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:38:b8:6c:73:a2:28:cb:1c:31:82:d4:34:e0:ca:fb:71:35:21:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Validity
Not Before: Mar 5 18:14:56 2024 GMT
Not After : Mar 4 18:19:56 2025 GMT
Subject: CN=94B9C290A8FF0DBCE490030FC6BB74F88B743BDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:76:0e:95:08:61:38:73:3d:45:4e:04:b4:
55:96:d1:3b:f2:1b:91:22:a5:44:5a:66:c8:98:f1:
b0:df:64:7a:90:83:ad:4c:d8:e9:32:6c:09:bf:50:
66:e4:bb:f3:7e:f6:45:30:c1:b6:b2:78:86:b8:6e:
0b:6e:4d:df:5c:3c:09:df:e7:7b:2d:08:01:b0:de:
60:01:27:28:0f:05:20:ec:0b:0b:65:34:19:11:de:
4f:f1:6f:65:ae:2a:cd:4a:a6:4d:79:ff:95:1e:af:
72:40:49:7f:97:51:c5:fa:23:ad:d3:a8:36:85:5a:
ea:5d:cf:58:62:fc:2f:94:85:42:e3:f3:ee:cc:fc:
91:ef:0f:6f:49:0c:a4:2a:86:99:53:cf:98:3d:77:
e3:88:33:9c:61:df:83:9a:bb:59:1c:58:a2:70:73:
08:4f:fc:36:c2:5e:f8:8e:65:4e:a5:b9:2b:69:f6:
cd:97:a3:61:80:7c:c9:ef:4d:4f:60:93:cd:2f:dd:
75:8f:0f:14:a3:69:b4:c1:cd:b8:9c:0a:b6:17:9c:
22:e5:6f:6d:0b:c4:ec:f5:85:fc:3c:ad:7f:a5:09:
96:09:48:90:17:2b:0d:d9:f9:53:30:e0:02:50:d5:
d7:33:d2:bf:a6:95:75:4a:ab:e3:81:1e:13:2e:a5:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B9:C2:90:A8:FF:0D:BC:E4:90:03:0F:C6:BB:74:F8:8B:74:3B:DD
X509v3 Authority Key Identifier:
keyid:C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.112.0/22
Signature Algorithm: sha256WithRSAEncryption
04:59:d7:27:ac:85:a1:af:93:da:b9:0b:2e:bf:e2:25:68:1e:
b1:ca:b2:0d:a0:2f:e9:82:5f:3c:6a:76:f6:7f:f0:ba:18:0d:
68:0d:95:4d:4c:01:a6:16:4a:56:b8:2d:7f:1e:08:3c:f3:7c:
e8:36:00:58:9c:44:3b:76:e5:13:b9:a9:a2:bd:bb:b1:f8:31:
ef:a0:2f:a2:67:b5:7d:08:18:3d:67:8f:f0:eb:af:25:f8:00:
5d:9b:77:d3:6c:d6:21:f8:89:d7:d6:ef:96:71:4e:08:22:0b:
5e:83:6d:cd:81:70:78:38:d0:b0:fe:06:a0:fd:52:e7:2c:d7:
bb:c6:7e:3c:14:89:88:de:dd:15:4f:c1:2b:05:02:2f:a5:ec:
19:99:c6:82:03:83:a9:0d:21:bd:63:8d:bb:cb:68:c7:96:6f:
a9:ad:95:f7:28:7e:26:18:c2:cc:3f:c0:45:a8:8b:13:5b:e8:
41:c3:f6:9d:31:af:b1:eb:3e:c7:ae:cc:13:da:4c:5a:61:74:
88:ec:e3:c9:bf:96:ec:93:50:bf:2f:cd:4e:0d:3b:aa:8b:b1:
ef:5e:96:41:78:ff:66:bd:a6:4f:43:54:6c:5b:37:bd:05:17:
b6:88:d9:ec:7f:96:d0:6c:03:f9:1b:3e:44:1c:f8:36:a1:6a:
f9:f6:1e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:45:37 2025 by rpki-client