Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/35392e3135332e34342e302f32322d3234203d3e20323634383235.roa
File: 35392e3135332e34342e302f32322d3234203d3e20323634383235.roa (raw, json)
Hash identifier: YXp0sl63MWlXVX38TilaOx71flIMu/ejKK6KocGMHKw=
Subject key identifier: C4:F6:23:BC:EE:2A:E7:92:A9:4E:FE:48:95:23:73:13:80:2D:84:58
Certificate issuer: /CN=4042BFADA396ABB702E65D77D2E207DB761B973F
Certificate serial: 3B6E11D7BC451B312073C0D571BFFB16A7A3C06C
Authority key identifier: 40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/35392e3135332e34342e302f32322d3234203d3e20323634383235.roa
Signing time: Tue 05 Mar 2024 18:13:40 +0000
ROA not before: Tue 05 Mar 2024 18:08:40 +0000
ROA not after: Tue 04 Mar 2025 18:13:40 +0000
asID: 264825
IP address blocks: 59.153.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:6e:11:d7:bc:45:1b:31:20:73:c0:d5:71:bf:fb:16:a7:a3:c0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4042BFADA396ABB702E65D77D2E207DB761B973F
Validity
Not Before: Mar 5 18:08:40 2024 GMT
Not After : Mar 4 18:13:40 2025 GMT
Subject: CN=C4F623BCEE2AE792A94EFE4895237313802D8458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:78:d9:86:38:cf:11:62:02:0e:a5:3c:1e:
d3:25:09:d5:f2:65:38:46:29:ca:6e:61:28:0c:7c:
a0:f5:37:40:71:b7:c6:47:8c:f7:22:57:28:28:fe:
c9:0f:ab:a3:d8:b1:90:03:11:3c:a0:12:1d:13:cb:
99:22:81:1c:01:0e:12:8b:d5:c0:66:a2:c9:f3:0d:
6b:da:a9:15:85:91:6a:10:9d:20:1a:6a:5a:f9:a3:
8f:51:86:1a:8f:7c:55:78:7c:85:bd:d2:b2:4e:5c:
8c:2d:ec:ab:91:e0:46:3f:f1:7b:65:e6:dc:69:01:
e2:fb:68:5d:5a:94:6f:1d:44:ee:cd:46:d2:60:96:
33:72:68:4c:e2:4c:06:96:50:8d:62:8e:69:c9:da:
7b:3e:2d:55:38:0e:cc:27:a3:07:d4:cd:f7:f9:6a:
d2:4e:fd:d0:5c:9b:d9:4a:11:46:19:d8:d2:5f:2f:
c2:f6:c0:14:05:ba:4f:de:cf:68:4f:6b:a7:da:77:
f6:bd:31:93:23:3f:1f:e3:ea:f8:35:65:ed:1c:ea:
40:23:4d:31:4c:c8:15:19:f3:24:d0:35:74:05:fd:
81:34:5d:2b:41:70:a2:90:f9:8e:ae:b8:7c:03:8e:
99:ea:ac:00:52:7f:2b:3d:66:1e:43:45:db:4a:be:
ce:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F6:23:BC:EE:2A:E7:92:A9:4E:FE:48:95:23:73:13:80:2D:84:58
X509v3 Authority Key Identifier:
keyid:40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/35392e3135332e34342e302f32322d3234203d3e20323634383235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.153.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:46:93:da:e3:6e:5b:5c:64:15:2a:f3:d5:eb:91:db:ab:f0:
04:07:68:55:9f:a8:a2:13:b0:4f:da:56:01:f6:13:26:b9:f1:
8b:05:21:24:1f:ec:ce:fc:fa:a4:49:0b:d6:6c:00:e5:52:9c:
04:cb:a6:54:52:ee:1f:87:32:4e:d0:b8:34:87:10:dc:a3:c5:
c1:c1:63:4c:90:e2:3a:51:90:69:91:8b:0d:5a:e4:76:0b:88:
ac:7b:e2:e7:e3:4c:9d:24:35:25:3c:b2:fa:f9:22:f0:da:b2:
88:e6:91:03:f9:c1:a5:75:54:0a:b7:ed:5f:85:71:3a:b9:ad:
5a:bd:67:95:22:95:8d:79:8f:66:15:97:bd:11:95:f1:9e:47:
ad:1d:ed:87:ea:45:7e:92:e6:5e:ef:ee:ab:45:79:dd:df:ea:
49:ae:6b:19:e8:80:f1:ce:08:dc:63:8c:f4:ce:fa:3f:ca:1d:
42:bf:c9:53:e8:c4:6f:ee:6a:2f:a7:45:a5:7b:29:24:a6:96:
81:f4:8e:5f:46:70:f1:de:fc:a5:6b:b5:06:9c:35:2b:df:6f:
ab:7b:04:7d:f2:ce:3e:53:2b:4d:35:2e:fd:3a:30:61:da:0e:
c8:01:5d:cd:dc:37:e3:93:72:1c:d6:67:23:21:a1:3c:7c:28:
27:f9:dc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:21:22 2025 by rpki-client