Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa
File: 34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa (raw, json)
Hash identifier: 09/TU7dN6O9+qf73xoHVMlr2WkhDaF7l1aKik4yaFmU=
Subject key identifier: 39:41:8E:04:04:AA:92:5F:C1:E1:17:9A:04:A7:1E:FB:C2:E1:F8:F1
Certificate issuer: /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial: 40DA4EFBB30F523D5CB2FD58099790271A0BE0A3
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa
Signing time: Tue 05 Mar 2024 18:00:05 +0000
ROA not before: Tue 05 Mar 2024 17:55:05 +0000
ROA not after: Tue 04 Mar 2025 18:00:05 +0000
asID: 266819
IP address blocks: 45.237.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:da:4e:fb:b3:0f:52:3d:5c:b2:fd:58:09:97:90:27:1a:0b:e0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
Validity
Not Before: Mar 5 17:55:05 2024 GMT
Not After : Mar 4 18:00:05 2025 GMT
Subject: CN=39418E0404AA925FC1E1179A04A71EFBC2E1F8F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f7:5e:68:21:02:29:bb:dc:ab:8d:b8:22:5d:
7f:0f:6f:0d:d6:fa:4b:09:b7:e7:50:cd:5a:e5:c6:
4d:e0:6c:44:cd:68:a1:33:27:81:d6:ff:39:43:a8:
e5:8d:74:2b:5a:ac:ee:f4:fa:0b:77:1f:99:c9:9d:
40:5a:2b:f6:23:09:a7:6a:3a:3d:32:23:6e:1b:b9:
08:4e:10:c6:30:ab:2d:db:0a:26:f8:6e:ea:52:14:
52:20:e2:57:58:65:5f:d3:ef:e0:10:54:c0:41:57:
69:d3:a2:5f:b3:d9:e8:4b:88:93:48:0c:7a:63:e4:
4d:3e:87:04:7f:d8:5a:34:df:bf:66:a2:0e:86:2c:
a0:95:36:4a:ba:e4:29:e0:f9:25:a2:e0:b9:52:f9:
86:b0:c7:28:29:9b:a7:27:9d:4e:12:87:c8:ae:66:
e3:c6:7f:27:56:66:20:10:7f:d3:25:9e:f9:5a:5b:
5a:d6:b7:b8:24:8d:b1:34:1b:f5:22:01:18:c6:59:
30:43:5c:e1:7a:1b:0b:72:f4:87:b5:41:ff:c6:ab:
96:f7:45:5d:ad:82:66:9a:dc:53:24:ef:99:98:2e:
df:ca:d2:da:88:76:77:ec:3e:39:86:37:83:d6:fb:
fc:39:1b:d4:49:ed:b7:3b:84:a4:84:78:66:41:22:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:41:8E:04:04:AA:92:5F:C1:E1:17:9A:04:A7:1E:FB:C2:E1:F8:F1
X509v3 Authority Key Identifier:
keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.220.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f7:42:01:2c:ad:0d:ab:c7:ee:2f:15:5c:68:1d:29:53:0b:
8a:53:8e:91:25:67:28:b8:ee:5b:70:99:1a:5b:25:86:0e:a5:
6c:d0:1c:fa:55:b4:9f:83:b2:6c:9f:5b:5f:53:eb:76:56:73:
57:6d:6f:19:06:b7:c2:91:d2:02:5f:e6:1e:00:11:b9:2e:c9:
c7:98:a4:60:38:c1:9c:9c:12:ff:39:bf:ec:d0:a3:9f:8c:12:
25:32:78:37:4b:09:eb:cd:21:90:78:04:16:1e:f8:4d:ea:17:
51:f5:55:f6:6b:f4:ee:08:39:82:b1:3f:8c:bf:c8:62:17:24:
2a:56:b1:17:5b:0d:0d:3e:19:71:03:9e:dd:41:fe:36:35:0b:
52:32:fb:5b:a2:e2:17:d7:1d:0e:0a:39:52:0d:a0:d7:29:6e:
c0:c6:fd:47:9f:db:96:bd:db:e3:e5:3a:fc:57:f2:28:f0:61:
33:55:da:7e:d7:ca:61:cf:ba:25:c0:29:99:7d:aa:28:be:3e:
17:47:04:dd:a7:c8:d9:e1:ac:d5:c4:fb:a0:ae:a5:ac:b9:17:
2c:79:11:d4:95:22:3f:af:1f:13:1a:dc:06:22:fe:27:e4:35:
eb:f0:a3:f9:bb:08:02:a4:9d:b1:28:64:7c:98:55:f0:5c:0e:
7b:34:16:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:46:31 2025 by rpki-client