Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/34352e3137332e34302e302f32322d3234203d3e20323637383032.roa
File: 34352e3137332e34302e302f32322d3234203d3e20323637383032.roa (raw, json)
Hash identifier: 0CWB9+AbdKysGuAhoovAlqKrCEV/m6MLKMRsyf4mzvQ=
Subject key identifier: 3E:4C:2F:D0:84:32:AF:44:31:56:EC:FD:B8:56:D1:A3:CB:57:DC:85
Certificate issuer: /CN=F759E6E90D87109CB242AF1806550668309A19C8
Certificate serial: 27D46D6BABE5261BAEB41F69BCF640CF1584A84D
Authority key identifier: F7:59:E6:E9:0D:87:10:9C:B2:42:AF:18:06:55:06:68:30:9A:19:C8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F759E6E90D87109CB242AF1806550668309A19C8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/34352e3137332e34302e302f32322d3234203d3e20323637383032.roa
Signing time: Tue 05 Mar 2024 18:03:58 +0000
ROA not before: Tue 05 Mar 2024 17:58:58 +0000
ROA not after: Tue 04 Mar 2025 18:03:58 +0000
asID: 267802
IP address blocks: 45.173.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d4:6d:6b:ab:e5:26:1b:ae:b4:1f:69:bc:f6:40:cf:15:84:a8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F759E6E90D87109CB242AF1806550668309A19C8
Validity
Not Before: Mar 5 17:58:58 2024 GMT
Not After : Mar 4 18:03:58 2025 GMT
Subject: CN=3E4C2FD08432AF443156ECFDB856D1A3CB57DC85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:4e:08:da:af:9b:a2:fe:24:78:48:ec:7f:
f3:0e:a5:08:6b:f0:5f:97:94:23:75:8f:bf:84:3c:
0e:fd:02:7b:08:f1:ef:3e:4e:21:9a:53:84:3d:aa:
16:40:4f:d1:93:8e:60:06:e3:d2:f2:a7:ef:b9:5e:
ed:8e:ef:3a:67:03:b0:3a:68:e7:12:b6:27:f8:8e:
60:1d:21:43:84:3f:e6:f5:b4:8b:09:59:59:3d:56:
92:e4:5d:c1:8f:f4:3c:f8:71:ee:e5:12:d8:40:99:
fd:de:fe:62:b3:27:47:61:0e:f0:92:bf:ec:f1:65:
16:22:5f:97:1b:d1:b6:24:11:19:01:c7:0c:a6:bd:
e0:9c:96:b9:df:34:f1:5a:6b:16:be:c3:bd:71:50:
4d:d6:e3:8a:d8:1e:93:66:4c:24:9e:dd:21:6a:3b:
3a:b6:90:64:c2:02:62:e0:74:09:6a:2f:91:3b:7e:
fa:25:c3:dc:c5:9a:45:e5:fe:4d:6c:44:a7:66:01:
75:29:cb:c7:f0:a8:41:d0:d5:a4:ed:35:51:7b:dd:
0a:0d:66:93:7d:86:5e:c3:95:a9:6c:12:9d:2a:16:
d5:b0:b4:3d:dc:7e:48:6c:25:f8:99:b4:6a:04:48:
c3:43:f0:5a:51:52:81:df:39:c7:2c:63:82:2d:78:
62:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4C:2F:D0:84:32:AF:44:31:56:EC:FD:B8:56:D1:A3:CB:57:DC:85
X509v3 Authority Key Identifier:
keyid:F7:59:E6:E9:0D:87:10:9C:B2:42:AF:18:06:55:06:68:30:9A:19:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/F759E6E90D87109CB242AF1806550668309A19C8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F759E6E90D87109CB242AF1806550668309A19C8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/34352e3137332e34302e302f32322d3234203d3e20323637383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.40.0/22
Signature Algorithm: sha256WithRSAEncryption
02:2d:22:a6:f8:cd:5b:6c:4d:1b:ab:33:ca:9f:7b:6c:f4:3f:
fd:58:66:b8:48:61:7f:6d:91:93:24:dc:b8:94:4a:5b:cb:60:
3c:38:89:52:49:2f:c9:88:53:21:ca:dc:86:e9:62:5c:22:2d:
1b:51:e8:58:0c:6f:84:92:fa:be:04:e6:43:3a:6a:91:4f:71:
90:43:47:fa:f2:c7:4c:e3:c2:84:ff:92:c9:00:25:88:70:e7:
dc:ac:f3:2b:db:61:6d:a9:db:7e:14:16:28:ad:0c:83:f3:20:
30:29:b3:d3:2c:40:cf:05:93:77:96:fa:ae:79:de:71:f8:da:
f1:c7:ec:c2:1b:72:15:96:e2:be:d0:e1:68:26:a6:e9:b1:6a:
f3:17:34:ac:9d:89:ba:80:72:dd:3e:75:84:12:6b:4e:7a:4e:
a1:67:9a:5c:fb:49:46:15:d1:00:70:8a:61:b8:0b:4e:2a:a1:
67:80:a8:b4:e9:dc:ef:2c:d5:3c:15:e1:3e:17:c2:19:f9:c0:
83:90:aa:f1:33:47:2a:3b:c2:ea:b3:8b:29:63:64:1a:a9:42:
ef:b0:02:53:37:52:69:2a:61:70:25:91:20:52:92:68:ec:a0:
e5:41:ce:08:fb:bc:8d:ef:f6:31:56:45:ab:d3:50:88:b0:a3:
37:28:02:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:21:22 2025 by rpki-client