Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/3136382e3139372e34342e302f32322d3234203d3e20323634373831.roa
File: 3136382e3139372e34342e302f32322d3234203d3e20323634373831.roa (raw, json)
Hash identifier: cjF85mH1TsZiIrjxrh17zQIfrNZCbo21Q/iaA5+Gr6Q=
Subject key identifier: B3:D9:1D:AA:2D:5A:23:E9:4C:5A:5A:65:E2:6F:A3:71:22:E2:E7:FD
Certificate issuer: /CN=0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB
Certificate serial: 015F11338C69B8786411018D33E7C3024ADCC968
Authority key identifier: 0C:3F:5B:DC:0C:ED:77:CC:FF:2B:A4:40:19:D1:D9:EE:70:39:B9:AB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/3136382e3139372e34342e302f32322d3234203d3e20323634373831.roa
Signing time: Tue 05 Mar 2024 17:55:25 +0000
ROA not before: Tue 05 Mar 2024 17:50:25 +0000
ROA not after: Tue 04 Mar 2025 17:55:25 +0000
asID: 264781
IP address blocks: 168.197.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:5f:11:33:8c:69:b8:78:64:11:01:8d:33:e7:c3:02:4a:dc:c9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB
Validity
Not Before: Mar 5 17:50:25 2024 GMT
Not After : Mar 4 17:55:25 2025 GMT
Subject: CN=B3D91DAA2D5A23E94C5A5A65E26FA37122E2E7FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:98:c8:6b:60:be:3e:51:ab:89:8b:ac:fa:
a4:3f:77:6d:6a:3e:7d:33:31:76:7a:58:e9:68:0c:
e3:bd:9e:e6:aa:59:51:49:b3:a4:01:36:f7:7c:61:
8d:bd:19:8b:93:6c:84:91:17:41:80:b5:af:b1:35:
25:78:2d:41:23:08:08:47:98:11:95:d1:85:a9:c5:
9c:9d:24:3e:c5:be:11:db:41:fa:49:dc:f3:c7:66:
8c:89:0e:e4:a4:79:5b:9b:1c:63:c3:64:60:93:be:
32:bc:71:e6:fd:25:64:44:0e:e2:a6:69:ba:d9:81:
df:0e:6d:db:04:a2:bc:b5:aa:1d:af:a3:6f:ff:74:
be:dd:13:1d:ce:87:8e:9f:5f:05:48:ee:97:23:1b:
d8:e7:5c:67:b7:67:9d:22:56:9a:ff:9e:24:08:24:
0f:79:1e:97:43:95:60:8f:6a:54:4a:ff:a4:19:91:
c3:90:84:68:54:68:4d:bc:ea:7d:7a:2f:1b:77:25:
e6:e0:f6:67:4d:5c:83:81:12:d8:ec:ae:4b:3a:78:
36:35:95:6c:ad:9e:67:20:b6:8c:3f:4d:03:fe:a7:
ab:eb:4f:e9:0c:47:e1:51:e2:81:54:d5:ef:5e:88:
d4:07:b1:d3:f9:21:c5:5d:63:12:5f:07:04:c0:8d:
97:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D9:1D:AA:2D:5A:23:E9:4C:5A:5A:65:E2:6F:A3:71:22:E2:E7:FD
X509v3 Authority Key Identifier:
keyid:0C:3F:5B:DC:0C:ED:77:CC:FF:2B:A4:40:19:D1:D9:EE:70:39:B9:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/3136382e3139372e34342e302f32322d3234203d3e20323634373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.44.0/22
Signature Algorithm: sha256WithRSAEncryption
54:21:4c:22:17:69:1d:96:df:54:3c:df:c5:fa:d9:37:1f:e2:
92:41:99:e1:23:ab:9d:6f:4c:3e:43:39:b5:89:56:79:e9:0e:
39:d5:41:d5:28:50:36:6e:fe:91:b9:fc:ea:d3:7f:d0:d7:88:
bc:77:c4:36:0c:f9:10:df:12:df:72:4c:b8:f0:40:68:d6:9d:
48:87:8c:b6:07:dd:e9:89:98:01:59:55:ca:30:a2:4d:17:e4:
52:54:e4:fa:1e:9a:a7:58:a5:06:dc:b2:e1:f4:8e:67:ac:35:
84:52:3d:30:e9:15:8e:b9:6d:6a:6a:95:df:f1:1d:7c:eb:f7:
4e:69:f7:c1:77:89:d9:75:12:b8:b0:ce:b1:43:96:9b:3c:75:
3f:9f:3a:a1:ef:8b:60:68:b3:e1:dc:bf:24:32:8c:87:f8:54:
01:97:52:a0:3f:a7:a3:74:fe:1e:92:2a:4e:5a:f2:0e:85:1d:
35:d7:0f:0b:9f:61:53:b5:16:28:e9:f2:cf:81:04:aa:3d:f7:
d7:37:f3:d7:c9:63:ff:2d:26:0d:8e:d8:84:2a:41:b4:55:79:
f6:77:8f:87:85:d6:94:df:74:af:5f:d9:78:a5:a1:ce:88:87:
f9:4d:35:3e:94:1f:b4:a8:1a:a6:fa:06:ca:76:57:35:21:5e:
89:12:88:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:20:46 2025 by rpki-client