Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/34352e3137392e3139382e302f32342d3234203d3e203634323331.roa
File: 34352e3137392e3139382e302f32342d3234203d3e203634323331.roa (raw, json)
Hash identifier: NgnV7WjTg8GevTpx1BQjAioRmGXbJnRgTO+BZUDGjyM=
Subject key identifier: A3:A0:0A:4A:DC:BC:67:1C:FF:50:83:9E:A4:6D:18:50:FE:6A:D2:E0
Certificate issuer: /CN=BAA5C366DB5F0C6DCA61A19157D44E0271E62268
Certificate serial: 0B85A081FDD080FCE07336B205B40560541AD59A
Authority key identifier: BA:A5:C3:66:DB:5F:0C:6D:CA:61:A1:91:57:D4:4E:02:71:E6:22:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/34352e3137392e3139382e302f32342d3234203d3e203634323331.roa
Signing time: Wed 11 Dec 2024 16:05:00 +0000
ROA not before: Wed 11 Dec 2024 16:00:00 +0000
ROA not after: Wed 10 Dec 2025 16:05:00 +0000
asID: 64231
IP address blocks: 45.179.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:85:a0:81:fd:d0:80:fc:e0:73:36:b2:05:b4:05:60:54:1a:d5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAA5C366DB5F0C6DCA61A19157D44E0271E62268
Validity
Not Before: Dec 11 16:00:00 2024 GMT
Not After : Dec 10 16:05:00 2025 GMT
Subject: CN=A3A00A4ADCBC671CFF50839EA46D1850FE6AD2E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:b3:e5:d7:8e:0f:44:9c:e0:de:d7:da:2b:
6b:96:74:1d:c8:4c:6e:3e:13:90:6f:b3:1c:f5:8e:
85:ab:c6:88:36:5a:38:12:be:a4:cd:96:58:75:34:
ac:e4:31:a2:f5:41:0f:ab:ab:45:d3:a0:1c:dc:60:
a4:0f:98:07:e3:6a:1c:b8:64:6d:08:95:a7:85:30:
06:b5:4f:b6:61:41:67:2c:3e:92:aa:e9:3b:b0:18:
f8:91:1d:b4:a2:72:b1:dd:65:95:97:46:d7:2e:25:
82:3d:cf:ec:b0:17:47:c4:63:c4:13:56:57:df:7f:
b0:f7:91:92:77:29:4a:ec:3c:00:65:b4:83:fe:85:
6e:ff:51:7b:f3:3f:07:40:58:68:5a:10:76:6a:32:
8b:47:27:75:11:fa:e5:8e:6a:52:4f:b9:dc:70:6b:
7b:2b:be:64:b2:e3:b9:a8:07:b2:79:3b:8c:8d:3c:
c5:4d:6a:4e:36:db:90:36:11:35:3d:22:85:52:58:
8d:c7:8f:02:32:50:de:54:72:44:b5:e9:76:4d:c6:
c1:e7:83:70:67:57:fe:6b:9c:87:f0:cd:21:b7:26:
90:de:10:06:33:66:16:aa:81:22:35:da:53:4f:a4:
65:9d:88:9c:ae:e4:1c:96:68:ca:6b:07:a5:2a:30:
70:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A0:0A:4A:DC:BC:67:1C:FF:50:83:9E:A4:6D:18:50:FE:6A:D2:E0
X509v3 Authority Key Identifier:
keyid:BA:A5:C3:66:DB:5F:0C:6D:CA:61:A1:91:57:D4:4E:02:71:E6:22:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/34352e3137392e3139382e302f32342d3234203d3e203634323331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.179.198.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:aa:d1:7c:d2:e3:3a:8e:2e:e2:c8:8e:bf:8c:76:c8:e8:1f:
9c:8b:af:94:ec:04:a0:ec:19:b8:8f:59:ae:3e:55:13:cb:38:
38:6c:74:bb:b0:35:3e:39:f5:30:3d:e6:3f:7f:23:44:6f:df:
1a:5c:50:6e:a5:ed:f5:2a:25:b0:33:0a:c3:75:0c:f4:2a:c0:
80:21:78:4f:be:4f:c9:5e:72:67:c5:4c:3f:d8:d3:90:c5:fa:
48:72:c5:fe:4c:d8:41:bc:c9:63:c5:84:83:c6:a5:ff:4c:f7:
77:96:29:4c:25:64:75:5c:53:81:15:5c:85:cb:99:57:52:27:
cb:62:20:e3:6a:23:50:c8:23:52:2f:0d:02:93:f6:cb:d4:b3:
e0:12:91:fc:63:d1:64:93:a3:b6:44:2e:7b:6c:10:d5:d2:09:
01:12:4c:6e:d9:8d:db:65:97:4a:29:1f:0e:b8:22:2f:ac:35:
72:32:8e:3e:0a:c6:7a:53:16:b7:0d:86:43:bd:5a:90:7b:f9:
b2:da:70:1b:e8:c9:67:3c:a8:ff:e9:8f:11:bc:7f:4c:a6:54:
86:ac:31:cd:bb:03:f9:ac:ff:2b:95:d9:3e:9b:60:a0:5c:d1:
38:4d:e9:fe:27:94:d6:c5:58:8d:53:12:9a:99:1c:3d:2d:c3:
ab:1c:8c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:09:16 2025 by rpki-client