Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34302e302f32332d3233203d3e20323635353936.roa
File: 34352e3138312e34302e302f32332d3233203d3e20323635353936.roa (raw, json)
Hash identifier: CA5Az8LXicA1/nguWzQF+HbR4Gih9rEjeivbVrbwTN0=
Subject key identifier: 51:70:42:C0:37:11:48:3D:56:6D:99:1A:B9:F0:54:33:A9:08:40:C2
Certificate issuer: /CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
Certificate serial: 158E6A22A08BF3E0A7BEC029343104F1CE216D5D
Authority key identifier: AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34302e302f32332d3233203d3e20323635353936.roa
Signing time: Tue 05 Mar 2024 18:13:15 +0000
ROA not before: Tue 05 Mar 2024 18:08:15 +0000
ROA not after: Tue 04 Mar 2025 18:13:15 +0000
asID: 265596
IP address blocks: 45.181.40.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:8e:6a:22:a0:8b:f3:e0:a7:be:c0:29:34:31:04:f1:ce:21:6d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
Validity
Not Before: Mar 5 18:08:15 2024 GMT
Not After : Mar 4 18:13:15 2025 GMT
Subject: CN=517042C03711483D566D991AB9F05433A90840C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:4c:10:9f:99:7e:77:18:7e:96:dc:c1:cd:
73:cd:a7:f5:0f:8a:86:5c:52:d2:36:3c:02:79:bb:
59:89:f6:d0:c8:60:8f:44:b8:5f:2c:39:69:20:7e:
22:c5:77:14:1f:9d:38:37:73:b5:a9:28:f1:4e:4c:
0b:fe:ef:ad:b0:c8:a2:d2:24:ed:57:82:52:72:da:
05:4a:f6:36:6d:de:93:ed:61:f9:0b:f5:a4:55:0c:
78:bc:74:76:9c:b8:6c:0a:c0:03:ab:04:af:de:61:
58:79:4f:ac:bc:74:58:d6:3a:08:6b:10:04:7b:65:
f7:07:10:c7:38:60:77:66:83:34:c9:38:6f:2a:ca:
98:91:a6:41:6b:98:8d:96:11:c7:4f:81:97:cf:5d:
9a:ee:02:95:05:6e:14:ea:ad:02:1a:b0:d3:d0:ad:
be:4e:ad:36:cb:0b:d4:a1:a2:37:67:59:eb:3a:93:
bd:5b:a0:18:f8:3c:b8:af:ad:0c:bd:7a:78:27:f1:
16:43:c8:c0:44:99:c5:b5:67:1f:40:5d:88:04:62:
79:31:7a:d9:1a:4f:42:02:68:91:1c:bb:b7:6f:30:
87:6e:c1:f0:ea:be:ab:77:eb:7c:5d:b7:40:fe:e5:
5a:3c:8e:c1:70:81:58:d6:b7:84:14:4d:e7:52:9e:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:70:42:C0:37:11:48:3D:56:6D:99:1A:B9:F0:54:33:A9:08:40:C2
X509v3 Authority Key Identifier:
keyid:AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34302e302f32332d3233203d3e20323635353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.181.40.0/23
Signature Algorithm: sha256WithRSAEncryption
76:7e:e5:92:85:3d:55:bd:e4:33:fd:2d:2a:d6:bc:e0:aa:15:
78:26:4d:12:d0:51:e1:da:2b:22:87:bb:8d:02:57:eb:6d:01:
6d:74:41:76:da:13:30:f3:95:2b:86:69:47:e1:e6:7b:fb:6b:
25:0a:44:ab:9b:38:c9:15:75:d2:e4:eb:d8:23:df:86:da:d1:
13:1e:4e:ca:2a:c3:15:f3:b4:0e:72:47:d2:87:c8:27:85:7f:
44:42:43:d8:f8:59:aa:f1:a3:79:5f:41:a1:bd:53:54:f4:6f:
2b:01:03:ec:9e:1e:ba:d4:f9:af:db:02:23:bd:b0:e8:16:4b:
6b:7f:ae:0f:e6:35:18:cc:1e:d1:11:62:38:14:b7:7a:77:6e:
74:be:1c:0a:72:e1:29:3f:c5:fd:c0:e6:6d:41:24:42:d8:dd:
16:78:ba:31:97:8d:84:c1:96:d8:56:30:aa:74:23:e0:0e:92:
cf:4e:79:72:2f:77:b7:71:f0:6c:bb:55:45:1b:aa:4c:ad:97:
32:a3:a5:f7:12:58:2d:83:fb:5a:ab:c8:59:9a:69:7b:4d:a4:
2f:d8:23:a3:28:3f:5f:55:ef:e4:e4:05:c2:3a:94:b8:0d:1e:
fb:de:5a:63:6c:67:a3:9a:a1:72:5b:1f:a6:ce:54:47:3b:d9:
63:1a:91:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:39:36 2025 by rpki-client