Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36392e302f32342d3234203d3e20323637363939.roa
File: 36362e3233312e36392e302f32342d3234203d3e20323637363939.roa (raw, json)
Hash identifier: Gy4VhCVXXGuHoT+GFpdvSjCd/vHG7UR14j4ihY/CkNE=
Subject key identifier: 90:10:7B:62:9E:8C:A8:76:97:44:1A:93:77:DC:82:32:61:00:35:B9
Certificate issuer: /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial: 406036B0B0DBFBEA16461634647D7015B1180CE0
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36392e302f32342d3234203d3e20323637363939.roa
Signing time: Tue 05 Mar 2024 18:06:20 +0000
ROA not before: Tue 05 Mar 2024 18:01:20 +0000
ROA not after: Tue 04 Mar 2025 18:06:20 +0000
asID: 267699
IP address blocks: 66.231.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:60:36:b0:b0:db:fb:ea:16:46:16:34:64:7d:70:15:b1:18:0c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Validity
Not Before: Mar 5 18:01:20 2024 GMT
Not After : Mar 4 18:06:20 2025 GMT
Subject: CN=90107B629E8CA87697441A9377DC8232610035B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:bf:da:22:b1:28:e3:74:9b:75:9d:6c:76:
87:07:19:01:85:35:0f:9d:bc:1a:1b:f9:0a:53:ef:
96:0d:74:3b:15:74:ae:1f:b7:59:7d:00:9a:8c:4e:
a0:41:d6:f3:67:20:e6:4c:0a:8f:46:1f:a6:7b:67:
cf:57:55:16:a1:6e:8e:73:01:f2:af:e8:48:2e:2a:
28:4e:96:68:9e:7e:7e:f0:7b:21:28:cc:93:a7:ca:
7d:24:46:ef:6a:0d:23:92:91:ec:29:f9:7c:0c:ec:
7b:59:4d:ae:b2:6f:0f:a2:1c:b1:96:44:29:fe:72:
c6:0b:56:51:a1:6c:89:2a:9c:b2:08:5c:43:f4:81:
7d:66:3e:77:6d:d6:a8:87:20:8a:c9:3b:cc:17:bb:
29:12:05:df:38:de:b1:dc:92:6b:1c:f3:76:19:b4:
f4:bc:8d:12:7f:fc:e7:54:8e:03:f6:1c:0c:99:73:
66:0a:ac:dc:d3:53:90:2c:b2:da:79:93:c1:85:a8:
2d:3b:c7:d7:f7:c7:38:51:62:83:e3:60:3d:98:b1:
0d:92:55:4c:ce:64:3f:ce:d9:b2:20:55:a0:4c:f0:
8f:ea:38:44:87:c7:2f:8b:06:53:53:c9:69:47:33:
9e:e5:22:89:ef:da:7e:60:14:64:ff:83:75:29:fd:
04:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:10:7B:62:9E:8C:A8:76:97:44:1A:93:77:DC:82:32:61:00:35:B9
X509v3 Authority Key Identifier:
keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36392e302f32342d3234203d3e20323637363939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.231.69.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d1:b3:2e:b6:d1:1c:b9:e1:5d:03:58:60:88:1b:8e:3a:17:
bc:1b:8e:14:5b:c1:af:2b:5e:6e:18:50:61:7f:c8:df:57:08:
53:c2:27:53:7d:99:95:91:cd:7d:b0:2e:8a:e1:6b:84:f5:96:
bd:36:65:51:1b:a1:83:a2:d5:02:f0:23:8e:ff:98:75:41:19:
37:d8:4e:ef:bf:c9:51:1d:fa:d4:07:27:e4:9b:cc:76:42:8c:
3d:51:bd:28:12:3c:9f:c7:35:78:11:14:8a:0c:ee:84:f1:40:
78:eb:a2:3a:23:70:f9:30:e9:2c:d4:8e:ac:98:b8:4a:20:9f:
f6:7c:3d:59:1c:4e:86:66:3b:3e:df:7a:07:04:2e:e3:2f:29:
bb:95:fc:34:83:87:bb:6e:1e:4a:d6:47:8c:f2:4b:24:c5:0c:
76:6e:c3:74:f0:1f:ee:7f:29:b6:df:91:c4:93:a3:5e:2f:eb:
71:ae:c1:61:5a:f2:d0:a8:9d:4f:b7:02:6c:fe:25:48:e8:3c:
e3:f6:54:4a:89:e3:35:8c:8e:df:99:a5:91:6a:6a:b6:13:45:
d0:cb:71:8c:f6:99:e5:27:ec:af:f6:64:ed:07:ee:1a:ce:26:
fb:e5:bc:15:0a:1b:00:0c:1e:8b:19:84:39:15:ca:69:f7:bd:
c0:20:82:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:32:26 2025 by rpki-client