Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3136372e3234392e34342e302f32322d3234203d3e203532343236.roa
File: 3136372e3234392e34342e302f32322d3234203d3e203532343236.roa (raw, json)
Hash identifier: CQ2m+g/h87/WMvyb1olCycnrBdosbqNlOCCe3F0IG4s=
Subject key identifier: 33:36:A4:DB:4E:51:77:0A:AD:27:61:60:3E:16:E6:94:75:E4:5F:A8
Certificate issuer: /CN=2D2BA350074219D08DFBB94550147A89F29E05B9
Certificate serial: 61B2709BE89DD552C45308C40BB9076F1F409807
Authority key identifier: 2D:2B:A3:50:07:42:19:D0:8D:FB:B9:45:50:14:7A:89:F2:9E:05:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3136372e3234392e34342e302f32322d3234203d3e203532343236.roa
Signing time: Thu 25 Jul 2024 19:05:00 +0000
ROA not before: Thu 25 Jul 2024 19:00:00 +0000
ROA not after: Thu 24 Jul 2025 19:05:00 +0000
asID: 52426
IP address blocks: 167.249.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:b2:70:9b:e8:9d:d5:52:c4:53:08:c4:0b:b9:07:6f:1f:40:98:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D2BA350074219D08DFBB94550147A89F29E05B9
Validity
Not Before: Jul 25 19:00:00 2024 GMT
Not After : Jul 24 19:05:00 2025 GMT
Subject: CN=3336A4DB4E51770AAD2761603E16E69475E45FA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:98:75:03:5e:eb:01:6d:28:80:47:fa:69:
1d:39:95:c2:63:20:cf:3e:9e:93:eb:ee:51:9c:b0:
9e:bb:09:f0:65:d3:6b:db:7b:65:58:59:89:e4:ac:
00:cb:bc:62:74:97:ec:4d:01:15:e6:5b:a3:91:02:
9e:d1:b8:da:ff:e5:ee:ae:45:ad:f6:c9:ab:de:04:
63:fe:15:ed:f2:f2:65:90:be:82:ec:69:61:c3:a2:
4c:7c:42:4a:4e:74:44:d7:92:a6:92:3b:eb:c7:5a:
ae:49:28:7c:c1:83:96:64:03:4c:c9:a1:bf:5f:64:
ce:df:14:ea:b7:8f:2f:c2:e3:89:d3:eb:c1:21:7c:
51:07:d1:25:cb:46:cc:12:21:87:ec:68:b3:e5:e1:
e8:ad:98:a9:b4:c8:99:7e:ea:32:de:06:16:81:61:
00:1b:e0:08:4a:c7:07:a7:e7:b9:fc:43:ae:3e:a9:
29:44:3b:47:6b:87:d7:1f:71:80:e1:58:2b:3a:10:
ed:c1:91:87:56:42:49:3b:f3:4c:36:39:33:38:7a:
fd:4c:ca:b2:fe:45:af:a0:b8:6f:f2:4d:7e:88:e1:
43:4d:7e:2f:11:e2:79:69:4d:8f:7e:3a:7f:9f:a9:
9b:78:ea:32:8e:0f:63:ac:48:c9:4e:36:70:75:bf:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:36:A4:DB:4E:51:77:0A:AD:27:61:60:3E:16:E6:94:75:E4:5F:A8
X509v3 Authority Key Identifier:
keyid:2D:2B:A3:50:07:42:19:D0:8D:FB:B9:45:50:14:7A:89:F2:9E:05:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3136372e3234392e34342e302f32322d3234203d3e203532343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.44.0/22
Signature Algorithm: sha256WithRSAEncryption
77:46:81:b2:0f:8c:98:e1:27:7f:42:1d:7e:52:88:f5:41:9f:
fd:11:d7:04:ee:19:ae:80:ba:b1:f4:71:44:59:fc:36:44:d4:
d2:ed:da:cd:d6:6c:8a:2f:a0:f3:bd:43:20:a6:8e:0c:99:98:
98:ec:08:75:35:13:34:ff:74:02:3b:7f:60:c0:2f:11:e0:23:
00:8a:5f:d3:30:51:f6:8f:7f:2e:41:70:23:c5:70:96:77:dd:
a1:d3:43:fc:38:a5:f7:7b:04:b3:52:bf:30:3c:8e:7a:2b:67:
78:ad:8f:7f:fe:b8:84:84:4b:45:72:63:82:9b:74:7b:33:9a:
a5:f0:43:80:fd:fe:d8:71:9f:43:eb:be:51:0e:57:0d:91:cc:
5c:5b:27:8e:7b:3c:f9:c2:a2:18:ea:7a:29:e9:38:e4:d5:44:
0a:ea:50:6e:ee:3c:79:3a:e0:69:36:b4:e3:c5:ea:2b:30:c8:
11:96:c7:6a:3f:c6:73:fc:0b:69:9d:79:b1:a7:74:58:eb:67:
fd:75:8a:b9:1b:19:1b:cb:1e:98:d2:c8:d6:68:05:97:85:7f:
25:01:0a:9f:37:40:6f:33:7f:b1:25:0a:5c:a1:d8:f2:e8:2b:
f2:05:c3:02:07:23:2c:d5:b1:56:df:05:a9:2c:a7:19:a3:87:
bc:2a:4c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:25 2025 by rpki-client