Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/34352e3137332e342e302f32332d3233203d3e20323637383537.roa
File: 34352e3137332e342e302f32332d3233203d3e20323637383537.roa (raw, json)
Hash identifier: 2rCqSNoi0VBKKCW+CzZX7CRf3TptVnDvIxVkudsspyo=
Subject key identifier: C1:6D:A0:31:31:02:32:50:C9:6F:1F:DE:90:63:D5:28:48:5D:20:A5
Certificate issuer: /CN=43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8
Certificate serial: 673112A9BE5705AA351F200B5F403B0DAA4A7E65
Authority key identifier: 43:DD:90:FB:D3:6B:CA:09:CE:09:DC:8B:32:72:A6:9B:0F:97:D5:C8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/34352e3137332e342e302f32332d3233203d3e20323637383537.roa
Signing time: Tue 05 Mar 2024 18:16:00 +0000
ROA not before: Tue 05 Mar 2024 18:11:00 +0000
ROA not after: Tue 04 Mar 2025 18:16:00 +0000
asID: 267857
IP address blocks: 45.173.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:31:12:a9:be:57:05:aa:35:1f:20:0b:5f:40:3b:0d:aa:4a:7e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8
Validity
Not Before: Mar 5 18:11:00 2024 GMT
Not After : Mar 4 18:16:00 2025 GMT
Subject: CN=C16DA03131023250C96F1FDE9063D528485D20A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:92:53:7d:2c:11:2d:f9:ca:28:6f:5c:7e:13:
6c:09:4c:dd:46:f6:e6:1f:b9:fb:77:fc:64:c6:4b:
a7:ff:49:af:d3:e2:c6:b5:82:7b:3a:c4:0c:12:34:
cb:12:fc:33:cb:42:11:b3:7f:bc:78:6a:84:07:30:
83:05:4c:a4:3d:ee:7d:0a:19:44:a4:89:da:c7:48:
3c:14:b8:65:35:ae:72:19:32:66:f9:7b:b9:2c:ed:
4e:ee:df:b1:d6:b6:41:60:d0:1e:69:41:37:f9:27:
22:d0:09:57:7c:df:0e:95:00:0a:9a:7f:8a:4a:25:
11:3b:ed:1c:e2:8b:2f:21:bd:a0:2c:16:e4:50:ce:
8e:01:85:c0:2b:f9:04:40:05:7d:0d:1d:69:fd:27:
ab:ed:db:d5:ab:61:cb:b7:0d:aa:25:af:7d:3a:3c:
7e:17:02:4c:4f:43:ff:88:00:03:22:a0:a3:1c:4b:
ce:ce:7c:d5:34:15:e9:9c:b7:26:a5:e5:34:5d:54:
10:21:d1:de:cd:9f:4f:1b:84:58:36:34:bd:8b:78:
c7:89:e3:27:13:af:87:49:f9:0a:9e:d2:d6:9b:0b:
d6:72:aa:4f:e4:76:29:51:ed:10:67:74:e7:0f:9c:
61:2f:df:21:d3:3d:35:24:b0:89:8e:25:4f:7f:6a:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:A0:31:31:02:32:50:C9:6F:1F:DE:90:63:D5:28:48:5D:20:A5
X509v3 Authority Key Identifier:
keyid:43:DD:90:FB:D3:6B:CA:09:CE:09:DC:8B:32:72:A6:9B:0F:97:D5:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/34352e3137332e342e302f32332d3233203d3e20323637383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.4.0/23
Signature Algorithm: sha256WithRSAEncryption
47:c3:fc:85:c5:e5:6a:0d:bd:91:37:98:e7:3a:c9:1e:4c:52:
37:ba:24:01:ce:f0:26:0d:6f:6d:bd:94:ca:2b:b1:e9:38:e3:
7e:12:49:fc:e9:1b:4f:e9:e8:15:cc:88:47:2f:61:3c:11:3c:
65:6c:e4:fc:93:bf:39:10:77:07:af:98:ca:1f:1a:04:72:a5:
3c:4f:93:60:f8:1d:a4:77:e4:7e:d0:9c:a5:e9:c2:c9:5a:7f:
b1:17:1f:09:45:67:a2:a2:e2:fa:05:4d:61:9b:83:b8:d1:a9:
0e:da:18:a0:fd:86:b8:df:b1:08:d6:1e:30:d6:48:24:48:55:
e1:2c:54:88:20:da:3b:fe:25:d3:70:0d:8d:24:a3:c0:57:d0:
83:0e:f3:45:80:fa:e6:ed:a1:49:a6:04:f1:41:e6:6b:37:e1:
90:28:f0:c9:9a:80:63:14:01:dc:44:ae:8a:4d:82:c1:10:9f:
3e:82:d4:46:10:ca:7e:6c:27:44:f8:d6:f2:9e:e0:ce:52:e8:
be:ce:82:d1:9e:05:ef:a4:26:6f:37:91:a1:68:d7:ca:31:9d:
dc:a2:cb:e4:a5:04:24:c4:d4:7c:96:ce:65:8c:a0:05:38:33:
be:e6:5e:3d:d7:2d:87:4e:e3:79:52:c5:fa:80:a1:8e:45:50:
c0:87:2a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:24:45 2025 by rpki-client