Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e32302e302f32322d3234203d3e20323632313636.roa
File: 3136382e3233342e32302e302f32322d3234203d3e20323632313636.roa (raw, json)
Hash identifier: 6aktHUXpDILcL21yURLed5Ug7yd9a1LF12UhCC5nPv8=
Subject key identifier: 08:E3:A7:8E:08:92:D5:02:DC:08:5C:0F:D5:06:24:55:BF:0F:8B:09
Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial: 2A30E18329B4E71229550588C8FB00CD2A0485A8
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e32302e302f32322d3234203d3e20323632313636.roa
Signing time: Tue 04 Feb 2025 17:59:42 +0000
ROA not before: Tue 04 Feb 2025 17:54:42 +0000
ROA not after: Tue 03 Feb 2026 17:59:42 +0000
asID: 262166
IP address blocks: 168.234.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:30:e1:83:29:b4:e7:12:29:55:05:88:c8:fb:00:cd:2a:04:85:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Validity
Not Before: Feb 4 17:54:42 2025 GMT
Not After : Feb 3 17:59:42 2026 GMT
Subject: CN=08E3A78E0892D502DC085C0FD5062455BF0F8B09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:eb:5c:4e:f4:19:3c:1a:5e:16:7c:73:42:
51:47:f1:50:dd:56:97:86:a8:37:d0:5c:08:23:95:
75:83:d3:c1:f8:b9:95:65:ed:76:18:6e:0c:81:ba:
4e:e7:97:27:15:51:71:43:ae:ec:bf:0a:cd:16:a0:
bb:15:13:87:fe:55:66:4b:83:a4:c2:c7:1d:eb:3c:
e1:71:cf:f9:94:57:ce:a0:4a:d4:78:7f:15:ab:cb:
05:ff:ec:62:b2:4b:85:c9:f4:28:4f:e4:21:b2:0e:
1f:c7:32:2f:cc:a9:c9:85:79:d0:95:64:23:ad:f6:
20:9d:02:5e:b5:14:80:8f:d2:fa:47:10:fa:a6:15:
81:c8:30:ea:31:e7:a7:c7:7c:51:9d:bc:fe:a2:ae:
3e:36:de:15:75:87:d7:c2:29:5d:d3:d1:2c:f8:54:
74:b5:72:93:28:8e:04:cd:c2:94:dc:48:9a:a8:c7:
aa:77:be:e8:bc:16:0d:fe:a7:d3:0f:3a:d3:e2:39:
6b:21:bd:98:0d:d7:0e:b1:57:e1:2d:b6:45:0e:d5:
25:a6:89:cd:b5:74:b0:54:3d:d9:cf:a2:eb:e5:b9:
bc:c6:ce:98:76:6c:5f:a0:73:cf:b7:1a:db:ed:f6:
ab:09:75:4f:45:6d:32:a2:de:7b:c9:df:f0:d6:82:
12:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E3:A7:8E:08:92:D5:02:DC:08:5C:0F:D5:06:24:55:BF:0F:8B:09
X509v3 Authority Key Identifier:
keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e32302e302f32322d3234203d3e20323632313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.20.0/22
Signature Algorithm: sha256WithRSAEncryption
93:57:d5:80:18:7d:ac:51:1f:17:f8:a0:7c:f7:17:d9:4c:d3:
66:72:2b:54:1a:9b:1b:54:00:14:a2:e8:c5:53:42:4f:24:29:
0b:dd:06:1f:49:48:0a:52:53:18:4c:2b:93:11:ae:85:ea:18:
37:9c:11:cf:9a:3c:63:4b:9a:0c:b4:10:da:e3:8c:6a:fa:d8:
5d:3f:dc:e2:6a:4f:c1:fe:ad:00:0f:b7:46:56:0f:8c:82:e8:
d8:25:8e:3c:d6:f1:b9:60:fe:df:6a:c9:04:cc:15:ce:d8:19:
dc:d3:8f:a4:3d:11:b8:18:52:b9:ea:66:ba:10:52:e5:7d:e5:
c0:a3:53:9c:6e:01:6c:cd:a3:4e:5d:3e:9a:e2:2e:69:6c:1a:
b5:40:9c:37:cf:2a:34:93:1d:57:b9:5c:68:88:3e:48:aa:aa:
64:5c:7d:ce:fc:3f:41:4a:e0:2c:b7:ae:c8:32:44:57:78:d9:
57:84:70:58:ea:90:fa:d2:7f:8c:81:ff:c8:ec:a3:1f:12:14:
d7:cf:41:e4:eb:39:de:04:e3:20:7e:5a:d4:cc:e6:48:a7:a7:
09:67:41:30:d4:14:f0:cf:b7:4f:06:38:17:29:77:a9:45:d8:
b5:c2:37:ca:f6:5c:61:1f:9f:04:49:f2:ad:15:64:7b:20:ce:
7f:b0:42:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:09 2025 by rpki-client