Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232302e302f32342d3234203d3e20323632313636.roa
File: 3136382e3233342e3232302e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier: HkjQrfOpV0RIXyO0zbnGWpgbwEpVc4U2qz5rjbe+sGs=
Subject key identifier: 9D:9A:A8:04:07:69:66:D8:E9:A1:38:3D:BF:36:FD:B6:E5:BA:F5:13
Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial: 130F6F6100398598952D1ABE901F49B88687DDD5
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232302e302f32342d3234203d3e20323632313636.roa
Signing time: Tue 17 Dec 2024 14:25:00 +0000
ROA not before: Tue 17 Dec 2024 14:20:00 +0000
ROA not after: Tue 16 Dec 2025 14:25:00 +0000
asID: 262166
IP address blocks: 168.234.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:0f:6f:61:00:39:85:98:95:2d:1a:be:90:1f:49:b8:86:87:dd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Validity
Not Before: Dec 17 14:20:00 2024 GMT
Not After : Dec 16 14:25:00 2025 GMT
Subject: CN=9D9AA804076966D8E9A1383DBF36FDB6E5BAF513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:e8:8a:9f:d5:10:4d:b0:6b:cc:bf:6d:10:
22:04:0d:af:b8:c2:7e:88:5b:0c:cf:af:f7:a7:8e:
a7:cf:cc:4e:0b:73:62:5b:10:e9:ca:2c:ae:96:a8:
71:71:a5:72:e3:d4:5f:9e:25:02:94:34:50:46:98:
26:c4:32:9f:73:5e:66:ec:75:b5:b6:e6:57:1e:21:
6b:41:c5:c5:c2:ca:82:0f:b2:ef:67:66:47:8e:19:
fb:f7:17:69:55:0f:cf:b4:36:46:89:31:17:56:51:
dd:5d:5c:e9:db:3e:31:00:c7:53:e2:d9:82:b5:66:
c9:96:ba:0d:14:13:bb:9a:e5:1e:f9:ad:3f:69:bb:
99:d9:b0:8b:1d:56:3f:91:7a:20:e9:c2:73:89:ff:
b9:ed:31:4b:19:6a:30:38:9d:99:dd:4b:b4:ce:f8:
69:ef:38:48:dc:84:5a:ba:19:7c:c6:48:7c:c8:d4:
d3:05:2f:37:83:9b:7a:5a:a2:21:72:a6:ff:9d:29:
26:8d:0e:6c:fa:83:4b:4d:8f:06:da:1a:7d:fa:4e:
29:d1:d3:57:c0:05:00:b2:10:4a:41:ac:95:ff:18:
15:4d:5d:e1:c9:e1:2a:8b:51:a7:f0:ca:6a:54:59:
bb:32:99:5c:63:08:1d:64:6d:9e:05:ef:d5:34:4f:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9A:A8:04:07:69:66:D8:E9:A1:38:3D:BF:36:FD:B6:E5:BA:F5:13
X509v3 Authority Key Identifier:
keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232302e302f32342d3234203d3e20323632313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.220.0/24
Signature Algorithm: sha256WithRSAEncryption
57:c5:20:50:46:2d:4e:21:49:50:16:ee:99:1e:8c:2d:77:93:
0c:e5:1b:5e:08:f7:ac:d0:b8:6f:ec:b8:0a:81:4a:b9:c4:02:
48:e0:95:4b:fa:1b:2b:d0:e2:d1:78:7b:f9:f7:94:2f:f4:e3:
09:c6:56:ea:b7:ff:bf:40:73:95:e3:d4:79:21:c8:df:1a:5a:
5f:96:e1:d2:4e:c8:8d:fa:e4:b4:ee:21:d4:75:bf:d1:b0:db:
e1:f2:9d:c5:a5:ac:53:d7:09:e3:36:7b:29:26:d6:0e:56:af:
12:71:f5:f2:ba:e7:13:01:b3:5a:b1:91:94:21:db:a0:7d:2a:
63:42:1e:e8:7b:e7:ce:0e:d9:fd:8d:95:db:aa:af:d7:ae:0f:
3e:d1:ee:67:f6:3b:7e:d1:9f:5c:2e:f4:05:f1:ae:6f:c4:47:
3f:31:92:92:be:6d:b8:d1:c5:a2:91:71:6f:e2:d7:f2:5f:c3:
d6:57:f3:59:8e:60:fe:2d:86:10:3f:93:0a:fa:65:63:32:84:
9c:24:47:71:07:66:5d:d8:7a:8f:ae:80:bc:ca:45:7f:b1:bd:
d7:2c:93:92:ab:57:c5:98:84:12:dc:43:23:df:e2:c4:15:81:
af:42:4f:a0:60:22:7c:59:6b:7b:33:07:bf:a9:4e:43:bd:09:
b6:49:2b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:09 2025 by rpki-client