Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa
File: 34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa (raw, json)
Hash identifier: 0wG8UAY7ipzPPU6H/Qn8ayAErVsbpJ3ILXn1Xxmg05c=
Subject key identifier: 92:25:01:D4:F9:6F:24:1A:B6:4D:50:2F:24:F1:DB:89:BB:2F:7E:F3
Certificate issuer: /CN=2AA949233251849B5F79085FA81406E588FF36E5
Certificate serial: 789F09F627AC609B05D1A7895EE69A2739E8C964
Authority key identifier: 2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa
Signing time: Tue 04 Feb 2025 18:04:17 +0000
ROA not before: Tue 04 Feb 2025 17:59:17 +0000
ROA not after: Tue 03 Feb 2026 18:04:17 +0000
asID: 269828
IP address blocks: 45.186.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:9f:09:f6:27:ac:60:9b:05:d1:a7:89:5e:e6:9a:27:39:e8:c9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AA949233251849B5F79085FA81406E588FF36E5
Validity
Not Before: Feb 4 17:59:17 2025 GMT
Not After : Feb 3 18:04:17 2026 GMT
Subject: CN=922501D4F96F241AB64D502F24F1DB89BB2F7EF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:cd:bf:b9:e4:55:24:1b:73:80:42:95:a9:
4e:8e:39:32:8b:04:63:81:7c:8c:22:83:39:9f:30:
72:03:10:d5:30:ef:b1:53:b2:b4:06:d2:0e:18:c7:
9e:86:dc:96:80:ee:3d:5f:94:9d:2d:89:55:a1:1b:
dc:f5:0b:c4:22:e2:ae:45:51:27:57:55:0a:2e:ca:
f7:5c:c9:36:68:9e:64:12:55:bc:16:70:88:d6:a6:
cf:5a:24:d3:4b:83:5f:76:c9:7f:c4:35:29:a8:8b:
b6:0f:e3:ab:dc:52:c4:41:80:e8:38:36:eb:0a:ee:
aa:64:0a:e5:ec:a4:93:de:42:14:f1:ec:61:30:7e:
f2:33:bf:12:2c:1a:14:b0:c9:8a:e6:bb:05:43:02:
dc:a9:75:f4:dd:1c:a2:2b:ae:ae:03:55:e3:37:38:
32:2c:65:a4:3e:f1:54:b3:d4:bb:32:4e:b6:4e:47:
ee:bb:a6:ef:07:8d:18:52:80:b0:40:ee:0b:c3:89:
df:18:60:fc:94:f4:a2:8f:d6:c1:56:29:25:76:43:
c9:f6:bc:7d:4f:fb:1e:49:b9:09:8c:c6:c3:7f:4e:
19:56:e6:f7:c8:90:76:63:01:5e:4b:fe:01:fb:a1:
f4:f9:87:23:5d:9d:2c:d5:18:f7:fa:de:da:d1:47:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:25:01:D4:F9:6F:24:1A:B6:4D:50:2F:24:F1:DB:89:BB:2F:7E:F3
X509v3 Authority Key Identifier:
keyid:2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.148.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:1f:a5:e5:a3:d5:df:09:40:c2:8a:f6:a9:c2:1c:66:50:75:
c6:0f:c0:0a:74:14:9b:7b:87:91:98:1e:49:dc:34:da:00:4a:
fe:8a:72:55:2e:99:99:9b:db:c2:0a:f3:5f:15:1d:31:2f:c5:
c6:92:9e:eb:8b:d8:c0:ac:4b:39:75:aa:c1:66:45:df:49:8f:
33:9b:1b:68:cf:bf:a3:32:fc:96:66:ea:d9:3b:07:33:e0:23:
74:e3:23:68:0b:4b:53:bc:0e:c7:9c:fb:ab:5e:a3:de:b5:a2:
37:29:54:57:07:da:49:2b:bc:2c:da:dc:08:73:83:c5:54:92:
5b:a4:56:6e:77:d5:57:8d:54:ae:70:af:0e:df:39:c4:2b:c0:
4e:40:9e:93:70:ef:c6:5f:ca:b9:57:91:6d:79:d6:d0:e4:2f:
f4:2b:8c:cd:db:ae:24:dc:51:91:4e:87:3c:10:24:75:62:d1:
e7:ee:8a:58:cb:ed:5b:3d:81:68:25:22:5d:d6:62:f0:b4:53:
4e:55:b8:69:8f:09:46:4a:5c:8c:d9:b8:c2:c6:f8:95:37:3e:
7e:cf:63:8d:52:d7:a9:f3:6a:53:32:6e:3a:77:61:71:bf:e4:
d5:1d:67:02:d4:32:b2:18:9b:90:2c:f3:29:55:ca:06:54:cf:
b3:80:b7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:09:59 2025 by rpki-client