Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/3136382e3233322e37362e302f32322d3234203d3e203532323836.roa
File: 3136382e3233322e37362e302f32322d3234203d3e203532323836.roa (raw, json)
Hash identifier: GHinflpy2uP6g5UOZB/U0UUNlmzpniYcCgjkIWAi/3M=
Subject key identifier: A2:40:92:A3:3B:1C:7B:E2:5E:15:43:EB:A6:2B:79:47:B1:23:19:52
Certificate issuer: /CN=241DE049AC3C932631785D79E6569AB7CF57A340
Certificate serial: 45967D2E139A13135C233E5989E1B1DAA97EAD47
Authority key identifier: 24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/3136382e3233322e37362e302f32322d3234203d3e203532323836.roa
Signing time: Tue 04 Feb 2025 18:01:11 +0000
ROA not before: Tue 04 Feb 2025 17:56:11 +0000
ROA not after: Tue 03 Feb 2026 18:01:11 +0000
asID: 52286
IP address blocks: 168.232.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:96:7d:2e:13:9a:13:13:5c:23:3e:59:89:e1:b1:da:a9:7e:ad:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=241DE049AC3C932631785D79E6569AB7CF57A340
Validity
Not Before: Feb 4 17:56:11 2025 GMT
Not After : Feb 3 18:01:11 2026 GMT
Subject: CN=A24092A33B1C7BE25E1543EBA62B7947B1231952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:52:2d:68:f3:5a:1d:bd:7f:6d:60:9a:00:df:
36:e8:31:39:5b:e6:45:84:a0:8f:af:d1:7e:2d:5c:
d6:d1:5c:ae:bb:8b:65:9e:92:1f:6f:4a:78:e8:08:
cb:e3:9f:4f:cc:53:52:43:d6:e8:6b:25:be:43:19:
20:45:79:bd:95:f7:45:43:84:12:ff:b4:77:ca:ee:
2a:86:9b:2e:68:eb:5b:09:ba:ad:0a:09:dd:69:46:
a7:fc:63:b8:27:f3:9e:07:ed:82:cc:57:ed:7f:f2:
9f:af:fb:4e:be:59:1e:95:c5:c0:91:f3:7d:92:45:
97:ab:d3:91:f3:58:f5:ec:b2:ae:53:e4:78:ae:df:
a7:5c:42:c2:ac:af:92:76:9a:96:af:0d:60:93:8f:
c7:f0:d8:a9:29:1b:1e:ca:44:cb:14:7a:9d:2d:cf:
54:f9:f4:5c:62:dd:6f:91:d8:f4:63:7d:8f:f2:76:
c7:02:a6:9b:2f:b5:d6:3a:51:be:3c:65:43:39:73:
5e:ee:ce:0e:76:14:a2:a7:c6:82:e2:bf:7c:40:bc:
8e:97:58:b7:90:ce:23:f5:e7:84:36:b7:10:05:f1:
31:54:b0:2d:7f:69:ae:08:fb:5c:3a:96:c5:c3:ca:
5a:56:f9:fe:51:c9:dd:b9:7d:94:92:a3:f0:69:0d:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:40:92:A3:3B:1C:7B:E2:5E:15:43:EB:A6:2B:79:47:B1:23:19:52
X509v3 Authority Key Identifier:
keyid:24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/3136382e3233322e37362e302f32322d3234203d3e203532323836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.76.0/22
Signature Algorithm: sha256WithRSAEncryption
94:8a:80:47:bb:62:c0:09:9d:85:0f:b2:a1:1b:03:6b:9e:9d:
fb:36:16:77:01:e9:fe:9d:f0:09:46:55:b1:12:0a:7b:94:8e:
e7:5f:45:0c:38:5a:68:e0:93:c6:be:ab:86:30:de:2b:54:05:
0f:8f:ae:09:c4:0b:42:30:89:29:04:f9:a4:88:bc:f9:59:3f:
a3:4f:a2:16:c1:e5:cf:c9:af:e6:29:aa:55:f7:ab:f6:6e:07:
8f:bb:8d:0c:ff:ef:6a:25:ae:16:5d:d5:f7:68:88:6e:16:89:
cc:aa:69:c3:32:09:9d:4c:a0:32:e9:2c:f5:8c:c8:95:f0:35:
bb:85:5f:2a:ca:82:6b:c7:ae:61:cf:fb:d2:55:e1:a6:47:e1:
d4:a5:21:6b:42:da:fe:ba:8f:b5:35:05:14:e3:66:b9:58:ac:
ba:89:de:4f:d9:16:94:67:85:1c:5a:db:a2:c9:aa:47:10:06:
51:5a:d2:b0:cb:e3:9a:33:41:05:cd:61:09:29:d1:fc:00:45:
21:f7:e0:4d:79:a2:ef:d4:24:17:83:74:ed:ed:d7:01:7a:6d:
72:b5:0b:d8:05:c1:60:93:8c:8a:e9:33:e1:a0:06:e9:29:fb:
dc:49:ba:14:c4:5f:96:82:d4:81:fc:8f:d2:ca:56:08:8f:1d:
0c:13:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:53:16 2025 by rpki-client