Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/34352e3233392e3130342e302f32342d3234203d3e20323731393134.roa
File: 34352e3233392e3130342e302f32342d3234203d3e20323731393134.roa (raw, json)
Hash identifier: e6YCHvD2O+p93qJc9icaL3D+o3v8JOJnXZb0MYWbvV4=
Subject key identifier: 61:BA:4E:3A:A6:0D:CD:0A:59:9D:89:5E:73:5D:4A:E2:47:ED:AF:37
Certificate issuer: /CN=20AE62643C64442088545A3D5BA49A68A414B159
Certificate serial: 38294A3FBDA24670EE65DB5A252CE8105C47E3
Authority key identifier: 20:AE:62:64:3C:64:44:20:88:54:5A:3D:5B:A4:9A:68:A4:14:B1:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AE62643C64442088545A3D5BA49A68A414B159.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/34352e3233392e3130342e302f32342d3234203d3e20323731393134.roa
Signing time: Tue 04 Feb 2025 19:58:04 +0000
ROA not before: Tue 04 Feb 2025 19:53:04 +0000
ROA not after: Tue 03 Feb 2026 19:58:04 +0000
asID: 271914
IP address blocks: 45.239.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:29:4a:3f:bd:a2:46:70:ee:65:db:5a:25:2c:e8:10:5c:47:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20AE62643C64442088545A3D5BA49A68A414B159
Validity
Not Before: Feb 4 19:53:04 2025 GMT
Not After : Feb 3 19:58:04 2026 GMT
Subject: CN=61BA4E3AA60DCD0A599D895E735D4AE247EDAF37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:a6:48:06:1e:2a:a3:16:46:4a:79:5d:4f:
cc:af:65:49:ee:74:96:6a:ae:ee:ae:43:72:79:34:
8e:74:5a:22:40:ab:6c:38:8d:7b:16:14:d0:bb:86:
5d:0c:c8:fa:13:d7:9b:2c:f7:97:5b:6e:02:cc:35:
a2:3c:76:fc:8a:fd:8f:70:a8:a9:41:f7:cf:ad:e9:
2d:b8:10:b4:26:ea:c7:2a:c3:5f:d0:b3:29:71:13:
b9:93:23:0a:6e:5c:b7:b3:8c:86:fb:e5:a7:20:e2:
bc:ab:e4:98:a9:6c:42:16:e9:71:89:51:08:e6:b9:
d4:57:a5:5a:40:e3:32:ee:f5:d2:de:28:2b:7f:3c:
92:60:35:6e:63:4a:70:50:16:56:d6:e1:0c:fa:fb:
4b:f6:0c:58:0b:45:d3:47:24:5e:14:1a:6f:a0:47:
bf:5d:fd:b8:40:ac:75:e5:d7:9a:14:31:4d:ec:4f:
63:87:a0:0b:8b:02:7d:95:22:48:ef:17:75:af:b6:
ae:b2:49:c8:f0:62:5e:85:2f:51:31:ac:88:7f:80:
de:39:26:6e:91:2d:51:5e:38:bd:c1:eb:ee:9b:fd:
db:f2:6e:a1:dd:38:70:ae:c2:63:1c:48:32:47:0c:
55:bf:1c:e9:6f:35:0a:5d:9a:cb:a0:45:d5:86:9a:
c1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BA:4E:3A:A6:0D:CD:0A:59:9D:89:5E:73:5D:4A:E2:47:ED:AF:37
X509v3 Authority Key Identifier:
keyid:20:AE:62:64:3C:64:44:20:88:54:5A:3D:5B:A4:9A:68:A4:14:B1:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/20AE62643C64442088545A3D5BA49A68A414B159.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AE62643C64442088545A3D5BA49A68A414B159.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/34352e3233392e3130342e302f32342d3234203d3e20323731393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.104.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:a5:0c:2b:b2:2f:4d:c4:ec:6a:e1:f5:2a:c3:95:aa:b8:01:
19:f7:db:1a:3b:08:cb:ff:7b:54:bf:9e:f7:3d:fa:82:b4:f3:
9a:da:6d:bd:95:b5:85:59:f0:e9:a2:54:63:ad:45:0f:76:2c:
cb:6d:41:00:53:6e:2d:06:2c:13:24:9e:a5:91:ef:9a:c6:ba:
79:99:64:0b:27:3a:8b:5c:c9:33:aa:c1:69:e3:ff:47:67:e6:
5a:9e:ce:da:88:e2:81:70:b3:17:88:68:23:68:2b:3b:27:58:
d9:95:3f:42:7c:6a:bd:d3:f3:e5:7a:0e:8a:cc:ec:92:fd:01:
2b:c9:66:77:5d:0c:44:13:c3:e1:cf:ca:61:be:64:f2:24:d8:
5b:21:63:c7:fc:63:bd:f1:19:42:65:84:21:ef:59:dd:cf:d6:
f5:75:f8:da:68:60:1f:0a:4c:46:88:ee:e5:6c:c9:48:4b:42:
1a:ce:b6:6e:ae:a0:fb:ef:e5:fd:45:a4:20:47:04:63:1a:83:
45:f4:ff:cb:eb:2c:b4:89:56:b3:17:71:f6:97:87:18:44:59:
3c:d7:dd:d1:74:06:63:18:30:8f:66:67:9e:13:1f:a7:1d:77:
a2:0d:85:13:fb:8b:7b:14:0c:b6:fb:4e:57:b9:b2:84:89:21:
3b:ee:ba:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:53 2025 by rpki-client