Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33322e302f32342d3234203d3e20323636383435.roa
File: 34352e3233392e33322e302f32342d3234203d3e20323636383435.roa (raw, json)
Hash identifier: 1H4cDwh5Fip7CL7z5F5mdnjUEkQGBYniZ+VIHyvYmDI=
Subject key identifier: 64:35:04:54:11:07:89:CB:3C:86:83:7D:E6:EF:EC:0D:45:20:78:74
Certificate issuer: /CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
Certificate serial: 5228C52BA6CD698D50EF7922A189A24B1CEEC961
Authority key identifier: 9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33322e302f32342d3234203d3e20323636383435.roa
Signing time: Tue 04 Feb 2025 18:18:25 +0000
ROA not before: Tue 04 Feb 2025 18:13:25 +0000
ROA not after: Tue 03 Feb 2026 18:18:25 +0000
asID: 266845
IP address blocks: 45.239.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:28:c5:2b:a6:cd:69:8d:50:ef:79:22:a1:89:a2:4b:1c:ee:c9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
Validity
Not Before: Feb 4 18:13:25 2025 GMT
Not After : Feb 3 18:18:25 2026 GMT
Subject: CN=64350454110789CB3C86837DE6EFEC0D45207874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:22:77:70:da:b0:85:fa:c2:14:7c:38:60:
87:a6:11:1b:2c:46:60:9d:5d:50:19:ba:71:7e:38:
80:e8:db:40:9d:22:e9:31:6d:cb:25:95:45:56:94:
df:e4:81:89:8b:b3:93:c8:92:87:c5:65:da:95:0d:
44:98:1e:88:58:d5:72:79:9c:15:17:6c:77:5e:ba:
d9:0f:09:22:4c:e5:06:04:21:26:ff:db:32:f2:75:
38:2a:da:ed:98:05:3f:41:4a:1b:b8:70:a2:6b:9a:
9b:99:c2:a9:4e:6b:8e:86:c7:69:d8:ac:75:ca:23:
0e:e7:00:9e:fc:c6:9c:48:bd:8d:a3:e6:6a:46:4e:
cc:bc:3f:38:c5:2e:77:1b:50:01:1a:cd:c2:f5:f0:
9e:6f:13:58:e7:f4:ce:fe:c6:cf:7c:2c:80:40:47:
e4:1a:85:75:71:f4:be:b3:33:a0:9e:0c:62:20:28:
c4:3d:f1:0d:f8:4f:1d:44:df:b6:e9:78:ef:c5:29:
c2:8b:e5:b5:c2:6a:37:56:11:66:47:21:2b:87:78:
92:da:db:b2:b1:12:9c:3c:6e:76:cf:cf:8c:d1:64:
13:b5:b7:48:3a:02:93:b0:ae:7c:09:35:9f:a6:77:
e3:23:9f:46:a3:d2:7c:2e:ec:57:88:34:f5:94:11:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:35:04:54:11:07:89:CB:3C:86:83:7D:E6:EF:EC:0D:45:20:78:74
X509v3 Authority Key Identifier:
keyid:9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33322e302f32342d3234203d3e20323636383435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.32.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ee:a9:1b:c9:64:d3:32:96:04:45:10:17:cf:c6:65:ad:55:
00:74:70:59:2a:4a:e7:cb:89:59:10:56:b4:10:e1:cd:8c:ce:
8c:b6:8d:8c:aa:7b:6b:bb:0d:80:bb:7d:42:77:b5:57:40:94:
8e:82:2f:86:a7:c9:ec:b9:e8:31:22:17:02:d3:e7:f1:07:60:
4e:0b:5a:65:be:ff:06:ef:59:03:24:6c:62:d3:8f:93:45:bc:
d1:9d:5c:c8:5e:73:b9:ce:b0:3f:af:56:97:39:44:0e:c5:3b:
7a:5b:de:18:a2:00:61:9f:7f:f9:8d:e3:26:57:47:46:f1:79:
bc:e3:38:69:48:7c:29:fe:cd:76:e0:e1:5e:95:76:37:a0:29:
23:03:4b:18:23:a6:7e:70:15:fd:2b:d5:3a:fd:c1:19:34:a7:
51:7e:81:ad:23:51:07:a5:85:40:0f:86:18:16:dc:d1:34:3c:
23:a9:12:85:8e:a4:ae:4d:ac:92:f6:60:dd:4a:7c:19:ff:b9:
f0:e5:23:66:4c:bf:44:f5:ee:40:ab:b5:ae:97:16:77:a4:bf:
c0:14:61:e7:c8:07:4d:ef:92:32:46:a3:88:08:be:1b:15:d9:
99:85:11:89:3b:f3:6e:2d:5d:19:7b:3e:23:df:82:62:00:6e:
a2:a7:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:41 2025 by rpki-client