Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235352e302f32342d3234203d3e20323635363133.roa
File: 34352e3138392e3235352e302f32342d3234203d3e20323635363133.roa (raw, json)
Hash identifier: D8qTW2JNaJE3jSh+G+K6EfQRKdItogl5ivC99RJhElU=
Subject key identifier: 96:D6:D0:34:DD:A7:D0:6C:3B:F7:1C:58:7D:AF:61:F9:4A:11:00:1F
Certificate issuer: /CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
Certificate serial: 7F6A30AF2051C13C3A603D7EA2A2E3AA3B54B443
Authority key identifier: 32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235352e302f32342d3234203d3e20323635363133.roa
Signing time: Fri 17 Jan 2025 18:25:01 +0000
ROA not before: Fri 17 Jan 2025 18:20:01 +0000
ROA not after: Fri 16 Jan 2026 18:25:01 +0000
asID: 265613
IP address blocks: 45.189.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:6a:30:af:20:51:c1:3c:3a:60:3d:7e:a2:a2:e3:aa:3b:54:b4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
Validity
Not Before: Jan 17 18:20:01 2025 GMT
Not After : Jan 16 18:25:01 2026 GMT
Subject: CN=96D6D034DDA7D06C3BF71C587DAF61F94A11001F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:de:a5:7e:10:54:a4:f5:b4:eb:f9:4b:88:
a7:23:cd:45:9d:ba:1b:07:f9:18:a1:2b:fa:df:af:
f4:ad:b4:68:77:5c:fa:28:06:d4:0c:78:c7:c4:a8:
62:3c:36:40:0d:bd:3a:2a:83:a5:97:55:06:0f:9b:
9e:1e:7b:df:0d:d5:f5:9a:ab:cf:0f:16:d8:f6:26:
a2:a3:0d:17:bf:3d:35:6c:c4:a1:70:fb:b9:0d:a1:
db:60:12:ee:ab:62:b4:f2:93:3c:6c:cf:83:14:cd:
4f:ad:fd:88:2b:95:9f:3b:5c:58:f6:24:7e:b6:df:
20:14:31:6d:70:f4:69:d3:e0:ca:51:e4:c1:c0:d4:
41:cf:a6:24:ba:90:38:80:97:e0:69:85:65:30:cf:
a7:5d:fb:a6:eb:f7:bd:a1:09:7c:d1:49:b9:b5:75:
e5:ae:fe:6e:de:23:b7:94:54:dc:7a:fc:15:22:4a:
cb:c1:ac:27:7d:2a:7d:50:f2:ca:e5:af:d7:95:2c:
d3:2c:20:db:12:ea:a3:44:03:90:56:58:49:e1:70:
16:6d:75:3b:bd:8b:6f:50:0b:ca:fb:8d:25:1d:ad:
1e:fb:81:81:60:fb:4e:5d:f2:14:d6:6c:3d:b5:97:
d8:8d:ec:c1:39:45:52:23:4c:5e:25:66:30:1d:b8:
09:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D6:D0:34:DD:A7:D0:6C:3B:F7:1C:58:7D:AF:61:F9:4A:11:00:1F
X509v3 Authority Key Identifier:
keyid:32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235352e302f32342d3234203d3e20323635363133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.255.0/24
Signature Algorithm: sha256WithRSAEncryption
16:4d:95:b7:56:84:e8:f6:83:7c:76:87:a2:0f:d6:2c:fb:72:
88:bb:26:c3:38:30:27:91:12:ae:d3:3b:fc:c6:8c:98:65:b0:
fb:98:47:ad:36:ba:f2:b6:5f:c2:24:bb:98:c7:40:b7:a2:40:
8d:bb:52:3d:f1:ba:fc:fc:ab:23:4b:4d:4c:cf:ec:fd:68:75:
a2:c9:5f:28:d6:ad:bd:8b:37:0f:e0:ca:3d:f5:f9:4f:ca:c6:
52:49:9d:fe:27:3e:7c:ae:c7:a9:eb:7e:ea:64:94:aa:e9:35:
f8:7c:03:da:fa:8f:fd:fb:e1:6f:aa:26:b4:80:82:2d:cf:6a:
e6:76:ff:3a:1c:a3:4f:04:fa:72:31:d4:34:2c:69:f8:b6:7e:
40:c4:d3:3a:d4:7d:70:f2:7c:4f:00:f4:0a:21:18:3b:49:a0:
5a:6e:3f:30:b4:4c:98:22:47:3f:89:8e:d9:97:57:25:38:75:
ea:56:ae:f9:05:53:fc:b0:a0:37:e8:7a:ed:75:bb:d0:b4:d5:
6f:eb:6a:cc:b2:55:2c:eb:fc:9d:9c:c4:ca:68:03:a3:53:d6:
b3:1e:64:55:83:c1:d0:e3:da:d2:8f:5f:ad:28:91:7b:5f:1f:
b9:95:d3:d1:03:2b:57:62:89:fc:ff:67:92:6c:54:2b:83:e5:
5c:7a:18:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:20:18 2025 by rpki-client