Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11AB08C91584D003AA330ACAAC2ADC57E8B6F42D3AFAEF184A01C5604BA02822/0/34352e3233392e39362e302f32322d3232203d3e20323636383634.roa
File: 34352e3233392e39362e302f32322d3232203d3e20323636383634.roa (raw, json)
Hash identifier: lUzSyKyOcVKSQ0nH7A5eAltr6084wGumJYul19vQ14I=
Subject key identifier: 80:9C:4D:EF:15:4A:20:9D:2F:AB:87:F7:82:0C:1E:40:56:8D:C9:AC
Certificate issuer: /CN=4EF72CA9E6161B7548136AAB8BCF62028BA33AF0
Certificate serial: 7E47AC839EADCCA8E8CC97A141C41B68CC900D84
Authority key identifier: 4E:F7:2C:A9:E6:16:1B:75:48:13:6A:AB:8B:CF:62:02:8B:A3:3A:F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/11AB08C91584D003AA330ACAAC2ADC57E8B6F42D3AFAEF184A01C5604BA02822/0/34352e3233392e39362e302f32322d3232203d3e20323636383634.roa
Signing time: Tue 04 Feb 2025 18:17:48 +0000
ROA not before: Tue 04 Feb 2025 18:12:48 +0000
ROA not after: Tue 03 Feb 2026 18:17:48 +0000
asID: 266864
IP address blocks: 45.239.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:47:ac:83:9e:ad:cc:a8:e8:cc:97:a1:41:c4:1b:68:cc:90:0d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EF72CA9E6161B7548136AAB8BCF62028BA33AF0
Validity
Not Before: Feb 4 18:12:48 2025 GMT
Not After : Feb 3 18:17:48 2026 GMT
Subject: CN=809C4DEF154A209D2FAB87F7820C1E40568DC9AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2c:7b:3e:fe:ec:4b:f3:b9:76:8d:78:1a:b8:
66:6c:b8:9d:b6:e3:dc:34:13:9f:11:2e:7d:86:d2:
06:d2:13:88:25:a3:fc:2d:6d:f0:fd:38:2c:ad:e1:
b5:85:ec:93:29:ff:a9:06:9a:10:84:b6:88:d4:9e:
be:4a:43:92:fb:e5:da:1d:0d:21:cb:1c:0f:ed:7a:
8a:5e:dd:a8:15:78:28:fd:2f:8e:56:6b:7b:fb:f2:
19:a4:8d:85:c9:69:53:88:c0:d4:86:79:92:17:5a:
a5:40:ea:e4:2d:bd:72:67:88:39:86:8b:87:53:b0:
21:88:cb:41:ae:00:26:24:0b:63:06:95:12:2d:e2:
22:88:ed:67:a1:4c:95:f7:b3:98:b3:c0:f6:19:74:
dd:aa:42:f7:10:37:f2:46:b6:66:52:14:aa:7c:ad:
cf:ed:03:76:43:5a:3f:46:fb:eb:9f:97:56:2e:2e:
cb:e1:50:54:25:07:7a:ba:38:02:26:49:aa:7c:fa:
25:24:cc:bc:4e:38:79:92:35:6c:84:13:cf:a9:6e:
95:8a:6b:6e:c2:6b:e6:3e:4a:e8:20:81:5b:cf:bf:
05:c9:0e:de:bf:2c:c2:ca:09:1d:07:93:d0:0f:76:
bb:e0:b2:8a:5f:ff:cc:10:97:5e:26:54:a8:a5:89:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9C:4D:EF:15:4A:20:9D:2F:AB:87:F7:82:0C:1E:40:56:8D:C9:AC
X509v3 Authority Key Identifier:
keyid:4E:F7:2C:A9:E6:16:1B:75:48:13:6A:AB:8B:CF:62:02:8B:A3:3A:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/11AB08C91584D003AA330ACAAC2ADC57E8B6F42D3AFAEF184A01C5604BA02822/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11AB08C91584D003AA330ACAAC2ADC57E8B6F42D3AFAEF184A01C5604BA02822/0/34352e3233392e39362e302f32322d3232203d3e20323636383634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.96.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:08:1f:c2:9e:c5:87:05:08:9a:65:40:63:10:69:10:5b:b5:
85:e7:34:56:d4:3b:ab:db:69:45:3d:ef:77:6a:33:68:33:4d:
2a:10:ca:cd:70:ad:7a:82:db:d6:a6:ee:c8:1f:ea:3d:4b:d0:
b7:70:23:ee:d9:1f:eb:4b:ee:43:28:b3:0c:80:eb:44:94:a7:
16:5c:89:09:a9:a0:00:ab:88:0e:eb:d6:6e:6f:4d:06:a8:60:
08:3d:c5:74:cd:71:9a:d7:5b:26:d7:e0:d8:a5:df:30:69:0b:
ab:d5:73:e3:d6:8b:76:22:c5:b9:8b:5d:ba:c1:2a:da:d6:e8:
eb:fc:36:62:04:c2:37:d7:3b:1d:58:88:48:00:c1:5e:4d:a1:
38:a0:19:24:06:24:a9:fb:c4:29:44:e7:02:c0:9d:30:70:9f:
53:c5:e4:1e:b3:1a:9c:d7:54:25:58:3b:35:48:4c:91:ed:be:
d8:91:a0:a5:45:bf:67:49:33:b8:96:3e:9c:6c:cc:2d:f0:a7:
28:f1:d9:9f:42:ff:26:77:9a:67:50:53:c3:d2:26:9b:22:24:
fc:8e:fe:c6:7e:cb:7e:e5:c7:34:3f:6b:8c:17:6e:38:72:23:
ef:0d:02:ce:6b:c8:9c:0a:57:2c:f3:7a:24:c4:bf:92:a9:f0:
74:c6:6e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:54 2025 by rpki-client