Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FA56F1A2AB475731C6808EB2C038B6436A966AD7725F61CA9BF5A450F8B42BF/0/34352e3139312e35322e302f32322d3234203d3e20323635363139.roa
File: 34352e3139312e35322e302f32322d3234203d3e20323635363139.roa (raw, json)
Hash identifier: GG+l5t7x7AaVnEDfq+oveCuPvGKtxuRCU+pJVoot75A=
Subject key identifier: A2:AF:59:63:64:42:2F:C7:5C:B4:71:26:2C:62:9E:85:F5:0B:5B:9D
Certificate issuer: /CN=FED4E93B0781CF3EE4775D8FA1811D341F41248D
Certificate serial: 61547280FDC57BE990C5218EEEFCD802337F02CE
Authority key identifier: FE:D4:E9:3B:07:81:CF:3E:E4:77:5D:8F:A1:81:1D:34:1F:41:24:8D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FED4E93B0781CF3EE4775D8FA1811D341F41248D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FA56F1A2AB475731C6808EB2C038B6436A966AD7725F61CA9BF5A450F8B42BF/0/34352e3139312e35322e302f32322d3234203d3e20323635363139.roa
Signing time: Tue 04 Feb 2025 18:45:53 +0000
ROA not before: Tue 04 Feb 2025 18:40:53 +0000
ROA not after: Tue 03 Feb 2026 18:45:53 +0000
asID: 265619
IP address blocks: 45.191.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:54:72:80:fd:c5:7b:e9:90:c5:21:8e:ee:fc:d8:02:33:7f:02:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FED4E93B0781CF3EE4775D8FA1811D341F41248D
Validity
Not Before: Feb 4 18:40:53 2025 GMT
Not After : Feb 3 18:45:53 2026 GMT
Subject: CN=A2AF596364422FC75CB471262C629E85F50B5B9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:d3:56:57:0a:71:5e:87:98:14:a1:2e:02:
28:04:91:7b:01:1f:b1:d3:cf:da:30:ea:95:3d:f5:
22:e7:a2:63:32:30:23:f5:38:98:82:d1:69:0b:2b:
a8:91:c2:2e:9c:3a:43:c5:1b:87:8f:5d:f1:c7:80:
e2:e0:f9:46:00:30:12:b2:e6:8c:5a:85:09:1a:0d:
92:48:f6:fa:1c:4e:d4:36:39:a7:86:23:7e:1c:f0:
29:8e:fe:25:77:d8:46:e8:d0:5f:c6:7f:83:b0:a7:
6f:54:4d:35:d6:a0:22:04:25:84:7e:68:85:cd:7c:
d0:9a:46:39:c5:92:87:62:a0:15:0f:ab:2a:7e:8e:
4c:de:3a:36:48:99:7b:e5:af:a6:af:0b:db:18:f5:
e0:10:bd:3f:ab:42:23:0b:87:4c:71:e1:8c:5a:79:
36:f7:8d:49:b9:0f:e3:fd:48:1f:c7:1a:e5:5c:61:
8a:9c:d2:f9:cf:c5:5c:11:7a:76:aa:e7:bd:03:48:
ad:c2:c6:0b:68:b7:c7:77:0a:42:a5:09:ed:ce:de:
e7:0b:6a:4e:23:cd:7b:47:7b:dc:33:ea:df:52:7b:
58:c1:7a:1f:7e:bb:24:27:5b:d6:85:10:af:3d:d4:
6a:73:ef:15:ad:87:5b:e7:49:54:b0:d6:0e:58:7f:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AF:59:63:64:42:2F:C7:5C:B4:71:26:2C:62:9E:85:F5:0B:5B:9D
X509v3 Authority Key Identifier:
keyid:FE:D4:E9:3B:07:81:CF:3E:E4:77:5D:8F:A1:81:1D:34:1F:41:24:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FA56F1A2AB475731C6808EB2C038B6436A966AD7725F61CA9BF5A450F8B42BF/0/FED4E93B0781CF3EE4775D8FA1811D341F41248D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FED4E93B0781CF3EE4775D8FA1811D341F41248D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FA56F1A2AB475731C6808EB2C038B6436A966AD7725F61CA9BF5A450F8B42BF/0/34352e3139312e35322e302f32322d3234203d3e20323635363139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.52.0/22
Signature Algorithm: sha256WithRSAEncryption
59:ea:b0:14:14:c6:99:d2:08:90:b7:71:45:43:28:62:75:e7:
42:21:1f:3e:84:a3:af:56:ec:d3:e1:ab:b4:d2:e4:78:5d:07:
64:78:88:bb:42:b6:03:33:f5:0d:e0:3a:e6:f1:d7:41:0f:51:
d8:83:1e:c9:1b:59:06:61:54:a8:7f:8f:f7:d1:5d:81:64:6f:
06:94:c7:6e:1d:9f:be:de:0e:78:b6:ab:db:83:63:fe:a9:c7:
e5:9d:2f:b8:45:98:d4:4d:94:bc:fe:92:a8:5f:f6:11:4e:97:
21:37:55:33:54:72:bd:29:2d:1e:42:d8:bb:57:53:03:02:15:
ff:1c:9a:c2:80:0c:e0:8e:11:11:7c:95:e2:53:ad:ba:c3:55:
5c:7e:ed:f7:3e:e0:20:af:37:93:46:51:5b:4b:cd:89:32:0e:
ca:3c:7d:8d:81:71:7e:5c:5e:08:90:8e:7f:af:77:9b:43:c6:
30:7e:f8:9b:b5:d3:11:6f:c7:bc:13:c0:3f:dd:09:ae:f6:0a:
cb:3c:00:5c:8f:0a:e7:ec:8c:5d:7c:87:53:d7:d6:67:58:b0:
bf:0f:85:dd:5a:7a:c6:ad:52:31:f5:bf:81:7c:ce:0b:b0:a5:
6a:20:51:71:d9:54:84:fb:de:c8:64:8e:47:e3:f8:e2:bd:4d:
8e:f9:a5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:19 2025 by rpki-client