Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/34352e3233382e3139362e302f32322d3234203d3e20323636383438.roa
File: 34352e3233382e3139362e302f32322d3234203d3e20323636383438.roa (raw, json)
Hash identifier: 9owNYvK25s6oeRTK6GascakMzPiZCH/nB5fBSXTVmJM=
Subject key identifier: 49:E0:4E:8C:0D:96:0E:31:DD:E8:8C:B4:32:2C:76:56:C5:39:0F:78
Certificate issuer: /CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8
Certificate serial: 5620177852F3D4ED002358C50D60489ABE5B184B
Authority key identifier: CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/34352e3233382e3139362e302f32322d3234203d3e20323636383438.roa
Signing time: Sun 23 Feb 2025 01:05:00 +0000
ROA not before: Sun 23 Feb 2025 01:00:00 +0000
ROA not after: Sun 22 Feb 2026 01:05:00 +0000
asID: 266848
IP address blocks: 45.238.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:20:17:78:52:f3:d4:ed:00:23:58:c5:0d:60:48:9a:be:5b:18:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8
Validity
Not Before: Feb 23 01:00:00 2025 GMT
Not After : Feb 22 01:05:00 2026 GMT
Subject: CN=49E04E8C0D960E31DDE88CB4322C7656C5390F78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:36:73:a7:83:72:51:af:2b:4c:82:3e:0d:
39:dd:51:07:ba:61:e9:76:d2:15:25:3d:38:47:87:
62:4e:ba:41:02:68:7b:e7:1b:bc:c5:27:87:ee:19:
fa:96:d2:47:ee:75:16:57:bc:9a:44:b1:69:7b:08:
dc:72:33:3a:0f:f4:a0:d0:27:57:02:47:a5:98:99:
7b:50:82:b6:50:1d:ea:0a:70:d8:a3:30:5c:b3:f2:
17:24:95:b6:f8:bf:1c:a1:58:2d:8d:9a:26:0f:53:
37:80:3f:69:48:75:96:c3:54:18:b0:3b:bb:62:e5:
e6:44:7e:5c:fe:de:e6:f3:99:49:2e:5c:a7:00:7e:
ba:a4:84:17:ba:08:29:37:5e:bf:04:a2:fb:da:ae:
2b:4d:5b:31:5a:e8:da:69:e1:49:61:67:58:00:2d:
53:a3:99:14:2b:99:b0:3c:44:79:b6:cf:ca:db:09:
54:cf:80:00:96:c7:75:46:a6:ae:61:8d:ee:89:d3:
c3:00:72:67:8d:47:ec:a7:83:f4:d9:83:7d:ac:aa:
39:9f:a2:a0:cc:b2:26:b9:41:42:36:16:fc:b2:5d:
b2:e3:d7:f9:b1:6b:75:12:ec:e3:89:99:f6:66:cf:
73:31:31:4f:3a:ba:c5:82:00:3f:64:6d:d2:fb:7e:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E0:4E:8C:0D:96:0E:31:DD:E8:8C:B4:32:2C:76:56:C5:39:0F:78
X509v3 Authority Key Identifier:
keyid:CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/34352e3233382e3139362e302f32322d3234203d3e20323636383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:9c:5f:35:4d:03:3f:67:45:b9:8d:05:3b:af:a1:1e:22:ab:
e2:a5:d3:a8:93:1c:4c:5c:eb:e3:d0:e7:d7:ce:87:ab:b6:55:
1b:ce:45:66:8f:b3:1c:4f:d4:b7:76:48:bf:67:3c:ab:5e:3b:
39:d6:7d:1d:3a:3c:8d:86:a8:9e:ea:23:47:10:4d:c8:17:e6:
30:f5:fe:c5:58:50:7d:c2:90:75:92:eb:1f:1c:9b:34:1f:9b:
22:9b:00:66:55:80:6c:f5:2f:8c:76:5c:2e:5a:66:10:21:83:
b8:02:55:6c:84:43:07:15:1e:4f:96:49:77:df:26:ca:a7:a3:
ae:e5:ad:97:15:fe:86:80:30:2f:3e:04:ef:ec:03:bb:9b:8a:
78:7a:95:70:0c:1f:f6:67:38:63:0d:bf:66:49:1b:66:95:07:
1f:ad:8d:2d:d1:82:af:8c:b3:0c:4f:40:ca:88:5d:b9:2b:dc:
ab:dd:0c:fa:17:96:60:93:2b:cb:9a:4d:a3:87:8a:df:8b:1a:
9b:24:bb:55:48:fb:31:67:34:55:97:68:98:6f:0d:25:a7:fb:
91:51:78:1d:7f:81:46:9f:1e:3c:59:29:30:f0:f2:ae:0a:85:
38:6d:32:cf:29:31:31:e2:ae:15:85:45:dc:ba:d3:5b:80:e5:
7a:34:9e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:04 2025 by rpki-client