Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/34352e3233382e33362e302f32322d3234203d3e20323636383331.roa
File: 34352e3233382e33362e302f32322d3234203d3e20323636383331.roa (raw, json)
Hash identifier: 8TCo6BrL4bFkADd+S6KZSTQcJCAfG3wGF1CnN4Y9jP0=
Subject key identifier: D5:72:77:8E:84:10:E4:ED:93:AA:6D:D2:FA:6D:75:FF:FC:42:48:7E
Certificate issuer: /CN=662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B
Certificate serial: 6FDDD94CEDA8BD5CA662A1CFE5C1860FF85DF7C2
Authority key identifier: 66:2E:97:B5:B5:9D:F4:CF:DB:82:E5:FB:DA:D8:F3:EA:93:B2:C0:7B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/34352e3233382e33362e302f32322d3234203d3e20323636383331.roa
Signing time: Tue 04 Feb 2025 18:38:23 +0000
ROA not before: Tue 04 Feb 2025 18:33:23 +0000
ROA not after: Tue 03 Feb 2026 18:38:23 +0000
asID: 266831
IP address blocks: 45.238.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:dd:d9:4c:ed:a8:bd:5c:a6:62:a1:cf:e5:c1:86:0f:f8:5d:f7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B
Validity
Not Before: Feb 4 18:33:23 2025 GMT
Not After : Feb 3 18:38:23 2026 GMT
Subject: CN=D572778E8410E4ED93AA6DD2FA6D75FFFC42487E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:e1:ce:10:e6:0e:f4:ca:81:3c:81:4a:42:
76:e4:4d:fe:5f:4e:a3:55:e4:15:6d:63:74:81:d5:
cd:2e:e2:b2:41:28:9a:cf:76:b3:e9:b7:a0:d4:5a:
04:f9:65:95:6c:9a:02:6c:81:00:95:25:41:44:03:
5e:9c:48:c1:bf:3c:96:09:59:f6:88:6c:70:c1:41:
56:f0:84:0a:35:a4:e7:99:ac:c9:3e:58:98:fd:d9:
aa:d7:a9:bd:e5:ce:1b:3e:97:c5:93:f0:93:70:5b:
41:3d:b1:47:8e:92:c8:94:a7:f2:37:86:f8:d8:7e:
35:b3:c4:14:7c:6b:0f:86:b3:e5:21:10:c7:6c:52:
a1:b9:42:d2:51:d1:72:2d:33:9c:5d:76:eb:8b:97:
85:e0:80:a0:c8:b4:c8:8c:ca:de:85:d4:75:68:d6:
ad:13:51:ba:07:c7:6f:11:31:df:f6:75:4b:5e:24:
94:13:fe:92:e0:e6:ed:50:a5:34:f7:94:20:7c:9e:
74:8c:46:38:e5:ca:3d:ff:c0:da:14:34:cf:1f:67:
8f:62:a5:9b:27:de:0c:00:20:77:df:cf:e2:8c:ce:
d0:20:5d:63:0f:39:88:a5:1c:a2:d3:f9:e6:c1:a7:
78:9d:6f:85:22:cf:1b:48:e0:72:65:06:6c:1b:7c:
b8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:72:77:8E:84:10:E4:ED:93:AA:6D:D2:FA:6D:75:FF:FC:42:48:7E
X509v3 Authority Key Identifier:
keyid:66:2E:97:B5:B5:9D:F4:CF:DB:82:E5:FB:DA:D8:F3:EA:93:B2:C0:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/34352e3233382e33362e302f32322d3234203d3e20323636383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.36.0/22
Signature Algorithm: sha256WithRSAEncryption
27:61:98:e1:0e:fb:c8:ec:d4:a4:61:d9:eb:6f:5a:76:6f:67:
2f:da:8b:f1:34:f4:92:0d:53:f0:de:44:68:71:4e:75:66:21:
78:a9:16:c1:0c:34:ed:e6:35:eb:57:8d:04:e7:6b:70:44:89:
8f:5e:24:72:ab:59:98:fd:4e:8b:59:2e:92:9b:6b:79:0d:81:
e2:37:89:24:09:e6:68:6b:ef:73:53:ee:d0:b7:51:bc:41:9b:
de:cc:98:63:e4:99:cd:db:e3:a2:66:3d:65:7b:b9:a7:78:04:
70:8f:7a:4b:6f:67:8e:4b:16:9f:c5:9c:c3:98:12:9d:fc:c0:
dc:3d:75:d5:af:87:ab:fe:59:6f:51:2e:1d:60:b3:87:6f:22:
37:e6:da:21:f5:df:c4:ca:f3:11:0a:f4:49:6f:af:04:a8:c4:
db:08:a7:f4:8a:f0:73:b9:04:c9:e2:cb:71:5c:7e:71:47:a0:
e0:32:d5:9d:39:2d:40:e1:f6:7e:79:3d:99:ca:66:c0:f5:d7:
32:a9:f1:49:fd:82:4f:79:61:4d:61:f7:5d:35:a0:fd:a1:5c:
de:e7:79:4d:f5:22:93:d0:b0:11:2b:b0:80:81:1b:34:5e:21:
86:1a:3a:90:53:e7:98:1a:16:ba:8d:46:be:5d:bf:2e:ff:6f:
37:d6:cd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:14:17 2025 by rpki-client