Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/34352e3233342e36302e302f32332d3233203d3e20323732383734.roa
File: 34352e3233342e36302e302f32332d3233203d3e20323732383734.roa (raw, json)
Hash identifier: LojPVE8AcswBw4FXN+aJo8GtHg8jZ7hBSx+VgoliO6Q=
Subject key identifier: 32:18:B1:D4:7D:44:05:A5:67:8C:6D:8C:FD:08:E9:AD:80:3C:B2:08
Certificate issuer: /CN=17C10DFC65DA73892644268270EF974D3E2D31A0
Certificate serial: 321484305C60ACA585B466F49F3C9E92FE01411A
Authority key identifier: 17:C1:0D:FC:65:DA:73:89:26:44:26:82:70:EF:97:4D:3E:2D:31:A0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17C10DFC65DA73892644268270EF974D3E2D31A0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/34352e3233342e36302e302f32332d3233203d3e20323732383734.roa
Signing time: Fri 24 Jan 2025 19:05:00 +0000
ROA not before: Fri 24 Jan 2025 19:00:00 +0000
ROA not after: Fri 23 Jan 2026 19:05:00 +0000
asID: 272874
IP address blocks: 45.234.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:14:84:30:5c:60:ac:a5:85:b4:66:f4:9f:3c:9e:92:fe:01:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17C10DFC65DA73892644268270EF974D3E2D31A0
Validity
Not Before: Jan 24 19:00:00 2025 GMT
Not After : Jan 23 19:05:00 2026 GMT
Subject: CN=3218B1D47D4405A5678C6D8CFD08E9AD803CB208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:db:23:ce:32:91:94:38:b0:99:fa:87:e6:
ec:7d:1a:27:a6:fd:5d:e9:2b:f2:10:f7:05:64:53:
d1:7d:00:72:68:e6:f6:51:f6:5f:96:43:42:60:2f:
d5:2a:59:9a:6f:87:cf:33:f1:54:ae:7e:90:54:dd:
d7:06:5f:9a:2b:b9:fe:49:f1:d6:36:ac:55:ea:50:
e7:64:1a:3a:c3:e0:06:02:41:a3:e1:47:aa:09:17:
6f:69:5a:cf:1c:92:a7:a3:24:92:11:20:ae:51:15:
11:5a:9a:e1:93:f6:77:8c:91:45:3b:bb:a1:30:53:
48:15:02:f7:27:4e:86:46:3f:2f:64:3b:11:cd:97:
3b:35:5f:0f:7f:e4:ff:58:1d:4d:fd:bd:43:3e:b8:
92:6e:39:92:c5:c7:89:08:4f:4e:55:45:08:57:9c:
78:ca:1e:18:8d:af:d4:1a:7e:87:9e:fe:db:d8:c1:
96:08:6c:1d:a7:23:8e:01:04:fd:20:6c:f0:7e:62:
00:de:97:35:b4:97:77:97:7a:3e:85:0a:cc:c5:7d:
db:12:82:da:3d:cb:47:a5:db:b4:6e:f4:d9:1c:82:
7c:bd:44:17:3e:88:a8:3a:4e:c7:50:e4:43:8c:21:
1b:53:99:e6:ca:43:3b:a7:70:05:10:de:e3:a8:d4:
1f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:18:B1:D4:7D:44:05:A5:67:8C:6D:8C:FD:08:E9:AD:80:3C:B2:08
X509v3 Authority Key Identifier:
keyid:17:C1:0D:FC:65:DA:73:89:26:44:26:82:70:EF:97:4D:3E:2D:31:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/17C10DFC65DA73892644268270EF974D3E2D31A0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17C10DFC65DA73892644268270EF974D3E2D31A0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/34352e3233342e36302e302f32332d3233203d3e20323732383734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.60.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:8c:15:a9:e3:c9:13:b5:60:99:73:b7:c3:f4:34:e5:24:81:
1d:70:37:01:dc:95:29:1a:d7:e4:9f:ef:1c:ab:0e:69:d7:46:
df:9c:e3:12:fe:48:9a:5f:ee:ca:f9:27:61:e9:39:8b:5d:25:
2d:8f:f6:13:83:42:a9:d7:58:33:c8:92:56:e8:9a:57:10:0a:
32:2a:91:6b:da:b3:60:e3:11:54:83:1d:0d:5a:78:9d:5e:b7:
fe:34:ac:91:b4:81:4c:73:5e:ca:77:97:a7:d9:ad:24:53:40:
7f:ae:fe:59:c9:df:54:fc:96:67:19:69:9c:c1:3e:69:ba:5e:
aa:57:e2:9a:d1:ca:dd:e5:71:88:fe:6f:ee:8c:fc:cc:60:5f:
9e:5c:49:f1:c4:a5:d1:39:54:2e:c3:08:65:13:87:f1:8e:70:
84:5d:e3:34:79:ee:80:2e:f0:11:b4:a4:e6:bf:2f:05:ae:95:
11:0d:bf:66:58:8a:0c:1c:c4:3f:57:1d:0e:62:ce:cb:c8:1a:
e8:be:db:8d:88:9b:1b:41:46:07:52:a3:90:79:91:38:b0:a9:
7f:2c:9b:ba:9f:6d:82:ca:b1:89:f0:03:d4:6f:8a:1c:a2:8c:
12:63:c2:1e:76:25:cd:67:67:90:f7:6a:39:37:2b:c5:d8:17:
f9:b3:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:24 2025 by rpki-client