Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/34352e3139312e38342e302f32322d3234203d3e203131303134.roa
File: 34352e3139312e38342e302f32322d3234203d3e203131303134.roa (raw, json)
Hash identifier: OwTi630E+Uuza03VMgzY9KTh31pXczxcCMBD6bAoawU=
Subject key identifier: CA:85:CF:FA:D6:DB:B5:70:B0:8A:C3:F7:E7:8C:DF:A4:52:71:D3:61
Certificate issuer: /CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
Certificate serial: 0C8A6885AF454A9B9BC10337A17C32C544CCCD64
Authority key identifier: 91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/34352e3139312e38342e302f32322d3234203d3e203131303134.roa
Signing time: Tue 04 Feb 2025 20:05:23 +0000
ROA not before: Tue 04 Feb 2025 20:00:23 +0000
ROA not after: Tue 03 Feb 2026 20:05:23 +0000
asID: 11014
IP address blocks: 45.191.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:8a:68:85:af:45:4a:9b:9b:c1:03:37:a1:7c:32:c5:44:cc:cd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
Validity
Not Before: Feb 4 20:00:23 2025 GMT
Not After : Feb 3 20:05:23 2026 GMT
Subject: CN=CA85CFFAD6DBB570B08AC3F7E78CDFA45271D361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e3:37:c3:75:8e:3b:b2:e2:03:3c:4e:c4:9a:
e6:4b:b3:a8:e7:c8:20:df:f7:75:88:3c:ca:d8:1d:
85:ba:e1:5c:ef:49:f6:10:2e:ce:a7:80:cd:d6:34:
15:79:41:99:54:96:b8:f0:47:9e:f3:7c:f3:b5:0f:
75:84:87:62:a2:79:b7:a7:4c:42:0c:06:b3:9c:37:
66:a2:05:cc:bb:4b:38:1a:88:2c:54:e7:75:fb:fd:
f0:45:59:8a:13:44:5c:17:a6:62:18:dc:06:05:4d:
d9:06:25:ce:22:f8:56:c4:c0:26:ef:66:f1:ba:d2:
0d:3d:c4:1b:82:87:8a:c6:5d:eb:6d:6f:85:b4:b9:
37:c1:44:e1:d9:49:d6:05:62:ed:5f:72:46:51:2f:
25:34:61:39:93:7e:7a:0f:9a:4b:6b:89:8f:e0:ef:
cb:fb:13:e7:ca:46:df:74:d9:78:b4:85:8f:f2:66:
f2:00:b7:29:f2:32:9b:e8:96:59:b0:87:6d:96:44:
c9:cc:aa:43:24:07:2b:42:57:1a:1a:09:09:a2:1c:
6b:ab:5b:8f:2e:d7:26:4b:26:57:62:79:0e:e2:24:
a3:51:42:37:c2:c3:b7:21:d5:1c:71:1d:36:3a:3f:
87:bc:e6:a3:d8:1e:92:85:92:28:98:4f:a7:c5:c3:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:85:CF:FA:D6:DB:B5:70:B0:8A:C3:F7:E7:8C:DF:A4:52:71:D3:61
X509v3 Authority Key Identifier:
keyid:91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/34352e3139312e38342e302f32322d3234203d3e203131303134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.84.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:f6:eb:73:e9:9b:8c:30:10:60:3e:db:c9:ed:fc:ad:e9:f8:
78:fa:82:76:18:82:9b:a4:6b:68:fc:0b:df:bf:77:2b:eb:b2:
65:73:fa:78:4b:e4:1a:4f:77:79:ed:bd:a7:96:31:29:95:6a:
93:a2:60:f2:27:97:da:b4:18:ee:21:14:a9:2c:22:3a:46:6c:
8c:f7:ec:aa:e6:9e:71:4e:25:74:0e:86:ac:a4:33:8e:97:c8:
0e:a5:4f:0b:7c:75:94:21:cd:d1:a2:ed:7d:fe:ad:32:a3:15:
38:53:77:54:cb:6b:d5:fc:a5:b0:9d:8c:0f:24:d3:36:aa:d6:
91:ad:13:fa:01:51:81:93:4f:a4:a1:c7:39:63:c2:eb:42:b2:
8f:b6:c8:b4:cf:73:9a:f7:6e:40:37:b4:2d:9b:5f:09:00:a0:
23:4a:a0:3f:f1:99:60:d1:44:f1:b9:a5:02:7d:cd:f9:a7:cf:
1d:10:f8:11:56:f1:e1:ab:fa:2e:4f:d5:b4:9d:71:6d:81:e3:
44:4a:52:23:d3:01:2f:e4:e4:a1:17:ff:de:e7:1a:8a:f8:74:
ec:b3:96:bc:e5:04:61:1e:f1:6a:ea:9d:cc:77:b4:fc:ff:a1:
12:b7:b7:ce:c3:4e:78:f6:19:61:77:78:61:cc:a4:42:52:2f:
34:64:17:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:51 2025 by rpki-client