Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230362e302f32332d3233203d3e20323635363731.roa
File: 34352e342e3230362e302f32332d3233203d3e20323635363731.roa (raw, json)
Hash identifier: PDesEbzIo1uoPYU6VQMesLjtuYivC1dFobhR8/fU8LA=
Subject key identifier: 02:FE:48:C7:73:60:1B:A3:66:42:81:73:50:78:32:5C:5D:DF:E5:DD
Certificate issuer: /CN=B4CF94EC7154D2BC51066D5BB556A7589514A5C6
Certificate serial: 4BA005EC480F67EE2C4645A3FC011B3DD1F3D8CD
Authority key identifier: B4:CF:94:EC:71:54:D2:BC:51:06:6D:5B:B5:56:A7:58:95:14:A5:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230362e302f32332d3233203d3e20323635363731.roa
Signing time: Tue 04 Feb 2025 18:21:55 +0000
ROA not before: Tue 04 Feb 2025 18:16:55 +0000
ROA not after: Tue 03 Feb 2026 18:21:55 +0000
asID: 265671
IP address blocks: 45.4.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a0:05:ec:48:0f:67:ee:2c:46:45:a3:fc:01:1b:3d:d1:f3:d8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4CF94EC7154D2BC51066D5BB556A7589514A5C6
Validity
Not Before: Feb 4 18:16:55 2025 GMT
Not After : Feb 3 18:21:55 2026 GMT
Subject: CN=02FE48C773601BA3664281735078325C5DDFE5DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:b8:9e:c4:a6:23:80:96:28:aa:76:43:6f:
d8:8f:b5:58:75:03:98:9e:67:d6:1a:95:e7:a3:76:
cb:95:f6:98:20:13:3e:eb:43:64:08:a0:f9:75:d6:
dc:53:7f:49:55:de:59:c5:3d:11:60:26:27:8e:00:
63:97:27:47:75:2c:14:ba:96:ae:12:0f:fc:ea:54:
af:f4:e7:bf:82:66:74:61:64:92:d1:23:9f:35:27:
09:9f:85:cb:eb:d0:c7:5b:63:60:eb:a3:77:87:df:
5f:89:aa:4d:40:43:01:24:65:49:56:89:a9:56:b4:
23:18:de:ac:c6:1d:fe:a4:14:ec:4d:6c:a5:bc:a6:
6c:c5:30:8e:55:05:be:f2:ab:93:15:cb:08:d7:34:
25:33:c5:c2:a6:93:18:bc:1c:29:cf:39:ff:ed:2b:
f1:4f:ff:26:09:33:ba:3f:42:db:fd:7b:c0:66:7b:
c8:98:45:56:d7:42:f8:71:a9:3d:b7:d9:bb:48:16:
60:e2:76:50:41:28:7a:39:cf:04:b8:92:c4:e8:5d:
ea:a3:54:70:29:ba:c4:33:9e:6c:03:07:14:cb:3b:
82:eb:f3:1a:71:79:80:74:3f:5b:0e:a3:65:03:e4:
70:f9:9c:47:b5:dd:fa:47:53:12:dc:99:90:03:9f:
64:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FE:48:C7:73:60:1B:A3:66:42:81:73:50:78:32:5C:5D:DF:E5:DD
X509v3 Authority Key Identifier:
keyid:B4:CF:94:EC:71:54:D2:BC:51:06:6D:5B:B5:56:A7:58:95:14:A5:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230362e302f32332d3233203d3e20323635363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.206.0/23
Signature Algorithm: sha256WithRSAEncryption
22:d2:cf:d4:76:dc:24:de:16:c1:6a:d2:09:ab:40:43:65:fa:
20:46:55:08:6c:ef:e5:1f:23:13:df:44:9f:9a:c9:b7:ce:f9:
c0:88:fc:60:1f:a5:73:06:50:de:0f:12:b7:1c:7e:73:93:9b:
36:ef:76:f0:5d:bd:a9:61:64:72:96:02:2c:cc:34:c5:d3:fe:
a7:64:e9:e8:3a:41:55:24:b8:6b:f3:8d:93:27:bc:c6:30:2e:
78:10:b3:2f:86:6e:28:27:18:31:7d:d5:af:29:0f:fa:b5:04:
ff:11:fc:8f:e2:85:6c:dd:7f:41:be:62:41:ea:eb:1b:94:dd:
e4:95:b6:4b:71:37:3e:9f:b0:fa:6b:40:6c:ae:56:72:6c:30:
46:e7:77:b8:37:68:99:d0:b7:b0:59:71:3c:e9:64:9d:bd:af:
65:26:3d:85:b4:35:00:37:55:10:b1:b7:56:a9:c1:72:1e:27:
34:60:fa:87:0e:f1:6a:2a:68:c9:d5:a5:2f:b5:47:b3:d9:89:
dd:ab:ad:43:13:a9:9d:e7:42:2c:6b:25:37:33:f8:42:64:4d:
d9:d0:ce:a4:7c:30:93:f2:1e:05:27:f4:7b:38:f5:07:95:fb:
eb:6f:36:10:56:d3:ae:fc:33:c1:ef:ca:8e:73:d3:53:16:92:
9d:cc:79:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:25 2025 by rpki-client