Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/34352e3233382e3139302e302f32342d3234203d3e20323635353531.roa
File: 34352e3233382e3139302e302f32342d3234203d3e20323635353531.roa (raw, json)
Hash identifier: /JeXD1gE9iRs2zraIVuon0Q3nosy32tIJXrcfF7sMGc=
Subject key identifier: AC:86:C6:F2:7A:B4:C3:B1:B1:11:DD:54:3C:C8:78:07:6C:E8:D6:27
Certificate issuer: /CN=22E20380327B2CB679071D7FE9AC4DBFA317A166
Certificate serial: 61ACF276FE7E853C0D7521A1F51D77A656D3C94F
Authority key identifier: 22:E2:03:80:32:7B:2C:B6:79:07:1D:7F:E9:AC:4D:BF:A3:17:A1:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/34352e3233382e3139302e302f32342d3234203d3e20323635353531.roa
Signing time: Tue 04 Feb 2025 18:13:06 +0000
ROA not before: Tue 04 Feb 2025 18:08:06 +0000
ROA not after: Tue 03 Feb 2026 18:13:06 +0000
asID: 265551
IP address blocks: 45.238.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ac:f2:76:fe:7e:85:3c:0d:75:21:a1:f5:1d:77:a6:56:d3:c9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22E20380327B2CB679071D7FE9AC4DBFA317A166
Validity
Not Before: Feb 4 18:08:06 2025 GMT
Not After : Feb 3 18:13:06 2026 GMT
Subject: CN=AC86C6F27AB4C3B1B111DD543CC878076CE8D627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:fb:43:ff:1f:46:64:ef:a7:b3:24:32:8f:
61:65:f2:43:14:96:ab:2d:8b:1b:58:67:08:76:1f:
3f:6c:b7:18:8d:32:35:57:12:99:b3:ec:f8:93:59:
66:01:43:ac:75:af:a0:8e:2b:af:6e:94:eb:e8:b8:
cb:2b:3d:b1:a5:69:89:97:71:63:ad:a9:8c:a1:d4:
2e:a8:81:3c:4d:e1:99:88:16:e2:3a:50:46:3b:83:
34:91:31:e1:b1:ae:e8:90:cf:6d:c7:e9:0b:49:20:
0e:6b:66:2c:c1:c6:9f:4d:c2:f8:a9:68:a1:af:73:
ec:f7:84:7a:f2:dc:c8:bb:c1:d8:28:61:e6:5e:aa:
db:89:48:a7:61:03:50:ce:22:74:66:42:40:56:b3:
d8:44:65:95:64:19:ad:41:91:43:d6:9e:74:2c:c9:
62:2f:eb:0c:89:9e:89:e6:4e:a2:d5:4a:53:6a:05:
8c:89:d8:3e:fd:1d:6c:3f:95:1a:18:3d:07:6a:08:
f4:ad:c1:00:f3:1a:32:84:e6:fc:5d:6d:27:08:1d:
74:79:82:a5:53:ed:35:4d:b1:4e:93:36:57:c6:28:
1f:a7:3e:db:81:10:95:7c:b1:53:77:a5:3e:0e:5d:
49:63:4c:32:47:b8:45:bd:2a:ce:54:09:4d:cb:a2:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:86:C6:F2:7A:B4:C3:B1:B1:11:DD:54:3C:C8:78:07:6C:E8:D6:27
X509v3 Authority Key Identifier:
keyid:22:E2:03:80:32:7B:2C:B6:79:07:1D:7F:E9:AC:4D:BF:A3:17:A1:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/34352e3233382e3139302e302f32342d3234203d3e20323635353531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.190.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b6:8e:07:e8:5b:e6:e1:18:8a:71:c0:12:6c:82:52:ca:e4:
86:35:8a:62:64:f0:8f:93:b1:c1:74:c3:17:a1:b2:46:3e:a1:
a6:97:4d:5b:f2:32:9a:af:22:c3:0d:20:6c:43:1e:58:97:a5:
8e:de:10:fa:1d:e2:80:5a:a4:61:2c:0a:52:7d:da:06:0b:6d:
81:ae:32:c6:b3:19:77:b1:87:31:7a:75:00:77:04:89:19:bc:
5f:ae:e4:54:bf:0a:c2:3a:48:29:0a:13:d3:20:ce:e7:f6:05:
71:98:e6:62:b0:fe:7c:2f:17:ff:f7:36:57:2a:dc:ac:fd:cb:
dc:fb:4f:87:e4:68:e9:e7:34:ae:87:57:f8:52:17:29:7e:4d:
ae:50:77:12:a4:b6:7d:b9:90:37:1f:3f:c6:2a:f5:6b:f6:2f:
ce:d6:68:7e:1c:e2:17:a2:fc:b3:2f:da:9c:b3:8c:82:6d:aa:
c2:f4:22:f7:0e:69:62:c3:40:d5:ff:b3:b5:8d:1d:09:c0:3f:
10:c5:05:9b:cc:79:97:f2:82:19:be:b1:fb:8b:f1:ab:1f:0e:
1e:c3:fb:87:c1:0b:f6:41:cd:36:35:24:dc:92:8d:a4:e9:86:
fa:b1:87:ea:12:4f:04:46:54:3a:f9:ac:b2:73:07:8c:ac:f3:
8d:32:ef:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:21 2025 by rpki-client