Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234372e302f32342d3234203d3e203238343233.roa
File: 34352e3137302e3234372e302f32342d3234203d3e203238343233.roa (raw, json)
Hash identifier: 9KoI8EpSF7fv92AHcfw7g+6/cdD2+Ct+d6eTyAnnGmY=
Subject key identifier: 56:9A:A5:8D:23:9F:84:DF:92:F1:B3:AF:14:24:FC:6C:FE:9C:1B:C6
Certificate issuer: /CN=404AF48919442F94B61222A52CBC7E3F459B1B77
Certificate serial: 5DF8CBAC682D65BE0D744FCC9221E2CEF2CC5033
Authority key identifier: 40:4A:F4:89:19:44:2F:94:B6:12:22:A5:2C:BC:7E:3F:45:9B:1B:77
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234372e302f32342d3234203d3e203238343233.roa
Signing time: Sat 18 Jan 2025 20:40:00 +0000
ROA not before: Sat 18 Jan 2025 20:35:00 +0000
ROA not after: Sat 17 Jan 2026 20:40:00 +0000
asID: 28423
IP address blocks: 45.170.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:f8:cb:ac:68:2d:65:be:0d:74:4f:cc:92:21:e2:ce:f2:cc:50:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404AF48919442F94B61222A52CBC7E3F459B1B77
Validity
Not Before: Jan 18 20:35:00 2025 GMT
Not After : Jan 17 20:40:00 2026 GMT
Subject: CN=569AA58D239F84DF92F1B3AF1424FC6CFE9C1BC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:d2:68:3c:a4:cc:71:6c:c7:df:93:f5:9f:
95:47:06:2c:7c:a3:58:0b:71:71:bd:87:ac:9c:f1:
af:4b:c3:f6:1a:0c:ca:ed:cb:a9:e1:82:d9:97:8c:
13:3e:dc:a1:90:97:08:23:cb:9f:63:75:94:fa:62:
76:be:f9:1f:cf:b8:7e:8c:03:a7:ba:9f:c8:4b:ff:
2f:d1:56:0c:5c:84:b3:21:ae:4d:2c:9a:2e:6c:89:
65:cf:de:37:07:66:5f:7c:da:b4:fc:c4:40:44:c1:
ad:6d:fa:8b:8c:10:a1:38:69:5c:d1:16:29:15:12:
4a:a9:7e:bd:b7:ba:f9:97:ec:e6:ae:37:88:3f:1b:
23:9c:59:fe:ea:31:52:0d:7c:4d:c7:80:2c:14:d2:
c7:16:bd:6d:7a:07:db:37:de:94:ab:7b:16:90:98:
a2:97:dc:d0:1a:f3:b8:1d:0e:bc:92:b2:75:ab:2a:
19:83:97:1d:e4:78:78:3c:0c:df:f1:75:7d:b9:f0:
c7:3a:1f:c4:89:63:5a:e5:c2:63:ea:b9:ba:b1:cd:
67:ee:ba:9a:9f:76:e5:8e:48:5d:88:1a:78:4b:11:
76:cb:f9:13:ab:d2:c0:16:f6:da:6f:32:7a:ce:fa:
fa:37:10:21:f2:50:18:50:88:b7:3e:56:ed:8c:0a:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9A:A5:8D:23:9F:84:DF:92:F1:B3:AF:14:24:FC:6C:FE:9C:1B:C6
X509v3 Authority Key Identifier:
keyid:40:4A:F4:89:19:44:2F:94:B6:12:22:A5:2C:BC:7E:3F:45:9B:1B:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234372e302f32342d3234203d3e203238343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.247.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e1:10:5f:a5:36:7f:d2:61:10:55:ed:16:3c:92:8d:d0:54:
df:42:5d:6c:6a:97:fd:2f:68:51:41:17:d7:03:ba:40:50:40:
13:a2:33:50:6e:00:6d:94:a2:ea:b3:13:db:25:a1:4c:ef:62:
44:53:82:2a:f9:ad:e2:f3:5b:2c:ba:aa:3a:da:8b:76:de:8f:
2d:fd:90:0c:03:11:64:2c:b0:81:31:be:69:cd:21:c7:aa:af:
a1:b0:50:ae:36:17:dd:53:f7:5d:79:2a:67:a0:08:09:f8:29:
67:31:27:1f:fe:be:e6:4f:81:0e:d8:97:c4:23:8e:22:64:44:
31:42:22:ef:25:34:cb:b1:e6:58:f5:8d:7f:12:10:a2:9a:75:
b2:ab:df:3f:92:44:83:58:7b:4c:20:4e:bb:b1:4a:c1:14:1d:
54:e1:a4:69:67:87:7a:7d:f8:42:96:0c:b0:d6:24:d6:40:76:
91:f7:34:10:90:b8:b6:bc:79:82:e5:7d:52:cb:c6:69:cf:15:
3b:1f:07:6b:c0:e5:30:c4:04:62:6b:e9:e1:99:ab:ab:f4:59:
03:2c:26:3e:55:39:31:e7:7a:35:9b:04:4e:61:12:55:be:86:
f4:53:82:70:b1:9d:d9:a8:34:c3:b0:e1:14:c2:62:4c:39:2c:
5f:42:83:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:59 2025 by rpki-client