Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36362e302f32342d3234203d3e20323636373535.roa
File: 34352e3233332e36362e302f32342d3234203d3e20323636373535.roa (raw, json)
Hash identifier: QgkRyMBaUN915Jgtt+ldKDqLuFxx0wJlXMZpCP6FbAE=
Subject key identifier: E4:98:B3:A6:5F:0A:7E:ED:49:90:CE:21:C5:F0:FD:BB:B9:67:9C:22
Certificate issuer: /CN=17444832D4DFC5B5F0EDB45E0DD0380E36A684B7
Certificate serial: 63FB1AE02A900D48CF13BBE42B0A1D4DA78C23A2
Authority key identifier: 17:44:48:32:D4:DF:C5:B5:F0:ED:B4:5E:0D:D0:38:0E:36:A6:84:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36362e302f32342d3234203d3e20323636373535.roa
Signing time: Tue 04 Feb 2025 18:52:39 +0000
ROA not before: Tue 04 Feb 2025 18:47:39 +0000
ROA not after: Tue 03 Feb 2026 18:52:39 +0000
asID: 266755
IP address blocks: 45.233.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:fb:1a:e0:2a:90:0d:48:cf:13:bb:e4:2b:0a:1d:4d:a7:8c:23:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17444832D4DFC5B5F0EDB45E0DD0380E36A684B7
Validity
Not Before: Feb 4 18:47:39 2025 GMT
Not After : Feb 3 18:52:39 2026 GMT
Subject: CN=E498B3A65F0A7EED4990CE21C5F0FDBBB9679C22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:f1:71:aa:84:d7:fb:72:2e:48:b4:4b:9a:
dc:c0:17:f7:f2:df:eb:13:c4:5c:f1:c0:95:6c:ee:
c8:25:f8:f7:1c:27:65:df:fb:96:b0:49:e0:c7:f6:
4b:c4:4c:84:54:c6:b0:f5:f1:90:26:f8:2a:1f:36:
36:69:fb:75:f1:f3:46:c7:fa:fe:28:85:f9:14:f4:
94:93:ca:3e:3a:f7:01:bd:87:1f:52:c5:61:68:5b:
51:d7:fd:1e:ce:27:33:4b:dd:ac:98:cc:04:92:4c:
e4:d2:a8:b7:04:90:74:02:92:44:40:9d:cf:c3:3f:
6d:43:41:e3:1a:46:5c:fd:32:38:4b:d7:7f:b6:77:
46:fa:13:be:a9:ca:48:6c:3e:01:36:b4:8e:3f:c0:
51:2f:e2:2f:35:80:72:73:e7:67:ae:aa:59:d0:e6:
b5:86:d0:3a:ad:ca:91:86:c1:4a:5e:49:e9:e3:42:
a7:cc:f8:d6:f9:71:e1:bf:75:73:89:2c:58:8f:39:
3e:a4:8b:af:7d:fe:be:b4:b5:2c:f7:41:e0:63:1c:
60:7f:72:1c:e9:87:3d:2c:15:c0:6d:b0:0d:b2:a6:
a0:cf:84:36:c0:47:e6:e1:5d:64:6f:43:8d:38:7e:
07:be:8f:20:69:92:12:43:88:dd:36:20:c0:e9:f0:
3c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:98:B3:A6:5F:0A:7E:ED:49:90:CE:21:C5:F0:FD:BB:B9:67:9C:22
X509v3 Authority Key Identifier:
keyid:17:44:48:32:D4:DF:C5:B5:F0:ED:B4:5E:0D:D0:38:0E:36:A6:84:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36362e302f32342d3234203d3e20323636373535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.66.0/24
Signature Algorithm: sha256WithRSAEncryption
22:34:3b:54:09:31:1f:5e:b0:78:dc:83:08:7c:41:11:ed:70:
03:71:92:0d:1f:de:01:93:9f:31:ed:38:1c:a0:40:e8:03:17:
87:bd:b8:5c:57:31:b9:f3:e3:a4:75:d0:27:d2:de:43:07:ad:
37:90:be:86:56:93:2c:32:29:a1:22:90:aa:7d:7a:5f:d9:29:
4e:f3:16:eb:ef:f0:c8:ce:5b:99:63:43:e3:5f:31:b2:56:f8:
da:57:24:fb:da:0c:2a:ca:04:9d:6a:25:ae:f5:fa:3b:91:a2:
b0:95:5d:bd:64:03:ac:06:20:e1:89:f8:68:e5:56:05:6c:cc:
9f:1d:e0:2b:e5:ad:46:5a:1e:5f:cf:b4:e5:f3:7a:61:54:56:
20:fa:21:e1:66:66:a1:74:06:d0:73:a6:58:12:68:22:6c:64:
83:75:0f:3f:43:6a:04:8f:72:d6:3e:03:4c:f9:78:82:cd:49:
ba:2b:4b:b9:21:6f:9e:81:5e:a8:8f:a4:63:3e:5c:3c:7b:2a:
3a:ff:7a:c3:21:99:71:fd:92:1b:d3:c7:f2:8d:12:38:14:41:
b1:5d:ec:c4:1b:00:7d:95:88:4b:75:f2:64:e0:0e:47:ab:c0:
6c:5f:60:e6:da:cd:0e:82:61:61:1d:81:3f:8a:91:09:d2:7e:
66:c4:dc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:13 2025 by rpki-client