Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/34352e3137372e3132382e302f32322d3234203d3e20323637383935.roa
File: 34352e3137372e3132382e302f32322d3234203d3e20323637383935.roa (raw, json)
Hash identifier: 53AyMqM+GS8x1cxec9ie+iyYuriaZDo+N+LRQfaj/GA=
Subject key identifier: CC:45:64:CB:3A:59:13:E9:6E:91:B2:51:8F:BB:AB:F7:CC:AD:68:1D
Certificate issuer: /CN=44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8
Certificate serial: 4ECEF04505661E78FDE41664D2EB92B215B853E4
Authority key identifier: 44:96:8D:AE:5E:CD:C4:31:BC:AA:7B:2A:B4:2A:20:2C:6B:24:54:D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/34352e3137372e3132382e302f32322d3234203d3e20323637383935.roa
Signing time: Tue 04 Feb 2025 18:22:49 +0000
ROA not before: Tue 04 Feb 2025 18:17:49 +0000
ROA not after: Tue 03 Feb 2026 18:22:49 +0000
asID: 267895
IP address blocks: 45.177.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ce:f0:45:05:66:1e:78:fd:e4:16:64:d2:eb:92:b2:15:b8:53:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8
Validity
Not Before: Feb 4 18:17:49 2025 GMT
Not After : Feb 3 18:22:49 2026 GMT
Subject: CN=CC4564CB3A5913E96E91B2518FBBABF7CCAD681D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:00:ca:ad:fc:8c:99:6b:fd:37:76:a4:ad:a3:
75:83:af:f7:35:00:35:e7:90:9a:f9:15:24:72:9f:
53:ba:06:ca:14:a0:96:7f:9b:fc:be:f7:9a:d2:32:
af:67:a7:7f:10:a1:40:f1:20:fd:9a:f3:c0:a6:56:
4d:30:da:e3:e4:cb:9d:75:e2:24:c3:1c:87:ae:3f:
8d:3b:55:6a:e6:be:d6:5d:53:7c:24:61:73:68:8e:
00:e3:a8:ca:1d:d4:a9:c8:8e:4d:e0:d1:dd:e0:70:
e2:a1:30:ff:c0:b9:13:8e:cc:f5:8c:37:3b:62:b5:
34:15:70:dc:98:a4:cb:61:d0:1d:4b:35:9e:78:ae:
1e:e1:cd:7e:54:0b:23:87:1a:a1:db:98:2a:7a:cb:
2b:f5:21:4b:31:c1:a1:ed:54:23:f5:7b:8e:c6:5c:
b4:c2:f9:b2:66:48:16:e0:84:3f:62:d0:d5:f1:d5:
79:62:a2:f1:27:0f:a7:db:55:3e:8d:d6:15:46:01:
d8:b3:dd:2c:5f:e4:d1:01:96:5b:0d:dd:b5:5b:70:
86:63:a9:70:4a:cd:ff:85:89:42:5c:99:8a:45:db:
42:db:f4:f0:41:ec:4e:46:93:49:60:6b:e2:60:9a:
4b:90:c6:3e:91:70:b8:4c:68:24:e2:00:f6:0c:66:
03:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:45:64:CB:3A:59:13:E9:6E:91:B2:51:8F:BB:AB:F7:CC:AD:68:1D
X509v3 Authority Key Identifier:
keyid:44:96:8D:AE:5E:CD:C4:31:BC:AA:7B:2A:B4:2A:20:2C:6B:24:54:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/34352e3137372e3132382e302f32322d3234203d3e20323637383935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.177.128.0/22
Signature Algorithm: sha256WithRSAEncryption
15:43:b3:6b:03:d7:5a:10:a6:d8:ea:d7:7f:96:8c:62:69:d6:
27:92:d2:27:27:ef:15:a0:24:01:e0:fd:68:ec:b9:0a:aa:84:
f7:77:10:6a:f3:44:21:06:b3:d9:09:bf:21:d6:7e:ed:a1:2f:
82:29:d8:d7:c0:f1:ac:2d:e1:52:33:dd:a3:17:f1:bb:53:f6:
4f:4b:e6:61:59:0e:ba:92:b9:0a:15:e5:b7:2c:21:a4:86:77:
77:ed:49:7c:3b:43:48:3d:26:41:0b:c0:11:e5:76:2b:89:52:
0d:cd:23:0f:93:48:5d:43:f3:ed:6f:34:ed:58:2a:2d:a0:f2:
bb:28:a1:4d:e0:20:b7:a7:c4:2c:78:66:fd:0c:83:45:c4:1d:
50:75:33:7d:a8:5e:ba:aa:f9:41:55:ba:a1:74:46:28:92:6a:
f2:29:e1:4c:f5:86:a0:f6:fb:95:3a:4a:67:4c:97:68:b5:47:
47:08:ae:2b:cf:0d:1f:79:96:4a:b3:aa:63:79:1e:5a:d5:0a:
1e:ea:98:52:5b:b9:2a:bd:97:74:ba:0b:27:40:6c:da:5b:ef:
44:6c:35:98:8f:1e:71:33:5e:40:77:f3:db:2d:80:13:ea:94:
81:19:23:ef:39:70:04:ed:ca:c3:30:5b:74:ec:3a:8e:2b:31:
de:fe:e4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:13 2025 by rpki-client