Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/978853C4210913AA9A98F8651C68C72011BDE8759643908CDB6382A1A80C75F2/0/34352e342e39372e302f32342d3234203d3e20323635363538.roa
File: 34352e342e39372e302f32342d3234203d3e20323635363538.roa (raw, json)
Hash identifier: N9AfDmsUHAcNAIocN3KFAhtLtJuFLST+O7XEgaNYVL8=
Subject key identifier: 2E:45:D0:A4:E9:4A:1B:E5:39:0D:34:5C:F2:16:71:35:7F:3A:F5:FA
Certificate issuer: /CN=5C36E01C9108F427B2E5D948A1BDD7DD54473BE2
Certificate serial: 69B4D5ADEA7171226447A5A762CDE3A0148D2036
Authority key identifier: 5C:36:E0:1C:91:08:F4:27:B2:E5:D9:48:A1:BD:D7:DD:54:47:3B:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C36E01C9108F427B2E5D948A1BDD7DD54473BE2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/978853C4210913AA9A98F8651C68C72011BDE8759643908CDB6382A1A80C75F2/0/34352e342e39372e302f32342d3234203d3e20323635363538.roa
Signing time: Tue 04 Feb 2025 20:05:59 +0000
ROA not before: Tue 04 Feb 2025 20:00:59 +0000
ROA not after: Tue 03 Feb 2026 20:05:59 +0000
asID: 265658
IP address blocks: 45.4.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:b4:d5:ad:ea:71:71:22:64:47:a5:a7:62:cd:e3:a0:14:8d:20:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C36E01C9108F427B2E5D948A1BDD7DD54473BE2
Validity
Not Before: Feb 4 20:00:59 2025 GMT
Not After : Feb 3 20:05:59 2026 GMT
Subject: CN=2E45D0A4E94A1BE5390D345CF21671357F3AF5FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ec:66:67:a8:3d:80:52:d1:98:bf:a5:64:87:
23:fe:37:8d:bf:85:50:87:f8:9e:2d:f8:01:b5:d3:
d9:2b:44:9a:9b:de:b8:b1:58:3c:7b:4c:22:aa:8e:
17:8b:75:eb:5d:3b:62:71:ec:32:57:3c:0e:91:2a:
f5:1a:b0:bc:0e:52:48:d0:28:d5:d7:12:e8:ad:ad:
60:9f:46:b7:20:b6:c9:41:af:ca:17:96:b2:e1:3c:
1c:8e:32:bb:cf:d4:c6:20:47:a8:89:3e:09:d2:e2:
75:7a:84:85:bc:50:e5:db:50:20:ba:14:d2:32:6e:
3c:8d:c9:8a:0c:bc:fd:24:f4:77:fc:18:20:b0:d5:
38:48:5f:79:2b:17:ae:ca:e9:56:39:d4:aa:b5:f9:
0f:d6:16:32:d0:ac:21:28:43:0a:d6:23:d1:60:9e:
71:10:19:08:44:73:05:40:8f:89:cc:7d:0d:8d:c8:
23:d9:30:f9:28:55:87:aa:9a:2a:69:98:97:95:34:
0a:23:2c:5c:df:26:01:9a:d6:93:ff:00:8a:1e:32:
34:06:08:2a:a2:a8:e9:f3:89:40:9e:ac:5a:0f:19:
b3:72:74:6b:a8:f5:42:cc:d2:ad:9b:73:22:00:a8:
33:ce:c0:83:5f:5e:51:2b:4a:a3:15:c1:ec:00:eb:
fd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:45:D0:A4:E9:4A:1B:E5:39:0D:34:5C:F2:16:71:35:7F:3A:F5:FA
X509v3 Authority Key Identifier:
keyid:5C:36:E0:1C:91:08:F4:27:B2:E5:D9:48:A1:BD:D7:DD:54:47:3B:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/978853C4210913AA9A98F8651C68C72011BDE8759643908CDB6382A1A80C75F2/0/5C36E01C9108F427B2E5D948A1BDD7DD54473BE2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C36E01C9108F427B2E5D948A1BDD7DD54473BE2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/978853C4210913AA9A98F8651C68C72011BDE8759643908CDB6382A1A80C75F2/0/34352e342e39372e302f32342d3234203d3e20323635363538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.97.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e7:c1:50:a1:d0:06:c3:a2:c7:72:28:8a:36:d9:3d:f8:f6:
22:d3:08:d2:b9:9c:11:53:32:9d:c8:b1:ea:3b:0d:8d:bf:58:
f2:b0:77:7f:57:c5:79:8a:e4:22:2b:09:00:1d:dc:0e:43:52:
8a:1d:08:69:e0:2b:16:c4:0e:38:2c:95:63:ff:ed:98:5f:0f:
52:ff:b0:45:eb:ed:3d:14:24:c8:f5:66:a1:c0:3a:1c:eb:f3:
8d:b0:66:27:af:1e:43:22:ed:84:c3:71:f7:42:a0:5b:77:a3:
e4:5f:50:b0:2e:1e:7a:a3:d5:42:a3:2d:0e:6a:de:65:ed:30:
2b:29:80:e4:60:3a:19:71:57:03:b2:67:67:44:f7:e7:37:3b:
e5:65:cb:b5:cb:06:24:37:c1:b1:0a:41:ac:3a:83:eb:d6:a0:
2b:32:7a:ef:0c:c2:67:c6:62:db:20:af:cc:9d:bd:8c:6a:a9:
4f:47:d1:b6:f4:75:34:8c:c3:40:86:0d:a6:29:40:b6:34:21:
d3:d1:f4:f9:62:ea:b0:87:9c:59:c6:6c:59:26:36:72:92:9a:
08:47:80:c6:11:df:f5:9a:92:3c:03:e0:fa:c7:38:a4:7c:f9:
a4:e1:9a:7f:79:45:65:dd:72:c0:73:96:f3:83:96:55:78:3b:
6b:3b:43:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:15 2025 by rpki-client