Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33332e302f32342d3234203d3e20323636383435.roa
File: 34352e3233392e33332e302f32342d3234203d3e20323636383435.roa (raw, json)
Hash identifier: 69YcxylM2GwMSimkiyub5cd2xqzabqWpeBaznTfgUEk=
Subject key identifier: 1D:CF:0F:A8:EA:BD:CA:F2:22:42:84:09:1B:DD:2B:53:EF:D4:6E:0E
Certificate issuer: /CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
Certificate serial: 63BED5031551556FC21C5B3D9991256082338D37
Authority key identifier: 9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33332e302f32342d3234203d3e20323636383435.roa
Signing time: Tue 04 Feb 2025 18:18:28 +0000
ROA not before: Tue 04 Feb 2025 18:13:28 +0000
ROA not after: Tue 03 Feb 2026 18:18:28 +0000
asID: 266845
IP address blocks: 45.239.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:be:d5:03:15:51:55:6f:c2:1c:5b:3d:99:91:25:60:82:33:8d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
Validity
Not Before: Feb 4 18:13:28 2025 GMT
Not After : Feb 3 18:18:28 2026 GMT
Subject: CN=1DCF0FA8EABDCAF2224284091BDD2B53EFD46E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:9c:b8:e1:06:49:14:4d:ce:5f:ea:8e:47:
bc:02:73:2c:5a:7c:57:8b:ec:71:b5:03:b8:d8:a1:
6c:0d:a2:fd:c5:0a:12:ec:b1:2d:87:b8:7f:68:51:
35:f7:56:f8:f1:49:3a:cd:39:fb:fc:c7:28:2e:f5:
5c:04:58:c6:8b:b2:92:c9:0d:56:0b:66:f9:a0:6e:
75:47:71:18:c8:a7:37:a3:e2:e8:9d:e2:00:8f:92:
f9:9d:2f:e0:40:ef:6e:8d:ce:b9:74:27:b2:3d:c3:
32:c9:47:d1:f5:84:be:2e:3e:c1:06:51:0b:ec:7e:
ad:5c:3a:15:dc:4b:e6:86:cb:8b:d6:f0:60:a1:ad:
5c:9c:89:4b:b3:af:1b:2d:74:3b:cf:c6:20:fb:62:
8c:45:b3:66:90:f1:04:83:b4:09:0a:24:b8:ea:19:
cc:7c:25:d8:ea:35:fe:65:95:5f:d8:d1:28:a2:43:
61:31:19:6e:d4:ae:16:91:b8:d7:70:07:3f:c8:20:
f9:be:22:04:e9:0c:0b:c2:ea:70:55:e1:9b:29:87:
99:8b:68:f6:06:04:48:dc:a1:cb:cf:af:7f:81:ac:
6d:ca:68:2f:8a:13:e8:1f:3b:d3:1d:cb:5f:bb:fd:
b4:13:db:44:61:16:c8:61:3a:60:0a:fa:4d:21:81:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CF:0F:A8:EA:BD:CA:F2:22:42:84:09:1B:DD:2B:53:EF:D4:6E:0E
X509v3 Authority Key Identifier:
keyid:9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33332e302f32342d3234203d3e20323636383435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.33.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:45:f7:94:f2:b6:56:6b:b6:2c:34:ea:a6:7f:3a:35:04:8c:
22:4c:20:59:4e:ad:ea:39:ac:d8:20:ee:6d:70:a1:42:39:a9:
63:1e:8f:ec:50:49:38:24:a3:46:ab:b1:d6:6e:e2:90:69:37:
b4:cf:35:7a:f5:00:2c:bd:87:3e:cf:c1:6a:e6:00:0f:41:55:
47:21:08:66:95:22:80:e1:0a:48:0e:76:f6:3f:cd:ed:f9:23:
93:23:b9:c7:63:16:ed:08:56:0e:b0:c7:4c:d1:1a:1f:7d:6f:
94:34:30:b3:05:e1:99:d5:0d:aa:f5:9e:58:23:f4:87:05:a2:
ca:9a:9d:d8:60:1a:c4:e3:68:17:e1:77:14:29:00:fe:b2:7e:
9f:29:72:ed:28:e1:be:2a:fa:f2:b0:0b:0e:59:78:bc:30:ec:
df:cf:19:c1:8d:5d:ce:ce:36:d3:ab:3b:0c:0b:97:5d:c3:7a:
be:d8:d7:9f:b2:4f:03:6d:8c:47:d5:ab:c5:65:04:31:4a:e8:
f6:b8:6d:ce:76:56:e3:f4:1a:d3:79:df:23:b0:c4:70:2a:05:
81:54:2e:1b:6f:32:c2:53:8d:9b:75:ad:46:d5:b3:a5:30:a8:
21:e5:34:10:9e:a0:90:ae:6e:ba:97:04:d2:d0:b6:7f:41:a3:
09:fd:8e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:07 2025 by rpki-client