Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232342e302f32332d3233203d3e203532333238.roa
File: 34352e3232372e3232342e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier: 7+39SoXkqqtTghmMB2kO0XleI69wSE4lgwuIZsTOZec=
Subject key identifier: AA:D2:46:C2:53:A4:AF:52:CD:A9:08:41:4A:7B:59:0C:94:0F:3F:F8
Certificate issuer: /CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
Certificate serial: 6609C1338ECD8B0BC9AA3FBC64B42F95ACA9B0DD
Authority key identifier: D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232342e302f32332d3233203d3e203532333238.roa
Signing time: Tue 04 Feb 2025 18:08:05 +0000
ROA not before: Tue 04 Feb 2025 18:03:05 +0000
ROA not after: Tue 03 Feb 2026 18:08:05 +0000
asID: 52328
IP address blocks: 45.227.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:09:c1:33:8e:cd:8b:0b:c9:aa:3f:bc:64:b4:2f:95:ac:a9:b0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
Validity
Not Before: Feb 4 18:03:05 2025 GMT
Not After : Feb 3 18:08:05 2026 GMT
Subject: CN=AAD246C253A4AF52CDA908414A7B590C940F3FF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:a0:a8:e2:41:bb:08:a3:20:cb:d0:67:38:
8e:cc:10:9c:15:52:1a:88:22:db:d0:23:75:02:9e:
1b:eb:37:6e:bb:e4:b9:cb:bb:dc:0b:47:72:71:cf:
fa:09:7c:e4:39:2d:86:84:d2:2d:9b:ed:72:14:81:
d1:ad:5f:5b:fb:af:ed:36:67:6b:fd:52:59:bd:6d:
c6:11:5f:b0:89:84:d1:23:f6:e7:b4:d6:45:67:f0:
97:3b:70:eb:49:f2:8d:0f:22:67:00:7b:1e:d1:bf:
7a:36:8e:d6:c6:6e:fa:ec:5f:59:23:f7:97:4c:99:
b7:46:53:6d:fb:9d:15:14:da:48:d9:04:a1:1d:0a:
e3:7f:4f:68:26:67:60:c1:8a:ed:cb:71:fa:54:c2:
cf:f9:08:3b:a8:83:27:ed:28:8f:bf:03:27:a9:bd:
95:e8:75:2a:43:bc:7c:95:02:b3:af:01:07:56:64:
cf:b8:f1:9b:73:c6:b7:d4:bb:61:e3:eb:35:05:76:
72:04:57:37:bd:b2:af:c6:c6:b7:6a:00:e0:34:a2:
22:d8:37:39:f2:88:19:59:76:e2:39:b6:6f:e3:64:
5a:bf:4e:91:e7:41:8a:75:d0:5c:fa:33:00:b1:03:
dc:43:b5:79:83:2a:7b:e8:8b:4a:24:f4:fa:d8:43:
1e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D2:46:C2:53:A4:AF:52:CD:A9:08:41:4A:7B:59:0C:94:0F:3F:F8
X509v3 Authority Key Identifier:
keyid:D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232342e302f32332d3233203d3e203532333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.224.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:a3:9c:a0:5e:90:93:a9:e4:5b:37:a9:c0:7a:36:fb:8d:0d:
85:34:ee:c6:b2:10:a4:7f:6f:76:95:a5:f4:6c:b9:df:55:95:
13:20:86:12:ac:84:d6:05:cd:d3:75:9d:36:9a:75:72:69:e7:
4d:85:21:e5:5c:bc:89:b5:5e:ab:1f:de:d9:13:82:29:33:3c:
cd:75:c2:7b:bb:67:78:cf:ca:4e:39:87:20:bd:3f:0a:cf:71:
8a:18:db:eb:d3:b5:a4:4b:67:d1:5c:90:7b:e1:5b:c4:62:c0:
e2:16:38:8f:25:7d:fe:a3:c7:23:92:d5:dc:d2:08:33:90:5d:
a7:13:d6:d3:19:ce:b4:6e:c0:8c:a7:c9:3d:12:bb:7b:1e:aa:
94:31:f9:36:4c:b8:18:3c:e2:29:42:e1:cc:22:fa:3f:c8:41:
2f:68:74:d6:62:54:c6:5a:a7:3b:f3:bd:0a:5b:0c:d3:60:45:
70:9a:52:5b:9a:fb:11:15:14:05:96:d9:a7:02:5b:9d:5d:a7:
08:17:ba:18:85:d5:c3:e5:a0:f5:e0:83:31:18:b7:56:f9:bb:
5b:95:91:6c:e2:05:e8:01:79:fc:f3:f2:c7:5a:27:53:2f:90:
83:2b:08:ed:40:42:b3:87:f2:d8:4f:57:ad:ef:6e:fa:1c:d7:
d1:9f:8b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:59 2025 by rpki-client