Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5E66DBD1CC4AB47F6AA77B7F2389B7D90891C982EBA71B21C512171C175A520/0/34352e3137382e3133322e302f32322d3234203d3e20323637393038.roa
File: 34352e3137382e3133322e302f32322d3234203d3e20323637393038.roa (raw, json)
Hash identifier: Ho7kJDDhBC7Ie6XK+Rj/MTD53781KPh6UvDl6gHTWdQ=
Subject key identifier: EC:6A:FB:46:E8:C2:0C:B6:0E:48:40:CE:07:50:29:23:49:31:D6:7B
Certificate issuer: /CN=D9CAEC6506CC39280A667EF148C4CAB1B6446F6A
Certificate serial: 47A6D38397F878F42BE9E0B991262F319A6CFEA2
Authority key identifier: D9:CA:EC:65:06:CC:39:28:0A:66:7E:F1:48:C4:CA:B1:B6:44:6F:6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9CAEC6506CC39280A667EF148C4CAB1B6446F6A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D5E66DBD1CC4AB47F6AA77B7F2389B7D90891C982EBA71B21C512171C175A520/0/34352e3137382e3133322e302f32322d3234203d3e20323637393038.roa
Signing time: Tue 04 Feb 2025 18:32:27 +0000
ROA not before: Tue 04 Feb 2025 18:27:27 +0000
ROA not after: Tue 03 Feb 2026 18:32:27 +0000
asID: 267908
IP address blocks: 45.178.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a6:d3:83:97:f8:78:f4:2b:e9:e0:b9:91:26:2f:31:9a:6c:fe:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9CAEC6506CC39280A667EF148C4CAB1B6446F6A
Validity
Not Before: Feb 4 18:27:27 2025 GMT
Not After : Feb 3 18:32:27 2026 GMT
Subject: CN=EC6AFB46E8C20CB60E4840CE075029234931D67B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:f5:b4:a6:7f:5f:65:15:01:4a:2b:b4:3f:
75:ea:82:08:b0:7c:b4:7b:50:47:32:60:a2:4d:03:
eb:41:4a:42:7b:96:fe:9a:35:0f:02:75:52:34:89:
03:50:a3:78:d8:c5:3b:2b:30:47:1a:d1:f1:c7:1d:
05:2d:05:ba:e6:6c:f4:f8:bd:09:26:da:69:dc:cc:
5c:6d:0d:07:f0:2b:b7:84:70:2f:b7:e0:9d:fc:f3:
5b:99:47:d8:d3:f3:2e:fe:f6:a3:7e:64:9e:69:10:
da:b7:cb:70:d2:9e:ae:ce:f3:1d:07:c7:fa:49:d8:
06:3d:9a:6d:c0:d9:e1:15:96:7d:5f:b0:72:b6:19:
29:45:3c:d5:18:91:90:42:2f:e1:56:a1:8f:15:10:
6a:89:17:91:ec:a7:76:92:04:a0:7c:1b:8f:52:3b:
a6:ca:7b:0d:2d:4c:18:43:83:94:7f:32:37:44:cb:
cd:74:92:65:36:88:80:13:42:e6:9a:f5:c4:5f:ed:
ca:f2:d8:80:18:8e:7d:6c:42:5e:2f:c4:e6:4f:32:
83:b7:af:2b:25:33:71:ed:c9:49:14:38:b2:a3:e2:
47:8d:71:c4:56:d9:af:ea:63:e2:ae:9d:c5:7b:e4:
b2:b2:11:0a:bf:ae:dd:ef:ff:c8:de:28:67:44:b5:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6A:FB:46:E8:C2:0C:B6:0E:48:40:CE:07:50:29:23:49:31:D6:7B
X509v3 Authority Key Identifier:
keyid:D9:CA:EC:65:06:CC:39:28:0A:66:7E:F1:48:C4:CA:B1:B6:44:6F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D5E66DBD1CC4AB47F6AA77B7F2389B7D90891C982EBA71B21C512171C175A520/0/D9CAEC6506CC39280A667EF148C4CAB1B6446F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9CAEC6506CC39280A667EF148C4CAB1B6446F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5E66DBD1CC4AB47F6AA77B7F2389B7D90891C982EBA71B21C512171C175A520/0/34352e3137382e3133322e302f32322d3234203d3e20323637393038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.178.132.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:f2:d4:7d:d2:35:2d:5e:7d:b6:32:ef:7f:52:ff:e5:d2:d3:
99:57:07:2b:a7:0e:ee:dc:96:e9:01:f8:f6:22:13:44:b2:de:
7e:1e:2d:a4:0f:6e:32:19:b2:5e:e6:b8:3a:50:3f:7d:a9:5e:
48:80:d9:a4:34:80:f4:4e:61:00:af:21:12:ea:e9:60:7d:6a:
02:d6:79:80:0c:37:fb:e9:b4:66:2b:44:56:3b:e9:eb:bb:49:
93:7c:a4:c0:67:cf:f5:cb:ad:af:26:a8:12:a2:44:d9:5a:a1:
e2:17:44:b9:aa:0d:bd:bf:b1:8f:19:dd:3c:59:bf:db:c2:20:
b1:9c:73:9c:6d:c8:27:e9:b9:22:c2:3a:4e:8c:95:72:23:3e:
95:8e:b0:86:ad:c8:1e:6c:0e:ef:1a:d6:c1:7b:6d:98:10:2f:
f4:81:75:6e:d2:55:28:f8:22:4e:0a:c5:94:db:67:ed:11:3c:
5e:3a:a7:cd:0f:38:9f:d3:d7:3b:9e:e2:b2:a2:e3:e4:ba:2f:
41:b4:04:70:e4:88:e7:18:4a:bd:1d:a1:d2:f1:67:e5:8c:ff:
4b:c3:b2:69:fc:fe:76:0c:2b:76:23:51:e0:c4:73:b0:b9:69:
bb:25:34:8f:74:d9:26:28:da:3d:95:71:b7:75:d1:46:34:e3:
6f:7e:fa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:56 2025 by rpki-client