Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/34352e3138392e3233322e302f32332d3233203d3e20323639393135.roa
File: 34352e3138392e3233322e302f32332d3233203d3e20323639393135.roa (raw, json)
Hash identifier: 5+0feaWnWVqOge2khHl2R9u7pQ02o9VCNk2gGX2DlsQ=
Subject key identifier: A4:BE:B9:3C:1D:C3:57:84:DE:31:B2:02:7F:C0:ED:71:C2:1A:31:E7
Certificate issuer: /CN=D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE
Certificate serial: 6DF67DC6DF3FD1F45BB3BFDF7299111D75717C2B
Authority key identifier: D7:C2:C8:0C:B5:9C:8E:33:C7:BB:4E:D1:0B:EA:57:E2:1C:E7:6C:EE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/34352e3138392e3233322e302f32332d3233203d3e20323639393135.roa
Signing time: Tue 04 Feb 2025 20:00:17 +0000
ROA not before: Tue 04 Feb 2025 19:55:17 +0000
ROA not after: Tue 03 Feb 2026 20:00:17 +0000
asID: 269915
IP address blocks: 45.189.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f6:7d:c6:df:3f:d1:f4:5b:b3:bf:df:72:99:11:1d:75:71:7c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE
Validity
Not Before: Feb 4 19:55:17 2025 GMT
Not After : Feb 3 20:00:17 2026 GMT
Subject: CN=A4BEB93C1DC35784DE31B2027FC0ED71C21A31E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:36:f8:35:0d:8b:0a:37:e0:a4:65:b6:89:
b6:33:8d:9b:15:51:a7:1e:02:8b:cf:69:56:b9:8a:
53:bd:42:11:e6:3b:0b:ce:ba:5e:bc:35:18:7d:6f:
ae:81:a8:e0:91:f2:83:ac:96:e4:8c:bb:c6:0f:ef:
9b:ca:4f:13:fc:d2:fc:f2:ec:eb:5f:e3:5e:4a:cc:
18:79:31:f4:9e:91:ed:1c:e9:2f:ac:56:bc:51:f7:
4c:3e:bc:7e:ed:44:15:47:14:dd:87:51:96:16:bd:
a9:7a:ea:f1:3c:3c:1a:5a:e1:f6:be:eb:a8:1f:10:
b3:14:65:77:1c:7f:d0:cb:d8:ef:d4:0e:a3:1a:a5:
ca:62:b6:6b:07:d1:d1:da:35:84:0a:4b:87:73:fa:
86:89:79:82:82:87:23:04:df:e4:4e:5b:8c:56:61:
43:89:96:67:0a:fe:2b:53:53:02:e7:d7:75:d8:e7:
f0:29:45:a2:ab:81:8e:95:26:05:e3:1e:c3:79:5c:
5b:9f:2b:8c:2f:e0:70:68:bb:90:68:99:32:51:83:
59:e0:65:3c:b7:7f:59:1d:01:69:3d:73:f8:38:e5:
ad:2e:17:0c:91:6e:2d:04:da:28:43:08:4d:4a:75:
d6:ea:65:a8:2e:b4:42:bc:7f:10:6a:98:8b:74:7e:
b0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BE:B9:3C:1D:C3:57:84:DE:31:B2:02:7F:C0:ED:71:C2:1A:31:E7
X509v3 Authority Key Identifier:
keyid:D7:C2:C8:0C:B5:9C:8E:33:C7:BB:4E:D1:0B:EA:57:E2:1C:E7:6C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/34352e3138392e3233322e302f32332d3233203d3e20323639393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.232.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:da:80:c5:e2:fa:16:93:42:1c:85:9f:de:56:0c:cc:49:21:
8a:45:3e:97:14:1a:27:4c:6d:61:ec:2e:52:1d:10:4b:fd:72:
00:b3:c1:50:49:30:09:68:5d:c6:3d:8e:92:84:bb:97:85:14:
b5:cc:69:f2:9c:df:75:0e:b4:e2:0d:d3:19:b5:2c:75:e4:12:
42:4d:22:62:9e:95:3f:ca:46:2c:4b:46:3b:b2:19:a3:5b:e2:
17:0c:68:2e:aa:6d:f0:07:72:a5:e0:fd:66:75:7d:cb:94:f7:
b3:f8:d8:c8:72:af:f9:34:29:53:ed:9a:45:7c:f4:89:3f:07:
89:df:0a:60:c2:ae:9c:61:09:3b:1c:e8:55:c5:dd:63:8b:00:
f1:56:f0:86:a1:e8:fc:34:57:04:b3:0a:51:f3:9c:62:33:b8:
46:c3:30:16:be:62:53:af:7b:f6:58:3e:b5:4f:62:c5:c6:8c:
c8:7e:3e:e4:f2:85:de:fa:a5:29:9a:01:67:e9:1a:40:29:d1:
11:0b:59:69:4c:9c:b3:f3:2d:60:54:63:48:36:5d:e9:dd:f4:
57:f8:a7:96:cf:ad:4d:55:30:d3:83:c7:6b:99:69:85:48:be:
53:95:dd:98:88:76:00:dc:d0:ad:e1:b1:56:60:a5:43:09:59:
4a:83:ae:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:38 2025 by rpki-client