Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa
File: 34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa (raw, json)
Hash identifier: tM9f0yWpYPOG7TlCbbAXrOukeOEqKyeo8ako8kP+xns=
Subject key identifier: 12:2E:74:97:9C:88:82:AD:64:C3:99:67:6E:D8:3C:4A:E7:3E:0F:AE
Certificate issuer: /CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Certificate serial: 33C7ECE8108D5C9956E57CB1CAAC624538C28D85
Authority key identifier: CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa
Signing time: Thu 23 May 2024 23:20:00 +0000
ROA not before: Thu 23 May 2024 23:15:00 +0000
ROA not after: Thu 22 May 2025 23:20:00 +0000
asID: 266764
IP address blocks: 45.234.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:c7:ec:e8:10:8d:5c:99:56:e5:7c:b1:ca:ac:62:45:38:c2:8d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Validity
Not Before: May 23 23:15:00 2024 GMT
Not After : May 22 23:20:00 2025 GMT
Subject: CN=122E74979C8882AD64C399676ED83C4AE73E0FAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:f1:13:33:c6:6a:59:a2:13:97:bf:cb:cb:
3b:32:f8:11:6f:7a:80:81:6f:14:1d:cd:1e:1c:70:
73:20:20:38:62:9e:ac:aa:9b:b5:fb:d1:3d:f3:43:
3f:20:7e:bd:9f:b3:a1:bd:02:87:2e:55:47:c6:46:
cd:f2:02:1a:c9:78:9d:cc:f5:51:80:3d:f4:f2:14:
45:fb:e3:73:e2:da:61:bd:71:7b:9d:2f:bf:5b:f4:
9b:29:c4:7f:d6:86:83:5f:99:d1:c1:d7:39:f9:be:
b3:05:96:7f:a0:eb:5e:9d:26:d7:30:16:7b:aa:4d:
c4:68:e3:a2:76:08:c2:f0:d7:fa:c4:fc:1f:42:fd:
1e:87:c5:bd:d4:76:99:25:9d:a4:55:fa:68:53:2b:
da:bc:c8:d4:c7:91:e4:2d:4d:cc:5d:04:c2:03:1f:
00:f0:44:93:4a:5f:f2:8b:52:38:e0:59:54:d0:c6:
08:3d:e8:83:05:ee:c7:b0:f0:69:49:69:78:c0:82:
bc:71:02:b3:03:9d:96:34:28:19:b1:6a:9e:f5:11:
45:ff:b1:b0:dd:83:13:59:61:9c:e1:e9:bd:49:ae:
6c:12:da:51:34:b3:09:97:7f:37:6b:62:bc:41:2c:
2b:07:73:1c:e3:05:71:c9:c5:16:b6:cf:ef:dd:38:
b8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2E:74:97:9C:88:82:AD:64:C3:99:67:6E:D8:3C:4A:E7:3E:0F:AE
X509v3 Authority Key Identifier:
keyid:CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.180.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:d8:f7:7d:19:88:58:af:84:8b:c6:48:13:6b:ab:5b:50:5c:
8e:6a:5c:0d:3e:9a:52:e2:ec:93:87:b7:9a:71:9f:ee:ef:2f:
dc:9f:2b:fe:d8:d7:5e:92:48:af:21:ab:07:37:f3:41:b4:06:
f4:d4:70:37:9a:30:a9:18:3e:3a:a7:43:2f:e1:e3:aa:d7:c6:
41:28:cb:a5:d8:1b:5e:c7:a0:f9:05:ae:14:f7:f6:a7:ef:b1:
f0:78:31:ff:8c:47:83:88:6c:5e:b7:aa:d1:51:45:f3:2d:17:
0a:61:8f:d2:d2:84:9d:17:98:f1:51:84:7f:6f:c3:70:f4:c7:
62:19:60:88:4f:33:72:66:b2:f1:bb:24:ec:f7:6d:cd:d2:ce:
c7:88:00:8b:55:ab:67:5a:8e:e9:e8:c7:b4:eb:cd:6c:32:6c:
2c:ed:a9:7a:e1:dc:bb:22:98:51:e9:41:dd:4a:eb:1e:e5:61:
62:4b:94:6c:74:61:fc:20:b9:e0:01:b4:12:b0:50:27:fd:cd:
bc:3d:bf:d0:f2:f5:fc:a3:8d:57:01:03:98:cb:da:2a:e2:c0:
74:de:b7:bd:cf:a1:d9:7e:0c:f7:9b:a9:6f:21:06:26:05:39:
ec:4e:a8:de:86:54:0e:4e:61:dc:7e:41:e1:85:79:8f:04:d1:
0f:e0:30:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:57 2025 by rpki-client