Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/34352e3233362e3137322e302f32332d3234203d3e20323633363831.roa
File: 34352e3233362e3137322e302f32332d3234203d3e20323633363831.roa (raw, json)
Hash identifier: NQpkaVH4qciZUusyh8Ty0nVRh/xzHX3AhyPPqeJExhQ=
Subject key identifier: 1D:D1:BE:7D:97:83:77:2A:41:7A:43:53:BB:C0:F9:32:24:61:53:73
Certificate issuer: /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial: 42928E622DEDDEA92951CEEAC87F441A730F45E3
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/34352e3233362e3137322e302f32332d3234203d3e20323633363831.roa
Signing time: Tue 04 Feb 2025 20:01:07 +0000
ROA not before: Tue 04 Feb 2025 19:56:07 +0000
ROA not after: Tue 03 Feb 2026 20:01:07 +0000
asID: 263681
IP address blocks: 45.236.172.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:92:8e:62:2d:ed:de:a9:29:51:ce:ea:c8:7f:44:1a:73:0f:45:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Validity
Not Before: Feb 4 19:56:07 2025 GMT
Not After : Feb 3 20:01:07 2026 GMT
Subject: CN=1DD1BE7D9783772A417A4353BBC0F93224615373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:52:da:3e:20:9f:ad:ec:10:59:f3:6b:7a:fa:
c5:05:3c:f4:2d:b3:ce:87:83:5c:ed:87:04:a6:bf:
c8:55:bd:48:a1:51:50:2f:5f:c1:8d:4c:d5:8f:29:
b7:24:d2:ff:0d:05:53:62:43:3a:2b:04:c7:66:b9:
90:54:e6:4e:08:27:69:87:66:1c:2f:ab:27:5b:0f:
b8:57:df:93:eb:2d:2d:b1:07:60:79:28:5b:15:a5:
11:4c:3e:d2:34:98:38:0e:0f:b2:2c:29:fc:60:02:
1d:bd:eb:b1:02:e1:2d:cb:3d:46:6b:79:98:d5:a3:
f2:cd:20:25:98:f5:cb:4f:c6:6b:15:bf:8a:7e:47:
ee:be:e4:ce:3e:0f:4e:1a:98:a1:16:74:4f:c8:2b:
35:49:52:d9:31:f5:2e:69:15:5c:ed:e9:55:dc:83:
ca:b6:1a:59:e4:30:88:59:84:74:4c:89:18:8f:79:
77:7d:a0:7f:ad:63:4e:cd:0e:f7:f5:cd:a7:30:de:
c0:c5:32:1a:53:16:fc:da:68:3a:95:72:24:03:4e:
dd:c1:d9:70:3f:74:66:97:b7:47:8b:93:ce:f0:a7:
0b:8d:68:56:39:46:c0:37:4d:94:50:d2:59:ca:44:
65:91:84:11:5b:29:4d:b8:69:86:f1:67:4d:ea:65:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D1:BE:7D:97:83:77:2A:41:7A:43:53:BB:C0:F9:32:24:61:53:73
X509v3 Authority Key Identifier:
keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/34352e3233362e3137322e302f32332d3234203d3e20323633363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.172.0/23
Signature Algorithm: sha256WithRSAEncryption
00:4d:5c:8a:6f:20:9f:2e:09:50:f4:8f:3d:42:e4:dc:51:87:
58:2c:6b:f4:42:ce:49:d7:5a:f0:fa:ee:b3:6d:24:c7:43:da:
d9:d5:e2:4f:99:1b:1a:c3:3b:5a:4b:69:91:10:c6:dc:bb:c2:
84:9d:ef:05:9e:ed:8a:30:a0:d1:56:bf:a6:71:99:7b:42:4c:
bc:ab:a6:9b:09:11:62:74:a6:b0:01:c5:c2:99:60:d5:a9:73:
7d:5f:09:d4:eb:d7:1d:10:d3:26:3f:9d:9f:b9:52:8e:0e:4d:
a1:ef:f6:04:5f:e4:c0:79:1c:fd:15:dd:e3:6e:f3:2f:69:f2:
44:ac:99:ff:9f:ec:a5:ff:5c:c2:e3:a5:a6:c5:f9:03:40:ef:
6d:c9:ee:c9:82:98:fa:e8:d3:8f:1d:f1:3e:43:17:5a:ad:20:
10:02:18:43:b4:44:1a:02:b0:e9:44:21:6e:0a:58:37:85:0d:
85:ad:bb:cb:cf:9d:89:94:a8:d8:8d:9e:16:c9:ce:9c:d2:92:
c6:35:aa:8e:9c:7f:2a:bc:76:0e:65:58:2d:71:f9:d8:f6:9e:
c8:76:93:c5:84:33:5a:2b:3e:39:9b:53:b8:5b:b8:03:6d:f7:
c0:9b:72:4f:2b:a3:8a:dd:3a:e6:e6:a9:cc:f8:f6:72:60:63:
43:a2:8f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:47 2025 by rpki-client