Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa
File: 34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa (raw, json)
Hash identifier: r3J4iZtEsdssOJ21EAuM8EQB2MWGd45z46MuhqNcHac=
Subject key identifier: 9B:23:94:1E:AD:B4:D2:76:3C:09:30:CF:4F:72:AA:50:DA:82:B1:37
Certificate issuer: /CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4
Certificate serial: 01FF50256B3182A3C47AD127BC60DB597378D313
Authority key identifier: 29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa
Signing time: Tue 05 Mar 2024 18:10:52 +0000
ROA not before: Tue 05 Mar 2024 18:05:52 +0000
ROA not after: Tue 04 Mar 2025 18:10:52 +0000
asID: 267776
IP address blocks: 45.171.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ff:50:25:6b:31:82:a3:c4:7a:d1:27:bc:60:db:59:73:78:d3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4
Validity
Not Before: Mar 5 18:05:52 2024 GMT
Not After : Mar 4 18:10:52 2025 GMT
Subject: CN=9B23941EADB4D2763C0930CF4F72AA50DA82B137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:70:5d:87:53:a5:58:5e:40:f2:98:be:02:c4:
bb:28:6f:55:67:87:04:07:44:4a:e4:4a:de:97:04:
42:d9:e2:c8:05:71:e9:ea:7f:0a:09:8e:76:95:c3:
7d:f6:7a:af:5e:ba:41:d0:69:94:74:fb:21:ad:ce:
02:e4:af:2c:f8:ff:1c:64:3c:d4:35:a3:75:3a:20:
61:05:b8:11:d7:c1:ea:2e:42:c2:63:75:cf:af:bf:
9b:0b:28:9c:5b:91:b2:20:30:58:f0:f2:34:ee:41:
80:e9:05:f6:f3:99:3c:81:9e:19:49:21:ac:09:56:
2a:4c:47:88:a9:32:b6:bc:97:ae:83:3b:47:dd:19:
68:26:5e:37:d9:51:1d:26:90:14:57:ca:a0:0d:f0:
18:b9:bc:9c:9c:3b:76:06:40:b4:7e:8f:46:c2:95:
7e:ec:a6:07:6e:11:52:67:df:0d:ab:66:17:db:06:
39:23:a4:e1:98:05:ae:38:82:2f:38:bd:94:9b:2a:
74:84:a0:61:08:9c:a7:52:f1:2d:8b:0d:71:d7:6e:
4d:a1:65:e8:14:46:bd:02:1d:4a:5d:53:d0:ff:f2:
b1:aa:60:c3:6a:8d:84:28:a1:94:e7:2f:46:f5:cf:
e0:7a:77:6c:3a:08:ff:59:0d:4e:cd:d7:de:e1:0b:
9e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:23:94:1E:AD:B4:D2:76:3C:09:30:CF:4F:72:AA:50:DA:82:B1:37
X509v3 Authority Key Identifier:
keyid:29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.220.0/22
Signature Algorithm: sha256WithRSAEncryption
60:d5:34:1c:d0:76:2a:2c:aa:98:16:fb:91:37:fa:bb:1b:34:
56:bf:ea:81:86:d0:01:53:10:5a:6e:1d:d5:92:93:05:dd:da:
b9:51:dd:b2:83:3d:fb:13:f5:8c:bd:e4:70:19:f0:27:1a:9e:
4b:ad:46:bb:bb:3d:c3:3d:1f:a3:33:a5:1b:77:6c:2f:5d:2b:
19:fa:99:a9:60:ca:8b:34:dd:09:20:c7:60:cc:0b:b1:e5:5e:
96:c9:e8:ef:14:76:9b:c7:32:b9:2a:76:01:19:c5:f4:07:ca:
84:32:8e:fa:04:1d:59:dd:7f:2f:be:00:e3:29:50:ec:8c:d3:
28:d0:76:ef:5a:74:25:10:93:c5:4e:1d:60:2f:92:4d:4f:5e:
2f:e2:44:28:3a:90:95:44:df:0a:f4:6f:48:89:6e:19:a3:06:
80:07:ad:c9:53:32:36:7d:14:ac:29:65:0f:89:9d:1d:d2:33:
fe:27:be:c1:78:6a:39:23:9d:d8:19:ce:f8:de:07:d1:39:2e:
4a:4a:11:fd:1f:81:06:01:bc:b9:1c:78:4e:32:aa:4b:f5:f9:
50:28:d3:d1:62:3c:c3:18:c9:22:e2:86:ad:f9:03:38:a2:cf:
cc:2e:67:51:e4:ff:37:74:bd:ef:8b:10:b9:1c:a8:6f:21:a4:
45:ec:13:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:52:41 2025 by rpki-client