Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3235312e302f32342d3234203d3e203238343233.roa
File: 34352e3137302e3235312e302f32342d3234203d3e203238343233.roa (raw, json)
Hash identifier: CisVDh7iKxVM+B6TAeMpo7lL9OOM1QsVO7SFoxpUvFQ=
Subject key identifier: 57:71:7D:F6:EA:22:05:38:80:4E:6B:AA:67:9F:5B:5A:19:0D:8D:BA
Certificate issuer: /CN=69FB064988CC6E77E3A9CF5D423A459765DC4E1B
Certificate serial: 4572861F10E7A8219CB529DE250303D2649A137C
Authority key identifier: 69:FB:06:49:88:CC:6E:77:E3:A9:CF:5D:42:3A:45:97:65:DC:4E:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3235312e302f32342d3234203d3e203238343233.roa
Signing time: Sun 26 Jan 2025 01:40:03 +0000
ROA not before: Sun 26 Jan 2025 01:35:03 +0000
ROA not after: Sun 25 Jan 2026 01:40:03 +0000
asID: 28423
IP address blocks: 45.170.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:72:86:1f:10:e7:a8:21:9c:b5:29:de:25:03:03:d2:64:9a:13:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69FB064988CC6E77E3A9CF5D423A459765DC4E1B
Validity
Not Before: Jan 26 01:35:03 2025 GMT
Not After : Jan 25 01:40:03 2026 GMT
Subject: CN=57717DF6EA220538804E6BAA679F5B5A190D8DBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:60:ae:9d:5b:41:ab:d1:3c:20:2d:4b:ab:
91:b5:19:e6:65:df:ef:e2:3c:af:dc:50:71:91:be:
58:a0:95:1a:b0:2f:da:21:d7:a0:8f:6a:85:51:5d:
d0:a4:55:48:9b:8d:8a:69:8e:0a:54:a1:b7:22:07:
b9:f2:62:a1:b6:28:2b:9d:60:2b:a4:8e:c3:4a:88:
8b:05:d8:88:04:f0:2b:a6:e4:c9:a8:fc:29:95:59:
af:4c:12:3a:3f:d6:9c:05:11:92:11:cd:92:39:81:
cc:cb:57:e4:d5:d1:2d:d1:a6:7d:4f:b2:dc:79:4c:
d4:70:ca:6f:61:39:6d:58:e4:11:9f:2d:d7:22:4f:
11:6e:bb:f3:ae:e1:d8:40:37:68:a6:c1:77:8d:54:
1a:4f:8e:d3:97:4b:c4:10:26:42:25:03:40:ca:b9:
95:6a:97:14:5c:b3:90:57:04:4e:e4:cb:b1:b9:ca:
51:2b:0f:a1:01:ec:33:63:46:ec:d1:b0:70:36:21:
19:9a:47:6c:dd:72:b2:a8:c5:48:10:4f:dd:f0:37:
e9:41:36:5f:64:3b:04:a5:13:31:d0:40:8f:3b:53:
bc:47:f6:88:b0:81:72:35:3f:22:78:91:37:c2:cf:
53:50:f5:5b:ab:63:e6:cf:0b:c7:ce:b7:c0:60:55:
11:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:71:7D:F6:EA:22:05:38:80:4E:6B:AA:67:9F:5B:5A:19:0D:8D:BA
X509v3 Authority Key Identifier:
keyid:69:FB:06:49:88:CC:6E:77:E3:A9:CF:5D:42:3A:45:97:65:DC:4E:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3235312e302f32342d3234203d3e203238343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.251.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:0b:01:ca:e3:c4:14:37:e4:77:41:e6:0f:75:cb:4b:a1:37:
bb:16:53:9f:25:13:a6:9d:d4:3c:16:bb:4e:31:cc:d8:4f:8e:
26:88:16:e6:be:2b:f9:1f:f2:ca:cd:86:08:24:57:ee:1c:d1:
ff:35:99:53:ba:24:08:4a:4f:82:60:5f:5d:95:ca:65:a3:f8:
69:c6:ff:9e:0e:d4:db:da:28:40:ef:a9:5d:0a:00:e1:d0:a9:
a7:c5:61:ab:34:96:ec:3e:b9:19:1a:07:39:91:be:01:8e:9d:
ae:ad:eb:d6:b7:c7:d9:0d:d6:21:52:4e:2a:1a:c7:2f:5f:7d:
4f:91:f3:f8:ca:e9:1b:9e:43:7a:e4:d7:63:a0:6d:8f:8f:fd:
11:c2:c8:e1:69:37:b6:f9:6a:68:5b:48:10:6d:fc:1f:18:f9:
24:67:f2:a4:b3:2f:85:27:36:6c:07:d3:b6:95:24:38:c2:3a:
aa:2f:79:fe:91:5c:44:f1:db:23:4d:ed:05:ae:80:69:58:bd:
71:71:5b:88:6d:73:6a:a6:72:03:60:36:75:ef:d0:2b:bf:84:
f8:f1:39:35:d0:3c:c8:6e:cb:68:49:25:3f:3e:f5:58:dd:eb:
ca:ac:94:45:ba:03:0e:4a:2d:f3:e5:8e:4a:44:77:56:66:3d:
ca:4c:00:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:04:56 2025 by rpki-client