Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/34352e3232372e3231362e302f32322d3234203d3e20323637373131.roa
File: 34352e3232372e3231362e302f32322d3234203d3e20323637373131.roa (raw, json)
Hash identifier: D5LzuaG24SV4k01TH2HorOVc7ub6EwKn5CkK9sR578A=
Subject key identifier: B2:F7:E2:1B:32:F4:AF:40:33:68:22:D5:01:38:3B:D9:17:07:5A:2C
Certificate issuer: /CN=389CCF923837EEAFA4DA96AE20241419C941F58A
Certificate serial: 5C57016FA85F89439D2390DE08E0E1BCED4BB5DC
Authority key identifier: 38:9C:CF:92:38:37:EE:AF:A4:DA:96:AE:20:24:14:19:C9:41:F5:8A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/389CCF923837EEAFA4DA96AE20241419C941F58A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/34352e3232372e3231362e302f32322d3234203d3e20323637373131.roa
Signing time: Tue 05 Mar 2024 18:02:45 +0000
ROA not before: Tue 05 Mar 2024 17:57:45 +0000
ROA not after: Tue 04 Mar 2025 18:02:45 +0000
asID: 267711
IP address blocks: 45.227.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:57:01:6f:a8:5f:89:43:9d:23:90:de:08:e0:e1:bc:ed:4b:b5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389CCF923837EEAFA4DA96AE20241419C941F58A
Validity
Not Before: Mar 5 17:57:45 2024 GMT
Not After : Mar 4 18:02:45 2025 GMT
Subject: CN=B2F7E21B32F4AF40336822D501383BD917075A2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:57:48:e9:0e:6a:41:cb:17:b3:59:15:f4:
b0:bf:d8:68:04:64:76:93:00:7b:68:9e:3e:10:3b:
8a:0d:a7:dd:a2:19:94:6e:19:98:e9:3d:6a:51:7d:
95:1e:3e:ae:22:4a:46:40:11:7e:4c:86:21:1e:5b:
3f:04:7c:81:a5:55:aa:fd:21:78:82:ca:56:44:72:
b0:5e:46:bc:63:3b:b6:03:45:18:91:84:18:3e:ba:
06:93:86:1b:09:8a:9f:40:c3:b8:ac:99:49:b0:44:
97:2b:74:6b:8e:27:76:ae:ae:9f:a9:56:71:ad:da:
8a:44:15:54:46:3f:46:9b:2f:3d:c2:64:6f:4b:a6:
77:94:ec:a1:96:9b:15:e7:89:c9:6d:db:11:52:17:
b3:94:5c:5d:9f:e5:39:9b:bd:4d:0f:40:80:fb:28:
5e:3b:f3:5d:fe:75:59:c8:81:72:ae:e5:eb:f1:b3:
d8:bc:24:f5:2b:47:48:77:43:8e:b0:cc:8d:ff:ce:
0a:a4:33:ac:28:6b:cb:19:b4:8e:b7:13:bc:2d:d8:
c2:6e:2b:c2:c6:d9:07:2f:0b:d5:21:58:86:f5:bc:
b2:90:99:73:3c:74:f7:a9:dd:20:25:fd:ec:3b:18:
c1:86:ae:61:20:dd:73:9f:87:af:5a:63:dd:f5:62:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F7:E2:1B:32:F4:AF:40:33:68:22:D5:01:38:3B:D9:17:07:5A:2C
X509v3 Authority Key Identifier:
keyid:38:9C:CF:92:38:37:EE:AF:A4:DA:96:AE:20:24:14:19:C9:41:F5:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/389CCF923837EEAFA4DA96AE20241419C941F58A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/389CCF923837EEAFA4DA96AE20241419C941F58A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/34352e3232372e3231362e302f32322d3234203d3e20323637373131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:24:ed:e4:8e:2d:12:7f:22:56:d4:94:9e:ff:ae:48:56:a5:
a3:22:0a:5c:ff:af:26:e8:a7:7f:83:97:b2:b0:33:98:93:5b:
e6:03:fe:97:06:a6:e7:45:62:55:2f:8c:5d:fe:f1:29:76:15:
b9:68:1d:d5:b2:46:56:fb:5b:72:39:c7:0e:5d:13:6c:16:b1:
cb:05:db:50:8e:66:18:02:89:78:e2:5c:9f:5b:0b:e7:5d:a2:
15:ce:97:4f:dc:f1:a8:47:4c:f3:82:d3:4e:45:4f:18:85:28:
af:9a:c1:00:0d:9b:bd:03:99:72:c1:50:3d:a9:71:d2:30:b6:
de:50:23:59:43:29:81:68:ef:f8:56:f9:9b:cc:8a:e3:49:27:
be:45:6f:17:11:89:42:37:5c:d9:c9:59:1f:f2:1a:4b:dc:8e:
b2:d2:6f:3e:d5:88:48:79:9d:2d:92:77:ed:80:a3:4d:c2:42:
dc:3e:50:a8:dc:ad:68:9c:42:27:da:2e:b6:95:2d:6a:cd:69:
95:57:f9:9b:ca:37:4e:d4:6f:9f:29:19:7f:ed:c2:47:13:47:
91:2a:1c:fd:24:a4:ab:a6:9b:e9:13:e7:e2:f6:59:dc:e7:a2:
e7:fb:aa:b4:b5:37:69:67:cb:94:0d:e3:75:91:09:6c:16:77:
fb:1d:2b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:20:31 2025 by rpki-client