Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3791B0F7B9B0A0F44434E8FDED11277147ED16CD9781BE55AC801FE3EFFFA896/0/34352e3232342e3134382e302f32322d3234203d3e203532343638.roa
File: 34352e3232342e3134382e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier: m8S+YRLRuP9y9tjR7+RwRydIN327+Wm6JInQ3gniNLg=
Subject key identifier: B2:44:1E:3E:D6:D4:C8:08:DF:D6:B5:02:96:2B:8C:AC:62:57:B5:94
Certificate issuer: /CN=DAADFF1BE65A83E411EFC02ED029233890DD0646
Certificate serial: 0835E00334C5AE9409F9714B80659725987FA1E9
Authority key identifier: DA:AD:FF:1B:E6:5A:83:E4:11:EF:C0:2E:D0:29:23:38:90:DD:06:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAADFF1BE65A83E411EFC02ED029233890DD0646.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3791B0F7B9B0A0F44434E8FDED11277147ED16CD9781BE55AC801FE3EFFFA896/0/34352e3232342e3134382e302f32322d3234203d3e203532343638.roa
Signing time: Tue 05 Mar 2024 17:50:45 +0000
ROA not before: Tue 05 Mar 2024 17:45:45 +0000
ROA not after: Tue 04 Mar 2025 17:50:45 +0000
asID: 52468
IP address blocks: 45.224.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:35:e0:03:34:c5:ae:94:09:f9:71:4b:80:65:97:25:98:7f:a1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DAADFF1BE65A83E411EFC02ED029233890DD0646
Validity
Not Before: Mar 5 17:45:45 2024 GMT
Not After : Mar 4 17:50:45 2025 GMT
Subject: CN=B2441E3ED6D4C808DFD6B502962B8CAC6257B594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:1a:50:f9:e3:49:89:d4:ca:81:c6:86:a3:
7f:4f:51:9d:ba:80:ab:16:53:5b:fd:87:16:4d:18:
f7:0f:f4:47:bb:4b:65:30:32:6b:a0:ef:b6:34:0d:
06:ca:6a:b6:9d:81:10:2b:07:12:26:5d:b3:8e:77:
62:e1:61:79:4a:2c:26:bf:8a:b0:e8:e4:a9:45:4c:
c4:13:a8:96:6c:df:07:a3:7e:44:80:df:45:c1:1d:
a6:ff:a9:67:a4:fe:ba:b2:6e:64:57:4d:21:04:bb:
6b:6e:63:4d:5d:6d:64:97:a3:a7:87:0e:7c:53:80:
9d:84:a6:99:ba:bc:3e:7d:c3:49:c8:e8:23:4c:93:
6b:e4:d5:45:74:22:78:6b:ef:f4:6e:3c:ae:fe:95:
72:15:f6:fd:1f:6e:a4:55:9e:08:c1:5f:f8:5a:24:
49:9d:67:37:26:8e:f0:8b:83:e7:07:d5:c3:2d:1d:
66:14:0d:c8:42:54:82:c0:01:b6:1c:87:bd:67:0b:
3c:b3:98:82:f7:14:b1:8e:a1:0b:77:4a:75:9b:09:
80:e7:53:c3:83:91:2a:14:4b:9c:31:f7:6c:e6:aa:
4a:b3:b4:5a:d8:7c:66:63:7a:69:28:c9:c2:46:55:
55:84:4a:9a:71:80:d0:08:a8:9d:01:4a:b1:4c:e6:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:44:1E:3E:D6:D4:C8:08:DF:D6:B5:02:96:2B:8C:AC:62:57:B5:94
X509v3 Authority Key Identifier:
keyid:DA:AD:FF:1B:E6:5A:83:E4:11:EF:C0:2E:D0:29:23:38:90:DD:06:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3791B0F7B9B0A0F44434E8FDED11277147ED16CD9781BE55AC801FE3EFFFA896/0/DAADFF1BE65A83E411EFC02ED029233890DD0646.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAADFF1BE65A83E411EFC02ED029233890DD0646.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3791B0F7B9B0A0F44434E8FDED11277147ED16CD9781BE55AC801FE3EFFFA896/0/34352e3232342e3134382e302f32322d3234203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.148.0/22
Signature Algorithm: sha256WithRSAEncryption
29:03:a7:ba:25:c1:4b:0c:f3:dd:49:25:aa:2d:f3:03:1e:a1:
ba:75:c1:f1:f5:34:6e:25:4a:fd:a8:bb:62:dc:e3:8f:a6:a7:
b0:16:a8:88:e5:31:37:a5:21:e3:24:73:1a:16:de:4c:ac:b4:
8f:1f:36:12:ba:1a:1c:44:11:f6:bb:17:4e:4b:ae:e0:1d:d8:
68:03:0f:6a:bc:d0:db:27:da:1d:40:47:a9:49:0b:6e:6a:ae:
98:0f:39:fd:7e:21:8e:7d:b6:0c:b2:c1:13:29:e2:5b:90:3b:
bb:4c:6a:4f:dc:db:de:22:cf:ee:c5:df:2a:33:39:2c:98:53:
64:78:cb:6e:11:13:75:63:4f:04:e6:9f:60:35:a6:92:16:54:
96:6f:5a:6f:94:4a:90:c0:79:89:59:c9:93:cb:95:26:45:88:
24:a2:db:f9:d1:84:39:da:7c:8d:1e:20:6a:6e:f9:73:2d:74:
3c:5e:71:70:46:a6:55:39:2a:56:0c:b5:21:3e:a0:41:38:1a:
bd:bd:7f:68:b2:9f:bf:c6:74:e4:54:07:2b:56:2a:54:84:22:
0a:09:80:3f:1a:32:c5:9e:f4:da:bf:c1:74:51:ad:f3:27:44:
fa:3e:d9:15:d2:de:eb:35:18:00:9b:30:10:17:9c:f3:b7:6f:
d9:9a:d0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:57:16 2025 by rpki-client