Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36342e302f32342d3234203d3e2030.roa
File: 34352e36382e36342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 5GjU1t2SVw/qZfhITxOEiRIqermnwrUJ77pZ23Ipgvs=
Subject key identifier: 5D:B2:2B:21:65:10:94:7F:1D:C8:5C:F5:32:EF:4E:D9:04:6B:2B:5B
Certificate issuer: /CN=42088D6FEC3FD14B71DEDB78860C90D825571466
Certificate serial: 689B32F0A2A0532F0ACEAECB41658B9FD1FFC48C
Authority key identifier: 42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36342e302f32342d3234203d3e2030.roa
Signing time: Mon 04 Nov 2024 20:50:00 +0000
ROA not before: Mon 04 Nov 2024 20:45:00 +0000
ROA not after: Mon 03 Nov 2025 20:50:00 +0000
asID: 0
IP address blocks: 45.68.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:9b:32:f0:a2:a0:53:2f:0a:ce:ae:cb:41:65:8b:9f:d1:ff:c4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42088D6FEC3FD14B71DEDB78860C90D825571466
Validity
Not Before: Nov 4 20:45:00 2024 GMT
Not After : Nov 3 20:50:00 2025 GMT
Subject: CN=5DB22B216510947F1DC85CF532EF4ED9046B2B5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:69:e6:48:29:1a:fc:3b:b8:7a:a8:07:4c:
e0:6f:ff:d5:93:54:51:ac:e9:f0:4a:4a:77:18:46:
ec:54:44:5b:16:1c:46:ec:42:73:50:00:a9:7b:ee:
24:13:66:36:7b:0d:9a:92:d8:57:73:21:55:2c:a6:
f4:dc:5a:46:d4:86:53:fa:37:49:99:d5:30:14:1e:
f6:bc:86:65:2d:4f:4c:28:95:5b:8d:af:16:8e:3c:
09:5b:95:7e:74:92:46:e3:87:3b:93:98:1b:3d:7c:
d9:75:ea:ae:46:86:4f:ac:af:d9:f0:1d:bb:b1:dc:
84:c5:69:af:ed:78:2b:1d:b1:2c:d8:f1:d7:22:f2:
f3:89:92:40:ab:02:54:91:df:93:f7:85:43:42:5a:
14:3d:a5:2d:c4:e6:c1:5a:33:a7:4a:fd:54:30:17:
26:ea:fb:ad:c0:00:41:63:5a:d0:6f:cd:79:a7:ae:
47:07:e2:27:ce:5a:f7:55:a1:c5:59:1a:eb:24:38:
20:a6:21:05:74:f0:8c:d6:52:53:f3:79:f4:7e:ea:
a8:6c:be:6d:13:70:1d:33:e5:d6:0f:60:6f:d6:78:
2a:40:37:c3:15:d7:06:f1:0c:a6:76:47:6d:67:02:
97:97:58:86:58:5d:6d:5c:35:dd:de:5b:ae:61:94:
1e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B2:2B:21:65:10:94:7F:1D:C8:5C:F5:32:EF:4E:D9:04:6B:2B:5B
X509v3 Authority Key Identifier:
keyid:42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36342e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.64.0/24
Signature Algorithm: sha256WithRSAEncryption
90:7b:ad:13:59:ab:47:ac:ba:7a:fa:68:45:b6:2e:53:21:91:
58:d0:5d:76:e7:bb:a4:34:b3:20:d1:6c:27:1a:65:64:1b:2d:
6c:a7:b7:93:8a:e4:c2:d4:c3:4b:64:54:ad:25:7a:3c:8f:65:
8a:ba:66:00:09:bf:80:56:5f:10:99:99:d1:a3:e3:44:a9:29:
ae:08:c4:9c:27:3d:38:4d:0a:f4:fc:cf:80:97:03:ce:79:b7:
86:1e:d8:ba:06:d1:ec:b5:9a:a7:e9:bc:ed:a9:72:1e:2d:29:
83:2b:f3:f2:61:56:df:52:f5:87:2f:c8:f5:d9:61:21:25:d7:
70:77:70:4f:97:06:8a:3c:4d:9f:11:75:c7:75:ed:b6:ea:c7:
f9:5a:af:2a:8a:f6:72:1f:0d:73:50:bb:a4:6f:79:29:ac:37:
b2:15:e5:c2:b3:ab:f2:cf:84:07:ef:85:44:bf:c2:bd:5d:39:
f6:58:84:e6:cf:8e:59:99:0e:7d:10:f8:d3:7d:2b:74:48:b3:
cf:43:55:eb:3e:b9:11:63:f7:52:98:0d:5e:c8:72:fb:d3:c9:
93:01:15:43:19:11:cc:bb:6c:c6:38:dc:b7:2b:7d:7d:b5:36:
3f:27:3b:06:f1:b5:3d:3d:f7:d5:56:39:44:74:f8:4a:bb:af:
9b:0b:45:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:27 2025 by rpki-client