Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32322d3232203d3e20323637393134.roa
File: 34352e3137392e3135322e302f32322d3232203d3e20323637393134.roa (raw, json)
Hash identifier: XTwPQKjsWiwc+dkygz+Fz1PSNEH83eoYGrP1cR09eOw=
Subject key identifier: 20:B1:E1:C0:C8:D7:D7:3C:10:20:4C:24:0F:09:4F:D7:56:E8:09:32
Certificate issuer: /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial: 35CEF3D48FC3737DEBE56A5B26EDFDB01A255A56
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32322d3232203d3e20323637393134.roa
Signing time: Tue 05 Mar 2024 17:59:57 +0000
ROA not before: Tue 05 Mar 2024 17:54:57 +0000
ROA not after: Tue 04 Mar 2025 17:59:57 +0000
asID: 267914
IP address blocks: 45.179.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ce:f3:d4:8f:c3:73:7d:eb:e5:6a:5b:26:ed:fd:b0:1a:25:5a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Validity
Not Before: Mar 5 17:54:57 2024 GMT
Not After : Mar 4 17:59:57 2025 GMT
Subject: CN=20B1E1C0C8D7D73C10204C240F094FD756E80932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:57:f1:f4:00:a6:09:dc:5d:8f:cf:14:a8:
e4:db:43:9e:b9:ef:1e:6e:bf:58:7f:83:10:73:39:
e7:8c:6c:16:e5:e0:15:2f:5d:f5:35:f4:8d:a0:bb:
30:09:8e:c2:ad:f4:70:52:6f:70:f7:39:1c:a0:66:
a9:d6:df:cd:64:d7:a1:07:82:be:fa:f6:40:95:18:
c2:90:cd:85:92:1b:a3:a1:4d:80:ea:39:76:c9:0f:
e5:2a:d9:e3:09:2c:b7:4f:c5:40:d6:22:12:5b:47:
96:aa:a5:69:88:25:2e:b0:db:c0:5e:98:82:d1:b0:
0d:a9:cb:74:8c:e1:4a:f0:b9:13:82:56:57:0a:53:
35:74:85:90:79:82:54:4e:f5:06:f0:ca:16:70:16:
76:6e:87:aa:e2:93:f3:da:56:d4:6b:ae:90:64:fd:
0a:39:df:97:63:d1:f5:a2:89:2f:11:a2:46:31:fa:
59:da:9f:a8:1d:8a:3d:38:a3:75:29:93:7f:cb:78:
91:cd:1d:c2:e8:5c:d6:eb:35:d2:c2:6b:73:eb:34:
0a:1c:92:49:b1:7f:1d:98:53:89:b5:7a:ff:ba:ea:
42:75:19:f0:97:e3:5f:6b:89:ec:a9:f1:df:99:e1:
1e:65:4d:56:af:67:e9:d5:90:5d:fa:17:9d:c8:e5:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B1:E1:C0:C8:D7:D7:3C:10:20:4C:24:0F:09:4F:D7:56:E8:09:32
X509v3 Authority Key Identifier:
keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32322d3232203d3e20323637393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.179.152.0/22
Signature Algorithm: sha256WithRSAEncryption
73:9b:48:10:c1:b2:42:c0:65:bb:d0:73:88:52:2b:5d:c6:16:
b4:11:e8:43:7a:a9:74:03:b6:69:85:11:1a:91:01:cc:79:71:
53:f0:49:19:2c:f8:34:02:f3:73:f6:96:9a:c7:14:4f:dd:1b:
06:d7:96:ad:5c:70:5d:ba:b7:ae:92:a6:e2:bd:c3:54:3c:a3:
b8:2f:4e:8e:d9:fb:9f:35:26:cc:0c:91:7f:0b:fb:21:c3:bf:
4e:6b:00:76:c0:ab:34:bd:03:34:25:33:f7:69:bc:8e:9e:63:
92:f1:15:9f:eb:5a:21:4d:a7:ff:f9:86:08:b8:0c:45:bf:90:
9e:d6:b7:90:09:93:10:08:c6:9d:11:16:94:90:6b:85:b1:15:
2c:8d:e2:48:c8:00:0d:bc:c3:95:1c:49:ef:86:bb:c7:53:61:
c4:3e:b3:81:d1:eb:f8:c1:99:9d:f1:35:3d:23:1b:61:ed:9c:
47:db:f6:69:a0:4a:68:28:7d:77:e4:2b:5e:43:33:f8:e8:3d:
0d:70:5c:1a:31:a7:e7:9a:d8:6b:a4:d5:ec:28:45:ad:7f:1b:
90:e3:ea:f4:11:92:46:86:50:c7:15:43:66:fe:59:bb:53:b2:
8e:44:06:ca:f8:12:3a:64:3b:24:e6:0d:57:59:0c:f0:c8:13:
64:97:dc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:12:15 2025 by rpki-client