Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/34352e3232342e3138382e302f32322d3234203d3e20323635383533.roa
File: 34352e3232342e3138382e302f32322d3234203d3e20323635383533.roa (raw, json)
Hash identifier: RD9kfMAbm7a8IhFOoL5BOV99mhVK85+oX1YkjFAtiVY=
Subject key identifier: 07:83:C2:D9:6E:A0:80:87:54:3C:F1:05:98:CD:C5:79:82:AE:9D:D4
Certificate issuer: /CN=91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6
Certificate serial: 21B18FEBB84404CC1BC80B5B9E8ACCF739D15838
Authority key identifier: 91:DB:B2:B4:BA:25:E4:71:DB:FD:1A:B6:84:91:63:BE:A0:77:E1:A6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/34352e3232342e3138382e302f32322d3234203d3e20323635383533.roa
Signing time: Tue 05 Mar 2024 17:52:08 +0000
ROA not before: Tue 05 Mar 2024 17:47:08 +0000
ROA not after: Tue 04 Mar 2025 17:52:08 +0000
asID: 265853
IP address blocks: 45.224.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:b1:8f:eb:b8:44:04:cc:1b:c8:0b:5b:9e:8a:cc:f7:39:d1:58:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6
Validity
Not Before: Mar 5 17:47:08 2024 GMT
Not After : Mar 4 17:52:08 2025 GMT
Subject: CN=0783C2D96EA08087543CF10598CDC57982AE9DD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:91:04:df:9c:21:73:a2:d4:f0:78:40:54:
75:f1:76:14:27:b5:5b:03:0e:3f:8b:22:d7:50:fc:
e5:a7:63:f8:1b:09:bc:7f:61:55:fe:87:72:9c:c3:
0d:9b:ed:ca:36:f2:b6:16:a6:82:6e:19:e8:96:73:
f6:3f:19:7f:9e:23:e4:4d:8e:78:02:ee:11:d5:e4:
dd:53:6b:79:c7:c4:f3:06:92:1d:80:e6:51:f3:a1:
4a:86:4d:9f:a5:2f:58:a6:21:01:12:4c:44:56:4f:
e3:6d:48:cb:d0:aa:f0:94:2d:dd:5e:c4:ac:7e:c8:
a3:71:24:1b:07:d6:47:70:c3:76:ab:5e:c8:99:95:
29:85:39:b6:f0:c8:46:7c:f5:f1:3e:2b:50:b3:d0:
e7:d8:ff:0f:cb:14:6f:31:91:55:23:24:48:74:73:
4f:ff:7f:c2:20:d4:e0:46:b6:f2:01:6a:57:b3:24:
44:33:8c:08:70:15:ba:10:ec:92:ba:6d:94:bf:ca:
8d:6d:4f:90:3a:ad:e8:f5:c1:bd:1b:ea:ca:3d:7f:
f9:bf:a4:37:9a:f4:54:dc:d0:d9:13:c7:49:68:a8:
35:ce:51:38:cf:68:76:dc:e5:94:db:76:26:fa:0d:
2b:7f:28:74:67:22:b6:99:d5:df:c5:f3:9b:d8:63:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:83:C2:D9:6E:A0:80:87:54:3C:F1:05:98:CD:C5:79:82:AE:9D:D4
X509v3 Authority Key Identifier:
keyid:91:DB:B2:B4:BA:25:E4:71:DB:FD:1A:B6:84:91:63:BE:A0:77:E1:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/34352e3232342e3138382e302f32322d3234203d3e20323635383533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.188.0/22
Signature Algorithm: sha256WithRSAEncryption
10:a5:b8:c4:77:95:a7:47:fe:cd:00:fe:93:51:80:41:d3:03:
63:46:c7:ec:2c:a1:2b:aa:5b:0f:16:52:82:96:3a:06:8d:cd:
c8:00:b3:27:ba:60:47:39:75:3a:72:54:14:f3:0b:37:c9:20:
0d:58:15:90:17:5b:04:23:5c:c4:03:ab:28:6e:53:19:fe:f7:
9c:f4:bb:9e:a0:15:8b:40:87:67:65:7d:36:54:9d:da:b1:de:
7c:35:9f:bc:5f:a1:4a:73:d8:1c:4e:24:b3:7d:27:9f:45:73:
51:ed:1b:d6:98:c7:b5:fa:5b:13:03:78:88:34:2c:e2:3b:f3:
34:2e:bb:a7:63:1b:58:bb:df:b3:f5:0b:54:9a:8e:33:61:6c:
56:cf:4a:d2:f9:7c:db:68:4f:cd:1c:e2:5f:40:18:64:9f:12:
9c:23:9c:2f:59:49:3f:07:f6:b5:54:0d:a4:52:ea:fd:e9:fd:
da:5c:9a:3c:1a:4f:6b:00:c3:8a:d0:3d:21:19:d9:c9:43:c3:
4b:e4:d2:c5:e4:ed:93:3c:d3:03:03:0d:47:b5:20:0a:02:7c:
84:5c:95:9c:4c:5a:3a:6e:2e:7c:47:dc:f9:bc:c2:c8:7e:8a:
3b:b5:6f:86:d7:0c:66:d6:77:6f:a6:66:27:21:00:96:10:63:
15:9b:05:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:02:34 2025 by rpki-client