Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3134392e302f32342d3234203d3e203238343335.roa
File: 34352e3138392e3134392e302f32342d3234203d3e203238343335.roa (raw, json)
Hash identifier: wGtkWefOn5fdhOaKNhV3SXIgJFw9jy5+Y8ahQHD6TjY=
Subject key identifier: D7:4C:38:1D:63:D5:B8:45:44:C4:46:6B:7C:DB:71:9E:13:C5:C0:A3
Certificate issuer: /CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
Certificate serial: 25930D95AC668BAE5E2312BB01C204A057C49E75
Authority key identifier: 96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3134392e302f32342d3234203d3e203238343335.roa
Signing time: Tue 05 Mar 2024 18:12:44 +0000
ROA not before: Tue 05 Mar 2024 18:07:44 +0000
ROA not after: Tue 04 Mar 2025 18:12:44 +0000
asID: 28435
IP address blocks: 45.189.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:93:0d:95:ac:66:8b:ae:5e:23:12:bb:01:c2:04:a0:57:c4:9e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
Validity
Not Before: Mar 5 18:07:44 2024 GMT
Not After : Mar 4 18:12:44 2025 GMT
Subject: CN=D74C381D63D5B84544C4466B7CDB719E13C5C0A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c6:ed:66:12:57:14:b0:a7:9a:e2:ef:05:4c:
c4:c3:1f:b4:d8:01:74:90:22:8f:68:29:ab:4b:8c:
9d:11:f6:69:8b:e2:c1:bd:ce:4b:05:19:6b:d6:b2:
71:4f:9b:26:d4:6e:40:55:d0:9c:a7:58:ee:75:42:
18:93:6f:df:48:64:15:23:dc:93:8e:07:2c:a9:1d:
2b:36:78:5c:a1:0b:77:e0:e7:e6:27:29:94:d7:92:
0d:1b:42:91:84:f6:d5:e5:ea:49:cb:e0:b7:82:5a:
84:dd:f8:b2:ab:c5:2d:e2:92:c1:fd:3d:51:d9:29:
f5:e1:16:bd:b9:3f:fc:48:ab:77:71:21:a1:28:b2:
0d:ff:41:c5:56:da:b3:32:1d:f4:e7:9b:33:3c:10:
1e:01:27:01:52:62:65:34:b4:f3:44:36:1d:74:33:
e5:d7:9a:33:03:12:05:aa:19:76:5f:78:10:49:42:
bd:81:30:26:d7:7f:5e:a3:c8:71:c9:92:da:72:7f:
84:e8:c2:42:7d:30:8c:10:1e:b1:3f:52:b1:5b:a4:
72:b8:a1:af:4e:56:2c:a8:aa:1b:ca:67:f5:a9:75:
5a:aa:68:b9:af:88:71:25:8a:03:a1:6c:cd:d9:6a:
02:c4:c9:78:4f:a8:7a:24:87:68:77:84:f0:69:c8:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4C:38:1D:63:D5:B8:45:44:C4:46:6B:7C:DB:71:9E:13:C5:C0:A3
X509v3 Authority Key Identifier:
keyid:96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3134392e302f32342d3234203d3e203238343335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.149.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d0:6f:6e:b2:59:20:e9:d5:a0:6c:6a:63:42:ac:ca:ed:d4:
13:f2:f1:aa:f3:43:f5:16:79:f5:97:07:f6:4a:7f:3f:94:b6:
bf:26:16:3d:6b:f0:e7:72:64:c2:f7:53:2a:d7:d8:c4:35:c9:
c0:c2:cf:77:8f:8e:91:b4:21:8e:55:89:2c:30:bf:6a:96:51:
81:80:28:a5:62:41:0c:14:4d:00:6b:b5:87:21:85:33:f7:8e:
32:99:c2:48:af:b2:2c:a3:de:44:52:7c:4d:da:be:e5:b9:79:
3e:70:1c:00:56:09:65:9c:1a:df:a0:ec:3c:72:be:90:09:ab:
2f:66:0c:0d:fb:e0:7a:42:eb:80:e3:dd:76:28:07:0c:87:91:
ba:76:68:fb:98:a2:e9:16:e7:9f:5d:39:87:3a:b4:d2:d6:d3:
88:0d:8b:b1:83:1f:4f:22:06:a7:81:4d:b0:b5:40:c6:65:86:
4c:b1:84:ca:07:43:c7:10:33:a1:73:e9:ac:54:ca:fe:07:5c:
f6:7d:b9:f4:0f:03:62:79:14:0b:70:0d:c5:35:e4:96:80:87:
a0:03:38:41:e2:39:88:0d:a3:76:1b:8c:d4:74:50:40:8d:c4:
72:2d:02:2f:a8:d1:04:2c:f6:91:9c:7e:24:c9:54:da:0f:db:
bc:f9:c5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:46:57 2025 by rpki-client