Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa
File: 34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa (raw, json)
Hash identifier: V1nrmpmoPYJPe4GU314LF2RG6PTpR/uF5k2bd1SMg3Q=
Subject key identifier: 62:A1:E7:5A:30:DC:08:44:D5:92:55:3C:FD:47:D0:9F:2C:F7:95:E3
Certificate issuer: /CN=57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41
Certificate serial: 28A9BCC8C669280F4DBEF10FE1DB05F3A4ACEC1B
Authority key identifier: 57:B2:0D:3E:C2:19:61:A6:50:5D:CA:0A:D0:B3:3D:C3:3C:5C:CD:41
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa
Signing time: Tue 05 Mar 2024 18:20:12 +0000
ROA not before: Tue 05 Mar 2024 18:15:12 +0000
ROA not after: Tue 04 Mar 2025 18:20:12 +0000
asID: 265534
IP address blocks: 45.174.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a9:bc:c8:c6:69:28:0f:4d:be:f1:0f:e1:db:05:f3:a4:ac:ec:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41
Validity
Not Before: Mar 5 18:15:12 2024 GMT
Not After : Mar 4 18:20:12 2025 GMT
Subject: CN=62A1E75A30DC0844D592553CFD47D09F2CF795E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:b5:e1:46:2c:8b:9e:89:34:97:27:58:80:
33:93:90:74:de:05:cc:a9:e0:62:95:3d:93:80:99:
b5:0c:b0:5d:38:7b:f1:5b:70:14:7f:00:20:c5:89:
d6:45:26:b5:1b:8b:06:73:93:cd:e2:87:f3:d7:b6:
68:20:2f:1d:1d:1c:6e:30:e1:f0:8d:b2:b9:07:3c:
02:6c:26:37:24:e9:e9:08:5d:95:8e:40:f2:0d:68:
fd:ee:6d:a5:37:2c:7a:b2:cc:08:82:01:8e:ac:c4:
91:86:6a:9f:f2:47:ba:f6:ba:84:5b:78:e7:7b:7c:
5a:fd:d0:e3:12:c1:96:45:c6:b3:69:11:82:f9:9d:
89:dd:2b:65:7a:9a:80:69:94:e5:78:2f:73:57:a6:
cb:e4:9d:2e:2e:e5:ac:ca:20:61:b5:7b:c6:6d:5b:
92:65:8f:bb:79:7a:ad:05:1a:9c:07:81:8f:0b:d7:
39:95:41:1c:4c:05:32:45:94:19:e9:0a:3d:d1:7e:
39:36:32:30:5f:b0:06:8a:a0:60:46:bb:a5:21:f9:
1e:4b:c4:dd:9c:06:be:98:eb:72:ba:fa:4c:50:04:
5e:90:c7:4d:47:d1:80:fc:69:af:fa:6f:a8:c4:55:
aa:d1:e4:49:ab:bb:78:86:62:61:48:2b:19:fe:c5:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A1:E7:5A:30:DC:08:44:D5:92:55:3C:FD:47:D0:9F:2C:F7:95:E3
X509v3 Authority Key Identifier:
keyid:57:B2:0D:3E:C2:19:61:A6:50:5D:CA:0A:D0:B3:3D:C3:3C:5C:CD:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.228.0/22
Signature Algorithm: sha256WithRSAEncryption
da:1f:bf:f3:70:89:fa:49:1e:b0:de:16:1e:b9:04:c3:2f:8f:
43:a5:cc:58:20:7e:05:0a:47:0b:dd:1e:9a:55:be:10:c3:26:
c3:9e:e4:a8:8e:9b:1f:bb:51:a9:f8:4f:ed:0a:8c:c3:61:ef:
d5:a7:a7:ec:c6:8a:4d:14:03:cd:0f:54:67:b2:35:f0:0c:37:
61:71:d5:3c:40:50:cc:09:7e:43:a2:dc:13:9a:f3:d2:0f:2a:
b5:30:d2:ed:b6:56:50:b8:45:11:9c:60:bb:0c:d1:2b:15:0c:
9d:61:9c:5a:9a:54:fe:a2:5a:a2:86:67:1b:72:bf:0e:ca:d5:
67:7b:7d:de:71:9b:e3:7c:7f:99:d4:c3:1d:4e:72:eb:73:e0:
29:3d:fc:c0:1e:05:99:7e:ff:da:4c:09:00:20:cc:09:0e:b9:
9a:47:b6:fa:ba:42:db:40:bb:7e:29:9b:15:57:1b:1f:24:87:
89:56:34:5c:de:ec:33:b7:99:a4:48:a6:d8:28:c6:83:0f:61:
1b:2f:6c:02:a0:1d:3c:1a:0a:0d:0b:f4:ee:dd:8b:c1:e7:a2:
bd:cd:e8:89:6a:2d:60:d0:60:db:ef:4e:99:3c:94:ba:a1:30:
83:a2:0f:00:db:93:30:09:63:50:de:83:a4:b7:e6:2e:9b:ee:
a6:14:3e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:34:13 2025 by rpki-client