Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130302e302f32332d3237203d3e20323636373930.roa
File: 34352e3233332e3130302e302f32332d3237203d3e20323636373930.roa (raw, json)
Hash identifier: YtR1e4yLe8WW+0kUXErAAcXr18rOKQwYARlo9VaPBTw=
Subject key identifier: D8:E6:51:F0:6C:54:03:53:56:B0:40:99:E8:EC:6A:D0:A4:CB:CF:C3
Certificate issuer: /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial: 2AF8C58D51547AE24A822D70B3E10A35A9E8F6AC
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130302e302f32332d3237203d3e20323636373930.roa
Signing time: Tue 05 Mar 2024 17:48:49 +0000
ROA not before: Tue 05 Mar 2024 17:43:49 +0000
ROA not after: Tue 04 Mar 2025 17:48:49 +0000
asID: 266790
IP address blocks: 45.233.100.0/23 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f8:c5:8d:51:54:7a:e2:4a:82:2d:70:b3:e1:0a:35:a9:e8:f6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
Validity
Not Before: Mar 5 17:43:49 2024 GMT
Not After : Mar 4 17:48:49 2025 GMT
Subject: CN=D8E651F06C54035356B04099E8EC6AD0A4CBCFC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c9:28:21:df:75:2c:98:ba:c7:cc:cf:4d:57:
82:38:63:28:21:3a:53:37:e1:c6:30:f8:f8:53:3e:
6f:a5:87:6a:a5:83:93:9a:30:42:57:0c:4f:fe:1f:
ad:3b:00:67:54:55:8d:18:81:05:df:cc:f1:d0:f8:
49:6d:a5:bf:f8:9a:58:45:5f:56:0c:15:6a:da:f5:
26:d0:11:6c:78:33:a8:b0:54:62:9d:32:29:0b:c0:
ab:0d:27:9d:5a:d2:e8:22:5d:40:17:59:ad:88:81:
b9:2a:aa:47:f8:c7:27:87:26:34:49:50:b0:30:dc:
8a:7e:17:be:3e:17:66:ef:26:d8:4a:c0:dd:a8:e2:
fc:5e:77:4c:42:ac:da:e7:9e:14:60:b0:81:75:8b:
9a:48:dc:dd:46:da:ba:66:e4:5c:99:0a:43:91:39:
b1:74:0f:3a:2e:70:c5:95:b9:72:66:6f:7b:90:27:
f3:3e:b4:bc:ed:a7:a8:20:d4:b6:f5:7a:ff:5a:8a:
2f:04:16:af:8b:a2:d3:8b:49:ba:28:1a:8b:80:57:
4f:1f:ce:da:15:19:c5:d9:a9:96:17:37:71:eb:05:
cf:ed:ba:7f:16:7b:7c:c1:27:ec:f7:97:fc:14:8c:
72:30:d2:65:79:5e:59:7a:4f:c8:ac:09:c1:ba:4a:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E6:51:F0:6C:54:03:53:56:B0:40:99:E8:EC:6A:D0:A4:CB:CF:C3
X509v3 Authority Key Identifier:
keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130302e302f32332d3237203d3e20323636373930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.100.0/23
Signature Algorithm: sha256WithRSAEncryption
03:3f:76:53:2a:d5:14:aa:63:f6:b1:de:d2:cb:2f:87:89:bb:
4f:a4:fd:51:0e:db:0f:d9:b2:5a:fb:9c:cd:d0:a9:4e:00:d4:
8f:b3:79:59:01:fb:03:4d:89:05:11:64:d9:04:5f:79:17:21:
5d:ed:11:34:f7:38:62:6e:cd:08:e2:24:02:fd:dc:99:76:d7:
ef:f3:f1:9b:1d:9e:f4:8e:d2:20:e5:52:69:76:95:3b:c3:af:
27:65:91:74:a0:c9:b2:ca:89:e0:c6:cf:fd:5d:0c:2b:08:07:
ca:ce:2b:54:29:61:68:da:fd:8a:29:3d:44:b7:5a:89:1d:db:
fc:d2:cf:4d:40:3f:c0:07:34:37:97:40:e4:d5:2f:04:28:fb:
98:6e:16:06:a6:ac:13:77:0f:f4:04:03:78:ca:90:53:77:a5:
e6:66:57:b5:e3:e5:b0:c8:db:c9:8c:7a:77:a6:58:e7:9b:f6:
cc:8a:8f:92:e2:e4:50:e5:e1:9e:98:84:59:84:3c:83:7b:3e:
36:44:34:b6:3d:ff:26:da:9a:2b:09:54:aa:36:ec:d7:04:25:
24:36:e2:a4:b5:04:ad:e8:d3:58:0b:1c:25:df:11:7b:4e:47:
c0:5b:bc:39:02:62:10:33:0d:87:3e:bc:e2:c5:a2:f9:30:7c:
bc:0d:49:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:17:45 2025 by rpki-client