Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa
File: 34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa (raw, json)
Hash identifier: l/en10Om4Si29mlufHWLN09ePz3dCvUqT4/P00O/EjI=
Subject key identifier: 62:F0:5C:C3:B3:EB:18:E5:72:3B:6A:C0:60:C8:41:F6:C7:57:64:A9
Certificate issuer: /CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
Certificate serial: 7701256B4F372703AFAA09D701B1402E3AB3C499
Authority key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa
Signing time: Thu 21 Mar 2024 19:15:04 +0000
ROA not before: Thu 21 Mar 2024 19:10:04 +0000
ROA not after: Thu 20 Mar 2025 19:15:04 +0000
asID: 265684
IP address blocks: 45.228.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:01:25:6b:4f:37:27:03:af:aa:09:d7:01:b1:40:2e:3a:b3:c4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
Validity
Not Before: Mar 21 19:10:04 2024 GMT
Not After : Mar 20 19:15:04 2025 GMT
Subject: CN=62F05CC3B3EB18E5723B6AC060C841F6C75764A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:21:ce:8f:95:e7:71:56:9f:d7:43:1c:72:
1f:1b:6b:5d:9b:c4:0d:a8:e2:3d:9c:e9:ff:fb:a4:
c6:42:d6:a1:62:77:b2:69:f6:4a:1c:07:e3:91:c0:
66:b4:1c:b7:ad:cc:1b:57:a7:86:36:df:7d:f0:7d:
a3:0b:3f:ae:c9:b0:c6:1d:d6:6d:ce:a6:ce:e4:90:
7e:0d:f5:26:51:e1:0d:3e:f8:b0:6c:2e:b5:23:68:
03:2c:c9:cc:a7:7d:1b:4a:0c:80:c6:35:33:cd:95:
86:b4:c0:83:8f:7c:05:71:43:c9:f3:ba:f7:98:e1:
7b:12:e4:6f:94:69:fd:c9:c5:6a:e2:90:ca:25:83:
65:20:15:e1:55:2e:47:47:50:ee:6f:e3:28:fb:89:
d5:50:fd:85:d4:54:93:6d:6b:74:6a:9c:b1:47:58:
57:ef:d2:4c:c4:04:31:fd:f4:2f:c1:13:1b:6a:eb:
40:a5:93:6b:92:8d:a2:bc:76:7f:bf:71:ba:98:19:
f8:4d:44:d3:e3:0e:8b:f9:20:9d:55:a5:f6:25:7a:
e0:f4:ee:0a:7f:80:09:cc:b2:7c:ca:f3:e7:7c:74:
1f:a5:5a:34:0e:2d:c0:8b:e6:bf:2f:bc:03:1e:da:
70:74:ed:6f:bb:89:9a:6a:1a:56:06:fe:27:dc:87:
26:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F0:5C:C3:B3:EB:18:E5:72:3B:6A:C0:60:C8:41:F6:C7:57:64:A9
X509v3 Authority Key Identifier:
keyid:DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.232.0/24
Signature Algorithm: sha256WithRSAEncryption
26:da:04:61:c0:55:12:24:e0:c0:51:9b:f9:67:80:5b:23:53:
d1:87:ef:55:e1:98:c7:95:5b:67:96:d9:c9:d0:ce:29:35:fa:
65:b6:c9:85:aa:32:cd:94:52:ed:f7:b9:c2:e0:17:38:e8:15:
46:a6:3f:4f:7d:fa:90:7d:9d:23:2b:b5:52:76:4d:67:8a:77:
10:54:45:92:8d:9f:82:c2:cf:c6:9f:aa:4f:f1:29:bf:41:d1:
42:c5:9b:45:79:7d:c7:ea:11:42:02:fe:c1:5c:68:01:eb:67:
b3:fa:2d:6f:1b:4a:7a:27:30:00:e9:70:12:f3:7f:02:b1:63:
da:6b:97:b5:28:e7:d5:02:5d:cd:b9:3e:96:1c:b0:3d:04:4a:
4d:19:58:98:53:bc:f4:3b:28:9b:18:82:37:10:9d:77:c5:e4:
68:2a:d3:fa:6c:dd:17:96:9a:d1:3f:98:b8:6a:d3:b0:2c:e4:
33:ba:45:5a:72:0c:47:36:bb:3d:14:23:65:31:6a:c6:08:7f:
a6:34:c6:6f:32:9b:94:c3:78:1d:f5:82:9f:3a:a3:b1:9a:5e:
2f:ac:28:d0:df:06:a8:8d:dc:38:61:35:48:1a:40:5a:c8:da:
fe:2e:fe:9d:45:9f:b0:8c:43:2d:15:df:71:16:88:71:8e:fb:
3b:ec:4e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:18:00 2025 by rpki-client