Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/34352e3232382e37362e302f32322d3234203d3e20323636363832.roa
File: 34352e3232382e37362e302f32322d3234203d3e20323636363832.roa (raw, json)
Hash identifier: bRwtYEsB8DTCBUew20IiWMEUKTFqgVp0cqFQophL49w=
Subject key identifier: A4:F7:55:50:33:0F:9E:5B:F9:06:40:11:F6:1B:D9:09:99:45:6A:00
Certificate issuer: /CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156
Certificate serial: 323C25F6F0E4D07C038656EB5DD9BABADC6E0864
Authority key identifier: 53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/34352e3232382e37362e302f32322d3234203d3e20323636363832.roa
Signing time: Tue 05 Mar 2024 17:40:11 +0000
ROA not before: Tue 05 Mar 2024 17:35:11 +0000
ROA not after: Tue 04 Mar 2025 17:40:11 +0000
asID: 266682
IP address blocks: 45.228.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:3c:25:f6:f0:e4:d0:7c:03:86:56:eb:5d:d9:ba:ba:dc:6e:08:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156
Validity
Not Before: Mar 5 17:35:11 2024 GMT
Not After : Mar 4 17:40:11 2025 GMT
Subject: CN=A4F75550330F9E5BF9064011F61BD90999456A00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:b6:c7:fc:3f:77:41:c9:59:cb:f0:1e:fc:
af:47:9b:92:48:4a:b7:dc:b5:72:50:93:c2:92:5a:
08:5b:ca:2a:c7:db:e8:4c:92:fb:94:27:71:4a:74:
a4:39:87:4e:1d:b8:60:42:89:3d:30:4e:a9:fe:48:
ed:b0:98:23:4c:f5:c7:39:8f:2e:0b:2a:61:10:b7:
ad:34:84:35:7e:ea:63:d3:1f:45:45:78:c7:d1:1b:
e3:5c:42:98:98:3e:34:98:1f:43:27:ce:09:95:08:
4d:a0:68:f9:c7:a3:99:4b:a6:5b:67:3e:9a:2e:0b:
be:73:ef:5e:48:8f:c1:19:2b:67:f7:05:69:df:b5:
0d:81:ba:e6:1b:43:13:07:cf:da:bc:95:8e:41:9b:
68:e6:cd:d6:48:0c:73:b7:ee:b8:33:86:09:ae:f0:
f8:0a:42:48:84:7f:cd:34:c8:16:a6:45:f5:91:6d:
aa:01:5c:d2:4c:aa:4d:e7:bc:ff:ce:29:38:28:6c:
f7:f0:69:65:06:71:e9:7a:b8:f5:7a:ee:16:f2:68:
72:62:9a:38:ff:8b:57:05:db:69:b0:aa:17:e9:a3:
1b:c6:4c:95:c7:21:85:b3:45:98:fe:e6:70:d6:59:
33:31:d1:a7:17:03:1a:62:9c:bb:47:f4:3a:8d:cc:
3a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F7:55:50:33:0F:9E:5B:F9:06:40:11:F6:1B:D9:09:99:45:6A:00
X509v3 Authority Key Identifier:
keyid:53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/34352e3232382e37362e302f32322d3234203d3e20323636363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.76.0/22
Signature Algorithm: sha256WithRSAEncryption
27:0c:fd:b2:4a:30:a2:0f:0e:f1:f8:9e:9c:f0:ef:ae:c3:a2:
5b:44:bc:da:f5:1a:94:5f:48:fc:7a:8b:3f:76:d9:f3:c4:07:
7b:88:c8:4b:b8:bc:e0:db:11:fc:9a:fc:0e:f7:2a:eb:a3:8e:
e3:08:13:ee:e9:7e:df:8b:d5:67:18:40:e7:cc:96:8e:27:d3:
79:49:fc:1d:b9:98:df:92:4c:69:07:c4:76:59:36:9a:d4:38:
33:06:ec:b3:e2:5b:cd:53:27:53:7f:86:93:3b:44:e1:84:f3:
23:f8:bc:75:63:23:64:74:48:da:4b:01:47:fd:82:84:b2:fe:
f6:92:dd:ac:ad:e1:30:11:c0:56:8b:00:46:d4:01:f5:05:37:
2e:25:1b:3e:95:a1:6d:5a:6b:5f:c0:8c:07:aa:05:74:a1:8e:
36:8d:42:2a:dd:08:73:78:f2:f9:6f:bf:1d:0c:85:a9:a7:d1:
e3:e5:ff:9d:35:37:5f:31:58:eb:49:7e:14:10:51:80:2d:ff:
30:66:67:98:05:89:2f:8f:6c:d2:2a:e7:a9:f7:79:43:44:b9:
9c:86:43:0f:b4:fe:6a:3d:0c:fb:cb:d2:b9:18:38:16:50:f1:
b8:d4:60:1e:0d:fd:52:8f:7e:d0:31:b6:14:8c:cd:b8:f0:84:
e5:71:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:11:58 2025 by rpki-client