Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/34352e342e3230302e302f32322d3234203d3e20323633323338.roa
File: 34352e342e3230302e302f32322d3234203d3e20323633323338.roa (raw, json)
Hash identifier: PH1Qo1MoMGVz5CtYTA5Ly0hAQBuytNdtai0GP2nR8XM=
Subject key identifier: 74:FC:68:BE:69:16:77:D5:3D:F3:B5:5B:48:67:19:C9:B8:72:EA:DE
Certificate issuer: /CN=74CB08D6E0688F8E499DD91190E49000CC837759
Certificate serial: 13987C88DE70B2C2D81DCCE24F5A68B525C3E7A3
Authority key identifier: 74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/34352e342e3230302e302f32322d3234203d3e20323633323338.roa
Signing time: Tue 05 Mar 2024 18:12:32 +0000
ROA not before: Tue 05 Mar 2024 18:07:32 +0000
ROA not after: Tue 04 Mar 2025 18:12:32 +0000
asID: 263238
IP address blocks: 45.4.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:98:7c:88:de:70:b2:c2:d8:1d:cc:e2:4f:5a:68:b5:25:c3:e7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74CB08D6E0688F8E499DD91190E49000CC837759
Validity
Not Before: Mar 5 18:07:32 2024 GMT
Not After : Mar 4 18:12:32 2025 GMT
Subject: CN=74FC68BE691677D53DF3B55B486719C9B872EADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:08:d6:f2:e7:e4:66:89:01:ea:d1:41:44:
c0:e6:ee:96:b4:59:c0:ca:b1:d4:27:22:43:1f:1a:
85:e5:63:ed:c5:22:6c:28:ba:1a:55:80:a7:8a:fa:
7b:6d:e0:37:11:df:2d:e1:52:97:13:1a:1a:32:e7:
af:97:b7:64:86:ae:90:51:fa:1c:c8:00:45:79:b3:
0f:ac:35:48:10:3e:cd:f3:1f:d2:d8:86:8a:c9:7f:
5a:0a:1b:41:0c:43:0b:77:60:2f:15:a0:61:63:1e:
7a:71:9e:a8:c8:46:9f:fa:c4:ed:b2:e3:f6:8d:a3:
82:20:88:fb:36:c2:af:94:00:cf:f6:60:ea:95:aa:
0e:4b:f3:54:35:b3:9d:c2:14:b4:22:33:72:f2:2e:
2a:fd:55:ca:7f:e5:5d:96:fe:ee:00:61:ae:0a:d7:
01:18:de:72:fb:ee:2f:0c:df:91:6e:94:73:db:b3:
dd:0e:10:10:f0:81:46:d5:8b:fc:3c:99:99:ff:6b:
39:7e:e8:ab:53:85:e3:2e:e4:31:d9:95:37:a3:71:
67:16:f9:da:f2:7e:ad:ba:7f:33:81:fb:7f:2a:1c:
7a:3e:f3:98:d3:ea:0f:ad:1c:ff:a8:48:2c:48:93:
bd:48:6b:4f:d4:25:93:e6:74:d9:0c:91:e2:66:c7:
e9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FC:68:BE:69:16:77:D5:3D:F3:B5:5B:48:67:19:C9:B8:72:EA:DE
X509v3 Authority Key Identifier:
keyid:74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/34352e342e3230302e302f32322d3234203d3e20323633323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.200.0/22
Signature Algorithm: sha256WithRSAEncryption
08:52:04:1d:20:d3:20:12:4a:b4:b3:2b:95:a0:db:34:f6:e5:
fd:ef:30:a3:e8:b1:50:5d:3d:5d:ae:64:00:b1:c8:dc:a9:91:
db:9c:12:85:2d:0e:a8:35:12:c0:92:bf:59:6b:47:73:ba:08:
9a:a4:2d:92:3c:0d:f5:db:78:40:9f:1b:2d:cc:0d:f0:56:18:
1a:0a:36:6f:0e:87:f3:24:f8:99:fd:87:ae:b6:d3:c9:42:52:
43:11:ae:14:79:b2:7f:d1:9c:7d:be:5a:f5:e0:58:0c:90:6a:
32:a6:83:5e:f7:15:55:59:8d:c2:e6:b5:72:16:81:d9:39:65:
52:7a:21:51:78:e5:0b:26:04:47:93:75:37:bf:f2:e4:3f:84:
f2:1d:40:6a:71:0c:4e:14:d4:7a:28:d7:1f:ab:f0:5c:b0:c2:
ba:2c:bf:ad:24:56:3f:5e:e8:08:9c:36:52:49:12:a0:ed:9d:
52:00:52:e3:9e:f4:82:6d:fe:93:90:2a:79:93:65:0b:c0:fe:
03:1c:a6:7e:e2:f4:f7:17:2a:46:7c:ea:de:0d:79:e6:33:1b:
e9:54:c3:ef:f6:67:66:65:b5:64:a4:7d:f1:8c:26:aa:bf:84:
79:d4:dd:c6:8f:e1:30:bd:d7:bd:e4:b4:e1:bd:9f:5e:2d:ed:
36:fc:bd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:36:53 2025 by rpki-client