Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/34352e3232352e38382e302f32322d3234203d3e20323634363638.roa
File: 34352e3232352e38382e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier: WypWJ2crXa+yK+vUVbAlkFMuDe4sF5jce5vo54dXYog=
Subject key identifier: 34:A6:08:5D:FA:A6:E6:09:5E:AE:6B:E2:5D:46:63:EC:D8:A3:B6:D8
Certificate issuer: /CN=3A575D0F5F0EB7CC71330CE086214DBBA6B5C678
Certificate serial: 6768F43F64149AFD24F511F0BACF68DD38797159
Authority key identifier: 3A:57:5D:0F:5F:0E:B7:CC:71:33:0C:E0:86:21:4D:BB:A6:B5:C6:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/34352e3232352e38382e302f32322d3234203d3e20323634363638.roa
Signing time: Tue 04 Feb 2025 18:53:57 +0000
ROA not before: Tue 04 Feb 2025 18:48:57 +0000
ROA not after: Tue 03 Feb 2026 18:53:57 +0000
asID: 264668
IP address blocks: 45.225.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:68:f4:3f:64:14:9a:fd:24:f5:11:f0:ba:cf:68:dd:38:79:71:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A575D0F5F0EB7CC71330CE086214DBBA6B5C678
Validity
Not Before: Feb 4 18:48:57 2025 GMT
Not After : Feb 3 18:53:57 2026 GMT
Subject: CN=34A6085DFAA6E6095EAE6BE25D4663ECD8A3B6D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e4:8b:4e:40:45:5f:a1:a3:21:4f:af:0f:e9:
51:cd:69:99:5d:3a:b3:4c:3b:64:4b:d5:24:22:60:
6e:84:d5:8c:e0:22:07:a8:9f:9f:df:38:c0:e0:fc:
4d:25:9e:10:fe:42:00:45:80:86:a2:80:74:5c:73:
26:32:82:ba:09:7f:58:52:7d:73:6e:7e:b6:c6:24:
e8:9a:3b:1f:4a:14:73:0a:85:a0:b9:b2:97:c5:f6:
c0:74:a7:52:1a:09:7f:1d:42:4c:ec:fa:c7:f5:61:
99:77:ea:f7:2c:2e:06:da:22:dc:40:c1:ed:17:0c:
6c:6d:71:85:33:a2:e6:e1:9b:93:f7:9e:50:f4:d8:
8f:8f:7d:a8:07:b8:2c:4b:50:4a:76:6e:10:17:d4:
cb:ae:97:e6:71:02:81:67:eb:65:fd:0f:5b:4c:87:
e6:2b:40:97:f6:80:e1:48:e5:64:17:0c:5e:22:ff:
6a:7d:a3:cf:10:57:fb:6b:15:7d:59:e7:c9:99:19:
5c:fb:9e:89:6f:31:9a:24:26:95:6b:4b:dd:1d:e4:
22:7c:93:3a:82:ea:4f:e7:9e:23:39:70:f5:34:85:
69:95:35:6a:f9:e6:39:61:36:c3:e5:b4:57:63:c3:
79:ec:9b:ab:e3:bc:85:62:4c:1b:d2:7a:d1:e7:d5:
35:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A6:08:5D:FA:A6:E6:09:5E:AE:6B:E2:5D:46:63:EC:D8:A3:B6:D8
X509v3 Authority Key Identifier:
keyid:3A:57:5D:0F:5F:0E:B7:CC:71:33:0C:E0:86:21:4D:BB:A6:B5:C6:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/34352e3232352e38382e302f32322d3234203d3e20323634363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.88.0/22
Signature Algorithm: sha256WithRSAEncryption
13:90:5f:d3:8b:52:ec:50:2b:7d:81:aa:d8:e1:77:79:b9:af:
ec:c8:0f:34:2e:3d:a0:20:aa:fc:fb:63:e1:73:48:d6:ef:6f:
e8:75:45:77:85:70:48:03:3c:95:0c:bc:47:c1:b8:10:a8:c8:
fc:51:2d:46:5c:ba:4a:8e:be:0c:bc:3f:a0:7f:a0:ef:78:12:
ed:41:f7:64:a1:7a:36:85:07:79:99:ef:98:6c:cb:f8:29:fa:
28:e9:a8:e9:19:ff:f8:82:0f:0b:0f:3a:23:d0:ff:b1:bf:f1:
f2:db:3f:1f:0e:2c:2f:07:09:ae:be:30:38:79:67:d8:ac:6b:
90:83:a1:79:1a:f2:ee:fc:37:7a:5b:8b:2c:0e:64:55:6f:82:
b2:80:67:e8:a7:bf:25:87:88:52:fd:aa:34:27:92:41:be:db:
43:ad:37:d1:6c:22:80:8b:ce:84:13:47:83:fb:20:14:07:7b:
b6:c8:f5:d9:38:92:dd:ca:b0:67:6c:30:d7:c1:96:23:47:77:
42:4f:24:be:8b:de:ad:86:c7:a6:28:12:45:07:3e:19:3a:99:
6c:06:a9:53:25:6c:cb:cd:df:1d:e1:fd:a1:9a:24:95:2b:ec:
65:db:a7:d8:d6:26:da:34:52:a7:37:ab:ec:17:20:01:6e:dc:
a2:c5:68:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:01 2025 by rpki-client