Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/34352e3232352e38382e302f32322d3234203d3e203532343638.roa
File: 34352e3232352e38382e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier: f0S6X7I0yQ9jum9tK1t06tRVFexubhlVnk6Lq3Le5UI=
Subject key identifier: 80:AC:79:DD:29:55:F3:FA:13:54:9B:DD:40:9C:D5:C4:79:D7:C6:59
Certificate issuer: /CN=3A575D0F5F0EB7CC71330CE086214DBBA6B5C678
Certificate serial: 19C6829282E8E16608684555F980E200DD403738
Authority key identifier: 3A:57:5D:0F:5F:0E:B7:CC:71:33:0C:E0:86:21:4D:BB:A6:B5:C6:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/34352e3232352e38382e302f32322d3234203d3e203532343638.roa
Signing time: Tue 04 Feb 2025 18:53:58 +0000
ROA not before: Tue 04 Feb 2025 18:48:58 +0000
ROA not after: Tue 03 Feb 2026 18:53:58 +0000
asID: 52468
IP address blocks: 45.225.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c6:82:92:82:e8:e1:66:08:68:45:55:f9:80:e2:00:dd:40:37:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A575D0F5F0EB7CC71330CE086214DBBA6B5C678
Validity
Not Before: Feb 4 18:48:58 2025 GMT
Not After : Feb 3 18:53:58 2026 GMT
Subject: CN=80AC79DD2955F3FA13549BDD409CD5C479D7C659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1a:6d:d6:a9:6f:e0:27:c2:ef:e8:88:69:8f:
21:12:a1:40:79:0d:99:cc:a4:eb:5a:21:9e:c6:52:
39:9c:5d:e4:bc:a3:cc:2c:19:72:8c:63:49:e5:d5:
9e:b3:0c:e4:95:2e:2f:c0:82:e5:cb:df:ac:d4:15:
f1:40:0f:04:7c:c4:e4:96:2f:cf:c2:2a:83:fd:d8:
af:e3:e1:ab:be:4e:e7:82:61:62:2d:42:48:47:c4:
43:f6:db:36:0f:3a:7b:4c:da:e8:3b:24:1d:66:04:
02:94:5d:6e:ed:d9:05:b1:d4:1d:67:e4:8f:eb:a8:
16:c0:5a:67:88:09:b1:41:fc:b2:c1:dd:5c:1e:e0:
9a:5d:fb:fe:ec:8c:b3:b2:89:57:ec:dc:08:4c:a6:
2e:c3:95:8a:ed:ed:ef:38:55:7b:8a:74:f9:0e:f2:
fc:d1:57:4a:6e:52:bc:ac:da:75:24:63:b8:35:f7:
5f:f2:90:b8:79:4c:de:0e:14:03:2f:3b:b7:7c:70:
0e:23:32:39:fc:d7:07:e0:b6:79:14:bb:a1:1d:db:
a6:b0:6b:41:1e:73:28:6d:8f:ec:1f:05:34:d5:13:
89:20:97:b0:9b:cb:df:13:70:82:52:f8:80:aa:9a:
87:70:2c:00:db:3e:98:1d:3b:71:61:a0:5b:d4:5c:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AC:79:DD:29:55:F3:FA:13:54:9B:DD:40:9C:D5:C4:79:D7:C6:59
X509v3 Authority Key Identifier:
keyid:3A:57:5D:0F:5F:0E:B7:CC:71:33:0C:E0:86:21:4D:BB:A6:B5:C6:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/34352e3232352e38382e302f32322d3234203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.88.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:94:18:00:dd:3e:75:6b:49:7a:3d:d2:b1:1b:c5:24:80:c1:
eb:f5:4a:da:7b:08:31:dd:bc:c1:d7:cc:5b:96:cc:ef:97:bf:
2c:e8:a6:30:5e:7d:80:ef:2e:93:37:99:41:cf:8a:59:b0:58:
1d:4c:58:eb:bf:99:4a:f8:08:87:f7:03:2e:46:c1:f1:b7:b8:
e4:fa:73:03:bf:da:3f:ec:16:fd:bb:74:33:66:e7:39:50:52:
a4:cf:47:3c:78:55:d4:04:5c:8c:58:0c:de:f2:63:24:33:3d:
36:03:04:bd:29:3f:a3:4a:7a:10:28:d8:ef:c3:24:a7:2e:ed:
9c:77:70:10:fa:f8:8b:77:1d:d7:60:8e:c0:be:bf:db:70:3b:
97:4b:51:30:20:47:ab:05:4b:2b:1a:5f:47:1e:5a:3a:73:0a:
e4:90:6f:b2:08:e0:00:a5:aa:fc:86:26:9e:02:1f:67:d8:3a:
38:c0:c3:83:01:bb:b1:54:1d:31:93:9c:ab:af:ed:d6:a0:1f:
51:e7:df:51:00:da:49:94:a8:b6:5c:de:e5:96:17:50:02:db:
fc:44:ec:71:ee:6b:08:60:84:35:9d:e1:36:00:6b:d9:ce:7a:
9a:67:c8:bb:83:b4:b6:2a:77:da:c6:e9:e1:e1:95:0c:1a:65:
6d:3e:c4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:34 2025 by rpki-client