Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235322e302f32342d3234203d3e20323635363133.roa
File: 34352e3138392e3235322e302f32342d3234203d3e20323635363133.roa (raw, json)
Hash identifier: YzmcInadEkEJLqyYHFqXJo3WxvpA4nnR/tf9OohXLKI=
Subject key identifier: 69:CB:E5:79:0B:76:A7:82:ED:C8:B0:F0:2F:1C:BA:27:BE:15:52:5F
Certificate issuer: /CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
Certificate serial: 2554FA1F78B1421951C6826AC7FE71428C17BD9C
Authority key identifier: 32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235322e302f32342d3234203d3e20323635363133.roa
Signing time: Fri 17 Jan 2025 18:25:00 +0000
ROA not before: Fri 17 Jan 2025 18:20:00 +0000
ROA not after: Fri 16 Jan 2026 18:25:00 +0000
asID: 265613
IP address blocks: 45.189.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:54:fa:1f:78:b1:42:19:51:c6:82:6a:c7:fe:71:42:8c:17:bd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
Validity
Not Before: Jan 17 18:20:00 2025 GMT
Not After : Jan 16 18:25:00 2026 GMT
Subject: CN=69CBE5790B76A782EDC8B0F02F1CBA27BE15525F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:2d:b4:83:8c:0d:b9:ca:94:0b:95:f0:3b:
53:7f:9b:88:67:99:d3:3b:c7:a6:4f:51:0e:df:b0:
14:7c:ea:00:c8:5d:55:4b:e6:2d:5e:fa:72:4c:5a:
1a:5b:f3:e4:e1:e8:18:33:fa:c1:8f:62:60:a8:1e:
ec:ac:31:08:32:6d:a0:85:fa:01:a7:12:58:01:d9:
b4:aa:39:f5:45:ba:7d:b7:b1:9a:9a:d5:3c:95:82:
f5:66:29:3e:fa:c8:f1:47:21:3e:0d:de:64:14:4d:
87:3b:85:da:21:4a:d1:06:00:d6:e9:e3:de:53:af:
06:93:09:ba:59:7a:db:ba:f9:b3:26:b5:ae:51:9c:
78:7c:3b:95:42:27:50:5c:8f:34:f0:42:f6:db:77:
40:70:c5:18:1b:24:78:25:3b:da:fe:1e:2e:ac:6b:
e8:bb:8b:d4:89:18:2a:85:db:13:35:20:a6:73:22:
68:ee:fa:85:e6:fa:ff:51:be:0b:82:96:3a:35:f5:
22:a6:c4:c0:7c:06:17:e7:6c:5d:cb:79:ba:e9:44:
d2:d1:90:60:38:26:28:87:2e:95:3e:08:d3:7e:3a:
74:8b:5a:2a:53:a3:0f:af:29:d0:cf:2b:a2:20:b7:
ed:36:cf:5c:b1:7e:c1:32:68:34:1d:3f:4d:8c:f2:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CB:E5:79:0B:76:A7:82:ED:C8:B0:F0:2F:1C:BA:27:BE:15:52:5F
X509v3 Authority Key Identifier:
keyid:32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235322e302f32342d3234203d3e20323635363133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.252.0/24
Signature Algorithm: sha256WithRSAEncryption
28:7d:6e:75:f8:04:dc:1f:91:c4:cb:17:89:48:0a:14:68:a9:
12:d6:35:c6:d7:e9:21:d3:06:5e:da:1a:6a:4d:50:f8:8d:5e:
7f:42:f1:72:5f:c3:c8:80:a5:6a:08:e0:43:79:ad:e6:b0:5e:
57:b8:9e:cc:d6:16:b8:27:1c:60:fd:49:c3:9d:ea:e3:8a:68:
f8:3e:66:6b:04:00:b4:db:28:50:75:9a:aa:5a:0e:99:ea:d6:
41:e8:f4:8d:bd:2f:49:c7:fc:31:6e:c9:6d:e4:88:bd:7f:b1:
7f:4b:cd:9d:a8:f8:7c:da:33:c1:b4:6d:2d:8e:5b:2f:56:88:
81:cc:be:17:02:d4:92:ac:2d:5d:21:fb:0f:ca:be:8f:92:bd:
4c:84:33:2c:53:6f:1b:9b:b7:bc:93:a9:ec:88:d7:e5:e9:f7:
4b:a0:3e:3f:df:90:6d:f8:1b:26:d4:12:5b:b7:7d:3c:2d:98:
f1:57:93:35:eb:64:f0:6c:2c:89:53:6a:d2:a2:46:2c:80:da:
31:eb:1d:be:99:6f:8f:fa:56:80:9e:5a:a9:e9:bd:1d:3a:21:
69:b6:7d:d1:f1:cc:f9:20:21:e4:ea:ff:11:55:bc:b5:28:44:
83:0a:3f:a9:6b:45:ee:71:15:f1:de:e2:77:e2:65:eb:7d:90:
78:06:cb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:08:30 2025 by rpki-client