Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235342e302f32342d3234203d3e20323635363133.roa
File: 34352e3138392e3235342e302f32342d3234203d3e20323635363133.roa (raw, json)
Hash identifier: 74MR2jmuUrWkjaTflA+J3r6NHLqPYdc+vUDcv65xnUs=
Subject key identifier: 9A:6D:B5:33:6D:D7:9D:DE:3F:FB:FA:1E:4E:28:5C:5F:0F:83:C3:95
Certificate issuer: /CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
Certificate serial: 64F8D40F2CD30571CDB531D4E78A332D83F99348
Authority key identifier: 32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235342e302f32342d3234203d3e20323635363133.roa
Signing time: Fri 17 Jan 2025 18:25:00 +0000
ROA not before: Fri 17 Jan 2025 18:20:00 +0000
ROA not after: Fri 16 Jan 2026 18:25:00 +0000
asID: 265613
IP address blocks: 45.189.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f8:d4:0f:2c:d3:05:71:cd:b5:31:d4:e7:8a:33:2d:83:f9:93:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
Validity
Not Before: Jan 17 18:20:00 2025 GMT
Not After : Jan 16 18:25:00 2026 GMT
Subject: CN=9A6DB5336DD79DDE3FFBFA1E4E285C5F0F83C395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:4b:b6:2b:c5:c4:2d:1c:89:e8:08:b3:23:
da:42:d8:93:b8:4b:83:4e:e9:88:2f:29:12:52:ec:
87:c7:5e:3f:02:82:b9:1d:ef:b1:3b:88:b8:09:28:
f6:b9:8c:25:c3:62:b5:b9:04:5f:70:23:c7:56:29:
2b:b1:01:dc:3a:3e:a2:dc:a6:ee:ff:01:38:44:b2:
53:8e:70:de:c4:74:12:c0:85:b8:3d:a6:9d:0f:04:
0c:9a:94:8a:2f:6d:ce:1c:68:42:8e:75:98:21:54:
b3:8b:ea:80:09:b3:6e:fd:5f:ec:e1:57:85:d0:d6:
86:52:91:d6:d8:81:b2:52:50:81:d7:43:55:b0:07:
b1:bb:13:e2:64:30:52:f3:61:2a:0e:66:06:d0:1d:
c6:11:f3:e7:32:bb:4e:04:70:0d:4c:69:2a:41:31:
28:e2:29:50:c9:74:10:cb:ef:da:b1:38:1c:7e:e7:
76:65:70:c8:75:53:20:61:35:44:f8:97:27:9d:b3:
91:2b:9a:9a:06:55:64:69:0e:a0:96:e4:8b:54:6c:
f4:9c:08:dd:45:77:e6:29:a5:3f:99:55:12:c5:f4:
cc:87:f8:56:32:6e:67:f8:af:e3:86:93:bd:98:bb:
7f:2b:33:46:7c:29:c4:59:c3:1e:97:51:07:4e:6f:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6D:B5:33:6D:D7:9D:DE:3F:FB:FA:1E:4E:28:5C:5F:0F:83:C3:95
X509v3 Authority Key Identifier:
keyid:32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235342e302f32342d3234203d3e20323635363133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.254.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ff:fe:ec:5f:e4:49:4c:fc:3a:a9:c6:5e:e5:db:e8:e5:15:
e5:81:cf:24:3c:61:33:69:ee:3a:4c:6c:42:5a:54:3d:41:f6:
f9:38:8a:bf:8c:c1:f8:cc:91:8c:74:07:99:d3:e4:f6:6b:e3:
ce:29:f9:83:8c:f2:18:80:1d:c5:2f:0c:fd:d1:a4:ec:c4:0b:
81:03:31:4f:3d:40:d0:86:31:e0:d6:ca:e8:94:89:10:83:76:
36:f2:d8:a8:25:7c:55:73:51:4c:7e:48:c9:6f:e8:e1:cb:1e:
40:51:f6:95:aa:19:f8:e9:97:05:7b:c8:06:e7:4a:eb:c3:d5:
59:b7:0b:3c:e6:74:04:65:f6:27:7c:2a:d2:4e:59:43:85:7b:
dc:d1:36:67:ea:39:5a:f8:39:da:5f:23:0c:bb:b0:5e:77:cc:
57:69:ac:45:c1:48:c0:99:db:19:28:c1:de:23:55:0a:e2:b1:
f0:ea:76:af:b9:c8:d0:e8:5b:9f:b0:af:2e:10:37:c1:d9:a2:
e5:80:a1:16:29:cf:f7:53:98:01:90:3c:71:e3:77:11:72:b2:
79:91:7d:80:fd:b5:80:37:b6:3e:71:26:6a:5f:88:0e:e5:58:
2e:0c:bb:99:46:12:cb:bd:e6:49:bd:eb:72:40:16:4f:f8:5a:
a5:b4:0a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:25:26 2025 by rpki-client