Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10F44224713C9F23237797D63FF8EE4C0D22E098E7C3ED850635930A5314457E/0/34352e3232362e3136382e302f32322d3234203d3e203634313038.roa
File: 34352e3232362e3136382e302f32322d3234203d3e203634313038.roa (raw, json)
Hash identifier: KMkc/bxKDcVblZ9Sbnn9bBeNG7tkELKGzsK0oTE7aX4=
Subject key identifier: 4D:DD:01:91:AF:1E:3A:C6:E6:3E:AD:B0:4E:CE:14:2E:40:6B:B3:0C
Certificate issuer: /CN=AB9F9D528C70D081C3AC25F7EE024BAA6CA2A2B7
Certificate serial: 36A62EBFA4D1D9D744DED15567B1E9EF281F8490
Authority key identifier: AB:9F:9D:52:8C:70:D0:81:C3:AC:25:F7:EE:02:4B:AA:6C:A2:A2:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB9F9D528C70D081C3AC25F7EE024BAA6CA2A2B7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/10F44224713C9F23237797D63FF8EE4C0D22E098E7C3ED850635930A5314457E/0/34352e3232362e3136382e302f32322d3234203d3e203634313038.roa
Signing time: Tue 04 Feb 2025 18:40:52 +0000
ROA not before: Tue 04 Feb 2025 18:35:52 +0000
ROA not after: Tue 03 Feb 2026 18:40:52 +0000
asID: 64108
IP address blocks: 45.226.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:a6:2e:bf:a4:d1:d9:d7:44:de:d1:55:67:b1:e9:ef:28:1f:84:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB9F9D528C70D081C3AC25F7EE024BAA6CA2A2B7
Validity
Not Before: Feb 4 18:35:52 2025 GMT
Not After : Feb 3 18:40:52 2026 GMT
Subject: CN=4DDD0191AF1E3AC6E63EADB04ECE142E406BB30C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:c2:6b:e2:1a:77:47:65:6b:4d:47:73:b5:
60:a6:6a:21:2c:3d:54:c0:c8:cc:da:fc:cb:bc:3d:
5e:f0:ff:d3:e5:94:ff:2f:ce:ee:5b:0e:e6:e2:23:
47:cb:e8:49:b6:9b:53:97:26:f3:4a:e8:47:53:17:
10:d1:15:c7:06:d4:a1:1f:6c:e4:ee:f0:66:28:10:
e9:11:26:9b:66:69:77:c0:5d:8f:c1:5a:59:a8:13:
77:51:a0:99:ed:24:b8:03:86:33:23:f6:32:a0:d0:
26:44:86:42:9a:8c:69:33:3b:9f:fe:fe:29:05:16:
20:68:96:38:c8:65:62:55:69:f7:eb:29:2a:68:76:
1f:4c:51:d9:11:d1:af:4e:c0:8a:54:ea:19:84:f1:
e0:32:c8:4b:c9:73:81:4d:a9:f9:1d:59:13:26:b7:
54:45:23:68:a0:7a:5c:5f:cb:d2:b2:31:e1:3b:6e:
f0:0d:f3:21:91:04:e4:5a:3b:5c:83:b9:8c:6d:5f:
4e:4c:01:4d:17:02:7c:5c:ac:2d:6c:f2:07:24:72:
11:f7:f0:71:b1:d6:b9:98:67:0c:f4:d0:c0:40:f7:
73:33:b1:e8:10:b5:10:68:b0:61:cd:09:18:53:d5:
39:01:ee:36:72:76:96:66:c0:d5:34:74:75:09:ee:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DD:01:91:AF:1E:3A:C6:E6:3E:AD:B0:4E:CE:14:2E:40:6B:B3:0C
X509v3 Authority Key Identifier:
keyid:AB:9F:9D:52:8C:70:D0:81:C3:AC:25:F7:EE:02:4B:AA:6C:A2:A2:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/10F44224713C9F23237797D63FF8EE4C0D22E098E7C3ED850635930A5314457E/0/AB9F9D528C70D081C3AC25F7EE024BAA6CA2A2B7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB9F9D528C70D081C3AC25F7EE024BAA6CA2A2B7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10F44224713C9F23237797D63FF8EE4C0D22E098E7C3ED850635930A5314457E/0/34352e3232362e3136382e302f32322d3234203d3e203634313038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.226.168.0/22
Signature Algorithm: sha256WithRSAEncryption
29:9b:a9:3c:ac:1d:60:2c:c7:cd:88:7f:2f:b2:0c:e9:b2:9d:
df:1e:6c:f5:8e:b7:df:99:41:24:8c:e8:ab:c2:db:b3:6b:56:
8d:aa:4b:42:26:56:f8:cb:9a:fe:5b:f8:3b:d6:19:c4:4d:31:
97:e0:18:af:e1:1e:e1:d3:96:2f:c3:a4:8a:33:95:02:67:a3:
4e:b5:12:db:71:1e:30:1d:a6:be:0b:74:c5:39:b6:96:26:98:
2b:46:2f:5f:e0:af:79:0d:a0:20:b0:7c:04:9d:e2:80:c7:19:
52:ac:47:bc:da:29:bf:70:ad:ff:55:d3:2c:e7:56:ad:bd:39:
27:4d:87:5e:01:38:49:b0:52:a4:6d:72:43:aa:29:ab:1d:1a:
13:18:d9:73:5a:cb:62:8d:d9:3c:a1:1a:4c:e8:43:d8:56:92:
a2:a1:25:98:8d:95:53:fa:13:cb:d3:5a:86:e7:26:4e:45:a7:
a2:49:2e:97:cb:ea:c6:52:bc:1f:5f:54:9c:0f:71:c8:5f:a4:
68:8d:63:19:1a:98:44:c3:9a:16:6b:a3:2a:c4:9f:e1:ab:70:
88:1b:70:4e:48:bc:44:24:25:6d:77:fa:81:c8:3b:c2:cf:fe:
72:ca:9e:24:14:09:0e:7a:b7:3b:3c:3e:05:f0:2b:08:44:31:
de:b5:a6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:39 2025 by rpki-client