Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/34352e3136312e34342e302f32322d3232203d3e20323636393032.roa
File: 34352e3136312e34342e302f32322d3232203d3e20323636393032.roa (raw, json)
Hash identifier: wff5HMuPjRY+aZAF2OdCcw6nUxf458UNR9ehNwtR7m8=
Subject key identifier: D3:B2:13:C9:6D:81:26:9E:85:9D:10:13:D6:69:8E:6E:46:69:EF:DA
Certificate issuer: /CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
Certificate serial: 5F801FC8242FE15DBA660EFC85FC2EE9D6C4A42C
Authority key identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/34352e3136312e34342e302f32322d3232203d3e20323636393032.roa
Signing time: Tue 04 Feb 2025 18:46:23 +0000
ROA not before: Tue 04 Feb 2025 18:41:23 +0000
ROA not after: Tue 03 Feb 2026 18:46:23 +0000
asID: 266902
IP address blocks: 45.161.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:80:1f:c8:24:2f:e1:5d:ba:66:0e:fc:85:fc:2e:e9:d6:c4:a4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
Validity
Not Before: Feb 4 18:41:23 2025 GMT
Not After : Feb 3 18:46:23 2026 GMT
Subject: CN=D3B213C96D81269E859D1013D6698E6E4669EFDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:3c:3e:87:cf:98:c0:c3:f6:de:f5:c1:6a:
76:94:d3:a8:d5:b9:ef:e2:0a:74:e7:ee:33:24:89:
cb:6c:7a:50:f4:1f:8b:34:da:4f:cc:d6:e7:1d:db:
e9:25:bd:5d:46:e0:ed:e4:1a:68:8c:64:b3:1a:61:
e3:cb:62:02:09:66:4b:2c:98:28:51:5a:aa:66:41:
33:7b:2d:05:a2:ea:90:b3:cc:82:d5:9b:e6:29:e7:
c3:27:a5:5f:ad:71:bd:ae:24:27:82:6b:c8:fa:e0:
19:65:5d:ea:40:a6:2f:0b:f7:75:80:42:90:ac:d3:
02:7c:14:13:27:9c:6b:71:9e:1a:bd:06:e9:11:23:
00:4d:a8:0a:7b:ce:de:8e:26:7a:f4:0f:f3:3b:b0:
20:f1:cb:d7:61:73:13:15:18:c8:5e:f1:32:ec:01:
f5:48:18:9b:6e:75:dc:54:46:5d:7a:53:f4:d5:8d:
39:bf:a6:ec:09:86:1f:12:8f:b0:5a:d5:c5:92:a1:
2c:0a:fe:3a:4a:eb:32:c3:d1:00:80:8f:91:c5:bd:
b1:9e:2c:8c:24:54:e6:e9:b3:db:5b:6c:68:e4:65:
6d:02:8d:9b:e3:60:77:b0:2e:94:7b:a0:62:f3:70:
33:2c:4d:4b:fe:af:16:f0:a6:93:e8:4f:67:af:44:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B2:13:C9:6D:81:26:9E:85:9D:10:13:D6:69:8E:6E:46:69:EF:DA
X509v3 Authority Key Identifier:
keyid:25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/34352e3136312e34342e302f32322d3232203d3e20323636393032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.44.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:cf:c4:80:43:b7:63:16:01:67:41:47:a8:5d:5f:1b:c7:88:
84:d5:33:44:4e:d7:3c:66:bd:db:91:0b:4e:f0:e4:bf:1c:9c:
ba:ee:03:13:70:ab:1d:28:77:73:87:56:35:17:bf:56:f0:f0:
95:3f:d9:62:e2:17:bf:66:f9:50:a8:12:92:db:3d:8a:49:36:
9b:51:61:4f:ed:42:40:9d:7e:c4:ef:40:63:38:6e:14:f6:cd:
8d:89:54:a3:22:4f:47:2d:c1:2d:ba:76:97:b4:21:6f:52:65:
c0:40:e8:f5:bb:e2:b3:8d:57:bd:48:ce:dc:86:45:46:5d:89:
69:a5:91:16:57:7b:c5:1a:73:9a:6b:1c:be:a6:03:72:f3:40:
98:e8:c6:39:8b:3f:86:eb:78:c6:39:d3:c1:74:12:69:79:e0:
24:95:13:ad:98:99:b0:f4:46:b2:2e:cb:5c:c5:a5:55:bc:8a:
06:e3:76:b9:5f:c1:c0:25:25:17:d0:9e:5f:c5:50:53:a4:29:
a3:19:13:ff:9a:ae:6a:7e:97:9a:33:d2:ae:69:53:fa:a8:f8:
a0:4b:58:d8:5b:88:47:e6:35:8d:1d:0a:93:a2:4c:6d:05:9f:
82:74:ba:cf:4e:05:45:60:7b:29:53:70:28:91:ff:58:06:0d:
41:c4:75:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:56:05 2025 by rpki-client