Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/34352e3136312e34342e302f32342d3234203d3e20323636393032.roa
File: 34352e3136312e34342e302f32342d3234203d3e20323636393032.roa (raw, json)
Hash identifier: 9jaD8ScaSBtZgY1McxVIxZirAvjcAcgSOFZqFeK76+o=
Subject key identifier: C8:89:E7:50:39:6F:19:12:89:8B:15:6D:5A:7A:4C:D0:54:93:64:96
Certificate issuer: /CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
Certificate serial: 763904CB111F3C4F5AB4990FCAFB740784467D36
Authority key identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/34352e3136312e34342e302f32342d3234203d3e20323636393032.roa
Signing time: Tue 04 Feb 2025 18:46:23 +0000
ROA not before: Tue 04 Feb 2025 18:41:23 +0000
ROA not after: Tue 03 Feb 2026 18:46:23 +0000
asID: 266902
IP address blocks: 45.161.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:39:04:cb:11:1f:3c:4f:5a:b4:99:0f:ca:fb:74:07:84:46:7d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
Validity
Not Before: Feb 4 18:41:23 2025 GMT
Not After : Feb 3 18:46:23 2026 GMT
Subject: CN=C889E750396F1912898B156D5A7A4CD054936496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:bb:a0:45:e2:91:c8:ee:5c:34:c6:38:2d:
4a:c8:b9:d4:b9:d6:24:7b:36:b9:ec:4f:ba:43:db:
71:50:a2:01:36:cb:d6:73:8c:4e:23:10:18:4e:db:
db:d8:8f:be:4b:8a:e1:fb:d0:e6:5a:30:58:ba:3c:
e6:e8:79:2f:73:cd:94:3f:4c:2f:e0:78:63:8b:16:
b9:2c:52:84:de:62:4d:39:f1:38:25:ba:3c:c1:b4:
fd:fc:cc:da:7b:85:a7:7f:00:97:c3:45:96:e5:a6:
85:ee:60:48:fd:71:50:bb:53:dd:aa:63:23:72:d1:
bf:be:2a:98:b1:ce:5c:a6:61:ff:f6:40:90:80:00:
33:b9:93:18:3b:b2:19:1d:a2:e1:26:f6:a6:6f:7a:
f3:ba:e0:af:38:f0:2e:86:53:ab:83:67:5b:a3:8a:
8f:82:1c:ac:7e:4d:d1:c2:e0:b2:ee:fd:98:8b:b9:
47:b3:ee:3f:7f:6a:d1:4a:95:01:d4:1a:23:3c:f2:
6d:19:ad:cc:9b:4c:a5:bc:2f:99:8d:da:83:11:57:
72:fa:70:a6:e6:c4:78:ce:8e:99:9a:3c:2e:c2:ba:
ea:3e:b6:76:52:ec:44:95:66:2d:09:c5:86:7f:2b:
1d:33:db:07:07:4d:19:8e:e9:24:22:91:e3:ca:1c:
67:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:89:E7:50:39:6F:19:12:89:8B:15:6D:5A:7A:4C:D0:54:93:64:96
X509v3 Authority Key Identifier:
keyid:25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/34352e3136312e34342e302f32342d3234203d3e20323636393032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.44.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c6:4d:44:bf:72:b2:5a:6f:db:da:02:c2:3d:a6:45:59:a4:
1a:2d:9b:a1:5d:68:dd:ed:d5:73:77:60:75:d5:9d:c0:5f:1b:
45:fe:18:67:20:5c:2c:81:55:a3:80:80:f8:d4:04:03:b9:99:
a5:f2:e3:00:9e:1f:ec:cd:76:9c:a0:e6:57:ca:ec:d3:38:ae:
3a:24:9f:8c:c8:be:35:4d:ac:61:6c:7d:74:24:f1:dc:ce:6e:
e3:43:e6:da:56:8f:b2:72:c2:47:70:11:42:2c:55:59:e2:3a:
0d:90:04:a7:4a:45:5e:b9:70:16:49:42:85:51:ca:26:28:d7:
2c:91:80:05:8c:5f:d5:c1:3b:e6:12:98:f9:59:e7:1b:b8:c7:
9f:3c:6a:25:0f:aa:c6:f4:2d:ae:19:d8:31:70:2c:82:27:87:
50:61:90:f3:24:35:12:a3:d7:55:dd:e3:96:f6:24:22:53:62:
48:79:0f:4d:c2:ac:73:3c:bb:98:fb:fb:97:a9:54:6b:b6:36:
cc:67:01:75:2e:1b:50:ca:43:0f:01:0f:01:b0:3e:a5:67:dd:
28:a2:cc:23:c9:79:97:6d:91:1c:b0:79:1b:aa:70:1b:05:0a:
dc:cf:a4:19:97:cf:03:3c:f6:42:bb:67:6c:dc:61:36:fa:93:
a1:fb:c5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:51 2025 by rpki-client