Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19514CA84FFEC9DA13A8A037FEFC4859E1D036EAD3654DE3C51F47DEE1B900FE/0/34352e3137362e382e302f32322d3234203d3e20323637383536.roa
File: 34352e3137362e382e302f32322d3234203d3e20323637383536.roa (raw, json)
Hash identifier: Jzcar7ZdxkEn1ty817eFaxLzVjNiKxh+MMfcvhTcHp4=
Subject key identifier: 6A:72:9E:78:DA:5D:F1:7C:7A:37:0A:F2:BC:69:1B:ED:B9:A8:A1:37
Certificate issuer: /CN=CE3BBF6B4D984809B9AFC5EDCC482CBD16497274
Certificate serial: 104092A35BEC327FAA30E583BB2D92191085FB0E
Authority key identifier: CE:3B:BF:6B:4D:98:48:09:B9:AF:C5:ED:CC:48:2C:BD:16:49:72:74
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE3BBF6B4D984809B9AFC5EDCC482CBD16497274.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/19514CA84FFEC9DA13A8A037FEFC4859E1D036EAD3654DE3C51F47DEE1B900FE/0/34352e3137362e382e302f32322d3234203d3e20323637383536.roa
Signing time: Tue 04 Feb 2025 18:53:53 +0000
ROA not before: Tue 04 Feb 2025 18:48:53 +0000
ROA not after: Tue 03 Feb 2026 18:53:53 +0000
asID: 267856
IP address blocks: 45.176.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:40:92:a3:5b:ec:32:7f:aa:30:e5:83:bb:2d:92:19:10:85:fb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE3BBF6B4D984809B9AFC5EDCC482CBD16497274
Validity
Not Before: Feb 4 18:48:53 2025 GMT
Not After : Feb 3 18:53:53 2026 GMT
Subject: CN=6A729E78DA5DF17C7A370AF2BC691BEDB9A8A137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:10:50:cf:f4:e8:64:56:8f:a8:7b:43:64:3e:
81:b4:93:00:c1:a0:a2:56:72:e0:a9:f1:31:59:ce:
3c:e1:31:0f:9d:dc:6d:8a:f3:3d:63:4a:d5:96:06:
40:9a:a4:ef:17:92:26:c7:2e:de:e4:4e:6e:bc:a3:
3e:07:77:96:e9:3b:ca:5a:3d:cd:17:f8:23:90:50:
2d:fe:7e:87:fb:70:55:f3:5c:82:e6:d7:fe:c0:2c:
ef:43:8e:26:27:ce:a5:f5:1b:4f:ec:da:dd:0f:fe:
6c:1c:e2:8c:03:cc:e0:1b:57:fc:dd:78:cb:55:15:
b4:a1:b4:00:a1:b6:f9:7f:9f:ba:6a:7d:75:81:57:
06:ff:1b:1f:33:37:b6:47:ff:85:3b:6e:2e:04:17:
d7:4c:6f:ad:7e:b3:27:05:26:06:d8:d3:8a:e8:0c:
1d:65:43:70:a2:d8:11:7c:91:0e:b7:fd:e4:21:31:
31:b2:e4:ba:f0:23:ea:1f:91:e6:05:06:de:b3:bd:
10:55:7a:aa:1f:10:62:d3:39:80:17:cb:11:59:97:
ae:d0:66:33:4f:32:b0:3b:c3:dd:eb:82:ee:d9:91:
4a:3b:a6:2c:75:d4:6b:8d:0c:d5:17:be:1a:9d:a0:
89:9b:4e:19:38:60:3a:3b:ef:8f:46:68:5c:02:9c:
74:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:72:9E:78:DA:5D:F1:7C:7A:37:0A:F2:BC:69:1B:ED:B9:A8:A1:37
X509v3 Authority Key Identifier:
keyid:CE:3B:BF:6B:4D:98:48:09:B9:AF:C5:ED:CC:48:2C:BD:16:49:72:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/19514CA84FFEC9DA13A8A037FEFC4859E1D036EAD3654DE3C51F47DEE1B900FE/0/CE3BBF6B4D984809B9AFC5EDCC482CBD16497274.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE3BBF6B4D984809B9AFC5EDCC482CBD16497274.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19514CA84FFEC9DA13A8A037FEFC4859E1D036EAD3654DE3C51F47DEE1B900FE/0/34352e3137362e382e302f32322d3234203d3e20323637383536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.8.0/22
Signature Algorithm: sha256WithRSAEncryption
83:b9:23:73:49:73:44:fc:ad:31:80:39:cf:12:2d:3c:93:71:
2c:48:51:89:fd:b5:9b:3e:9b:82:74:46:c0:0f:87:68:bc:b0:
f5:83:6e:79:a6:5a:3a:83:57:9d:e0:5c:75:d1:aa:84:7b:eb:
bc:d9:d4:b0:20:37:5e:16:48:56:4f:29:b0:d5:fd:0d:f9:c5:
02:7f:80:49:00:58:ad:6e:97:9d:f0:88:9a:a9:05:8f:86:5a:
d2:55:5a:61:dc:7d:37:3c:24:fc:8c:11:f8:b1:e2:6d:7e:92:
e1:da:d8:5b:b9:58:ab:81:24:9d:b6:f8:73:87:e4:d8:fb:aa:
3f:57:e9:e3:07:18:12:f7:d0:44:aa:2a:d2:ce:e6:cb:a5:89:
89:58:fe:0d:f8:2e:24:62:a2:6c:b3:ee:a7:3e:6b:1f:e5:1a:
43:74:38:57:de:a0:b1:6b:24:74:11:38:df:42:9f:cb:6b:e3:
28:a3:d6:48:de:f0:72:f6:19:ee:82:0a:8e:3c:6c:b0:7e:5b:
30:9c:fa:ba:87:77:ed:4b:8c:04:b6:90:b1:02:16:a0:16:ba:
87:94:5e:a4:3c:81:90:89:0a:7a:a0:de:5d:c2:7a:fd:e9:21:
50:73:e8:98:1b:1b:72:0d:6b:d6:6a:07:61:e2:87:43:69:5d:
a5:28:33:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:33:25 2025 by rpki-client