Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32342d3234203d3e20323730313433.roa
File: 34352e372e36342e302f32342d3234203d3e20323730313433.roa (raw, json)
Hash identifier: WZQOEsY3i8Wa4efV8lplKlgZv+Xy9dkioLdomBF8pl4=
Subject key identifier: 7E:8A:02:64:FD:6C:0E:6F:B5:DC:33:21:02:49:B8:87:C0:10:7B:7C
Certificate issuer: /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Certificate serial: 778F07FB4FF705F60CCA5619A45BC9E9D7015DDC
Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32342d3234203d3e20323730313433.roa
Signing time: Tue 04 Feb 2025 18:45:51 +0000
ROA not before: Tue 04 Feb 2025 18:40:51 +0000
ROA not after: Tue 03 Feb 2026 18:45:51 +0000
asID: 270143
IP address blocks: 45.7.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:8f:07:fb:4f:f7:05:f6:0c:ca:56:19:a4:5b:c9:e9:d7:01:5d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Validity
Not Before: Feb 4 18:40:51 2025 GMT
Not After : Feb 3 18:45:51 2026 GMT
Subject: CN=7E8A0264FD6C0E6FB5DC33210249B887C0107B7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:db:db:44:5b:9a:71:1e:aa:68:55:1d:15:
51:37:fb:c8:a4:ff:27:03:e6:a7:f0:0e:f0:8d:9c:
c2:95:ab:62:c7:ce:43:70:7b:73:be:b7:ef:b3:74:
59:d3:3a:0f:ca:1b:bb:15:a9:ea:8f:1a:5f:8f:97:
3d:20:3d:2a:85:14:0f:9b:f9:59:cb:ba:22:04:db:
42:c2:03:fa:92:a5:93:8f:2b:ec:80:0a:1f:d8:20:
d9:39:0c:17:1d:39:91:28:a8:fb:9e:58:9e:c9:d8:
eb:34:cc:d5:18:f6:c0:cd:03:26:e7:0f:83:d2:d0:
bd:83:11:8c:96:6c:30:6b:85:2e:8a:b2:46:c7:11:
49:f6:09:15:8c:0a:93:e5:fd:fc:70:b6:fb:56:a0:
8b:cc:a0:bf:e1:2d:d7:42:5f:33:17:a4:7b:b7:65:
35:c6:0c:fa:26:4c:85:5d:e9:7a:bf:23:19:62:bc:
99:c4:39:17:e4:62:47:10:c9:25:31:9e:a7:cc:60:
f2:83:da:45:01:3c:90:86:92:07:ba:14:e1:e5:d4:
27:5a:93:22:d9:44:84:34:ff:07:df:2a:53:58:a5:
2a:dc:15:a1:29:bd:fa:c8:76:32:17:ca:57:a9:86:
f5:62:77:d6:36:22:8c:e6:b1:f3:6c:4c:e8:e4:ca:
c6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8A:02:64:FD:6C:0E:6F:B5:DC:33:21:02:49:B8:87:C0:10:7B:7C
X509v3 Authority Key Identifier:
keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32342d3234203d3e20323730313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.64.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f7:3e:58:3c:80:22:0b:15:c7:33:e3:67:03:58:c2:8e:7c:
62:b6:24:21:ae:db:0d:02:c2:4c:53:3b:0a:ce:91:27:e8:fa:
1d:b0:87:c2:54:65:cd:66:c9:7e:21:40:8a:c7:7a:96:fd:e1:
e8:e1:4e:ba:21:5f:17:be:a2:29:15:f2:1f:8f:95:4c:84:21:
38:20:db:28:1e:d8:f9:65:25:a7:b5:88:61:aa:2e:96:40:4f:
29:3f:26:a2:06:9d:fc:85:87:d7:1b:a6:ff:62:be:11:49:93:
40:b2:d4:73:08:5f:76:39:fb:66:1c:a9:89:11:24:27:99:0f:
1e:34:23:03:a2:d1:91:15:98:f8:a7:89:52:4f:08:86:89:38:
78:54:11:47:82:e9:7e:c4:94:97:f5:26:23:10:21:c8:5b:56:
40:58:67:bf:c1:e3:2f:96:a5:97:8b:dd:7b:13:f0:41:90:77:
95:f5:48:f3:ec:7c:2e:fa:7d:e3:94:87:39:72:de:bd:65:c7:
a6:a4:27:83:db:b2:03:2b:31:66:62:93:d8:27:f4:43:9a:0f:
77:8a:6e:72:06:fa:38:98:7c:ee:b7:eb:be:28:3e:9c:a6:64:
3f:fd:de:cb:22:3b:46:f8:6f:4c:1c:b7:d1:fb:3a:ed:96:d2:
03:0c:f9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:13:32 2025 by rpki-client