Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133322e302f32342d3234203d3e20313937393931.roa
File: 34352e3137302e3133322e302f32342d3234203d3e20313937393931.roa (raw, json)
Hash identifier: 617gKf8X0ngkdp01rN8fOsSiqnDA7sAMPBNzNtCcVpM=
Subject key identifier: CE:DD:C8:09:87:6D:54:B2:56:96:E8:28:41:52:0D:B1:CE:60:1F:E1
Certificate issuer: /CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
Certificate serial: 3C32C87AACF9FCD83582DB78C22EEDAE0689AB62
Authority key identifier: 64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133322e302f32342d3234203d3e20313937393931.roa
Signing time: Mon 24 Mar 2025 15:55:00 +0000
ROA not before: Mon 24 Mar 2025 15:50:00 +0000
ROA not after: Mon 23 Mar 2026 15:55:00 +0000
asID: 197991
IP address blocks: 45.170.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:32:c8:7a:ac:f9:fc:d8:35:82:db:78:c2:2e:ed:ae:06:89:ab:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
Validity
Not Before: Mar 24 15:50:00 2025 GMT
Not After : Mar 23 15:55:00 2026 GMT
Subject: CN=CEDDC809876D54B25696E82841520DB1CE601FE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:f5:ad:89:3f:30:c0:d0:8b:c9:ae:9b:10:
15:fa:b0:d5:4a:a2:34:ed:6c:fa:40:02:05:f8:3c:
f6:5a:fc:f7:94:fe:4f:14:27:e8:25:00:e7:21:31:
6b:1f:38:b8:94:ea:20:b1:69:3d:25:3e:dc:f1:ab:
7a:01:49:d9:40:23:46:14:70:13:dd:63:05:c1:b0:
8d:11:19:fc:53:cb:4b:e6:81:74:36:43:bb:71:45:
45:44:ba:8a:6e:2b:43:f0:08:96:64:8c:74:91:e1:
87:0e:20:98:bb:14:34:39:72:ea:95:61:0e:38:64:
af:c1:53:c3:9c:64:86:ea:cb:70:57:13:15:6b:c6:
f3:cd:cf:dd:e4:8c:6c:8f:b9:15:40:55:d1:63:e9:
50:71:db:64:65:5f:1a:f9:59:c0:1c:07:88:ee:62:
e0:65:75:a1:e4:a1:3b:4b:0a:70:f2:ae:3b:0a:9d:
f0:5b:cc:5e:f9:38:8e:db:97:da:68:c2:fe:e4:3b:
61:39:ea:a4:f4:20:29:b5:7b:86:55:5c:9e:44:7e:
90:d0:8f:bf:7d:8f:7b:3d:bd:b4:35:00:b8:65:83:
72:94:e5:3b:0e:4e:8c:9d:0e:7f:16:4c:76:89:27:
56:1f:24:d1:9e:54:5f:57:31:1a:15:54:8e:a9:e4:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DD:C8:09:87:6D:54:B2:56:96:E8:28:41:52:0D:B1:CE:60:1F:E1
X509v3 Authority Key Identifier:
keyid:64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133322e302f32342d3234203d3e20313937393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.132.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:55:40:7c:16:6c:c2:66:18:da:e9:12:98:0a:8c:0a:48:b6:
1a:d4:f0:4b:3f:32:6e:72:ff:54:ae:5e:ae:f6:72:48:d9:71:
07:c4:49:5d:f7:54:6f:9e:c5:8a:fd:63:bd:0a:d6:05:f9:c5:
dd:bc:18:8b:d1:71:ca:1b:1f:91:a1:30:af:a8:d6:8e:c5:fc:
02:78:58:37:31:7e:23:25:6d:af:76:13:57:2f:93:61:44:6f:
29:78:ab:f5:3a:b6:c9:f3:e1:5c:06:47:62:f6:92:60:18:bf:
4a:31:8a:57:c0:7f:66:af:02:ba:a7:12:a9:1e:dc:93:91:6f:
2f:20:13:8a:ae:d2:e6:15:55:58:96:ec:c7:d4:3a:6c:ce:ca:
74:e2:8e:62:35:ad:c7:d0:87:74:af:0b:69:f1:ed:8a:c8:46:
3a:6f:81:5e:a0:df:43:1e:c5:d5:b2:33:6c:0d:68:3b:1f:2f:
34:57:71:69:f6:5a:0a:e7:18:f2:b9:0c:eb:c9:5d:6a:21:a0:
79:a4:f8:20:40:90:46:d1:a6:92:79:eb:67:02:43:ae:40:69:
05:6f:04:af:a0:a6:b6:03:4f:b2:84:2f:2e:58:a7:1e:a2:e0:
de:c8:e6:36:e3:0c:43:1b:6f:83:7b:a9:c8:19:eb:a8:24:2f:
67:65:0b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:38:20 2025 by rpki-client