Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2BAE7E39EF1039F72FA2E54815626192E517B2B967CCAA02CB1D0AA59B2FF0BE/0/34352e3232362e3232382e302f32322d3234203d3e20323635383736.roa
File: 34352e3232362e3232382e302f32322d3234203d3e20323635383736.roa (raw, json)
Hash identifier: 92CT+L16BgHIU7DeeTA0gtnSA7UdhD4jYZiPVfTkB1s=
Subject key identifier: 07:71:A6:C4:B9:DE:48:E3:EF:B7:23:85:67:37:F0:3B:78:E7:CE:1F
Certificate issuer: /CN=CE1FDAE69287B22958F8AFC0ACC83013DDCC99D4
Certificate serial: 3DB8F760B5D02CFDCBF9FF3CA701BB48F4A9F1C5
Authority key identifier: CE:1F:DA:E6:92:87:B2:29:58:F8:AF:C0:AC:C8:30:13:DD:CC:99:D4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FDAE69287B22958F8AFC0ACC83013DDCC99D4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2BAE7E39EF1039F72FA2E54815626192E517B2B967CCAA02CB1D0AA59B2FF0BE/0/34352e3232362e3232382e302f32322d3234203d3e20323635383736.roa
Signing time: Tue 04 Feb 2025 18:15:18 +0000
ROA not before: Tue 04 Feb 2025 18:10:18 +0000
ROA not after: Tue 03 Feb 2026 18:15:18 +0000
asID: 265876
IP address blocks: 45.226.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:b8:f7:60:b5:d0:2c:fd:cb:f9:ff:3c:a7:01:bb:48:f4:a9:f1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE1FDAE69287B22958F8AFC0ACC83013DDCC99D4
Validity
Not Before: Feb 4 18:10:18 2025 GMT
Not After : Feb 3 18:15:18 2026 GMT
Subject: CN=0771A6C4B9DE48E3EFB723856737F03B78E7CE1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:6c:eb:4e:eb:21:d1:69:3a:63:83:57:e2:
f9:fc:8a:c5:bc:8f:54:f0:d0:2d:b1:6b:bc:a3:47:
0e:2a:7e:42:69:84:f8:f5:d1:92:da:ae:0a:fb:bd:
71:86:d2:69:5e:c1:73:99:b2:1d:f3:c3:91:14:fb:
0c:ba:57:63:22:3f:d3:92:5b:fc:69:e4:f3:61:70:
87:9d:cb:7b:b8:aa:8a:2a:8b:95:80:41:d8:01:48:
13:b0:05:d2:4a:fe:ad:a2:5e:b9:58:01:28:a7:5f:
64:78:8b:41:d3:84:00:fb:0b:09:11:eb:87:e7:9b:
a0:cd:46:28:fa:bc:0f:ba:22:7c:ce:ac:4e:0f:fb:
af:58:1f:5f:91:42:fc:06:6d:54:cd:b3:b0:aa:2c:
48:47:f6:e6:d5:dc:aa:75:00:b5:fa:0a:03:7e:dc:
c0:5d:7e:c8:26:84:dc:0c:2c:76:cb:67:31:f7:d6:
da:64:2e:b0:cc:25:ba:42:c9:59:4c:e6:41:32:07:
fd:4a:e9:72:3e:e7:a1:22:24:45:1b:cc:fb:dc:a2:
37:47:fc:24:58:e0:3c:06:6c:21:61:51:76:ff:2a:
69:1e:00:f6:8f:c1:d9:40:8d:32:f2:0b:58:c1:57:
a9:6e:dd:2e:14:6c:6c:c6:85:4f:8c:e4:ae:52:ae:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:71:A6:C4:B9:DE:48:E3:EF:B7:23:85:67:37:F0:3B:78:E7:CE:1F
X509v3 Authority Key Identifier:
keyid:CE:1F:DA:E6:92:87:B2:29:58:F8:AF:C0:AC:C8:30:13:DD:CC:99:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2BAE7E39EF1039F72FA2E54815626192E517B2B967CCAA02CB1D0AA59B2FF0BE/0/CE1FDAE69287B22958F8AFC0ACC83013DDCC99D4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FDAE69287B22958F8AFC0ACC83013DDCC99D4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2BAE7E39EF1039F72FA2E54815626192E517B2B967CCAA02CB1D0AA59B2FF0BE/0/34352e3232362e3232382e302f32322d3234203d3e20323635383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.226.228.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:63:3b:56:dd:9e:25:b6:31:80:41:3c:a3:87:b2:f8:f9:4d:
62:fd:44:fd:ec:24:2b:d8:63:c6:a3:e7:fd:4e:2c:e2:c0:3c:
e8:fc:9c:86:82:69:38:f4:0b:7b:80:55:fa:d9:0e:28:c9:7f:
61:aa:80:0d:7b:72:7e:63:90:1c:30:9a:15:be:46:9b:4a:a3:
69:f7:47:1d:5c:fe:80:07:9e:9a:f9:43:eb:e8:17:e0:e1:1d:
ea:57:be:86:b7:5f:0f:30:b8:68:7e:28:7a:ad:99:91:a3:47:
a6:7b:d9:6b:4d:84:d9:3d:a0:1b:f6:ce:e5:be:08:10:10:4f:
ac:8f:43:8d:12:44:fb:3f:66:80:d6:21:64:0d:b6:b2:b5:36:
63:a8:a0:b0:81:db:0d:a4:b6:fa:66:64:70:a0:bf:fe:10:36:
26:05:df:94:75:a6:dd:d3:63:24:95:a4:35:d9:c3:ba:1a:8d:
eb:21:ed:0b:40:7e:ef:9d:3c:cf:6a:30:d4:59:09:75:67:e5:
3e:35:43:21:e5:fb:fd:28:07:b7:f4:36:9b:3b:de:be:64:51:
52:0a:a9:28:6d:c4:ba:77:e2:71:b2:fa:a0:9f:97:91:e0:7e:
c3:27:04:88:a1:81:a7:c1:f3:50:cb:26:f4:21:04:5b:5c:0a:
c6:fa:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:17 2025 by rpki-client