Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/34352e342e3130332e302f32342d3234203d3e20323635363733.roa
File: 34352e342e3130332e302f32342d3234203d3e20323635363733.roa (raw, json)
Hash identifier: 9O4S4YtkmL5vcZl53UynoaS67Fef0wCpJDfKP4EW2cI=
Subject key identifier: F1:92:25:AA:C7:EB:8D:FF:55:B5:3B:70:23:81:5B:B9:27:E1:61:21
Certificate issuer: /CN=A663625ACEE986000D86F2BCCF5CED7DE69D4C90
Certificate serial: 3BB6B8BB1FA3D4D58D9A27593A61CC8E404495D4
Authority key identifier: A6:63:62:5A:CE:E9:86:00:0D:86:F2:BC:CF:5C:ED:7D:E6:9D:4C:90
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/34352e342e3130332e302f32342d3234203d3e20323635363733.roa
Signing time: Tue 04 Feb 2025 18:31:12 +0000
ROA not before: Tue 04 Feb 2025 18:26:12 +0000
ROA not after: Tue 03 Feb 2026 18:31:12 +0000
asID: 265673
IP address blocks: 45.4.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:b6:b8:bb:1f:a3:d4:d5:8d:9a:27:59:3a:61:cc:8e:40:44:95:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A663625ACEE986000D86F2BCCF5CED7DE69D4C90
Validity
Not Before: Feb 4 18:26:12 2025 GMT
Not After : Feb 3 18:31:12 2026 GMT
Subject: CN=F19225AAC7EB8DFF55B53B7023815BB927E16121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1a:9f:d3:85:b5:c0:93:bd:8b:97:9f:17:45:
f6:07:9a:66:d4:96:58:3f:22:56:70:c4:b2:a8:be:
0b:30:bc:81:84:d4:4b:34:75:ec:fd:15:32:cd:e7:
e2:61:7c:44:24:c2:4e:22:97:44:30:fb:5e:9f:ad:
aa:f9:d0:9a:15:8b:ac:6e:a5:71:c1:ed:d9:52:b7:
71:8e:10:fc:30:75:45:4d:45:f8:1b:f3:ce:7d:8d:
26:1a:c1:7c:30:0f:9b:42:c5:6d:60:af:85:fe:b0:
30:cc:30:3c:8a:56:f2:c9:2a:bf:f0:35:7b:56:f9:
f9:1a:eb:3f:c8:83:61:50:78:9d:d2:79:ec:b1:23:
8f:75:f8:16:fe:dc:e1:36:11:5d:d1:c1:bc:aa:34:
87:56:2f:fc:52:50:e4:4b:07:b9:9f:8e:96:63:50:
17:39:d6:61:27:fb:a6:ce:dd:19:c3:7c:e4:e7:45:
5b:5b:95:81:f8:cc:8a:7a:52:3b:ca:34:1b:72:f0:
4c:90:f5:7c:99:9e:cb:84:24:7d:33:99:29:57:54:
93:3b:50:9a:27:41:5d:5f:1d:3f:24:b1:4c:91:15:
29:0b:ac:19:ff:c0:f8:d9:59:db:32:f7:df:1f:5c:
07:81:66:68:8b:6e:c5:dd:66:c4:ea:fb:31:54:82:
f8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:92:25:AA:C7:EB:8D:FF:55:B5:3B:70:23:81:5B:B9:27:E1:61:21
X509v3 Authority Key Identifier:
keyid:A6:63:62:5A:CE:E9:86:00:0D:86:F2:BC:CF:5C:ED:7D:E6:9D:4C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/34352e342e3130332e302f32342d3234203d3e20323635363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.103.0/24
Signature Algorithm: sha256WithRSAEncryption
59:68:5b:43:54:cf:a4:47:f4:49:68:7f:5f:3a:f7:ed:e8:a4:
04:27:7e:a6:5f:05:30:39:80:87:6d:ab:ad:fc:c8:51:de:db:
83:d6:ba:d8:98:db:33:03:ba:06:f2:39:77:44:c0:27:77:68:
1f:74:8c:21:17:27:90:c6:cb:01:cb:37:d0:0f:b1:6c:d5:3f:
a9:1e:c5:c0:8a:b4:9b:38:77:db:0c:f5:fc:1c:17:65:ae:e6:
45:e6:0c:53:6b:c4:db:ed:bf:8f:e3:9c:b8:16:97:88:47:c6:
37:c2:2a:cd:c9:55:8a:9e:b2:8f:f0:73:da:b7:28:a1:0b:a3:
d4:5f:59:4e:40:f3:e1:6e:af:b8:b9:9f:71:88:d0:4b:93:7b:
99:47:75:63:04:b5:8b:14:2d:47:a7:a6:39:8b:3f:55:16:55:
62:42:1a:e4:e4:1c:7b:89:84:dd:51:66:1b:da:1c:54:85:80:
82:c9:e8:9c:d4:85:a5:6e:b2:d6:f6:3a:ba:98:7b:d8:bf:46:
7a:0a:91:c1:b3:ea:e9:32:b8:2c:71:ae:a3:68:b1:7f:54:0d:
9e:ab:1e:92:f9:8b:90:d2:23:0c:25:a8:07:4d:2c:df:89:73:
d1:a0:82:fb:f1:2e:13:d2:bd:82:7d:db:ea:55:8a:18:15:12:
07:87:50:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:28 2025 by rpki-client