Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/34352e352e35322e302f32322d3234203d3e20323635353330.roa
File: 34352e352e35322e302f32322d3234203d3e20323635353330.roa (raw, json)
Hash identifier: 12SZKM9Tc45V3wT42xOjA7g6amNPvNSH/2twfURRle4=
Subject key identifier: 94:D0:94:63:AB:F1:B7:00:4A:BF:3B:76:0F:F0:0B:1B:15:22:AB:73
Certificate issuer: /CN=00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5
Certificate serial: 0A5B24332668AB59BC52CD0D6DB87ADD22C000A9
Authority key identifier: 00:CD:C0:EF:33:C6:0D:8C:03:5C:A6:9F:18:6F:D6:C3:DD:EE:F5:F5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/34352e352e35322e302f32322d3234203d3e20323635353330.roa
Signing time: Tue 04 Feb 2025 20:00:18 +0000
ROA not before: Tue 04 Feb 2025 19:55:18 +0000
ROA not after: Tue 03 Feb 2026 20:00:18 +0000
asID: 265530
IP address blocks: 45.5.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:5b:24:33:26:68:ab:59:bc:52:cd:0d:6d:b8:7a:dd:22:c0:00:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5
Validity
Not Before: Feb 4 19:55:18 2025 GMT
Not After : Feb 3 20:00:18 2026 GMT
Subject: CN=94D09463ABF1B7004ABF3B760FF00B1B1522AB73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:9c:fd:41:7e:e1:22:2d:26:4c:42:a3:bf:
50:66:9c:36:08:62:8d:79:e9:e4:89:2c:0a:1b:ca:
ad:17:fd:5c:4e:9b:08:8f:83:1f:b5:6c:8b:dc:e3:
d9:66:96:6d:56:7f:e9:80:1d:e6:ed:61:59:29:f3:
76:ce:0b:96:de:f6:16:da:4c:63:1b:19:a1:d5:1e:
2b:e5:f9:92:0d:42:13:dc:67:8f:5d:82:76:00:39:
db:01:d4:ab:77:ed:c3:af:a6:bb:04:06:e7:a4:8a:
7d:24:be:15:ba:4e:42:c3:8c:bf:89:14:3e:f2:a1:
0b:78:a7:b5:b4:c4:ae:7c:74:ff:fa:77:4a:19:7b:
d7:63:f5:02:ea:07:b1:79:86:fe:43:17:12:0d:b6:
86:36:a6:6c:ac:f5:b7:07:27:33:de:77:c7:bf:e8:
23:5d:27:d9:79:12:13:7e:fe:1c:ed:6c:86:e4:7f:
4d:88:05:30:2f:a7:96:b7:89:b9:96:99:37:d5:fd:
b5:76:65:34:f3:c8:6e:30:63:78:77:5d:1f:83:04:
9e:5e:e1:d7:ff:ab:2b:f4:fa:42:06:9c:8f:ed:1b:
b8:ed:1f:7a:16:af:fa:24:78:10:e1:c1:6f:46:71:
bd:4b:2d:6d:ac:04:70:11:ff:d9:1c:38:8a:ac:f3:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D0:94:63:AB:F1:B7:00:4A:BF:3B:76:0F:F0:0B:1B:15:22:AB:73
X509v3 Authority Key Identifier:
keyid:00:CD:C0:EF:33:C6:0D:8C:03:5C:A6:9F:18:6F:D6:C3:DD:EE:F5:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/34352e352e35322e302f32322d3234203d3e20323635353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.52.0/22
Signature Algorithm: sha256WithRSAEncryption
71:9f:4a:48:de:aa:23:b5:c7:cf:76:e0:bc:12:cb:80:08:78:
e8:a9:e0:c9:a3:24:c8:74:2c:2b:0b:54:5a:b1:27:0a:14:fe:
07:69:4e:e0:07:66:f4:b3:3c:95:d2:a2:27:6f:4f:05:6c:79:
17:bb:37:86:a1:66:27:b6:3d:91:55:1e:2d:29:35:cc:d9:cb:
fe:34:6e:44:ab:dc:b2:80:4f:4f:13:c2:21:10:5b:44:a9:1c:
e2:69:d7:77:91:1b:62:63:0f:53:ad:cf:c3:db:57:3b:5c:31:
d2:d2:ef:cf:61:c8:ad:b9:db:46:77:83:aa:ca:fe:3c:fc:f3:
bc:83:4a:ca:05:b3:e8:fc:16:dc:cc:07:b2:c8:13:53:e5:8c:
d6:11:d4:9f:46:d3:8f:aa:03:87:21:f3:8f:d7:61:b4:87:c1:
60:7d:74:6a:96:7d:b4:40:6b:97:d0:6a:ff:fc:93:a2:14:7a:
3c:6e:07:1e:84:2b:6f:0c:f6:27:59:2f:42:bc:5e:57:90:f8:
8c:a6:3c:da:04:ab:2c:de:a8:4b:7b:9d:11:37:7b:1b:83:50:
19:f7:04:fe:f4:5c:a7:c3:27:1c:f5:b5:52:d0:dc:3d:41:30:
c9:3a:5d:3f:e4:17:f5:55:45:84:da:1f:e2:0c:5f:b0:16:e7:
4e:2c:42:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:50 2025 by rpki-client