Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40F8D6DA61C8DECD5A1243993CF904D26C9DA8ED1BA3C995A125A4A88C01EF1D/0/34352e3233342e38342e302f32332d3233203d3e20323636373832.roa
File: 34352e3233342e38342e302f32332d3233203d3e20323636373832.roa (raw, json)
Hash identifier: 72Ip46b0wIBtGChPW7OT6T8Gj8Iu7dgRSN7G5N7liDA=
Subject key identifier: 72:A1:19:A0:0B:A3:39:DD:47:90:50:B3:D4:1D:22:EB:DA:97:BF:A4
Certificate issuer: /CN=FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7
Certificate serial: 38465336E57407C9FDDF68E04414093CEC2306CA
Authority key identifier: FF:06:C3:3F:B0:00:1E:E2:8F:FC:36:47:C9:C6:B9:FD:0B:0A:39:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/40F8D6DA61C8DECD5A1243993CF904D26C9DA8ED1BA3C995A125A4A88C01EF1D/0/34352e3233342e38342e302f32332d3233203d3e20323636373832.roa
Signing time: Tue 04 Feb 2025 18:52:03 +0000
ROA not before: Tue 04 Feb 2025 18:47:03 +0000
ROA not after: Tue 03 Feb 2026 18:52:03 +0000
asID: 266782
IP address blocks: 45.234.84.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:46:53:36:e5:74:07:c9:fd:df:68:e0:44:14:09:3c:ec:23:06:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7
Validity
Not Before: Feb 4 18:47:03 2025 GMT
Not After : Feb 3 18:52:03 2026 GMT
Subject: CN=72A119A00BA339DD479050B3D41D22EBDA97BFA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:47:3f:45:51:4f:d1:3c:55:14:b8:6e:2b:
e7:31:85:e1:9a:c8:6e:6b:97:27:97:df:9a:0a:9b:
b0:d3:20:ed:df:49:9c:77:16:14:71:a2:24:2a:8c:
46:6e:44:cb:07:ae:ff:a2:61:fa:98:b7:52:e7:0e:
27:64:3c:22:75:61:11:b0:a7:ee:15:94:17:c5:c0:
89:8f:54:e3:3a:8f:3d:01:90:df:c5:5c:b7:d6:30:
29:68:ef:57:b3:8d:67:3f:10:70:83:12:3a:d1:26:
ec:ba:c7:26:e1:16:8c:a6:1e:3b:9c:ab:6c:00:45:
1b:4d:52:0f:d1:66:97:61:66:29:e6:2b:06:b1:40:
6e:14:fc:2b:6d:f1:b1:c4:37:f1:1b:b1:f2:50:ae:
04:25:03:54:2b:29:0e:91:8b:a5:67:a2:89:40:36:
8e:8f:de:23:a1:af:4e:29:42:eb:17:ad:7e:4f:41:
4c:48:c3:96:80:90:78:cc:9d:94:01:ef:27:a3:f9:
1f:95:c3:7e:39:72:2c:25:2b:f8:ed:ab:9a:f1:eb:
45:4e:2a:ac:ae:88:58:b1:1c:53:fc:ea:26:65:35:
4d:95:f2:84:63:73:8d:f4:dc:ae:05:24:12:01:91:
9f:72:54:87:63:e7:aa:12:34:25:77:fb:ba:90:ca:
0d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A1:19:A0:0B:A3:39:DD:47:90:50:B3:D4:1D:22:EB:DA:97:BF:A4
X509v3 Authority Key Identifier:
keyid:FF:06:C3:3F:B0:00:1E:E2:8F:FC:36:47:C9:C6:B9:FD:0B:0A:39:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/40F8D6DA61C8DECD5A1243993CF904D26C9DA8ED1BA3C995A125A4A88C01EF1D/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40F8D6DA61C8DECD5A1243993CF904D26C9DA8ED1BA3C995A125A4A88C01EF1D/0/34352e3233342e38342e302f32332d3233203d3e20323636373832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.84.0/23
Signature Algorithm: sha256WithRSAEncryption
92:19:79:ad:c4:d2:79:18:25:76:68:ec:71:17:94:ee:e7:77:
d0:90:cf:64:e0:73:45:67:27:f0:08:6b:de:38:62:a4:38:7b:
b6:5b:9b:06:95:2d:24:81:99:c7:2f:af:08:84:7e:d2:3b:06:
44:cb:9a:11:88:7b:74:a6:04:6e:5b:a2:af:1d:57:58:a6:44:
e7:34:d6:48:0e:fe:2c:fc:c2:65:ee:20:b2:bf:26:cc:a7:a6:
a7:3c:84:ec:ab:00:b1:99:81:f5:10:a3:de:ed:4a:6a:7a:95:
f1:76:1f:42:6e:59:4b:e9:60:a5:5f:be:5b:e3:9c:5c:8a:aa:
5b:69:82:9b:42:14:0a:93:0d:cd:a1:c8:d9:5f:f4:b0:d7:bf:
0d:81:03:f7:e7:9c:4b:19:8e:ea:1f:89:8d:8b:0e:02:7a:71:
6f:96:c9:ed:13:65:33:23:c9:b4:e7:58:21:b9:18:86:d3:26:
bc:b4:1e:04:01:ea:45:e6:f9:78:78:64:75:06:31:9c:45:dc:
b9:99:a1:05:d1:39:25:00:a1:e8:39:c7:dd:f5:f8:d1:55:58:
37:5d:0f:c4:51:54:a2:1a:76:29:d3:ad:c5:7c:8d:93:5d:10:
2e:d9:d9:b1:78:9c:7f:3b:94:95:7c:0c:ad:dd:d3:01:a3:72:
75:15:7b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:20 2025 by rpki-client