Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7DBEF854CD7ACAEE8F0E7E94BEE9A68AD18089C9FA1E82930184A7078943A834/0/34352e3233372e3133362e302f32322d3232203d3e20323636383335.roa
File: 34352e3233372e3133362e302f32322d3232203d3e20323636383335.roa (raw, json)
Hash identifier: FwzRE99JNTs4Pkawind38JThQvK6fQDPB2awCmgpCtI=
Subject key identifier: 4A:11:70:7F:56:D5:26:47:8C:CD:CF:8A:D0:8E:06:A0:31:48:39:34
Certificate issuer: /CN=8ED988BB4594C0931D8088BB90E5E46825FF2801
Certificate serial: 1A7BD95B3826D448C8EAC7BB8EED81538A127AB1
Authority key identifier: 8E:D9:88:BB:45:94:C0:93:1D:80:88:BB:90:E5:E4:68:25:FF:28:01
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8ED988BB4594C0931D8088BB90E5E46825FF2801.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7DBEF854CD7ACAEE8F0E7E94BEE9A68AD18089C9FA1E82930184A7078943A834/0/34352e3233372e3133362e302f32322d3232203d3e20323636383335.roa
Signing time: Tue 04 Feb 2025 18:22:41 +0000
ROA not before: Tue 04 Feb 2025 18:17:41 +0000
ROA not after: Tue 03 Feb 2026 18:22:41 +0000
asID: 266835
IP address blocks: 45.237.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:7b:d9:5b:38:26:d4:48:c8:ea:c7:bb:8e:ed:81:53:8a:12:7a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ED988BB4594C0931D8088BB90E5E46825FF2801
Validity
Not Before: Feb 4 18:17:41 2025 GMT
Not After : Feb 3 18:22:41 2026 GMT
Subject: CN=4A11707F56D526478CCDCF8AD08E06A031483934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:68:19:30:4b:35:0d:a8:6c:91:87:d6:c5:b5:
3c:0b:9a:6f:c3:37:6a:3d:b1:02:2e:0b:eb:49:15:
e7:4a:a5:a9:ad:a1:63:36:08:29:9f:b0:46:f7:8e:
1d:1b:75:e3:1c:ed:6c:4c:26:85:db:a1:b4:8f:32:
af:73:96:00:44:59:90:ca:85:ac:c0:59:26:ee:51:
34:2d:e8:5d:5e:23:cd:24:d3:4d:91:58:82:62:9a:
13:e8:85:e8:09:30:e1:fb:3b:5a:25:8f:e1:07:6b:
72:87:fb:22:1f:6a:ff:2c:07:b2:88:c0:80:4d:42:
88:12:fa:c3:77:f9:09:f0:45:c5:65:1b:fe:2f:38:
41:3f:43:d5:0e:a2:80:30:3a:17:74:0c:26:01:81:
a4:5a:5a:76:5d:c9:60:21:65:53:f6:54:5f:0f:7e:
ec:a3:91:68:d1:8c:85:72:ec:46:ed:1c:fd:48:0f:
37:08:b7:7c:2b:0b:8f:0d:fa:b1:68:cd:aa:8a:61:
40:0c:c3:fa:37:8a:5e:99:db:86:1a:f4:49:04:4f:
a1:79:68:bf:97:59:db:97:fe:8b:ab:49:7b:0f:d9:
3a:ed:98:24:12:b7:ae:b8:7b:05:74:a7:fc:b2:b5:
3b:ff:9d:62:65:d4:eb:42:3d:a9:16:20:c9:45:cf:
3a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:11:70:7F:56:D5:26:47:8C:CD:CF:8A:D0:8E:06:A0:31:48:39:34
X509v3 Authority Key Identifier:
keyid:8E:D9:88:BB:45:94:C0:93:1D:80:88:BB:90:E5:E4:68:25:FF:28:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7DBEF854CD7ACAEE8F0E7E94BEE9A68AD18089C9FA1E82930184A7078943A834/0/8ED988BB4594C0931D8088BB90E5E46825FF2801.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8ED988BB4594C0931D8088BB90E5E46825FF2801.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7DBEF854CD7ACAEE8F0E7E94BEE9A68AD18089C9FA1E82930184A7078943A834/0/34352e3233372e3133362e302f32322d3232203d3e20323636383335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.136.0/22
Signature Algorithm: sha256WithRSAEncryption
67:8b:a1:fb:95:0a:13:ce:0e:48:94:4b:e2:6c:11:3f:e2:ea:
e2:ba:21:81:a9:a4:26:29:af:1f:3e:c7:ea:60:64:67:94:56:
73:fb:1c:13:c5:cb:55:b3:04:f6:ec:4a:51:05:aa:95:05:8a:
5b:4e:6b:a9:e3:4c:0e:d4:05:db:cc:74:e4:6e:07:51:6a:fb:
9b:87:5c:b9:38:fb:10:03:4d:50:b9:93:cb:5f:ba:2f:a8:25:
48:27:33:bc:82:3f:d3:1a:34:88:5f:e8:bd:b4:7f:52:e1:b1:
65:dd:18:f8:e3:16:62:cb:ce:c8:af:7f:c1:dc:c1:a9:ce:2b:
91:f0:61:4a:1c:fe:a9:57:a8:5f:d5:42:b4:99:c4:06:64:98:
fc:b6:1b:a6:63:ea:5d:f9:24:3e:7a:8e:36:0e:da:94:39:04:
a5:15:1c:2f:9a:7b:9d:1c:61:ff:e6:74:6b:5f:bd:e6:9d:2a:
43:16:a5:b7:58:fc:c4:a7:08:45:12:0e:a5:e1:90:a5:fb:a1:
f6:a2:54:2a:e7:53:92:14:3a:ce:8c:da:19:1b:bd:56:2f:95:
64:d7:a2:69:ca:8d:4a:c5:45:e0:1c:78:8d:72:7b:57:c8:59:
f4:9e:ed:78:cc:0d:da:75:af:92:1f:0a:5b:7f:4e:c7:dc:b1:
38:b1:79:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:35 2025 by rpki-client