Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/34352e3232352e3231362e302f32322d3234203d3e20323635383533.roa
File: 34352e3232352e3231362e302f32322d3234203d3e20323635383533.roa (raw, json)
Hash identifier: om2AyISu8ZJVWbphTeUSVum3Ztt+y/GQTNRO5Ecm4mM=
Subject key identifier: A6:A0:67:2B:41:37:60:12:F8:3F:AC:75:58:62:FF:1A:51:11:A5:F1
Certificate issuer: /CN=294404D5D1365B2F805F2EB408D0F8D20B0AF0E8
Certificate serial: 16469F232CE71FCA9B8E881693DCEAB9290E2454
Authority key identifier: 29:44:04:D5:D1:36:5B:2F:80:5F:2E:B4:08:D0:F8:D2:0B:0A:F0:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/34352e3232352e3231362e302f32322d3234203d3e20323635383533.roa
Signing time: Tue 04 Feb 2025 18:49:01 +0000
ROA not before: Tue 04 Feb 2025 18:44:01 +0000
ROA not after: Tue 03 Feb 2026 18:49:01 +0000
asID: 265853
IP address blocks: 45.225.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:46:9f:23:2c:e7:1f:ca:9b:8e:88:16:93:dc:ea:b9:29:0e:24:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294404D5D1365B2F805F2EB408D0F8D20B0AF0E8
Validity
Not Before: Feb 4 18:44:01 2025 GMT
Not After : Feb 3 18:49:01 2026 GMT
Subject: CN=A6A0672B41376012F83FAC755862FF1A5111A5F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d0:d6:51:0e:23:85:bc:55:a1:64:5a:e1:79:
cf:d8:92:34:17:a7:8e:be:58:c8:b5:c3:e2:13:35:
50:9c:87:0a:0f:e2:c4:06:88:c9:ef:b3:91:9a:cc:
3d:20:60:39:61:7c:8e:64:41:de:3f:57:cd:a2:53:
72:3a:03:24:38:b0:28:df:1b:90:3a:4f:c2:9e:05:
e2:78:11:41:2f:97:11:25:e4:53:5d:c6:2e:88:f2:
43:76:f6:e6:b5:7d:27:3b:cf:d2:b6:e4:fc:5e:09:
5a:34:2e:9f:90:da:af:f7:e4:ba:cc:aa:0c:16:59:
f4:da:e4:dd:83:a8:e0:12:f8:4a:10:fa:3c:fc:3b:
48:58:b9:f9:3c:d5:47:40:a6:40:7a:32:4e:af:2c:
54:d6:01:02:d4:3b:0e:0d:24:ff:c2:b2:15:44:ac:
cb:ad:cc:36:b8:05:be:a8:c5:c0:c1:09:33:42:c7:
a3:97:21:1f:de:95:bc:b7:6a:b2:ff:28:1d:cf:be:
15:13:52:fd:e9:58:42:d4:f2:85:68:c0:ff:6e:25:
a2:d9:51:3e:3d:31:76:e9:35:32:08:b6:0c:d2:c1:
52:2d:e3:da:74:47:3a:8e:48:82:aa:03:c1:97:6d:
f8:53:5b:ad:1e:fc:38:89:ab:7b:e2:e2:21:0b:29:
3f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A0:67:2B:41:37:60:12:F8:3F:AC:75:58:62:FF:1A:51:11:A5:F1
X509v3 Authority Key Identifier:
keyid:29:44:04:D5:D1:36:5B:2F:80:5F:2E:B4:08:D0:F8:D2:0B:0A:F0:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/34352e3232352e3231362e302f32322d3234203d3e20323635383533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.216.0/22
Signature Algorithm: sha256WithRSAEncryption
70:90:7d:49:68:28:77:2f:59:61:ea:df:dd:9c:2d:ec:ae:6f:
d8:7c:75:85:c0:fb:14:5c:dc:2a:63:0e:1a:4d:06:4e:86:3b:
c9:bb:e7:32:fe:52:fc:aa:9a:da:c9:3e:fc:9d:a1:01:04:bc:
b5:eb:d0:77:06:cf:fb:12:53:d4:88:8f:bc:97:82:73:98:57:
78:39:12:ca:cd:06:ff:95:0a:e5:de:53:5f:80:7e:a2:2a:57:
28:28:2c:3d:52:08:89:a0:92:5d:08:b4:b4:f6:20:e4:ab:7f:
ee:9d:90:dd:1f:d5:49:91:1c:1b:9b:74:5e:48:8f:61:2d:a0:
7b:27:53:34:00:3b:10:60:b3:e3:de:10:16:e8:9a:35:6b:28:
09:fb:6b:89:7d:69:4f:93:73:51:11:60:1d:22:9c:7f:d3:8f:
e8:a7:8e:d9:ec:3d:d6:fa:4a:4f:de:30:9d:9c:bc:93:a6:0c:
cb:a5:20:38:6f:25:70:79:d3:d5:48:68:e4:f4:54:45:fc:d2:
ac:f6:39:0f:b7:7a:a8:d3:95:ef:16:11:dc:ff:98:8d:38:18:
f0:4e:69:ce:f9:c7:17:8c:89:44:4c:f5:96:af:d3:b3:bd:b7:
71:16:2f:68:85:b9:f4:49:9e:73:9f:36:45:99:a6:c9:28:c6:
cf:76:45:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:28:33 2025 by rpki-client