Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/34352e372e34342e302f32322d3234203d3e20323635353334.roa
File: 34352e372e34342e302f32322d3234203d3e20323635353334.roa (raw, json)
Hash identifier: 7ZV1t0eu6lmJVyTY1hQQolPG+yXMsPvLLwka3mV4Z6U=
Subject key identifier: B0:42:F6:07:8C:21:B6:3D:4C:54:C4:5D:3D:9A:A3:C9:0B:AA:A2:D9
Certificate issuer: /CN=A64789FFCA35DC5CF5A04D3F948A79A76F415130
Certificate serial: 515D654C068DD1D2CF47E6D1BFDA8147B9C4CA7B
Authority key identifier: A6:47:89:FF:CA:35:DC:5C:F5:A0:4D:3F:94:8A:79:A7:6F:41:51:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/34352e372e34342e302f32322d3234203d3e20323635353334.roa
Signing time: Tue 04 Feb 2025 18:54:50 +0000
ROA not before: Tue 04 Feb 2025 18:49:50 +0000
ROA not after: Tue 03 Feb 2026 18:54:50 +0000
asID: 265534
IP address blocks: 45.7.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:5d:65:4c:06:8d:d1:d2:cf:47:e6:d1:bf:da:81:47:b9:c4:ca:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A64789FFCA35DC5CF5A04D3F948A79A76F415130
Validity
Not Before: Feb 4 18:49:50 2025 GMT
Not After : Feb 3 18:54:50 2026 GMT
Subject: CN=B042F6078C21B63D4C54C45D3D9AA3C90BAAA2D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:d6:43:e8:cd:0c:9f:40:c0:7f:d0:fb:7c:
c3:cb:16:3c:a7:98:28:8e:35:5a:62:a0:d3:bd:61:
74:b4:fd:d2:4d:fb:e9:14:cc:e0:b1:e8:f7:32:b2:
4a:5a:18:14:38:ad:75:1f:a8:03:23:32:8f:da:77:
e5:20:e9:6c:97:cf:3b:63:b3:60:9c:b0:95:4c:21:
d0:ae:14:58:b3:33:3e:74:37:7f:a3:e8:67:5a:68:
dd:e5:3a:d1:8c:7c:49:73:17:6d:b4:92:14:d1:21:
3a:df:65:8b:a7:df:58:64:24:47:be:d4:20:86:2b:
ec:f8:a1:3f:86:b0:fc:fb:b3:ab:9b:80:d1:de:1c:
15:a7:06:e1:fa:92:59:68:91:c1:77:39:93:f1:aa:
30:3b:3b:93:34:26:19:df:5e:f6:1f:4f:91:42:4c:
98:b3:0b:42:8b:86:99:bc:c5:f2:5c:12:cc:af:ec:
09:de:99:00:12:2b:5a:33:d8:e5:1b:67:54:eb:94:
62:e9:74:4f:d6:2d:16:3d:18:1c:ce:8f:46:3a:4f:
da:6d:a5:f7:aa:a1:d6:bc:52:8d:72:62:fe:b9:a3:
91:7a:cf:a4:68:c9:da:d7:21:e9:b3:71:21:25:4a:
21:30:82:25:8d:bb:78:31:51:b2:4b:19:d2:91:89:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:42:F6:07:8C:21:B6:3D:4C:54:C4:5D:3D:9A:A3:C9:0B:AA:A2:D9
X509v3 Authority Key Identifier:
keyid:A6:47:89:FF:CA:35:DC:5C:F5:A0:4D:3F:94:8A:79:A7:6F:41:51:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/34352e372e34342e302f32322d3234203d3e20323635353334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:90:3a:de:0a:e3:96:f1:28:62:ba:ec:2f:36:98:75:ee:d9:
ca:f4:4c:a1:1b:e3:5f:f6:2d:61:07:16:ca:11:b3:e1:43:41:
ec:70:62:4f:96:af:1e:23:37:cd:2c:eb:00:d9:f5:65:3f:7e:
d5:f5:0d:b5:a6:81:20:96:f2:b0:e7:50:60:ea:0a:09:07:9d:
03:8d:25:19:17:be:32:3f:9f:1c:4e:b2:3e:79:57:fe:74:13:
54:c4:f2:f3:81:1f:24:f2:9c:e5:5d:4f:4d:bd:4f:cf:6d:2c:
32:fc:bf:29:44:4a:f7:ab:c1:4d:5d:fe:81:59:c3:96:90:47:
0c:db:46:85:99:7e:3d:71:1c:48:fc:e6:61:aa:b3:47:5f:1d:
f8:13:89:f3:35:5f:54:a9:a8:bd:e4:82:c6:89:52:8b:8d:42:
a4:75:fc:c1:c8:a4:f8:ff:4e:a9:95:29:bd:89:c7:b6:a8:e2:
a5:52:de:08:16:5e:b1:c5:19:11:cf:1d:68:40:aa:d6:0b:8b:
81:92:5a:7f:1c:d2:f8:0d:bd:89:c5:8e:8f:73:06:33:51:cd:
19:14:9e:2f:9a:b6:9f:dc:15:f7:30:05:01:99:ad:77:83:e3:
84:16:28:bb:df:17:63:b4:89:e9:5e:52:bf:a5:76:9a:73:e2:
e0:f7:58:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:11 2025 by rpki-client