Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e203139353531.roa
File: 34352e3136322e322e302f32342d3234203d3e203139353531.roa (raw, json)
Hash identifier: hTa60ak7rOR5Iwz2SQrBfQsAAEym3R2/+HRqMX0wYR4=
Subject key identifier: 93:56:15:3E:0D:E9:30:04:6D:70:B8:46:ED:B6:92:77:4A:E8:B6:62
Certificate issuer: /CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
Certificate serial: 37E39F89E48643051CA77C1D963292C0B949504F
Authority key identifier: E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e203139353531.roa
Signing time: Wed 26 Mar 2025 14:20:00 +0000
ROA not before: Wed 26 Mar 2025 14:15:00 +0000
ROA not after: Wed 25 Mar 2026 14:20:00 +0000
asID: 19551
IP address blocks: 45.162.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e3:9f:89:e4:86:43:05:1c:a7:7c:1d:96:32:92:c0:b9:49:50:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
Validity
Not Before: Mar 26 14:15:00 2025 GMT
Not After : Mar 25 14:20:00 2026 GMT
Subject: CN=9356153E0DE930046D70B846EDB692774AE8B662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:01:d9:e2:c0:b9:df:1b:09:7a:a7:1e:16:cb:
1e:9e:8f:58:80:b0:f3:8b:ee:49:a9:0b:8e:38:69:
c4:fb:3e:af:e7:98:03:9a:d6:a0:91:97:21:6f:56:
93:97:c0:41:b6:5d:5a:06:bf:80:22:69:be:a9:42:
52:84:4f:79:f4:57:e4:95:26:7f:37:24:7e:67:70:
74:39:a5:8f:95:d8:ee:95:89:03:4a:d7:7a:57:99:
22:ce:98:0b:11:24:ed:44:0b:2a:cc:d0:75:44:ed:
79:2b:48:af:31:15:1d:f8:3d:2a:5c:35:33:aa:8a:
2f:45:5a:c1:5e:e0:d4:b2:05:50:c2:d1:f0:30:92:
0c:3a:7d:af:2c:ab:fc:71:61:99:c6:fe:be:d2:a8:
a7:a6:39:32:b6:8f:a1:ee:11:a4:c2:36:d6:d0:68:
e4:9f:8b:90:32:12:01:e6:60:c1:8e:04:71:9f:43:
33:6d:a0:e4:1a:e1:67:2f:78:5c:ea:b8:4c:36:c3:
99:52:b5:36:ed:dc:9d:6b:05:38:a4:18:f0:44:9b:
66:90:23:33:1d:4d:05:03:97:15:46:75:f6:f8:1c:
3b:63:44:cc:9d:46:00:6a:86:7b:3f:3a:39:33:b3:
1c:f0:20:4b:64:26:f8:f6:ca:98:96:99:8d:8a:6c:
3c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:56:15:3E:0D:E9:30:04:6D:70:B8:46:ED:B6:92:77:4A:E8:B6:62
X509v3 Authority Key Identifier:
keyid:E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e203139353531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.2.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d9:c4:98:05:6b:c1:42:33:c5:06:25:4c:0d:78:07:13:12:
e2:bf:fa:64:d8:48:11:32:47:cb:ca:d4:f3:3b:53:58:2d:f2:
9d:b8:10:1f:e4:1b:8d:44:2c:95:30:6f:b7:60:30:4b:1b:9f:
6f:7b:df:da:6b:fe:b9:9c:d6:94:0d:69:b2:a5:67:69:83:f5:
9d:70:32:85:80:c0:62:ca:36:f7:2e:d9:5c:d0:78:b3:b2:89:
a8:ac:e1:0a:de:1b:43:87:67:75:58:75:51:05:9d:aa:59:b0:
e5:01:96:a4:d6:2e:3c:76:bf:ad:8c:95:28:4f:3f:35:08:eb:
59:bd:51:c0:78:fd:89:8a:b0:70:14:62:10:34:0b:c6:57:8d:
ad:a7:8a:a8:ee:66:f3:04:d2:d7:57:b2:f7:87:30:bb:4b:e5:
93:6d:10:96:9b:3d:67:75:e6:3a:41:61:33:d0:72:00:61:34:
26:1c:d2:3a:f9:c8:a7:92:c8:07:44:47:17:12:d0:a0:eb:00:
dd:75:ea:6d:5f:2a:1a:3e:b0:b8:46:d7:80:08:45:57:36:1a:
65:57:9a:b5:09:00:36:ce:3c:bb:f3:b2:89:fe:f9:ee:11:a7:
b0:23:1d:21:0a:db:5a:da:ab:a1:8b:67:19:85:7f:9f:42:2a:
f7:c9:4f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:15 2025 by rpki-client