Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/34352e3232342e3134342e302f32322d3234203d3e203237383433.roa
File: 34352e3232342e3134342e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier: JbObwhmeE72rn8RTIiIkNeacuurH4Yt+fnKaBP82wek=
Subject key identifier: 85:5B:DC:38:E8:3E:4C:BF:D0:7D:66:C5:66:40:B7:68:E1:70:D0:15
Certificate issuer: /CN=8A0E80181ACDD08E8561E03A2AE9F4C98597E72F
Certificate serial: 409C6FEA27158D529E1256C696F171BD89F8C787
Authority key identifier: 8A:0E:80:18:1A:CD:D0:8E:85:61:E0:3A:2A:E9:F4:C9:85:97:E7:2F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/34352e3232342e3134342e302f32322d3234203d3e203237383433.roa
Signing time: Wed 12 Feb 2025 20:09:38 +0000
ROA not before: Wed 12 Feb 2025 20:04:38 +0000
ROA not after: Wed 11 Feb 2026 20:09:38 +0000
asID: 27843
IP address blocks: 45.224.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:9c:6f:ea:27:15:8d:52:9e:12:56:c6:96:f1:71:bd:89:f8:c7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A0E80181ACDD08E8561E03A2AE9F4C98597E72F
Validity
Not Before: Feb 12 20:04:38 2025 GMT
Not After : Feb 11 20:09:38 2026 GMT
Subject: CN=855BDC38E83E4CBFD07D66C56640B768E170D015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:c4:bd:3b:6a:44:77:52:4f:e3:8d:ad:25:
01:69:52:5e:1d:7c:f8:e7:2d:f6:68:9f:a6:b4:17:
1b:5a:86:26:d5:b2:77:aa:d6:33:9d:33:ea:1b:14:
48:94:78:af:5a:95:3b:76:fd:df:58:25:60:fa:f9:
25:76:1c:7e:03:8c:33:82:f4:b5:1b:2d:dd:26:16:
29:72:46:5c:01:64:e5:35:1d:a4:14:39:5d:16:15:
8b:a1:d9:88:01:79:a6:7c:c1:d4:9f:9b:2a:c4:5e:
9b:78:2b:04:a0:82:1b:ef:99:f2:24:c8:0f:0a:a7:
c7:bc:74:b9:57:bf:a6:5a:75:d7:6b:45:36:ce:3c:
69:5b:ac:6c:4d:22:b9:c4:81:98:ec:ca:61:ed:e5:
7f:f7:a7:c2:85:be:1d:e5:19:9d:b9:eb:ac:c8:79:
93:8d:4f:76:92:e4:fc:e0:3b:ae:6f:8a:b1:a4:74:
26:01:07:c4:31:0f:7d:9e:8e:71:a6:7d:0d:68:1e:
a6:f2:f0:82:80:1d:1e:f6:3e:b1:65:41:d0:b4:1a:
e3:db:a6:fb:68:23:86:7a:29:ce:1c:2c:6c:9e:6b:
3d:f6:86:e8:2f:74:e9:18:85:b4:40:42:d7:93:f7:
d9:9d:e7:d9:8c:ee:45:6f:2d:86:cb:33:fc:91:e3:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5B:DC:38:E8:3E:4C:BF:D0:7D:66:C5:66:40:B7:68:E1:70:D0:15
X509v3 Authority Key Identifier:
keyid:8A:0E:80:18:1A:CD:D0:8E:85:61:E0:3A:2A:E9:F4:C9:85:97:E7:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/34352e3232342e3134342e302f32322d3234203d3e203237383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.144.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:2b:57:3d:ae:e3:83:31:6e:a1:f2:43:6b:be:ef:0a:ac:c3:
51:de:0b:78:7c:31:39:df:28:41:4e:36:c0:ae:3b:b0:55:b8:
8b:25:a5:6e:ad:71:8b:f2:86:fb:5d:dc:74:90:35:6b:6c:58:
1b:21:62:9c:34:c3:d4:fa:ed:72:de:58:ec:20:93:d0:ae:7f:
ec:8a:03:d8:f6:ed:7e:ae:a0:4a:85:aa:50:f0:6a:96:9a:39:
26:29:2b:7b:ce:52:e5:6a:00:61:d5:fc:29:b0:e1:2d:b3:c0:
84:db:5c:d5:e2:55:6e:0b:c4:42:49:f8:6e:9d:61:47:f0:04:
f3:c6:fe:9f:13:91:d8:9e:13:46:71:c7:da:fb:ce:09:ad:0c:
37:49:4d:b1:7c:b2:54:f2:d4:19:a3:8e:b7:00:4e:1f:d9:d7:
4a:c1:25:64:5a:12:7c:f9:89:58:b4:7e:3f:df:a1:45:c8:45:
95:15:bd:7c:a1:25:29:04:5e:74:fe:8d:06:62:55:0c:e4:87:
04:58:99:a0:59:1e:67:d9:5e:7a:a8:0a:86:1b:41:98:47:2a:
81:09:db:22:8c:16:fa:61:21:93:a3:20:23:72:98:a9:c0:29:
8a:c5:07:ca:f9:1c:47:06:8a:b4:49:b3:bd:27:f4:ce:fe:e2:
3a:25:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:18:13 2025 by rpki-client