Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/34352e3136322e39302e302f32342d3234203d3e20323633323434.roa
File: 34352e3136322e39302e302f32342d3234203d3e20323633323434.roa (raw, json)
Hash identifier: Q4cKad9QGPlMLuod8irBnRQ23Ij1FG6fmlLA2b5ejtE=
Subject key identifier: 35:DE:43:DA:AB:EB:58:E2:2B:72:99:C4:A4:C0:39:DF:77:B2:F5:28
Certificate issuer: /CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC
Certificate serial: 20D206883500A076F853EE80B8E1E23A5492F9A3
Authority key identifier: CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/34352e3136322e39302e302f32342d3234203d3e20323633323434.roa
Signing time: Tue 04 Feb 2025 18:09:58 +0000
ROA not before: Tue 04 Feb 2025 18:04:58 +0000
ROA not after: Tue 03 Feb 2026 18:09:58 +0000
asID: 263244
IP address blocks: 45.162.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d2:06:88:35:00:a0:76:f8:53:ee:80:b8:e1:e2:3a:54:92:f9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC
Validity
Not Before: Feb 4 18:04:58 2025 GMT
Not After : Feb 3 18:09:58 2026 GMT
Subject: CN=35DE43DAABEB58E22B7299C4A4C039DF77B2F528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:81:b3:44:a4:41:fd:01:d2:33:12:6a:e8:c6:
ff:14:20:3f:10:50:e6:e0:6f:76:68:db:33:d7:b5:
32:35:12:7d:d8:5f:7f:be:9a:96:a5:af:de:4c:03:
e7:74:95:c1:8f:56:b7:0b:fc:b4:a4:d6:f2:c4:45:
a6:cd:70:d5:2f:27:61:ee:85:b4:c9:c4:dc:0d:f4:
68:ba:18:82:65:ad:2d:1e:43:48:97:09:32:bf:1a:
9e:38:85:91:2f:bb:c9:c7:cf:4f:7c:1b:00:2f:3d:
4b:b3:f9:77:45:df:2e:95:92:98:a5:a4:7d:50:94:
95:1b:a3:11:38:6b:70:1e:7f:9a:fb:89:85:78:fa:
c9:59:a4:25:39:2e:aa:87:1a:44:f6:93:cb:ca:c7:
c9:f8:14:14:4f:cb:fd:63:a7:6f:a5:33:0a:11:b5:
6e:95:39:c5:2f:f9:b0:22:b9:8a:46:55:6f:17:c6:
45:f6:76:06:8f:33:6b:53:60:7c:c2:ce:c2:c0:59:
e1:2a:d3:58:72:f5:d2:56:b1:80:a0:2c:00:01:14:
7b:a4:8d:ea:11:ed:c1:cd:10:88:95:54:6b:1a:48:
f8:32:25:26:23:12:f2:27:f7:51:24:c5:42:fa:ec:
26:79:87:5e:3f:0c:67:df:cd:e1:5a:27:f1:7a:a3:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DE:43:DA:AB:EB:58:E2:2B:72:99:C4:A4:C0:39:DF:77:B2:F5:28
X509v3 Authority Key Identifier:
keyid:CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/34352e3136322e39302e302f32342d3234203d3e20323633323434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.90.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:9b:3c:e8:11:6b:11:f5:7a:c9:4a:87:fb:ab:c5:65:ae:0a:
c6:20:1b:78:45:a1:55:3c:fc:7e:15:c0:e7:ce:4c:8a:29:10:
c0:9b:4c:5a:d3:1d:2c:10:f8:49:f6:13:37:33:d6:64:f9:63:
3a:70:63:8d:de:d9:b7:61:b1:07:9b:64:7c:81:df:3c:b3:4e:
cd:42:a2:a4:4a:4e:30:05:c8:50:01:c4:ce:25:f1:2b:38:b0:
ca:a8:f2:4e:47:ce:65:69:34:8b:e8:d1:d0:30:9b:80:a8:ed:
fb:61:ea:94:19:15:10:25:b5:d1:e4:a5:1e:2a:1b:76:f8:7a:
fa:c3:2d:56:ae:25:a7:45:c6:d6:6a:ed:db:1f:50:18:3f:f8:
47:7d:fb:29:d8:1e:d0:0f:3e:12:d6:b5:cd:b5:69:4e:0a:6a:
a0:f8:ef:86:88:75:96:a9:87:22:a6:ac:7f:43:94:be:42:99:
0a:b4:e2:8a:a8:15:d4:27:fe:41:46:23:66:88:84:60:1c:c7:
48:1b:0d:15:d1:74:3a:3a:49:dc:f0:74:45:fe:e8:cc:76:46:
41:dd:56:ed:f6:cc:b5:9f:3a:8d:2e:68:eb:cb:b9:73:bf:3e:
ca:81:06:36:fc:c3:22:46:f5:e4:ff:21:2c:c9:7c:15:6c:fb:
ab:2a:0d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:13 2025 by rpki-client