Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233332e302f32342d3234203d3e20323635363834.roa
File: 34352e3232382e3233332e302f32342d3234203d3e20323635363834.roa (raw, json)
Hash identifier: ooO4hk8ZnhicOOglrT0oaFawJNMxxxzXiYm/IoSBark=
Subject key identifier: 70:FB:AF:62:B9:AE:AE:48:CB:3D:DD:7F:A6:16:2B:BD:E9:82:35:7E
Certificate issuer: /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial: 22834B2BF84B155D3A460684546D761D1996E3A4
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233332e302f32342d3234203d3e20323635363834.roa
Signing time: Thu 20 Feb 2025 20:10:30 +0000
ROA not before: Thu 20 Feb 2025 20:05:30 +0000
ROA not after: Thu 19 Feb 2026 20:10:30 +0000
asID: 265684
IP address blocks: 45.228.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:83:4b:2b:f8:4b:15:5d:3a:46:06:84:54:6d:76:1d:19:96:e3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Validity
Not Before: Feb 20 20:05:30 2025 GMT
Not After : Feb 19 20:10:30 2026 GMT
Subject: CN=70FBAF62B9AEAE48CB3DDD7FA6162BBDE982357E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:8d:4c:c4:52:83:72:1a:c1:a9:40:77:54:
63:96:b2:e1:34:e1:21:ca:50:d7:f3:bd:53:6d:f0:
aa:38:8d:6e:e6:45:a9:9e:38:e1:ca:7a:bf:ba:85:
1b:8c:cc:b0:53:bd:fd:70:e0:2c:b8:3c:60:5f:e4:
9e:f1:12:60:20:cb:d5:3e:ef:ed:cd:cc:af:61:57:
e6:5c:fb:17:b8:bc:8d:9c:ac:48:78:d1:6a:ca:1a:
b3:bc:68:7f:c1:43:18:15:bb:e5:57:f0:5c:6d:2e:
e0:87:77:45:fe:d8:78:f3:f4:1b:ee:c7:72:ef:94:
0c:d2:65:6e:a3:cd:a3:dc:86:52:50:43:29:6a:a0:
cc:b8:35:88:f3:53:26:f3:1d:55:5e:e5:e2:e6:e6:
92:40:b7:cf:05:db:ac:93:30:5b:0a:d0:8d:a8:a3:
40:9c:35:05:f4:38:a6:b4:ca:c2:d5:21:7e:54:bc:
b7:57:fb:a0:2e:ff:8f:d1:49:82:75:f7:20:83:9e:
2b:cb:1b:4b:6f:e2:a7:ca:5f:69:a2:17:d6:50:72:
79:5c:7b:48:35:48:1d:19:f9:a1:40:d6:62:24:4c:
04:98:b1:f2:21:9a:15:8f:89:34:3b:1a:46:6f:9e:
b6:72:ca:bc:15:7b:d3:0e:ba:4f:8a:46:f7:a9:1e:
16:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FB:AF:62:B9:AE:AE:48:CB:3D:DD:7F:A6:16:2B:BD:E9:82:35:7E
X509v3 Authority Key Identifier:
keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233332e302f32342d3234203d3e20323635363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.233.0/24
Signature Algorithm: sha256WithRSAEncryption
79:bc:27:d0:58:a4:15:1d:c2:54:97:6c:37:a6:d0:a9:42:01:
88:0a:ea:af:15:5a:6a:a1:dc:28:96:5d:0d:5e:3e:a5:d1:65:
c8:b9:56:34:18:ee:b8:61:e0:6c:76:cb:84:93:49:92:f3:51:
a7:28:6c:28:df:f6:e4:64:04:cb:61:9f:2e:3d:a4:dd:23:67:
f0:df:56:77:7b:d3:0c:72:19:84:80:c5:83:fc:d0:a5:6a:61:
a4:b2:24:25:f9:0d:83:5f:48:5a:50:be:ee:f6:c1:3f:65:4c:
af:7a:d0:82:14:1a:4e:ea:a1:a4:0a:8b:24:6e:a8:bc:2c:fb:
b9:25:05:c1:3c:69:36:16:d9:ba:7b:d2:30:02:1e:22:e6:27:
cd:ef:09:1f:03:80:be:1e:42:5d:99:5b:75:b8:dc:f1:af:d7:
6c:a3:f4:77:c2:cd:0b:11:a6:d9:ba:ff:58:da:71:ef:4c:53:
75:3c:14:c1:35:ee:43:ad:a6:fb:91:81:b3:f3:fd:b3:96:4f:
4c:2b:06:9f:74:5b:6d:7c:3e:4f:1e:58:75:8b:2b:59:ef:84:
53:6c:a0:17:c4:1d:f5:8d:73:40:a0:f1:0a:41:92:68:be:f9:
13:eb:fc:fa:f0:8f:ab:47:ca:5d:17:5c:52:86:c6:fa:ea:0b:
81:14:93:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:28 2025 by rpki-client