Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130342e302f32332d3234203d3e203237383433.roa
File: 34352e3233322e3130342e302f32332d3234203d3e203237383433.roa (raw, json)
Hash identifier: Bb7hTcuYn5vFiNyXFYT+FIfxIgpG4F2M10UH+SVJ0kI=
Subject key identifier: 04:9B:4A:A4:C3:56:9E:C6:8C:15:99:55:2F:7D:29:55:6D:01:A2:E9
Certificate issuer: /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial: 54282C62490EBA237F2CC00D7A22AA8F93A4F5AB
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130342e302f32332d3234203d3e203237383433.roa
Signing time: Tue 04 Feb 2025 18:06:09 +0000
ROA not before: Tue 04 Feb 2025 18:01:09 +0000
ROA not after: Tue 03 Feb 2026 18:06:09 +0000
asID: 27843
IP address blocks: 45.232.104.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:28:2c:62:49:0e:ba:23:7f:2c:c0:0d:7a:22:aa:8f:93:a4:f5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Validity
Not Before: Feb 4 18:01:09 2025 GMT
Not After : Feb 3 18:06:09 2026 GMT
Subject: CN=049B4AA4C3569EC68C1599552F7D29556D01A2E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a7:1e:8b:68:87:94:ad:ae:47:4c:8b:74:4a:
e5:cb:75:08:f8:b6:74:1a:1e:a4:50:61:bf:29:0f:
6c:a5:00:a2:29:7c:5a:d8:8a:51:cf:a3:5c:dc:ad:
fb:4c:3b:5a:07:64:1d:d8:cf:71:6e:fd:ef:e7:28:
2c:02:33:24:0e:a0:dd:fe:b9:54:d9:3b:f0:11:af:
48:41:ca:86:2c:7f:2a:c8:29:21:44:ec:7c:c5:9a:
49:f2:3e:c1:6e:43:a6:71:52:06:fe:f7:46:31:09:
ba:48:11:ea:b3:6b:82:3b:5d:c9:d3:73:1e:0d:5f:
d2:ca:1a:76:22:bb:ec:ba:c9:fa:3c:47:49:26:98:
4d:a0:4c:69:9a:53:da:e8:71:f3:b8:30:7b:19:1c:
f2:ec:6f:23:58:20:7a:af:e2:26:9f:7d:30:59:66:
ec:32:85:5f:dd:df:da:6a:de:d9:6d:5b:45:9f:6e:
5d:02:fc:0d:8a:9a:de:bd:a8:be:52:63:32:30:c5:
61:a7:a0:00:a7:51:e6:f2:b8:0f:8a:1f:f4:e7:95:
9a:4a:85:86:a1:65:cd:ea:0e:c6:a1:71:50:c1:39:
35:38:1e:7a:e7:bd:c4:8f:4a:41:52:a4:bf:ea:88:
73:35:96:c3:93:ad:fb:a2:54:3f:74:6d:9b:24:88:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9B:4A:A4:C3:56:9E:C6:8C:15:99:55:2F:7D:29:55:6D:01:A2:E9
X509v3 Authority Key Identifier:
keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130342e302f32332d3234203d3e203237383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.104.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:b7:f8:c8:06:15:30:5e:49:6c:e4:94:a0:a2:d4:25:dc:7a:
53:17:5d:86:c4:fe:2d:b9:38:79:71:61:fd:03:20:9f:df:b8:
a0:ee:6c:03:b5:50:59:35:de:e3:cf:25:ba:9e:a4:88:f0:a5:
d3:5b:f0:27:d5:2b:3a:2d:cf:1c:e1:10:56:a0:bf:10:d9:ce:
2f:69:2b:f1:13:51:7b:14:1d:25:fb:9c:9c:5b:2d:0f:88:f7:
25:d4:62:fc:de:17:5e:f4:7e:4c:7a:d6:20:26:7e:9a:f2:a3:
24:98:98:37:1d:da:0f:96:4f:33:ff:c9:f2:5e:e6:05:58:f0:
d6:65:95:f1:86:7e:8e:6b:2d:69:1c:80:2e:9d:c8:53:ff:3e:
71:77:d1:b2:a4:0f:c5:ae:79:79:f8:22:e5:82:03:bc:d9:f3:
64:4d:a6:79:0b:34:20:64:dd:e1:0e:04:ca:04:49:00:05:5f:
e9:74:45:1f:ec:f8:e3:b8:77:60:30:9f:6e:0e:c4:82:3f:51:
60:c6:eb:4c:e5:d4:29:87:e8:40:57:24:27:f8:3b:d3:70:64:
4e:8d:21:1f:66:23:f1:a9:c7:67:2c:73:e8:e5:4c:49:ec:aa:
a7:f5:f5:9f:fb:6d:e8:ec:61:9d:8e:8a:0d:ec:58:c2:e5:72:
8a:0f:84:37
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVCgsYkkOuiN/LMANeiKqj5Ok9aswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYwOEQzOEQ0NTcxQzA5QTgzQjQ1QUNGRDEwQUVCNzgy
NkNFOEY4NDAeFw0yNTAyMDQxODAxMDlaFw0yNjAyMDMxODA2MDlaMDMxMTAvBgNV
BAMTKDA0OUI0QUE0QzM1NjlFQzY4QzE1OTk1NTJGN0QyOTU1NkQwMUEyRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJpx6LaIeUra5HTIt0SuXLdQj4
tnQaHqRQYb8pD2ylAKIpfFrYilHPo1zcrftMO1oHZB3Yz3Fu/e/nKCwCMyQOoN3+
uVTZO/ARr0hByoYsfyrIKSFE7HzFmknyPsFuQ6ZxUgb+90YxCbpIEeqza4I7XcnT
cx4NX9LKGnYiu+y6yfo8R0kmmE2gTGmaU9rocfO4MHsZHPLsbyNYIHqv4iaffTBZ
ZuwyhV/d39pq3tltW0Wfbl0C/A2Kmt69qL5SYzIwxWGnoACnUebyuA+KH/TnlZpK
hYahZc3qDsahcVDBOTU4HnrnvcSPSkFSpL/qiHM1lsOTrfuiVD90bZskiEIHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBJtKpMNWnsaMFZlVL30pVW0BoukwHwYDVR0j
BBgwFoAUnwjTjUVxwJqDtFrP0QrreCbOj4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMTZFOEYxMDMxNDZCMjg1MDMzNTAyM0E3MEE2RDM5ODc0
NzY2MzY4REJEQTVGMDQ4RDU1OTcyQjk4RkQ4MzY3LzAvOUYwOEQzOEQ0NTcxQzA5
QTgzQjQ1QUNGRDEwQUVCNzgyNkNFOEY4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjA4RDM4RDQ1NzFDMDlBODNC
NDVBQ0ZEMTBBRUI3ODI2Q0U4Rjg0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE2RThGMTAzMTQ2QjI4NTAzMzUwMjNBNzBBNkQzOTg3NDc2NjM2OERC
REE1RjA0OEQ1NTk3MkI5OEZEODM2Ny8wLzM0MzUyZTMyMzMzMjJlMzEzMDM0MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzM4MzQzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3oaDAN
BgkqhkiG9w0BAQsFAAOCAQEATbf4yAYVMF5JbOSUoKLUJdx6UxddhsT+Lbk4eXFh
/QMgn9+4oO5sA7VQWTXe488lup6kiPCl01vwJ9UrOi3PHOEQVqC/ENnOL2kr8RNR
exQdJfucnFstD4j3JdRi/N4XXvR+THrWICZ+mvKjJJiYNx3aD5ZPM//J8l7mBVjw
1mWV8YZ+jmstaRyALp3IU/8+cXfRsqQPxa55efgi5YIDvNnzZE2meQs0IGTd4Q4E
ygRJAAVf6XRFH+z447h3YDCfbg7Egj9RYMbrTOXUKYfoQFckJ/g703BkTo0hH2Yj
8anHZyxz6OVMSeyqp/X1n/tt6OxhnY6KDexYwuVyig+ENw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:39:36 2025 by rpki-client