Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138342e302f32322d3234203d3e20323635383531.roa
File: 34352e3232352e3138342e302f32322d3234203d3e20323635383531.roa (raw, json)
Hash identifier: T+Dja6E+37EVjVckvAQyy2Jf4DvO6wMpk3gstNcYlrc=
Subject key identifier: E4:F8:98:7D:A8:85:6D:0E:5D:8A:F6:F2:59:ED:10:F2:98:6B:11:2A
Certificate issuer: /CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
Certificate serial: 6801F62A728DFB6E6CAC5D6A5C3A6A48D63C5B0D
Authority key identifier: A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138342e302f32322d3234203d3e20323635383531.roa
Signing time: Tue 04 Feb 2025 18:51:20 +0000
ROA not before: Tue 04 Feb 2025 18:46:20 +0000
ROA not after: Tue 03 Feb 2026 18:51:20 +0000
asID: 265851
IP address blocks: 45.225.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:01:f6:2a:72:8d:fb:6e:6c:ac:5d:6a:5c:3a:6a:48:d6:3c:5b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
Validity
Not Before: Feb 4 18:46:20 2025 GMT
Not After : Feb 3 18:51:20 2026 GMT
Subject: CN=E4F8987DA8856D0E5D8AF6F259ED10F2986B112A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:f9:7b:c3:b0:9e:48:ca:5b:a0:4a:da:c3:
51:e8:d8:d8:2a:47:c6:1b:11:d3:29:56:93:a5:dd:
8d:0b:1f:af:61:39:8f:7d:0d:1f:bf:0e:b6:c3:a8:
18:f1:c1:df:eb:78:8b:91:69:1b:79:f0:0a:2b:43:
53:22:9a:dc:a0:e8:13:f2:80:53:9e:f9:28:2a:be:
56:0a:2c:4f:da:69:d1:0a:d8:8f:92:33:aa:0b:70:
86:e7:79:2b:ce:f9:6c:7b:6a:7d:7a:52:25:ac:89:
5f:b9:3c:ca:e3:6d:1e:33:d8:d3:84:a9:ec:27:82:
33:9e:74:f1:a4:ae:c7:c2:5a:ca:2e:ba:a7:23:56:
ed:03:3e:42:d8:24:2c:29:99:cd:48:d6:a1:d5:3b:
0e:73:a3:d3:7f:96:90:4e:56:98:af:0f:c4:58:f2:
c3:af:66:ab:c1:d7:10:41:7d:0b:c5:79:92:b8:0f:
d9:c8:29:88:08:d6:06:36:c6:7d:51:44:53:3e:92:
b9:ec:52:25:a1:20:6c:f8:59:77:2e:3a:e1:28:a2:
81:0e:72:8a:01:f1:50:71:ab:d3:6c:0b:b3:1d:88:
85:f7:1a:66:83:98:33:39:49:d3:30:ff:ef:bb:fd:
7b:81:16:79:4a:1d:50:56:c6:44:5c:e2:a7:2b:12:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F8:98:7D:A8:85:6D:0E:5D:8A:F6:F2:59:ED:10:F2:98:6B:11:2A
X509v3 Authority Key Identifier:
keyid:A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138342e302f32322d3234203d3e20323635383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.184.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:34:9d:56:01:15:51:89:ef:fd:56:dc:3d:a9:8f:a4:c9:34:
0d:3e:45:be:f2:c4:50:89:0c:0f:b2:3f:e9:bf:f6:e7:74:c9:
59:1a:38:4f:a1:5f:77:e3:5b:c3:e6:37:53:87:ce:a0:5b:77:
f7:c2:89:3a:83:98:21:fc:5d:09:a5:86:52:26:a7:9e:cd:d5:
6c:27:81:d9:ee:ba:bf:a4:e3:1f:2a:40:6d:f2:35:9a:f5:82:
4f:eb:24:ea:9d:f5:db:ce:1b:2d:0e:b8:b8:7d:1a:f1:a3:f6:
5e:66:a6:37:c1:34:03:7c:05:74:ca:96:89:4e:10:49:0d:ab:
35:e6:51:c5:5f:9f:b2:45:3b:bf:5a:9e:0f:d3:94:e6:d9:88:
7c:12:e4:47:b6:11:5a:cc:c1:7e:af:c2:88:02:2b:ba:d2:da:
9c:d3:1c:31:7f:41:5c:23:e7:eb:8c:6a:48:a1:86:18:14:96:
43:98:21:dd:63:e6:0f:e2:a0:62:21:04:56:15:36:8d:55:8e:
ec:0d:5b:68:75:ca:4d:54:5f:e5:fe:a9:05:10:ee:79:7e:30:
35:da:a6:79:12:23:ac:2e:e6:ad:72:a6:f2:97:49:4b:6c:2b:
3c:e3:53:14:b4:ba:0a:b6:77:95:0b:17:7b:78:a4:fd:58:71:
31:9f:1c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:19:48 2025 by rpki-client