Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33342e302f32342d3234203d3e20323636383736.roa
File: 34352e3136302e33342e302f32342d3234203d3e20323636383736.roa (raw, json)
Hash identifier: NavPo+TcbxAQKqbKnto2VXDh3ZOGFVFEsfZbT2cLfUw=
Subject key identifier: 9B:49:DD:6A:B8:96:BB:97:CA:F7:CE:51:86:79:C9:F8:92:FD:79:99
Certificate issuer: /CN=9A0A973B46C2B2B4900ED226E666340849864C77
Certificate serial: 4CB666C257A092194E2F8F12DDC909BF38D40FA0
Authority key identifier: 9A:0A:97:3B:46:C2:B2:B4:90:0E:D2:26:E6:66:34:08:49:86:4C:77
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33342e302f32342d3234203d3e20323636383736.roa
Signing time: Tue 04 Feb 2025 18:10:24 +0000
ROA not before: Tue 04 Feb 2025 18:05:24 +0000
ROA not after: Tue 03 Feb 2026 18:10:24 +0000
asID: 266876
IP address blocks: 45.160.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b6:66:c2:57:a0:92:19:4e:2f:8f:12:dd:c9:09:bf:38:d4:0f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A0A973B46C2B2B4900ED226E666340849864C77
Validity
Not Before: Feb 4 18:05:24 2025 GMT
Not After : Feb 3 18:10:24 2026 GMT
Subject: CN=9B49DD6AB896BB97CAF7CE518679C9F892FD7999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:34:92:af:6f:2a:d7:2a:3c:a3:bf:6d:cc:
c0:5b:72:82:80:b3:20:0a:b0:24:e0:bd:cd:32:00:
01:39:2a:f5:68:f5:86:cf:d2:43:c8:4e:64:96:25:
12:a0:e1:c9:7d:41:9c:67:ff:45:26:1d:b9:72:a5:
e7:92:79:fb:bc:a1:ec:66:13:72:41:9a:58:f0:d0:
09:a0:7f:83:78:fc:73:9b:ca:d5:ec:37:34:bb:71:
3f:39:47:d9:e5:76:85:5f:66:11:ec:04:f1:9a:4d:
a3:ff:81:6f:7a:0c:65:aa:3f:03:ab:8b:e6:e0:22:
54:5b:ed:a1:03:67:35:90:44:7f:01:ed:3c:1e:bf:
6c:b3:61:4e:8f:14:89:cc:79:0c:b0:81:e3:6b:82:
b8:e4:78:80:d6:0f:19:22:2f:b2:e0:72:fd:48:e4:
2e:a3:39:76:8b:93:d1:1f:20:55:6c:3f:8c:72:b5:
9b:3a:f8:0e:60:72:b1:b0:8b:73:3c:4b:66:75:8c:
3c:25:7d:4d:f0:eb:32:e1:7b:8e:89:91:32:b1:e3:
c8:82:c6:e5:2c:37:40:1e:ac:1d:b2:17:fa:52:8f:
09:4c:60:17:93:62:47:37:e7:af:f4:2d:fb:f8:49:
85:a9:a1:d3:4f:a0:fe:e9:9e:ac:fe:96:de:89:1d:
99:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:49:DD:6A:B8:96:BB:97:CA:F7:CE:51:86:79:C9:F8:92:FD:79:99
X509v3 Authority Key Identifier:
keyid:9A:0A:97:3B:46:C2:B2:B4:90:0E:D2:26:E6:66:34:08:49:86:4C:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/9A0A973B46C2B2B4900ED226E666340849864C77.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33342e302f32342d3234203d3e20323636383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.160.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:70:1f:7f:a0:bf:53:f9:ca:a2:5f:05:cd:d2:dd:45:36:90:
9d:2c:67:b1:19:d6:9f:8f:86:6c:0b:58:49:73:3a:58:58:82:
1d:20:25:db:07:b1:e2:a4:71:79:22:b5:0c:35:31:67:9e:aa:
a3:a0:21:79:92:4a:91:f5:79:98:32:b3:44:52:f0:b0:c3:f4:
2d:41:ee:38:3b:0d:a9:78:a0:8b:19:bb:d9:23:38:e0:3e:16:
79:18:19:1e:e8:be:49:3b:b1:5a:02:05:e8:81:25:a0:a0:3f:
78:46:3f:83:48:fc:4a:7c:8a:3c:98:ae:2d:b2:e3:2d:25:ce:
3a:d0:1a:02:54:2c:c7:5b:8a:64:d5:80:12:71:41:e2:dd:e5:
f3:f1:3b:a9:21:2c:68:60:13:97:4f:bd:2a:bd:ab:6a:05:32:
71:41:4b:e5:27:c9:ef:0c:2f:07:9c:27:c4:18:f9:ea:dc:93:
45:5a:2e:43:df:f1:bb:f9:72:32:54:d6:22:c9:3b:fd:69:7c:
2a:0d:05:be:5a:e0:71:60:bc:9b:63:ac:70:bb:c7:60:ff:e8:
8d:c4:34:8f:fa:88:54:50:ae:d8:68:aa:e8:42:c6:ca:97:37:
b6:7b:f5:b9:5e:fd:a1:51:ac:f8:f0:b6:62:b1:e9:19:13:f7:
d7:e7:e8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:50:23 2025 by rpki-client