Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/34352e3136322e37362e302f32322d3234203d3e20323637363738.roa
File: 34352e3136322e37362e302f32322d3234203d3e20323637363738.roa (raw, json)
Hash identifier: HHGikol8X6hMxjniyEEd8ds5E5ua+cwBx1wBCo+DvBs=
Subject key identifier: A7:D6:B4:EF:E1:3C:94:0B:6C:10:F5:60:51:26:25:56:F5:0C:DC:13
Certificate issuer: /CN=02ED3395A01A385371573CF59B1E5D8F2BF6D57E
Certificate serial: 3C8FE18D6A13647A9143085ED755E90DDCF79508
Authority key identifier: 02:ED:33:95:A0:1A:38:53:71:57:3C:F5:9B:1E:5D:8F:2B:F6:D5:7E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/34352e3136322e37362e302f32322d3234203d3e20323637363738.roa
Signing time: Tue 04 Feb 2025 18:45:48 +0000
ROA not before: Tue 04 Feb 2025 18:40:48 +0000
ROA not after: Tue 03 Feb 2026 18:45:48 +0000
asID: 267678
IP address blocks: 45.162.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:8f:e1:8d:6a:13:64:7a:91:43:08:5e:d7:55:e9:0d:dc:f7:95:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ED3395A01A385371573CF59B1E5D8F2BF6D57E
Validity
Not Before: Feb 4 18:40:48 2025 GMT
Not After : Feb 3 18:45:48 2026 GMT
Subject: CN=A7D6B4EFE13C940B6C10F56051262556F50CDC13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:b1:9f:28:23:aa:06:9c:6f:d8:76:bb:ba:
e1:a6:2d:03:00:1a:8a:50:f6:a0:40:33:09:37:73:
a8:ac:1e:83:c6:ab:9a:de:d2:64:7a:12:e4:f6:c2:
61:00:63:54:68:b2:aa:1a:1d:9b:21:d4:8b:97:44:
8e:7d:68:ee:91:28:0c:57:e4:b5:c9:1e:94:22:56:
59:47:89:a8:9b:08:bf:59:d3:64:96:90:88:8c:0b:
d2:b9:84:48:fa:62:2f:15:4f:39:ca:56:94:06:a1:
0c:7f:ad:63:4f:ef:4b:30:bc:dd:d0:e4:07:17:e6:
c3:03:ac:61:54:cd:33:c5:90:41:ba:16:d7:56:d4:
8d:e3:09:61:3a:f1:ac:f6:5a:0c:2e:7f:8a:6b:07:
a6:ed:07:3e:b1:cd:8c:37:96:ab:58:54:c2:b6:63:
22:42:21:ed:72:4d:bc:1c:4c:3b:d9:20:ac:09:f5:
32:b2:55:a6:f3:84:ce:32:63:e2:ce:61:c3:b4:77:
d0:26:56:b6:f9:c6:2d:70:36:08:b0:90:74:96:22:
12:1c:8f:3b:07:a6:9e:ae:97:01:fc:8f:c1:8f:44:
33:75:37:ad:60:2a:4c:88:2d:fb:5d:d9:76:d7:f0:
64:5d:1a:0a:51:57:d3:b7:cf:98:4f:f0:af:cd:3c:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D6:B4:EF:E1:3C:94:0B:6C:10:F5:60:51:26:25:56:F5:0C:DC:13
X509v3 Authority Key Identifier:
keyid:02:ED:33:95:A0:1A:38:53:71:57:3C:F5:9B:1E:5D:8F:2B:F6:D5:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/34352e3136322e37362e302f32322d3234203d3e20323637363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.76.0/22
Signature Algorithm: sha256WithRSAEncryption
95:a3:84:d6:ce:f0:61:86:c4:88:47:5a:da:f9:9f:3a:de:45:
b2:20:87:ae:65:f6:40:e3:67:7d:15:c6:9a:69:d1:e3:dc:f2:
57:5d:00:56:17:2c:a8:3a:cc:76:af:ba:15:b3:17:25:f6:f1:
90:4a:38:8d:aa:f9:90:85:23:a5:a3:a5:56:76:af:fe:2d:7f:
e2:be:00:fa:69:41:7b:33:2c:66:a4:d5:d3:17:07:fd:aa:dd:
bb:02:c0:d4:09:41:e8:33:86:3c:27:0c:cc:a2:c5:10:ed:41:
0a:07:9e:4c:d8:bf:6b:05:d6:00:07:c0:2d:aa:9c:31:de:8a:
bc:30:52:74:30:43:d1:94:20:16:77:90:a9:6a:d3:af:b1:a9:
3c:53:7e:8d:a0:23:96:1b:8e:0e:1e:00:9f:ea:0e:74:9c:6d:
7c:62:4f:8b:58:67:e5:0a:fa:f1:f6:56:8f:e9:f1:aa:46:8b:
c7:61:c7:ad:e0:42:ff:3b:f3:8f:50:da:db:02:de:80:9b:06:
5a:14:22:83:48:95:1f:ff:41:d9:d8:68:8c:4c:b6:a2:0d:e3:
32:7c:9b:c0:18:c8:32:2d:e5:89:83:db:9a:b7:83:e0:2d:af:
0c:33:10:72:ba:9b:dc:69:b9:9c:fd:27:0d:2d:8d:6b:55:0f:
3a:72:df:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:47:19 2025 by rpki-client