Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/34352e37302e3230322e302f32332d3234203d3e20323634363638.roa
File: 34352e37302e3230322e302f32332d3234203d3e20323634363638.roa (raw, json)
Hash identifier: fBGq6m2Su3LkyrbP6VT0PBf2hinXIlC+oNxD3lr1LNE=
Subject key identifier: CC:27:D3:6A:7A:31:6C:82:24:85:E4:73:D4:ED:64:33:BF:1A:2C:AD
Certificate issuer: /CN=3969A916AB2A182C19F90F28E002F43BBA68A0E4
Certificate serial: 2D1901F5D57F00CDA992727362672AF9BD84A226
Authority key identifier: 39:69:A9:16:AB:2A:18:2C:19:F9:0F:28:E0:02:F4:3B:BA:68:A0:E4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/34352e37302e3230322e302f32332d3234203d3e20323634363638.roa
Signing time: Tue 04 Feb 2025 18:43:04 +0000
ROA not before: Tue 04 Feb 2025 18:38:04 +0000
ROA not after: Tue 03 Feb 2026 18:43:04 +0000
asID: 264668
IP address blocks: 45.70.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:19:01:f5:d5:7f:00:cd:a9:92:72:73:62:67:2a:f9:bd:84:a2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3969A916AB2A182C19F90F28E002F43BBA68A0E4
Validity
Not Before: Feb 4 18:38:04 2025 GMT
Not After : Feb 3 18:43:04 2026 GMT
Subject: CN=CC27D36A7A316C822485E473D4ED6433BF1A2CAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:62:2c:fa:86:c7:44:0b:aa:46:45:c2:ea:
3a:31:a6:ec:e0:ab:b9:e8:5b:78:6e:c9:bc:10:5d:
5e:98:bb:4f:68:dc:a1:0b:16:f2:47:a3:45:53:1b:
9c:b0:9c:87:b4:85:db:f7:9b:dd:d9:ca:40:77:46:
39:29:d8:7f:a1:7e:da:2a:c2:0d:18:92:8e:f2:ee:
f6:66:2d:17:88:77:e6:9b:ee:0b:8c:95:28:94:a7:
6c:f7:68:55:a8:8e:47:55:2e:87:fd:df:95:81:bb:
cc:72:7e:45:d5:21:59:e5:2b:73:fb:25:91:d4:44:
97:c1:bc:62:75:53:1f:cf:a4:74:a7:34:33:68:70:
6d:5d:5d:25:d2:fb:74:7f:d5:51:da:73:d4:0f:fc:
f0:d0:f2:f7:2d:bd:40:95:c5:a1:cb:5f:fa:1b:5e:
3e:fa:0f:55:13:d9:3a:a2:d1:33:26:54:0c:a1:6b:
44:e9:c6:c4:33:8d:75:4d:59:ea:a4:c1:ce:e1:28:
45:83:8b:b4:90:bf:44:64:7b:c1:97:97:27:15:12:
d1:ba:0c:43:e0:64:fb:f3:02:94:0e:e6:70:da:14:
72:cf:a3:5d:ed:ee:db:9e:1a:80:8e:6b:e0:e3:f7:
59:11:67:03:ea:cd:03:b1:90:0b:8e:e1:68:10:a1:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:27:D3:6A:7A:31:6C:82:24:85:E4:73:D4:ED:64:33:BF:1A:2C:AD
X509v3 Authority Key Identifier:
keyid:39:69:A9:16:AB:2A:18:2C:19:F9:0F:28:E0:02:F4:3B:BA:68:A0:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/34352e37302e3230322e302f32332d3234203d3e20323634363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.202.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:40:9b:10:c8:90:1b:d4:0f:28:39:6f:1a:18:53:bd:c1:85:
fc:48:3a:b9:38:7c:70:f4:45:97:9e:d0:6b:6c:2e:60:1d:1c:
c4:f3:61:97:48:1f:9a:df:73:60:80:ff:77:5a:3f:50:f6:92:
53:5c:b8:4d:dd:3d:f8:88:c8:e3:d1:59:17:89:76:d6:18:5b:
50:24:25:a7:81:ed:4e:ad:ec:90:28:80:65:3c:35:c6:41:15:
43:cf:28:69:55:0b:b9:69:b8:50:1b:33:82:94:80:35:51:c4:
0a:11:df:6d:5f:45:bb:09:d7:94:69:cc:3f:4c:c3:c0:ed:64:
fc:b9:09:f4:08:e6:14:39:73:00:4b:8c:4f:c5:e7:2a:0d:12:
93:a7:f2:bd:f6:62:50:d0:4c:45:71:3c:b2:9e:de:d5:b9:c1:
1a:88:9b:21:a7:8d:19:40:57:f4:f6:02:89:04:fd:f5:96:a8:
b8:a1:ea:1b:76:7a:04:91:65:a7:ee:39:eb:0c:f5:3a:cc:f0:
02:c0:47:63:d3:16:80:da:bb:55:f9:46:9b:c8:9f:c0:21:b5:
b7:52:8c:99:d4:2c:1b:96:c6:ab:75:a3:fc:35:df:d3:a1:95:
fd:f7:92:02:ed:f0:3b:e6:00:0d:b0:23:ff:00:4f:40:6a:d9:
c0:ae:88:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:09 2025 by rpki-client