Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7D89C2EF2E2F1A93E9A3BE2DD888CCF5C91515B288EB2B421D9FAC530B5B640/0/34352e3233342e3233322e302f32322d3234203d3e203237383834.roa
File: 34352e3233342e3233322e302f32322d3234203d3e203237383834.roa (raw, json)
Hash identifier: 41Hz6htvxPfUOYb83mEEVrr+2UKTvdqhOB0tukPHnQU=
Subject key identifier: BB:4A:57:2F:32:A4:06:B9:46:7E:F8:7E:72:3C:9C:83:56:62:13:BD
Certificate issuer: /CN=0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A
Certificate serial: 23E0ABD86942ABF073522E4AD03FBD1AA9E1BE46
Authority key identifier: 0E:36:1C:EA:E1:F5:8D:0D:86:71:EC:BF:EC:D0:9A:AE:2E:74:F1:6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7D89C2EF2E2F1A93E9A3BE2DD888CCF5C91515B288EB2B421D9FAC530B5B640/0/34352e3233342e3233322e302f32322d3234203d3e203237383834.roa
Signing time: Tue 04 Feb 2025 20:06:42 +0000
ROA not before: Tue 04 Feb 2025 20:01:42 +0000
ROA not after: Tue 03 Feb 2026 20:06:42 +0000
asID: 27884
IP address blocks: 45.234.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e0:ab:d8:69:42:ab:f0:73:52:2e:4a:d0:3f:bd:1a:a9:e1:be:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A
Validity
Not Before: Feb 4 20:01:42 2025 GMT
Not After : Feb 3 20:06:42 2026 GMT
Subject: CN=BB4A572F32A406B9467EF87E723C9C83566213BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:95:e2:7c:ec:7a:ed:15:64:b3:04:2d:00:
8d:01:40:a6:37:84:9b:d6:b1:21:3b:85:43:21:1c:
24:ec:d4:6d:a6:7a:43:8a:59:89:91:0f:4a:ec:21:
9e:01:ec:a3:9e:12:23:47:4a:0f:8e:44:69:a8:47:
92:52:46:3b:d2:ac:1d:dd:b8:84:78:9f:f7:b3:ec:
10:85:9c:d8:d7:cf:25:cd:9e:82:aa:13:b7:53:68:
1a:df:1d:26:80:f1:cf:f1:e3:60:28:7f:7f:f6:56:
25:a4:dc:eb:2e:c8:96:e9:a9:15:c1:89:9f:17:7a:
2e:f1:05:75:7e:67:a7:3a:d8:9b:11:20:7e:f1:a7:
41:79:63:ac:d6:15:95:07:8e:4c:37:dc:3d:ee:92:
9b:c3:6e:a0:42:74:7e:12:52:b5:b4:a0:7d:af:38:
ea:4a:04:ed:75:91:75:ff:c9:fc:4a:7c:f3:2d:d5:
03:01:00:d8:c1:54:fb:26:cd:64:4a:a1:d1:f2:f3:
f0:38:4d:12:b9:01:2d:82:5f:d8:8e:16:67:2c:60:
c0:a2:ed:05:60:4d:ff:af:26:5d:c8:9c:23:51:53:
6f:0d:4d:5a:65:4b:1b:80:92:aa:24:f2:46:e6:66:
a2:97:c0:6f:35:67:42:13:73:66:a9:37:4b:10:36:
ae:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4A:57:2F:32:A4:06:B9:46:7E:F8:7E:72:3C:9C:83:56:62:13:BD
X509v3 Authority Key Identifier:
keyid:0E:36:1C:EA:E1:F5:8D:0D:86:71:EC:BF:EC:D0:9A:AE:2E:74:F1:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C7D89C2EF2E2F1A93E9A3BE2DD888CCF5C91515B288EB2B421D9FAC530B5B640/0/0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7D89C2EF2E2F1A93E9A3BE2DD888CCF5C91515B288EB2B421D9FAC530B5B640/0/34352e3233342e3233322e302f32322d3234203d3e203237383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.232.0/22
Signature Algorithm: sha256WithRSAEncryption
58:1f:b8:07:64:7c:01:3a:f2:b4:73:ab:f5:bd:01:af:cd:eb:
ae:b1:c4:af:89:b2:42:8f:0d:79:ef:c3:85:cb:33:1c:86:35:
ef:fb:05:fa:bc:5e:85:37:88:53:47:9b:f2:58:9c:0d:a0:72:
cb:9b:1e:ba:95:dc:bd:58:f3:81:b1:d1:ba:bc:b5:8c:a5:a3:
76:5d:2c:47:ae:e6:1a:b6:ce:29:49:43:f3:47:a2:f6:d5:58:
14:69:17:5d:17:d0:80:32:15:d3:ef:bd:02:aa:86:1c:56:72:
e5:31:56:a9:a1:f5:73:c4:04:46:ac:9c:60:b6:29:d3:06:c2:
74:01:e8:f8:31:d9:7c:eb:30:85:80:7d:88:64:9f:28:2b:6b:
f6:5e:07:2f:59:2b:d1:13:be:b8:12:8d:cc:45:74:5e:02:2c:
a0:4d:e0:d7:c1:c4:74:3c:c0:9e:69:1a:9c:bd:f1:f2:1e:48:
07:0a:8e:9b:29:7f:e3:97:ad:bf:c3:19:d6:64:3a:c2:e1:96:
5b:22:8f:06:e0:86:46:ea:62:41:96:4a:22:c6:6b:36:89:14:
d2:8f:44:14:da:15:ea:65:b4:35:93:a6:2b:9b:8c:c5:2e:f3:
22:f1:37:0d:d0:f8:0a:fc:93:1d:43:87:77:87:ae:10:fe:f6:
13:18:08:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:54:13 2025 by rpki-client