Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/34352e3232352e34342e302f32322d3234203d3e20323634363638.roa
File: 34352e3232352e34342e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier: C02rM+QLfBn4XzXUBUtHONuo3uLk7iEQh8RbAIH6JcA=
Subject key identifier: 56:5E:E9:10:A7:5E:61:29:14:66:4F:51:22:A5:13:99:60:82:98:70
Certificate issuer: /CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
Certificate serial: 05CF3A6F189A775FFE01A48DEC859494F1131DC5
Authority key identifier: B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/34352e3232352e34342e302f32322d3234203d3e20323634363638.roa
Signing time: Tue 04 Feb 2025 18:54:33 +0000
ROA not before: Tue 04 Feb 2025 18:49:33 +0000
ROA not after: Tue 03 Feb 2026 18:54:33 +0000
asID: 264668
IP address blocks: 45.225.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:cf:3a:6f:18:9a:77:5f:fe:01:a4:8d:ec:85:94:94:f1:13:1d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
Validity
Not Before: Feb 4 18:49:33 2025 GMT
Not After : Feb 3 18:54:33 2026 GMT
Subject: CN=565EE910A75E612914664F5122A5139960829870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:cd:6d:c9:e7:2b:6d:ed:01:c9:bd:1f:a6:
da:53:fe:92:c6:da:94:94:03:04:5d:51:ce:04:02:
72:60:f9:4f:4c:59:89:85:10:82:e8:9e:83:b5:e9:
c4:01:a5:46:a9:6e:5c:0d:56:1e:2a:d7:2f:a9:37:
9e:f6:c4:5b:e0:db:49:33:02:6e:6e:27:92:81:37:
47:11:99:7c:bf:76:28:eb:31:3f:96:96:b8:87:7c:
bd:dd:01:b4:30:b9:98:e1:ad:e6:f0:8b:ba:ad:be:
02:80:4b:9e:75:5a:d9:b5:43:6f:9c:91:96:26:e9:
90:2d:4d:dd:70:3d:eb:e7:59:86:59:0d:d3:9d:ba:
e7:ba:4a:1b:f7:7c:47:82:1f:76:ae:b2:19:4a:66:
14:d9:41:0a:2c:4e:47:ae:a8:ec:77:4c:4e:fc:22:
7a:7c:ad:4e:31:64:db:fc:93:07:e9:73:aa:e9:3e:
31:8a:e1:7f:58:40:41:0e:11:dc:d8:9d:51:1d:88:
b4:ea:42:0d:09:7c:a2:cb:71:01:f6:31:86:5a:ac:
c9:0c:11:8c:23:b6:46:67:a4:b4:9b:04:93:26:de:
d7:c6:bd:dd:f3:53:d4:eb:a9:c7:14:1b:2b:bb:1f:
64:e6:14:58:6c:b4:cb:ed:69:76:ee:91:b9:b2:65:
79:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5E:E9:10:A7:5E:61:29:14:66:4F:51:22:A5:13:99:60:82:98:70
X509v3 Authority Key Identifier:
keyid:B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/34352e3232352e34342e302f32322d3234203d3e20323634363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.44.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:bd:cb:ad:ae:2f:d0:22:ad:e7:81:63:e8:d7:3d:af:1c:58:
fa:23:94:f5:57:eb:f2:46:de:2f:61:1f:db:30:0d:14:09:fa:
0b:c6:b2:25:7b:6b:d4:11:46:2d:25:23:e2:89:24:f9:cd:e0:
47:3f:e4:d7:7f:83:26:b2:3f:6d:d9:e7:d4:16:74:ac:17:45:
62:61:21:a3:29:88:fb:e1:2a:e1:bf:40:6a:26:a6:24:1f:95:
14:f0:77:a8:bf:24:1a:35:a0:c0:fe:01:90:17:76:92:9c:c3:
ba:53:47:32:d4:e5:68:7e:68:b0:c0:04:34:c7:68:f1:56:74:
6f:54:21:74:fe:3b:52:ae:f4:fb:16:0e:ae:3b:e3:f4:69:31:
33:af:52:5a:b7:3c:d9:85:92:21:05:e8:85:25:6f:17:a6:46:
a8:f9:41:16:5e:c1:09:2d:9c:27:8b:79:52:7f:e1:bd:e9:38:
78:03:9e:1a:93:0b:d0:67:a2:3e:8b:e0:a3:51:f1:ce:b8:8b:
df:c1:e3:4c:de:a2:b5:c4:37:bf:1b:41:4d:e1:d4:05:ac:81:
f0:35:f2:76:12:08:18:38:12:f5:f3:56:3e:80:ae:6d:c9:04:
be:c0:17:15:e0:c2:c9:e7:f2:f3:29:4b:65:37:de:08:5c:cb:
40:cf:fd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:40 2025 by rpki-client