Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/34352e3232352e34342e302f32332d3234203d3e20323633323338.roa
File: 34352e3232352e34342e302f32332d3234203d3e20323633323338.roa (raw, json)
Hash identifier: YRHbuBajn+P+woG77MROgE5Yz0jy2B3c1Bjc+e4E+Qs=
Subject key identifier: FC:82:42:A4:46:7D:D9:9C:5D:4E:1B:E9:F4:40:C6:89:4B:F4:06:5A
Certificate issuer: /CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
Certificate serial: 2838F05EDDA1EE01D05FA904D3375783FD1E63E5
Authority key identifier: B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/34352e3232352e34342e302f32332d3234203d3e20323633323338.roa
Signing time: Thu 27 Mar 2025 14:05:00 +0000
ROA not before: Thu 27 Mar 2025 14:00:00 +0000
ROA not after: Thu 26 Mar 2026 14:05:00 +0000
asID: 263238
IP address blocks: 45.225.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:38:f0:5e:dd:a1:ee:01:d0:5f:a9:04:d3:37:57:83:fd:1e:63:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
Validity
Not Before: Mar 27 14:00:00 2025 GMT
Not After : Mar 26 14:05:00 2026 GMT
Subject: CN=FC8242A4467DD99C5D4E1BE9F440C6894BF4065A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f2:48:c4:81:c2:66:5b:13:69:d3:0c:f6:56:
20:9a:d1:76:ce:06:c0:59:fe:eb:96:b4:e2:8e:e8:
9e:0c:e5:53:d5:33:85:5c:07:8f:cb:ca:1d:fa:a4:
ed:38:24:04:5d:c0:44:95:75:0e:6b:6c:ca:c9:0c:
22:5b:f9:75:5a:90:c4:fe:2e:e9:84:e3:80:d0:b0:
48:d2:79:4e:da:38:24:93:80:27:bf:c2:35:bd:e7:
41:c6:6c:42:c1:ca:2f:6b:0a:90:1f:00:1f:69:5c:
d7:e1:ef:df:dd:bc:a3:81:42:fc:b0:a2:27:5a:76:
4d:6e:25:55:f4:0f:18:a2:77:ca:19:1e:66:a2:dd:
7e:ff:35:3c:a0:d6:ad:7d:cf:50:e6:5a:c4:f5:77:
65:ea:fb:84:45:79:02:b1:1a:e2:71:5a:5f:a2:d8:
dc:ba:da:6e:78:12:b8:cf:34:b1:2f:3a:05:e5:b3:
e2:17:5d:8c:36:f1:87:68:46:83:70:91:b5:1c:69:
75:e2:09:46:dd:ea:d5:1b:e3:35:07:f8:69:45:de:
fb:61:e3:c7:15:ba:82:3b:20:92:7b:88:89:f1:d6:
c7:be:3f:3d:a2:2b:9c:4f:1f:68:54:d9:a9:e9:d8:
63:e7:2b:05:1a:9f:06:9a:7f:0f:07:ca:7d:11:16:
a8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:82:42:A4:46:7D:D9:9C:5D:4E:1B:E9:F4:40:C6:89:4B:F4:06:5A
X509v3 Authority Key Identifier:
keyid:B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/34352e3232352e34342e302f32332d3234203d3e20323633323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.44.0/23
Signature Algorithm: sha256WithRSAEncryption
83:f1:72:17:f0:54:f9:55:d8:a4:09:91:c6:72:b2:6d:04:d6:
50:c1:39:65:53:a2:8f:0e:bf:7f:b4:64:e1:9f:5d:92:6f:cb:
a2:43:9a:1d:c4:96:7b:e8:5a:4d:6e:91:64:07:f9:70:64:0a:
6a:ff:fc:cd:61:8c:92:b2:b1:8f:bd:a0:5d:92:9f:ce:9e:a4:
c2:bf:fb:62:a4:b9:34:67:d5:4a:65:b8:b0:d5:50:c5:6d:9f:
39:28:98:4f:5a:e7:53:40:59:7f:68:76:67:34:40:39:d2:e1:
7b:16:da:f3:c0:0a:84:3d:6a:51:d6:54:95:65:43:7f:17:99:
e8:9e:47:44:ee:14:70:44:7b:4a:cc:43:9c:3b:23:d7:2b:07:
b7:84:c1:99:f7:40:85:f2:af:ab:5c:18:6b:82:bd:4e:eb:a0:
19:d0:25:9f:13:f2:4c:3c:32:22:c6:5b:87:b4:5a:bf:0c:84:
9d:0e:df:6e:42:32:43:9f:9b:ed:5d:f4:24:76:c4:e1:d6:e4:
d6:b7:7b:bb:8f:65:fc:30:7c:4f:e5:2d:25:ee:e3:89:d8:86:
e8:38:66:e1:7a:ca:bd:e7:80:8f:e4:9f:50:92:74:e8:3e:9e:
52:f7:0a:c0:f3:d9:c3:cb:04:ad:3f:81:16:2a:71:51:2b:b4:
62:86:09:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:04 2025 by rpki-client