Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/34352e3136312e3233362e302f32322d3234203d3e203631353132.roa
File: 34352e3136312e3233362e302f32322d3234203d3e203631353132.roa (raw, json)
Hash identifier: wsO0hgTtuuQvAYC72J3jazl1/BtkkYzhIpuBnyoLj2w=
Subject key identifier: 08:7E:82:73:DF:C2:E3:2F:20:78:66:64:15:EB:FD:14:00:B7:0C:9B
Certificate issuer: /CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
Certificate serial: 43C4856E1971BAA250994B9AB9F18EE8317ABD65
Authority key identifier: 85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/34352e3136312e3233362e302f32322d3234203d3e203631353132.roa
Signing time: Tue 04 Feb 2025 18:47:38 +0000
ROA not before: Tue 04 Feb 2025 18:42:38 +0000
ROA not after: Tue 03 Feb 2026 18:47:38 +0000
asID: 61512
IP address blocks: 45.161.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c4:85:6e:19:71:ba:a2:50:99:4b:9a:b9:f1:8e:e8:31:7a:bd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
Validity
Not Before: Feb 4 18:42:38 2025 GMT
Not After : Feb 3 18:47:38 2026 GMT
Subject: CN=087E8273DFC2E32F2078666415EBFD1400B70C9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:d5:e7:f5:8b:12:15:9c:04:8c:b6:e0:8c:
e3:de:bb:6b:46:1d:1a:d4:4d:a3:fb:fd:d6:c3:ba:
f5:4d:8b:bf:60:0d:12:2c:49:50:b5:44:d6:16:ef:
cd:07:ee:32:be:6e:53:0d:9c:e0:3d:92:d0:b6:90:
76:11:fc:fa:c4:66:4b:a4:cd:fe:4b:55:5a:1e:1b:
54:16:2d:0f:27:95:7a:ab:0d:e4:2c:b1:ff:bb:0b:
03:b5:60:13:04:07:c0:66:d6:aa:cd:f0:09:13:3c:
ba:d4:ed:28:dd:d4:33:d0:ba:69:95:e7:d8:10:1c:
62:35:a6:63:37:a3:3a:1e:f6:18:ab:8e:39:80:71:
c3:e4:95:d7:b7:56:03:22:fc:18:bd:da:48:37:14:
0c:e4:b0:61:fc:54:e1:f8:56:8b:99:72:7a:36:94:
66:74:ad:16:13:54:1c:b6:7a:ae:a0:d5:1e:20:c2:
fc:9d:f3:54:c5:2c:8a:6f:33:89:13:e9:85:f5:df:
cb:69:07:1b:45:28:16:61:3f:88:64:a6:e9:ba:a3:
ab:14:65:a0:f4:55:02:65:b5:5e:7f:53:a4:8c:ed:
d9:67:39:eb:c8:b8:d1:96:4e:3f:45:c0:50:a9:10:
c5:e1:5d:9d:b1:5f:97:ac:a4:42:04:48:60:93:68:
62:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7E:82:73:DF:C2:E3:2F:20:78:66:64:15:EB:FD:14:00:B7:0C:9B
X509v3 Authority Key Identifier:
keyid:85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/34352e3136312e3233362e302f32322d3234203d3e203631353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.236.0/22
Signature Algorithm: sha256WithRSAEncryption
04:89:52:45:46:1f:04:e6:69:1b:fe:f2:b5:ec:c6:c0:97:b0:
fc:74:2e:39:b5:c8:de:e7:c4:2d:67:d5:da:30:6b:85:69:40:
0b:62:b5:8b:09:65:53:60:32:95:31:01:e3:2e:34:74:0b:10:
19:4b:f5:3e:a6:9e:97:03:1a:95:7d:91:a6:32:6a:df:bf:b0:
33:96:8b:31:ac:19:9a:2d:2b:7d:f5:48:b0:f8:11:5a:cd:36:
75:a0:6b:15:eb:6b:a8:05:09:24:1f:b0:db:3c:e0:42:bb:2e:
2e:8f:5b:1e:dd:92:56:f8:77:e9:14:ad:b9:51:c9:ac:e4:b9:
7a:3d:98:78:e8:4c:bf:a4:4f:9c:7d:ed:56:ea:57:bc:13:34:
4b:6a:24:29:e6:d1:eb:38:e3:6f:c3:7b:ed:70:48:cc:34:10:
81:6b:c7:17:35:15:a7:2f:61:bd:42:3d:29:b7:72:50:aa:64:
b3:87:12:d6:0e:9e:b6:f7:34:e7:92:ce:a8:0c:27:7b:ab:48:
71:3d:cb:57:43:d4:7e:e7:2f:60:10:ac:81:a7:f1:6e:bd:c2:
42:74:20:e6:fb:ed:d7:30:a9:5b:1d:72:79:af:b6:62:37:20:
04:c7:05:a9:51:d5:9d:9d:b3:cf:58:ab:d7:75:a9:02:40:2b:
ee:26:0e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:03 2025 by rpki-client