Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/34352e36382e34362e302f32342d3234203d3e20323633383037.roa
File: 34352e36382e34362e302f32342d3234203d3e20323633383037.roa (raw, json)
Hash identifier: e/YFem9FUR9oAPhmY1PkaOIlI5oCjgekWkCqgdHOq7o=
Subject key identifier: 4D:FF:0A:43:EE:06:3E:5B:BC:3F:40:47:F7:55:A8:43:23:AA:1F:FB
Certificate issuer: /CN=B156B92173159B61E3CBF80FA51A1B58E6218261
Certificate serial: 725255F6C2812757F4130B2BA9E90826BA403112
Authority key identifier: B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/34352e36382e34362e302f32342d3234203d3e20323633383037.roa
Signing time: Tue 11 Mar 2025 20:11:39 +0000
ROA not before: Tue 11 Mar 2025 20:06:39 +0000
ROA not after: Tue 10 Mar 2026 20:11:39 +0000
asID: 263807
IP address blocks: 45.68.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:52:55:f6:c2:81:27:57:f4:13:0b:2b:a9:e9:08:26:ba:40:31:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B156B92173159B61E3CBF80FA51A1B58E6218261
Validity
Not Before: Mar 11 20:06:39 2025 GMT
Not After : Mar 10 20:11:39 2026 GMT
Subject: CN=4DFF0A43EE063E5BBC3F4047F755A84323AA1FFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fa:f7:2c:c4:6f:54:b5:6e:c2:70:a3:93:40:
e1:10:c5:30:96:a2:61:ce:20:7e:6d:9b:6b:1b:03:
3d:f0:16:eb:6e:66:28:be:84:f4:93:72:ba:14:c6:
b8:24:12:94:74:23:0e:16:96:00:23:69:d7:a6:6f:
72:c8:4a:e3:85:97:35:56:84:e4:5f:13:d3:88:33:
99:06:3e:be:e7:da:48:97:3d:18:41:25:73:49:88:
f6:20:a6:d4:c4:3f:4f:2c:a9:c0:7b:c7:9c:25:ab:
e7:bd:0b:52:26:4d:45:2b:07:ad:16:94:83:ee:98:
f7:4e:1a:43:d8:9c:19:5e:d9:87:b2:76:96:dd:04:
c7:69:37:d9:5d:50:f4:b8:ad:1b:bb:52:e3:d6:5c:
b0:4f:fd:5f:b0:cf:20:c5:d9:74:c7:2c:5a:51:35:
a0:e1:d3:fc:bd:d1:0e:c7:6c:fc:e3:d7:ed:88:a7:
dd:94:e1:cf:23:86:3c:8b:ea:34:52:58:c4:36:e1:
5d:d6:f5:39:06:f3:d2:1d:33:fa:7c:e6:3b:ff:16:
3c:04:9e:99:7a:9c:1e:f1:60:41:af:59:a4:c6:04:
1f:cd:46:cd:d1:4a:52:9c:64:12:7c:bc:98:4c:dd:
62:f0:37:e0:8b:8b:48:8e:1d:ee:34:4a:26:e6:74:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FF:0A:43:EE:06:3E:5B:BC:3F:40:47:F7:55:A8:43:23:AA:1F:FB
X509v3 Authority Key Identifier:
keyid:B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/34352e36382e34362e302f32342d3234203d3e20323633383037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.46.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:3a:53:88:3e:e7:83:6d:2f:70:7d:1c:29:06:79:fb:08:30:
e9:90:30:34:11:6d:1c:b2:fb:87:0c:8f:0d:ef:ab:2b:e1:b5:
f7:a6:65:52:c6:05:cd:b7:f3:18:73:08:2e:e7:41:20:ea:9a:
03:bd:a2:cb:19:5d:92:36:26:1c:64:d4:9f:82:88:7e:47:c4:
bb:a0:81:ad:e6:52:93:45:e7:68:89:59:a8:29:79:59:af:28:
28:c5:3c:da:30:cd:af:b7:0b:ea:51:d3:e0:27:b3:93:37:47:
bc:db:7a:61:cc:c3:ef:a8:70:77:eb:f0:5f:83:c9:18:b8:b9:
28:ba:69:51:4e:44:9f:c2:db:f2:86:ae:4f:3f:f7:93:bb:21:
a8:2c:5f:67:d6:02:10:28:08:3e:5e:37:ef:6e:fb:23:12:bd:
ae:11:03:b1:5b:e1:77:74:91:40:68:9d:55:71:9d:e2:32:42:
05:b4:ee:dc:f3:0c:37:83:ff:20:5c:d1:e3:1e:3a:5c:c4:e9:
87:14:03:2a:2a:10:c2:51:b6:3d:81:71:97:e6:21:b2:8d:c5:
c6:d4:af:f0:23:de:4b:d4:13:37:f4:cb:7e:c1:e3:d2:46:af:
0e:8b:5c:10:84:76:0a:57:1f:47:19:71:73:a2:9e:5a:89:44:
b7:5d:b6:b5
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUclJV9sKBJ1f0EwsrqekIJrpAMRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE1NkI5MjE3MzE1OUI2MUUzQ0JGODBGQTUxQTFCNThF
NjIxODI2MTAeFw0yNTAzMTEyMDA2MzlaFw0yNjAzMTAyMDExMzlaMDMxMTAvBgNV
BAMTKDRERkYwQTQzRUUwNjNFNUJCQzNGNDA0N0Y3NTVBODQzMjNBQTFGRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCD+vcsxG9UtW7CcKOTQOEQxTCW
omHOIH5tm2sbAz3wFutuZii+hPSTcroUxrgkEpR0Iw4WlgAjademb3LISuOFlzVW
hORfE9OIM5kGPr7n2kiXPRhBJXNJiPYgptTEP08sqcB7x5wlq+e9C1ImTUUrB60W
lIPumPdOGkPYnBle2YeydpbdBMdpN9ldUPS4rRu7UuPWXLBP/V+wzyDF2XTHLFpR
NaDh0/y90Q7HbPzj1+2Ip92U4c8jhjyL6jRSWMQ24V3W9TkG89IdM/p85jv/FjwE
npl6nB7xYEGvWaTGBB/NRs3RSlKcZBJ8vJhM3WLwN+CLi0iOHe40SibmdPZFAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUTf8KQ+4GPlu8P0BH91WoQyOqH/swHwYDVR0j
BBgwFoAUsVa5IXMVm2Hjy/gPpRobWOYhgmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMzJEQUNFNDJDMEEzRENDM0FGMTdDOTVDM0NBNDAzMEQ1
MkNBNkU3RjBBODNFODY1MkU5ODdFMjA5RkQ1MjZBLzAvQjE1NkI5MjE3MzE1OUI2
MUUzQ0JGODBGQTUxQTFCNThFNjIxODI2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTU2QjkyMTczMTU5QjYxRTND
QkY4MEZBNTFBMUI1OEU2MjE4MjYxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTMyREFDRTQyQzBBM0RDQzNBRjE3Qzk1QzNDQTQwMzBENTJDQTZFN0Yw
QTgzRTg2NTJFOTg3RTIwOUZENTI2QS8wLzM0MzUyZTM2MzgyZTM0MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzODMwMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtRC4wDQYJ
KoZIhvcNAQELBQADggEBABo6U4g+54NtL3B9HCkGefsIMOmQMDQRbRyy+4cMjw3v
qyvhtfemZVLGBc238xhzCC7nQSDqmgO9ossZXZI2Jhxk1J+CiH5HxLugga3mUpNF
52iJWagpeVmvKCjFPNowza+3C+pR0+Ans5M3R7zbemHMw++ocHfr8F+DyRi4uSi6
aVFORJ/C2/KGrk8/95O7IagsX2fWAhAoCD5eN+9u+yMSva4RA7Fb4Xd0kUBonVVx
neIyQgW07tzzDDeD/yBc0eMeOlzE6YcUAyoqEMJRtj2BcZfmIbKNxcbUr/Aj3kvU
Ezf0y37B49JGrw6LXBCEdgpXH0cZcXOinlqJRLddtrU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:44 2025 by rpki-client