Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32322d3234203d3e20323730313433.roa
File: 34352e372e36342e302f32322d3234203d3e20323730313433.roa (raw, json)
Hash identifier: NJ1wnV0haaaf6bxzLgk2oHJqLAhSjf0QxGaZOfanF0o=
Subject key identifier: 3D:8A:D4:77:8F:26:E6:E0:D4:65:0F:D1:14:60:86:9A:02:3D:F3:1D
Certificate issuer: /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Certificate serial: 20AFAC3DFCE33FA043E3A4F779BA2B2932529913
Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32322d3234203d3e20323730313433.roa
Signing time: Tue 05 Mar 2024 18:05:02 +0000
ROA not before: Tue 05 Mar 2024 18:00:02 +0000
ROA not after: Tue 04 Mar 2025 18:05:02 +0000
asID: 270143
IP address blocks: 45.7.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:af:ac:3d:fc:e3:3f:a0:43:e3:a4:f7:79:ba:2b:29:32:52:99:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Validity
Not Before: Mar 5 18:00:02 2024 GMT
Not After : Mar 4 18:05:02 2025 GMT
Subject: CN=3D8AD4778F26E6E0D4650FD11460869A023DF31D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:2c:f0:52:0c:e0:0b:16:a5:4d:f5:ca:95:
52:24:02:a2:93:dd:1a:23:25:86:46:38:79:5c:61:
49:d7:53:e6:29:91:e1:19:5d:db:f5:6c:c4:38:08:
d2:a1:8b:ba:46:02:db:3f:42:ef:31:15:ac:1f:1e:
40:c0:63:62:fe:4e:ea:13:42:c0:f5:a3:6e:c2:3f:
81:7b:85:dd:48:48:4a:fe:d5:7d:d6:10:f6:91:3c:
85:2b:46:8c:2e:66:9c:f5:dc:95:1a:a4:f6:7a:7f:
8e:4f:51:f0:fe:1e:95:c3:e9:10:0c:30:d5:a9:38:
e8:00:f7:8d:d4:f5:bb:23:fc:6d:8c:20:e8:8b:a7:
26:fb:e1:ad:72:43:e5:da:76:a3:1c:64:f3:50:ec:
f7:47:3b:7e:65:66:2b:b7:e0:e0:00:49:99:8b:ab:
eb:d7:5b:e2:dd:67:24:96:0b:68:75:03:b6:78:95:
50:d0:82:71:71:6a:9e:44:b3:68:a0:4d:7d:f3:9d:
a5:68:76:ce:01:ff:ce:89:bd:f0:b2:56:19:f9:0c:
32:aa:8b:88:85:29:02:87:33:c3:41:ee:af:12:e3:
b2:20:ca:20:16:9e:8e:ca:81:14:66:d8:a4:0e:fe:
14:0c:95:65:5c:40:6d:56:78:98:79:cd:74:80:7b:
cc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8A:D4:77:8F:26:E6:E0:D4:65:0F:D1:14:60:86:9A:02:3D:F3:1D
X509v3 Authority Key Identifier:
keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32322d3234203d3e20323730313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.64.0/22
Signature Algorithm: sha256WithRSAEncryption
14:7d:59:44:28:96:53:fb:31:fa:9f:a9:84:72:36:93:a1:00:
d7:31:13:2c:8b:72:1e:32:8b:61:5d:c9:cc:a1:09:bc:fc:a4:
e4:2d:09:ac:70:b5:47:82:5f:18:da:fe:a1:28:bb:28:84:4a:
92:aa:ab:75:88:2b:d8:79:e7:36:f0:63:ea:00:89:09:30:cd:
3c:7c:f0:46:7b:eb:82:56:31:74:c2:03:46:94:f2:2a:3c:a2:
47:0b:7c:d7:33:ca:54:2b:d4:70:a8:49:5d:d2:5d:0e:d5:ce:
8d:1b:40:c3:08:0a:16:f9:cb:12:55:4b:37:ff:e6:8d:15:02:
ad:ff:fa:45:30:c0:c3:94:08:f7:f7:6a:83:61:f7:e3:54:4e:
bd:d5:9b:08:6f:b9:82:73:93:91:50:35:94:02:a1:cc:03:29:
8d:63:82:b9:f2:e9:8e:42:08:9d:ad:7a:84:3f:4a:65:16:d0:
b9:74:96:b4:3b:3e:3d:a2:87:37:3c:44:27:3b:5d:3b:0b:9d:
7d:81:af:fc:4c:6b:46:9b:a4:3e:bd:00:1c:7f:39:41:33:d3:
dc:93:bf:cc:5e:dd:c9:8e:fe:6c:fa:b5:a7:55:c0:60:68:d4:
4e:7c:fe:e7:47:d8:df:0a:47:d9:89:01:a6:cb:f8:be:4b:91:
2f:39:ca:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:11:42 2025 by rpki-client