Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/34352e3233302e37322e302f32322d3234203d3e20323634383537.roa
File: 34352e3233302e37322e302f32322d3234203d3e20323634383537.roa (raw, json)
Hash identifier: uv0SNKGfHau0PsxKHa/pKoWkv0D7DOkcmSQ0K3CQVZA=
Subject key identifier: B5:FD:2E:75:64:02:48:F4:51:FD:54:8C:6F:57:D7:46:84:7D:CE:96
Certificate issuer: /CN=3A400B3A5D53E4EA3825ED69A583478D86023E84
Certificate serial: 0523B00D7B211F99A402B11854FC48C4F619243F
Authority key identifier: 3A:40:0B:3A:5D:53:E4:EA:38:25:ED:69:A5:83:47:8D:86:02:3E:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/34352e3233302e37322e302f32322d3234203d3e20323634383537.roa
Signing time: Fri 19 Apr 2024 11:05:00 +0000
ROA not before: Fri 19 Apr 2024 11:00:00 +0000
ROA not after: Fri 18 Apr 2025 11:05:00 +0000
asID: 264857
IP address blocks: 45.230.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:23:b0:0d:7b:21:1f:99:a4:02:b1:18:54:fc:48:c4:f6:19:24:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A400B3A5D53E4EA3825ED69A583478D86023E84
Validity
Not Before: Apr 19 11:00:00 2024 GMT
Not After : Apr 18 11:05:00 2025 GMT
Subject: CN=B5FD2E75640248F451FD548C6F57D746847DCE96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:91:e3:05:ec:e4:a8:99:46:09:2f:27:06:
ea:58:f4:ae:04:39:66:ab:9b:14:4c:c6:c9:88:48:
8f:b1:68:71:82:00:70:b4:4a:86:8a:53:c2:b5:2f:
a3:5e:0d:bf:ab:57:ca:60:c3:5d:55:92:08:03:86:
4e:6b:48:ca:e6:a5:2f:44:e2:d0:f5:a8:54:51:4d:
96:3f:13:73:fe:c8:cc:d1:00:ce:28:73:ed:f7:00:
ac:a6:a4:c6:e8:ec:bb:74:a4:6e:aa:7c:f5:45:b9:
c5:df:51:1b:74:07:87:87:2b:0a:39:27:2b:dd:6b:
73:ad:51:91:e7:a5:54:5d:bf:ef:92:19:06:b6:da:
b3:3e:fa:23:e5:6e:85:83:81:6d:57:02:d0:22:25:
6b:2f:12:f3:5b:28:87:51:79:3f:78:6d:de:4e:db:
9e:88:87:f7:a1:f5:28:3c:39:35:87:55:96:6b:2f:
56:6b:cf:30:72:c3:75:a4:80:92:7e:38:0f:9d:81:
47:e3:95:88:6e:32:4c:c6:90:fd:fa:c1:db:2b:24:
bd:22:b8:85:fe:c1:90:5c:c2:f5:07:54:04:3c:70:
bc:62:92:a7:59:04:6b:ff:20:a1:84:4c:0f:4a:77:
28:22:7d:96:2e:73:b4:06:ec:8c:d6:f8:6b:c3:24:
18:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FD:2E:75:64:02:48:F4:51:FD:54:8C:6F:57:D7:46:84:7D:CE:96
X509v3 Authority Key Identifier:
keyid:3A:40:0B:3A:5D:53:E4:EA:38:25:ED:69:A5:83:47:8D:86:02:3E:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/34352e3233302e37322e302f32322d3234203d3e20323634383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.72.0/22
Signature Algorithm: sha256WithRSAEncryption
67:03:13:9a:fc:49:f8:55:3c:8d:a9:88:d2:0d:72:91:47:de:
c1:17:04:82:df:32:e8:92:57:3d:f7:b8:72:4f:3e:35:7a:0c:
27:35:9f:92:f0:c6:8b:ab:13:f0:45:f3:4c:77:dc:4e:9a:9e:
d0:f1:c9:9d:18:1a:98:e1:a4:09:50:3d:ef:c7:8a:7c:bf:9c:
aa:4e:e8:9a:eb:c0:7a:f1:6d:b4:83:30:7a:e4:22:e6:09:a5:
35:15:a8:95:a5:af:a1:2c:3b:c1:9a:d0:63:94:f8:73:33:d7:
06:21:1c:a7:94:d0:0b:de:61:c2:e9:4a:65:b2:f1:ea:49:3e:
90:29:b4:bb:2e:88:5c:76:ef:d0:02:c8:03:b1:24:dd:12:62:
05:d5:2b:e2:e0:f6:7a:80:b8:4c:4c:28:d1:61:e2:22:c6:70:
51:a9:6e:bb:37:50:f8:8c:b7:c0:22:cc:7e:2e:e7:c4:2a:91:
26:2a:ab:1a:6d:dc:04:8d:7e:47:52:2d:ff:9b:72:c4:40:6e:
ee:4d:6d:d3:a1:5c:fe:18:8f:9b:88:7e:8e:84:90:bf:b6:17:
0d:78:d8:97:c9:6e:17:f6:c8:49:b4:38:d6:8c:b0:d0:37:9e:
c7:e9:78:fb:f1:25:0f:a1:82:64:6d:18:bc:f0:68:b2:ab:42:
aa:8c:2e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:55:11 2025 by rpki-client