![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e332e302f32342d3234203d3e203133343234.roa
File: 3230302e39312e332e302f32342d3234203d3e203133343234.roa (raw, json)
Hash identifier: RSyhXqNQeCKxBD2FaL6lei5Z5JKDFD9Jp5y/cp9YvKs=
Subject key identifier: 81:45:62:E3:DD:D1:E1:EC:21:E7:B3:F3:C8:C8:9A:FA:D7:6B:46:2C
Certificate issuer: /CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
Certificate serial: 2071329E75478EB85B3AEA9E51E6A823E93B4366
Authority key identifier: 08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e332e302f32342d3234203d3e203133343234.roa
Signing time: Tue 05 Mar 2024 17:44:27 +0000
ROA not before: Tue 05 Mar 2024 17:39:27 +0000
ROA not after: Tue 04 Mar 2025 17:44:27 +0000
asID: 13424
IP address blocks: 200.91.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:71:32:9e:75:47:8e:b8:5b:3a:ea:9e:51:e6:a8:23:e9:3b:43:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
Validity
Not Before: Mar 5 17:39:27 2024 GMT
Not After : Mar 4 17:44:27 2025 GMT
Subject: CN=814562E3DDD1E1EC21E7B3F3C8C89AFAD76B462C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:99:ff:21:c5:08:c7:96:94:70:75:73:ec:
cd:8b:ac:d6:46:07:59:b8:ae:b5:e4:e4:8f:52:6f:
93:d9:27:38:e8:16:fa:3f:15:1a:84:83:73:74:d8:
dc:85:6d:54:4e:13:74:b8:34:72:65:8b:b9:65:64:
a9:54:26:22:99:a9:43:cf:ab:66:d7:6d:b8:e9:74:
6e:a4:15:b1:4f:8c:c6:4f:e7:ca:5a:76:d6:e7:5d:
f6:ef:bb:f7:02:8b:3f:4e:ad:83:a7:a4:49:f9:0a:
36:fd:48:7b:b3:9f:1e:80:d9:7d:67:27:5b:4c:b6:
62:dc:9c:d6:35:55:f1:c3:77:40:e6:b6:f1:ab:dd:
df:00:b8:47:1d:6e:5d:1f:0c:3c:e3:d5:76:50:6f:
82:e3:8f:eb:dd:7c:85:f7:47:f4:13:c7:93:96:89:
64:c1:3f:30:c0:0f:99:cb:85:ec:5c:72:3e:bf:99:
92:c2:7d:95:ec:23:51:37:f0:84:f5:d0:bf:b2:a3:
4e:3e:fe:6e:50:e5:a8:42:42:8e:6c:a5:d5:41:76:
9a:06:d7:a8:7f:96:3c:7c:74:f2:d0:39:0f:6f:89:
4e:a7:35:30:1b:94:c5:2d:3b:d3:e6:00:39:6f:a8:
01:8c:0a:1c:8d:53:3a:3e:8b:7c:14:eb:17:35:d1:
dc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:45:62:E3:DD:D1:E1:EC:21:E7:B3:F3:C8:C8:9A:FA:D7:6B:46:2C
X509v3 Authority Key Identifier:
keyid:08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e332e302f32342d3234203d3e203133343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.91.3.0/24
Signature Algorithm: sha256WithRSAEncryption
47:48:a8:6e:c3:e5:7b:bd:a1:3a:34:ca:3c:b4:29:e7:fe:1d:
a3:9b:3b:30:3e:90:8d:99:49:9a:17:ce:db:f8:c5:57:78:dc:
a7:e5:e4:67:b7:e5:9f:fe:96:71:65:6f:7d:99:1a:46:23:c6:
bb:7a:04:ab:4a:1e:38:c9:9c:e9:92:d3:52:e0:b7:37:b6:9b:
6b:ac:81:f6:7e:93:59:8f:ae:93:47:fe:98:9f:04:24:fc:fa:
89:de:b7:ca:05:56:10:a9:be:5f:66:59:58:28:15:20:f7:ac:
aa:1e:00:39:a3:bd:5e:ea:e4:1c:dc:d4:49:39:56:6c:1e:9b:
72:3b:3b:64:52:fd:cf:6c:91:ac:f8:5c:be:41:ab:48:35:48:
16:c7:cc:d8:46:01:ed:6d:e3:44:89:03:0b:74:ef:12:b0:f4:
36:25:50:73:d5:f3:d6:3b:d5:13:d3:90:a0:3d:9c:8e:b4:02:
4f:73:0d:1e:56:c0:19:db:62:c3:d1:0a:e6:4e:a4:49:88:44:
90:b1:9a:e5:66:b2:ca:3e:ab:67:10:c9:ff:6b:7e:c0:8f:57:
a1:d8:f3:65:0e:9a:21:f8:4e:a8:7f:1b:cc:8c:8e:a1:86:61:
89:65:49:89:9d:9e:bf:1c:90:65:d9:de:4c:f6:b7:8b:0c:a4:
e1:cd:0d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:53 2025 by rpki-client