![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/5d40a8bc4bf11675581cc49addfb0841745d6528.roa
File: 5d40a8bc4bf11675581cc49addfb0841745d6528.roa (raw, json)
Hash identifier: KWEtlRPphcW/pqso43Sl74GKaUVwNHoz0gG081m3fN4=
Subject key identifier: 5B:C7:9C:0B:4F:5C:49:84:50:D1:12:C0:77:1B:ED:80:5F:1F:97:D0
Certificate issuer: /CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Certificate serial: 276503
Authority key identifier: 86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/5d40a8bc4bf11675581cc49addfb0841745d6528.roa
Signing time: Tue 13 Feb 2024 21:08:13 +0000
ROA not before: Tue 13 Feb 2024 21:08:13 +0000
ROA not after: Fri 13 Feb 2026 21:08:13 +0000
asID: 262191
IP address blocks: 2800:b70:18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2581763 (0x276503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Validity
Not Before: Feb 13 21:08:13 2024 GMT
Not After : Feb 13 21:08:13 2026 GMT
Subject: CN=5d40a8bc4bf11675581cc49addfb0841745d6528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:74:14:3c:43:a2:bb:04:7e:d0:5a:0e:77:
00:c3:1d:33:5c:72:ac:ad:ff:1d:87:24:a8:de:db:
c3:48:14:90:48:01:c7:5d:76:40:49:0e:b6:b7:f1:
43:3c:d5:31:f6:35:e6:e5:a4:06:b3:fc:6a:7c:3c:
d9:f1:12:c1:78:84:32:c2:83:71:f7:fe:b9:61:96:
76:52:a9:4e:49:79:11:93:97:4c:ab:9a:ba:c4:75:
6e:b4:12:cf:d1:23:ea:38:15:cc:26:77:b1:8c:7d:
a7:9c:fd:cc:a6:a4:b3:cf:2b:8d:5d:9a:88:b6:2f:
11:61:ee:19:be:85:f5:d7:0a:9a:03:4b:8a:09:30:
83:79:41:70:bc:b2:7e:f5:cb:90:82:68:68:47:11:
c2:91:f0:13:4e:86:e8:89:f3:31:37:c1:0e:59:4b:
47:8e:66:3f:57:40:4c:c4:8b:0a:83:0c:c7:5d:58:
ff:bd:5d:68:11:9a:d0:6d:bd:a4:b2:81:7e:b9:14:
24:66:3a:54:7a:9a:50:55:8a:9d:af:16:b9:11:5e:
53:18:f6:dc:47:24:59:f9:6f:dc:76:e7:0f:e2:b9:
13:17:9b:50:1d:f1:64:0b:e8:b5:58:b1:35:f9:9d:
12:af:e6:c0:9d:a2:a7:13:ee:68:82:50:e2:91:0b:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C7:9C:0B:4F:5C:49:84:50:D1:12:C0:77:1B:ED:80:5F:1F:97:D0
X509v3 Authority Key Identifier:
keyid:86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/5d40a8bc4bf11675581cc49addfb0841745d6528.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:b70:18::/48
Signature Algorithm: sha256WithRSAEncryption
04:ff:37:dd:b8:6e:13:94:f1:71:8d:b3:e9:b3:8c:8d:ac:a1:
99:42:f1:3e:d5:e0:18:f2:6b:ec:00:fa:5e:a6:ca:6b:b4:f3:
c0:35:04:7d:91:a8:5e:bd:4f:cd:d1:5b:b2:76:90:bb:44:87:
53:6f:ec:f0:6f:6b:a2:73:91:55:04:16:f0:e0:d3:8d:e1:ca:
c0:3d:4b:97:ab:bd:3c:4d:d0:f4:eb:2e:06:78:b7:5f:c7:ee:
41:20:60:5e:43:87:fe:7d:c0:dc:c0:27:82:4e:70:de:27:d0:
06:04:31:5d:ca:9b:2b:48:0d:be:03:b7:e8:ef:c1:1d:59:94:
56:33:1b:c8:ed:d0:df:53:10:b6:d2:53:2f:75:50:72:25:76:
42:c5:27:33:03:d1:59:b1:08:c1:4c:94:78:0d:04:26:19:7e:
29:f6:d6:6c:9b:91:13:b7:87:17:33:ba:a9:40:ac:1f:40:92:
69:10:02:8e:df:b8:ab:68:ef:be:e7:a8:0b:27:40:d3:97:11:
07:12:94:1c:aa:3d:43:04:b2:c9:e0:2e:0c:31:f9:16:9b:97:
73:45:c1:c8:79:a0:4e:2f:d9:b8:97:aa:f2:90:c2:71:5c:9b:
f5:04:9c:8d:89:40:40:5d:37:8a:b0:04:b3:c1:5c:d1:85:db:
04:5e:a0:c9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDJ2UDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
YWNiNGZhMTk4NWIzYTlhMDM1NWE0YTlmYTViZjY0ZDYxYzYxNDUwHhcNMjQwMjEz
MjEwODEzWhcNMjYwMjEzMjEwODEzWjAzMTEwLwYDVQQDEyg1ZDQwYThiYzRiZjEx
Njc1NTgxY2M0OWFkZGZiMDg0MTc0NWQ2NTI4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnWJ0FDxDorsEftBaDncAwx0zXHKsrf8dhySo3tvDSBSQSAHH
XXZASQ62t/FDPNUx9jXm5aQGs/xqfDzZ8RLBeIQywoNx9/65YZZ2UqlOSXkRk5dM
q5q6xHVutBLP0SPqOBXMJnexjH2nnP3MpqSzzyuNXZqIti8RYe4ZvoX11wqaA0uK
CTCDeUFwvLJ+9cuQgmhoRxHCkfATToboifMxN8EOWUtHjmY/V0BMxIsKgwzHXVj/
vV1oEZrQbb2ksoF+uRQkZjpUeppQVYqdrxa5EV5TGPbcRyRZ+W/cducP4rkTF5tQ
HfFkC+i1WLE1+Z0Sr+bAnaKnE+5oglDikQsxxQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFFvHnAtPXEmEUNESwHcb7YBfH5fQMB8GA1UdIwQYMBaAFIbG9eQAYQM8laEl
0N1eDk81gxo+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDlhY2I0
ZmExOTg1YjNhOWEwMzU1YTRhOWZhNWJmNjRkNjFjNjE0NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTVjMjU1OGEtMWQ1MS00NTY2LWE3NTUtYjc5YjQ1
YTE0YTYzLzVkNDBhOGJjNGJmMTE2NzU1ODFjYzQ5YWRkZmIwODQxNzQ1ZDY1Mjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xNWMyNTU4YS0xZDUxLTQ1NjYtYTc1NS1iNzli
NDVhMTRhNjMvNDlhY2I0ZmExOTg1YjNhOWEwMzU1YTRhOWZhNWJmNjRkNjFjNjE0
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgAC3AAGDANBgkqhkiG9w0BAQsFAAOCAQEABP833bhuE5Tx
cY2z6bOMjayhmULxPtXgGPJr7AD6XqbKa7TzwDUEfZGoXr1PzdFbsnaQu0SHU2/s
8G9ronORVQQW8ODTjeHKwD1Ll6u9PE3Q9OsuBni3X8fuQSBgXkOH/n3A3MAngk5w
3ifQBgQxXcqbK0gNvgO36O/BHVmUVjMbyO3Q31MQttJTL3VQciV2QsUnMwPRWbEI
wUyUeA0EJhl+KfbWbJuRE7eHFzO6qUCsH0CSaRACjt+4q2jvvueoCydA05cRBxKU
HKo9QwSyyeAuDDH5FpuXc0XByHmgTi/ZuJeq8pDCcVyb9QScjYlAQF03irAEs8Fc
0YXbBF6gyQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org