![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2c28e3ff-f732-46af-81e4-a0e58fbd74a0/a34fa451bbba668a6a59367c9c2a24adf3c34917.roa
File: a34fa451bbba668a6a59367c9c2a24adf3c34917.roa (raw, json)
Hash identifier: qyFUy2pWhzsMJHJ6+kwPiZU06+G2VZxG6TPG6kZ7dAk=
Subject key identifier: BC:B8:97:B6:7C:A5:46:F0:25:BF:49:33:AA:FA:3A:D0:74:7D:9E:1E
Certificate issuer: /CN=477cbcab0219a0cea1fe864323f2777db756c459
Certificate serial: 044274
Authority key identifier: 0A:8E:93:F0:37:65:CB:EB:24:BC:F4:B3:58:AC:40:22:B4:4D:AD:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/477cbcab0219a0cea1fe864323f2777db756c459.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2c28e3ff-f732-46af-81e4-a0e58fbd74a0/a34fa451bbba668a6a59367c9c2a24adf3c34917.roa
Signing time: Wed 24 Mar 2021 14:30:30 +0000
ROA not before: Wed 24 Mar 2021 14:30:30 +0000
ROA not after: Tue 24 Mar 2026 14:30:30 +0000
asID: 269916
IP address blocks: 45.191.188.0/22 maxlen: 24
2803:fce0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279156 (0x44274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477cbcab0219a0cea1fe864323f2777db756c459
Validity
Not Before: Mar 24 14:30:30 2021 GMT
Not After : Mar 24 14:30:30 2026 GMT
Subject: CN=a34fa451bbba668a6a59367c9c2a24adf3c34917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:67:0a:36:d9:db:9b:1f:76:2a:eb:c7:f4:
c9:08:74:40:cb:d2:54:14:22:28:5d:15:7b:7f:21:
8e:28:4e:9d:e8:9c:f3:0b:55:5f:cf:64:ac:bf:56:
48:b8:61:b3:47:06:3f:54:9c:bf:98:75:63:c6:d3:
ea:3a:3e:ac:4f:c6:d8:c1:b2:67:f1:1e:3c:43:56:
6f:b2:d3:76:23:2d:b7:df:7a:c1:36:6a:07:a7:dd:
f5:60:db:32:ce:31:27:f5:3a:55:28:12:24:df:80:
d9:aa:b0:83:44:70:16:61:19:8f:95:4c:22:e2:09:
a0:a0:e3:7a:96:ae:1b:0a:ee:fd:a1:a1:cc:8a:77:
bf:09:fd:2a:f0:a2:1f:b1:49:a4:35:2d:67:26:ec:
72:54:ba:ef:9f:6d:3f:cb:a7:19:c5:2b:92:db:73:
24:e4:e3:69:79:b5:11:b4:78:0f:de:92:18:a3:ae:
82:c9:9f:5a:f3:d0:b2:c2:68:c3:11:b7:52:eb:26:
8f:9c:af:3d:57:c1:91:0f:c6:84:a4:6b:62:77:ce:
a7:04:34:14:79:4f:75:5c:cf:1e:4e:19:42:ad:e0:
03:5f:a8:dc:8b:2d:0c:81:c5:53:3b:9a:8b:f5:26:
fa:ce:4a:84:56:71:ec:2e:7d:3e:24:eb:c6:28:5a:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B8:97:B6:7C:A5:46:F0:25:BF:49:33:AA:FA:3A:D0:74:7D:9E:1E
X509v3 Authority Key Identifier:
keyid:0A:8E:93:F0:37:65:CB:EB:24:BC:F4:B3:58:AC:40:22:B4:4D:AD:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/477cbcab0219a0cea1fe864323f2777db756c459.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2c28e3ff-f732-46af-81e4-a0e58fbd74a0/a34fa451bbba668a6a59367c9c2a24adf3c34917.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2c28e3ff-f732-46af-81e4-a0e58fbd74a0/477cbcab0219a0cea1fe864323f2777db756c459.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.188.0/22
IPv6:
2803:fce0::/32
Signature Algorithm: sha256WithRSAEncryption
68:90:d7:7b:5b:26:4f:16:cc:a6:52:b6:35:e0:94:e9:4e:69:
52:c7:7d:19:8b:54:e0:cb:65:ad:af:57:50:fc:56:e3:57:9d:
53:79:c6:26:83:cb:bc:b3:08:f0:5f:ff:06:24:7c:26:5e:fa:
99:4a:e1:02:3d:ff:18:c2:9d:46:35:0d:7e:a8:75:d9:8d:5a:
41:3f:75:c3:d4:fa:c3:eb:3d:f1:01:4d:5f:b2:98:98:54:3e:
a6:16:fa:1a:39:92:06:e3:fc:7f:30:72:2f:f1:81:2c:b8:87:
7b:f8:d0:1c:36:b4:15:b4:9a:18:81:3d:62:97:d5:3c:4a:23:
6d:14:a5:75:e0:d1:de:e5:5c:65:97:96:68:62:c2:f1:35:bf:
69:0e:d8:ce:25:6e:1a:ce:68:d2:98:ca:28:89:d1:c3:f6:e1:
c4:eb:19:b9:51:38:90:9a:62:00:71:be:3b:bb:3e:3d:6a:9f:
ca:ff:e4:0e:39:25:2d:09:bb:2f:eb:e3:36:46:c1:9b:8a:3c:
d8:7e:ce:71:59:25:42:94:ea:67:9e:16:06:f3:83:3b:fb:29:
ba:9e:7c:de:25:a7:30:9a:e3:0b:02:49:01:85:56:5e:7a:3d:
b3:5d:5d:d7:a1:ab:16:01:a6:3c:3e:4d:4a:58:1c:29:74:17:
4a:39:3e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org