![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43077b1f-1531-42bf-940e-ef9030ca0b9c/6da439b24a90087d03688392418af6920257d571.roa
File: 6da439b24a90087d03688392418af6920257d571.roa (raw, json)
Hash identifier: NZSyRqIJ1Uu8h389LNvTN9NTJNH8fTqmHVTSPsuMiCQ=
Subject key identifier: EB:B8:61:D2:23:0C:0B:42:C9:B7:CC:DF:13:78:77:87:AC:7E:63:53
Certificate issuer: /CN=bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f
Certificate serial: 123232
Authority key identifier: 99:BA:C3:9B:79:C8:13:E3:DB:CA:F9:A1:B1:9A:FF:29:F7:20:A4:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43077b1f-1531-42bf-940e-ef9030ca0b9c/6da439b24a90087d03688392418af6920257d571.roa
Signing time: Thu 01 Feb 2024 07:30:00 +0000
ROA not before: Thu 01 Feb 2024 07:30:00 +0000
ROA not after: Sat 31 Jan 2026 07:30:00 +0000
asID: 271949
IP address blocks: 2803:5610::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1192498 (0x123232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f
Validity
Not Before: Feb 1 07:30:00 2024 GMT
Not After : Jan 31 07:30:00 2026 GMT
Subject: CN=6da439b24a90087d03688392418af6920257d571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:57:29:1e:37:f8:6c:f3:3b:4e:a4:7e:cf:
0d:62:5b:2c:17:35:a5:3c:72:98:2b:f3:cf:3e:97:
3c:ba:6d:f6:b8:b6:11:fc:8d:62:66:96:ac:b6:f7:
3d:b6:9c:3a:a6:0c:ff:44:d7:a3:aa:43:b4:17:cb:
9e:37:5e:d4:a8:b1:73:d9:9b:ac:9c:82:db:f5:9a:
de:b4:9b:21:42:0f:9e:e0:00:fe:9a:7b:ec:4c:f1:
cf:6a:4a:20:5b:9c:46:d2:4b:55:0c:53:14:e5:da:
3c:d6:c0:e8:ad:12:ac:31:fd:ec:e4:66:86:ad:24:
db:fe:f3:04:03:8c:97:59:ad:ef:7f:38:a5:5f:8b:
8a:c6:19:98:ee:82:a9:44:ff:fe:03:c8:57:a4:34:
58:9b:ba:76:03:53:a8:42:8c:aa:55:43:a9:86:1f:
80:2e:40:bf:9d:71:9f:bd:a1:bd:62:24:3a:b9:4e:
95:94:4e:db:48:1d:3f:0b:51:08:52:5f:43:4b:a7:
76:ea:a2:0c:ac:23:3c:53:e3:be:49:6e:2d:f0:98:
80:ff:10:37:7a:91:27:a5:13:f5:38:95:73:df:80:
64:fc:d5:ae:e8:b1:9f:ac:67:91:60:f6:9b:f8:c3:
15:4c:d2:29:33:82:30:c9:82:43:bf:21:dd:a3:d6:
10:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B8:61:D2:23:0C:0B:42:C9:B7:CC:DF:13:78:77:87:AC:7E:63:53
X509v3 Authority Key Identifier:
keyid:99:BA:C3:9B:79:C8:13:E3:DB:CA:F9:A1:B1:9A:FF:29:F7:20:A4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43077b1f-1531-42bf-940e-ef9030ca0b9c/6da439b24a90087d03688392418af6920257d571.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43077b1f-1531-42bf-940e-ef9030ca0b9c/bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5610::/32
Signature Algorithm: sha256WithRSAEncryption
5f:93:59:e9:1e:a3:fa:4d:21:10:b2:02:f2:7b:2f:4d:da:45:
58:d6:b5:b6:25:81:6b:33:9b:ea:93:e7:23:bc:0f:31:3d:72:
a0:75:ca:33:62:a5:3e:23:3d:3b:09:d4:42:bd:65:46:e4:ab:
1f:6e:a6:19:8b:92:70:1a:0e:69:c8:86:c5:66:3e:6a:34:b7:
b3:d3:d2:18:df:66:59:a8:44:3d:c2:27:45:7a:4a:1c:33:d8:
3f:0a:6f:85:5d:fb:35:30:e9:eb:b1:64:fe:9a:96:8f:04:c3:
9f:f4:67:75:0f:9b:19:75:1e:e6:c9:fe:11:dc:bc:03:b5:a7:
cb:ee:7c:51:86:54:1b:a3:89:8c:ca:e3:9e:94:4c:16:01:45:
fe:e3:dd:1e:33:81:35:4e:74:8e:d1:a0:c0:ca:bf:97:1d:38:
cb:dd:72:a4:d2:9a:9e:dd:48:e0:66:48:75:2d:a9:2f:22:d8:
89:ec:ae:22:11:aa:0a:0f:9c:c9:ad:03:00:cc:78:25:70:26:
c4:66:36:e7:2b:66:c5:20:3e:e1:82:63:fc:ef:16:b3:ff:e8:
c6:61:f4:2d:32:2f:10:e8:44:22:c7:14:46:c5:0a:77:68:8c:
58:bb:69:76:3f:2d:3e:cd:0a:1c:06:7b:80:5f:a2:1c:14:ca:
21:2a:23:ef
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDEjIyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJi
NzhhMzJjZDBjOGU5OTE2NzljZjgzY2NjNjhlYWYzYmIzYWVmNWYwHhcNMjQwMjAx
MDczMDAwWhcNMjYwMTMxMDczMDAwWjAzMTEwLwYDVQQDEyg2ZGE0MzliMjRhOTAw
ODdkMDM2ODgzOTI0MThhZjY5MjAyNTdkNTcxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApbBXKR43+GzzO06kfs8NYlssFzWlPHKYK/PPPpc8um32uLYR
/I1iZpastvc9tpw6pgz/RNejqkO0F8ueN17UqLFz2ZusnILb9ZretJshQg+e4AD+
mnvsTPHPakogW5xG0ktVDFMU5do81sDorRKsMf3s5GaGrSTb/vMEA4yXWa3vfzil
X4uKxhmY7oKpRP/+A8hXpDRYm7p2A1OoQoyqVUOphh+ALkC/nXGfvaG9YiQ6uU6V
lE7bSB0/C1EIUl9DS6d26qIMrCM8U+O+SW4t8JiA/xA3epEnpRP1OJVz34Bk/NWu
6LGfrGeRYPab+MMVTNIpM4IwyYJDvyHdo9YQuQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFOu4YdIjDAtCybfM3xN4d4esfmNTMB8GA1UdIwQYMBaAFJm6w5t5yBPj28r5
obGa/yn3IKRZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmI3OGEz
MmNkMGM4ZTk5MTY3OWNmODNjY2M2OGVhZjNiYjNhZWY1Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDMwNzdiMWYtMTUzMS00MmJmLTk0MGUtZWY5MDMw
Y2EwYjljLzZkYTQzOWIyNGE5MDA4N2QwMzY4ODM5MjQxOGFmNjkyMDI1N2Q1NzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80MzA3N2IxZi0xNTMxLTQyYmYtOTQwZS1lZjkw
MzBjYTBiOWMvYmI3OGEzMmNkMGM4ZTk5MTY3OWNmODNjY2M2OGVhZjNiYjNhZWY1
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDVhAwDQYJKoZIhvcNAQELBQADggEBAF+TWekeo/pNIRCy
AvJ7L03aRVjWtbYlgWszm+qT5yO8DzE9cqB1yjNipT4jPTsJ1EK9ZUbkqx9uphmL
knAaDmnIhsVmPmo0t7PT0hjfZlmoRD3CJ0V6Shwz2D8Kb4Vd+zUw6euxZP6alo8E
w5/0Z3UPmxl1HubJ/hHcvAO1p8vufFGGVBujiYzK456UTBYBRf7j3R4zgTVOdI7R
oMDKv5cdOMvdcqTSmp7dSOBmSHUtqS8i2InsriIRqgoPnMmtAwDMeCVwJsRmNucr
ZsUgPuGCY/zvFrP/6MZh9C0yLxDoRCLHFEbFCndojFi7aXY/LT7NChwGe4BfohwU
yiEqI+8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org