![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/36781776caa9e95e6caa8232d395e08045a3e96c.roa
File: 36781776caa9e95e6caa8232d395e08045a3e96c.roa (raw, json)
Hash identifier: nAzxheiisMutf9GfB8T7UKuS1S3ewOdfnblzZjswJBo=
Subject key identifier: EE:51:F3:1A:0D:7E:BD:E0:12:D1:75:41:2E:B9:73:88:59:FE:2B:CF
Certificate issuer: /CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
Certificate serial: 03E18D
Authority key identifier: CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/36781776caa9e95e6caa8232d395e08045a3e96c.roa
Signing time: Sat 11 Mar 2023 20:44:06 +0000
ROA not before: Fri 10 Mar 2023 20:43:36 +0000
ROA not after: Tue 11 Mar 2025 21:43:36 +0000
asID: 272875
IP address blocks: 2803:4a90:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254349 (0x3e18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
Validity
Not Before: Mar 10 20:43:36 2023 GMT
Not After : Mar 11 21:43:36 2025 GMT
Subject: CN=36781776caa9e95e6caa8232d395e08045a3e96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9e:31:45:02:43:50:ce:a9:2e:ce:be:ef:75:
26:8d:44:e8:3f:a4:21:94:00:4e:46:a3:82:95:3c:
12:e3:98:4c:22:9c:99:8d:3d:59:57:8e:e7:f4:ec:
1f:07:c9:f1:5f:58:1f:0e:07:6d:70:6f:91:6a:16:
35:12:bb:b4:d5:87:76:f6:d0:50:bc:71:f5:a5:62:
66:1f:ad:72:9c:8b:41:ab:ad:4a:f7:62:a8:e1:f0:
69:90:e0:8d:0d:16:77:80:6a:07:48:be:8f:d7:3e:
00:83:48:7c:88:e8:89:2a:04:db:ce:43:31:9b:38:
25:be:cf:7c:a2:92:ad:78:84:36:51:45:40:33:5c:
64:60:fe:f6:15:71:fc:eb:5e:21:18:a4:de:08:6e:
e0:1f:5d:d7:31:c7:34:43:1c:64:b5:c3:59:1d:9d:
22:8c:1f:4e:a4:91:e2:f4:9c:fd:35:1e:d9:ec:e9:
65:6d:89:20:57:cb:38:6c:0f:b3:58:51:d8:64:3f:
8c:b2:c5:3a:2d:ed:8b:b3:0c:4f:d4:b0:f7:15:a8:
7d:46:b4:6a:64:7f:8e:d5:cc:1d:0b:25:6f:ec:60:
81:f0:45:b2:77:1c:02:76:3a:aa:96:f3:ee:4d:82:
95:77:60:ac:39:08:a3:23:54:83:37:ed:64:2a:4f:
51:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:51:F3:1A:0D:7E:BD:E0:12:D1:75:41:2E:B9:73:88:59:FE:2B:CF
X509v3 Authority Key Identifier:
keyid:CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/36781776caa9e95e6caa8232d395e08045a3e96c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/43d1351614e693788211d4b7aaaf7f8f5d919d3d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4a90:2::/48
Signature Algorithm: sha256WithRSAEncryption
64:ae:fb:cc:0f:96:87:06:e1:d1:ba:08:f4:aa:82:af:1e:8f:
e5:82:fc:98:23:e8:9a:42:ec:77:48:a8:38:58:4b:78:6a:1a:
82:2e:d1:c1:9c:0f:5c:74:83:15:93:c8:2e:2f:a8:1e:6d:3a:
ff:69:df:e2:9a:81:41:9f:e2:ed:02:1b:1a:ad:b7:24:69:9b:
fd:e5:9c:13:e6:80:47:d2:98:02:7f:0f:3e:df:c4:92:b4:16:
98:88:55:50:a7:ec:52:31:0b:a3:e0:a4:df:5e:e2:a8:74:46:
78:27:b1:86:ab:26:4e:4e:e4:e6:a1:a2:ea:c8:54:5c:67:95:
d9:8b:f3:ba:35:51:02:47:1d:bf:78:e9:ca:8d:28:38:41:09:
a9:fa:d0:9e:5c:a9:70:7d:6e:ff:5a:14:7c:bc:d8:9b:de:6a:
f6:a7:0f:db:c4:d8:ae:a6:d2:a0:a1:e5:83:6e:cb:a0:50:cf:
af:30:fb:fa:0b:0a:0c:48:7a:cf:e2:50:f7:cd:cb:a5:6c:fa:
3b:d3:e9:cb:fc:8b:65:91:0c:9d:56:6a:c0:12:f5:d6:52:69:
b3:ad:85:3e:d5:48:d3:e1:ca:e5:54:cb:73:5e:50:df:5a:1c:
29:66:01:24:3c:31:77:f7:f9:51:c3:bb:31:bb:66:7e:a3:01:
d6:40:0d:20
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDA+GNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQz
ZDEzNTE2MTRlNjkzNzg4MjExZDRiN2FhYWY3ZjhmNWQ5MTlkM2QwHhcNMjMwMzEw
MjA0MzM2WhcNMjUwMzExMjE0MzM2WjAzMTEwLwYDVQQDEygzNjc4MTc3NmNhYTll
OTVlNmNhYTgyMzJkMzk1ZTA4MDQ1YTNlOTZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA154xRQJDUM6pLs6+73UmjUToP6QhlABORqOClTwS45hMIpyZ
jT1ZV47n9OwfB8nxX1gfDgdtcG+RahY1Eru01Yd29tBQvHH1pWJmH61ynItBq61K
92Ko4fBpkOCNDRZ3gGoHSL6P1z4Ag0h8iOiJKgTbzkMxmzglvs98opKteIQ2UUVA
M1xkYP72FXH8614hGKTeCG7gH13XMcc0QxxktcNZHZ0ijB9OpJHi9Jz9NR7Z7Oll
bYkgV8s4bA+zWFHYZD+MssU6Le2LswxP1LD3Fah9RrRqZH+O1cwdCyVv7GCB8EWy
dxwCdjqqlvPuTYKVd2CsOQijI1SDN+1kKk9R6QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFO5R8xoNfr3gEtF1QS65c4hZ/ivPMB8GA1UdIwQYMBaAFMtoXPeF8BIhN71/
v67T7/dcPScAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDNkMTM1
MTYxNGU2OTM3ODgyMTFkNGI3YWFhZjdmOGY1ZDkxOWQzZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDNkOWNhMzUtN2ZjMS00Yzc5LTlhZWEtZTk2Yjc0
NjlkMzZiLzM2NzgxNzc2Y2FhOWU5NWU2Y2FhODIzMmQzOTVlMDgwNDVhM2U5NmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80M2Q5Y2EzNS03ZmMxLTRjNzktOWFlYS1lOTZi
NzQ2OWQzNmIvNDNkMTM1MTYxNGU2OTM3ODgyMTFkNGI3YWFhZjdmOGY1ZDkxOWQz
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDSpAAAjANBgkqhkiG9w0BAQsFAAOCAQEAZK77zA+Whwbh
0boI9KqCrx6P5YL8mCPomkLsd0ioOFhLeGoagi7RwZwPXHSDFZPILi+oHm06/2nf
4pqBQZ/i7QIbGq23JGmb/eWcE+aAR9KYAn8PPt/EkrQWmIhVUKfsUjELo+Ck317i
qHRGeCexhqsmTk7k5qGi6shUXGeV2YvzujVRAkcdv3jpyo0oOEEJqfrQnlypcH1u
/1oUfLzYm95q9qcP28TYrqbSoKHlg27LoFDPrzD7+gsKDEh6z+JQ983LpWz6O9Pp
y/yLZZEMnVZqwBL11lJps62FPtVI0+HK5VTLc15Q31ocKWYBJDwxd/f5UcO7Mbtm
fqMB1kANIA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org