![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/a253325131d5466608f4efd9de4ecc4cf18d4c5e.roa
File: a253325131d5466608f4efd9de4ecc4cf18d4c5e.roa (raw, json)
Hash identifier: hQFe+KHUXjoKoj9ngb76elDVIlBtQbCAf21o/xswyhw=
Subject key identifier: C9:BB:F9:7C:21:2D:89:F2:89:51:D1:A6:AF:58:C8:FE:8A:13:BE:77
Certificate issuer: /CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
Certificate serial: 03E027
Authority key identifier: CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/a253325131d5466608f4efd9de4ecc4cf18d4c5e.roa
Signing time: Sat 11 Mar 2023 20:43:35 +0000
ROA not before: Fri 10 Mar 2023 20:42:39 +0000
ROA not after: Tue 11 Mar 2025 21:42:39 +0000
asID: 272875
IP address blocks: 2803:4a90:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253991 (0x3e027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
Validity
Not Before: Mar 10 20:42:39 2023 GMT
Not After : Mar 11 21:42:39 2025 GMT
Subject: CN=a253325131d5466608f4efd9de4ecc4cf18d4c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:62:0e:b1:f1:85:c7:23:a7:a4:90:b9:be:1a:
3b:17:fb:e7:5e:08:46:9e:7b:c8:e2:32:c6:1d:53:
5e:72:08:cd:c0:1e:23:b9:17:df:2c:b3:59:78:e8:
d5:20:17:f0:4d:ca:84:f8:9d:3a:5e:26:41:68:92:
e9:91:36:46:92:03:0d:35:16:fc:a4:83:f7:8e:51:
4f:2a:55:47:35:35:24:7c:79:d7:e6:b3:9c:33:ae:
1d:56:57:8b:b4:56:3e:5b:a1:8b:8f:5e:44:8b:ec:
37:3d:72:49:71:18:3d:19:bd:b0:e5:a1:22:4a:2a:
0f:41:d5:b6:9d:5b:4b:ef:89:8e:fb:67:11:53:30:
25:05:27:71:5f:2c:4c:37:aa:0e:2c:1e:4d:18:7d:
60:6b:b8:8d:05:14:44:ff:0b:0e:56:c8:41:ad:67:
cc:09:54:ac:b4:f0:40:80:dd:47:0f:fd:b5:bc:20:
cb:3c:57:2f:62:22:38:5c:04:0c:70:e3:83:05:19:
6b:ff:88:31:aa:5d:e4:42:b9:b8:95:d5:09:6c:69:
52:51:77:5a:6d:26:33:41:c6:78:27:30:7e:c2:ef:
2c:05:5f:e8:a8:99:b7:65:54:98:1e:72:13:4b:3e:
83:4d:2c:e4:52:69:3b:2b:41:c6:de:3d:59:74:f2:
25:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BB:F9:7C:21:2D:89:F2:89:51:D1:A6:AF:58:C8:FE:8A:13:BE:77
X509v3 Authority Key Identifier:
keyid:CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/a253325131d5466608f4efd9de4ecc4cf18d4c5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/43d1351614e693788211d4b7aaaf7f8f5d919d3d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4a90:1::/48
Signature Algorithm: sha256WithRSAEncryption
8d:4b:14:d6:37:e9:49:01:3f:a4:0e:6e:cd:46:20:c4:84:cd:
c0:f7:9f:f5:de:6a:b3:3a:74:ae:54:b5:b9:d6:85:11:89:c8:
83:42:07:12:8f:4e:79:b8:95:1f:76:99:6d:74:49:a3:f7:27:
7d:21:1b:03:bc:e5:d9:e6:e5:a1:81:da:f3:b8:43:c6:3a:c2:
e8:37:67:62:d7:87:c7:90:7f:bf:26:da:d4:7d:d7:cf:4f:7e:
eb:8c:fd:ce:20:ae:11:aa:86:ef:4b:e0:2c:52:6d:5f:3b:9e:
32:eb:ee:b8:7c:b5:4b:75:42:58:26:63:be:10:50:87:22:f8:
00:eb:1c:6e:16:89:76:27:b4:07:94:84:13:ad:bb:4c:f3:0f:
37:02:3d:20:8f:05:9a:ae:a3:dc:ad:cd:4c:1b:58:ed:63:d3:
e8:e9:4a:c8:0b:0c:95:2e:77:6c:f2:41:7c:c8:bb:22:7f:4b:
19:df:bc:8b:64:90:36:9c:47:36:28:28:e2:8c:27:53:59:0b:
3f:5c:3c:6c:52:f1:6c:d6:f9:f1:ac:a9:52:6e:30:f4:8b:e5:
b0:19:df:26:8f:1a:42:dd:10:ad:97:07:a6:75:cd:a3:22:dd:
a5:49:49:dc:6c:b8:f6:0c:dd:c9:1f:cf:f7:5b:00:ad:6f:13:
bb:59:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org