![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4449998a-d941-4b58-aff1-aa99601fccf4/f9d2e9f15bcddf358a7cf14be496c2d0521bf45e.roa
File: f9d2e9f15bcddf358a7cf14be496c2d0521bf45e.roa (raw, json)
Hash identifier: 46Jfzpa1kk1rx/E+rRbfA+IDt5siSOU6uk3i8Qu1Y5Y=
Subject key identifier: EF:99:64:A3:17:54:52:BB:04:06:76:CB:00:71:2B:7E:B4:96:7E:BE
Certificate issuer: /CN=f9a57daf28041c431a48ab8a4bad7fdd1d9beea4
Certificate serial: 0D50F4
Authority key identifier: FE:39:F4:B9:57:65:DA:7D:EE:AB:50:91:01:61:72:86:14:93:10:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f9a57daf28041c431a48ab8a4bad7fdd1d9beea4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4449998a-d941-4b58-aff1-aa99601fccf4/f9d2e9f15bcddf358a7cf14be496c2d0521bf45e.roa
Signing time: Wed 24 Mar 2021 14:29:02 +0000
ROA not before: Wed 24 Mar 2021 14:29:02 +0000
ROA not after: Tue 24 Mar 2026 14:29:02 +0000
asID: 264834
IP address blocks: 170.81.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 872692 (0xd50f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a57daf28041c431a48ab8a4bad7fdd1d9beea4
Validity
Not Before: Mar 24 14:29:02 2021 GMT
Not After : Mar 24 14:29:02 2026 GMT
Subject: CN=f9d2e9f15bcddf358a7cf14be496c2d0521bf45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:67:1f:15:c7:06:d1:ed:7c:b2:e9:01:3c:46:
78:71:04:60:5f:4b:03:b6:d7:1b:28:73:b6:0e:2d:
b9:0e:05:f5:2f:77:ea:7c:e5:9a:3c:03:7d:70:73:
2b:92:02:8d:8c:22:8f:df:10:9c:67:1f:cb:44:06:
90:f6:6d:49:a2:b0:ea:33:76:1c:08:b3:bb:a1:67:
ef:99:cb:55:2b:fc:48:4c:e7:e0:44:1a:d5:dd:fe:
99:61:c3:96:a6:6f:22:3e:fc:12:9b:3c:fe:99:56:
08:53:3c:b5:8e:c9:35:86:ce:72:5b:a0:6a:ea:49:
9d:27:c7:e8:9c:bc:68:33:16:eb:8c:d9:24:16:30:
99:e5:04:3b:7a:ab:3e:a3:11:ac:3b:53:5c:02:e6:
fb:cf:c3:43:6e:0b:84:a0:ef:8c:6b:52:ac:07:81:
11:3e:5d:6e:84:13:ab:1c:15:0a:d9:50:f3:8a:42:
09:e5:ca:8e:af:54:0b:ad:1f:16:0f:a8:3a:ac:59:
9b:44:ea:b0:a1:b7:ef:22:b3:0b:8a:cb:45:2d:53:
00:a5:ac:86:2b:03:cc:7f:43:b2:d4:21:d2:63:e8:
6e:96:ee:03:af:66:78:05:1c:01:7f:bf:8e:5a:de:
d4:fe:9e:c6:c9:57:e0:7b:58:fe:09:d6:ba:2e:e1:
aa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:99:64:A3:17:54:52:BB:04:06:76:CB:00:71:2B:7E:B4:96:7E:BE
X509v3 Authority Key Identifier:
keyid:FE:39:F4:B9:57:65:DA:7D:EE:AB:50:91:01:61:72:86:14:93:10:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f9a57daf28041c431a48ab8a4bad7fdd1d9beea4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4449998a-d941-4b58-aff1-aa99601fccf4/f9d2e9f15bcddf358a7cf14be496c2d0521bf45e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4449998a-d941-4b58-aff1-aa99601fccf4/f9a57daf28041c431a48ab8a4bad7fdd1d9beea4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.139.0/24
Signature Algorithm: sha256WithRSAEncryption
72:30:54:59:60:2d:c5:0d:91:fd:40:7b:8e:60:bb:9c:5e:40:
df:74:9d:75:ed:c0:cb:12:32:25:88:6a:26:20:97:64:e7:ab:
89:c4:a2:d8:2b:11:2f:af:82:5e:ff:90:f4:36:6a:c6:69:91:
67:e0:2a:75:64:1c:f6:14:e0:fe:37:af:ec:9f:86:00:40:5e:
38:32:ad:10:3a:3b:6a:5f:0c:4b:81:b8:2e:76:c4:5e:41:b4:
21:f1:cc:4f:86:bd:c9:b7:78:b5:e1:f7:1d:96:2b:95:93:a9:
33:0f:66:2c:36:37:ea:52:1f:60:ba:f1:3f:68:59:78:d0:fc:
79:bd:fc:7b:08:07:51:16:fd:50:da:59:02:f5:e3:2a:8d:75:
ff:08:c5:4b:98:91:2a:1e:90:c4:f7:de:76:6d:00:f6:fd:ae:
e4:2c:0e:54:1d:52:48:86:97:ef:7f:2c:d2:a5:82:cd:51:77:
55:77:e7:e7:c2:45:9f:b6:70:16:0f:ba:06:ea:10:a5:b9:10:
8d:ea:ec:86:e3:d8:a0:4d:a2:60:a6:ba:7e:05:67:e8:50:e5:
2c:16:39:7e:a0:04:a6:37:b1:c7:f3:70:67:7e:bb:56:29:d9:
99:fe:98:e9:f9:e4:fd:08:5a:db:36:66:43:0e:15:81:34:9b:
d2:db:50:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org