![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/77bc06646ebc93132c2b20b71c63bd9ede68e16e.roa
File: 77bc06646ebc93132c2b20b71c63bd9ede68e16e.roa (raw, json)
Hash identifier: BxfghXNkW+2Ljv28sx2H0/xXymt5AniauaEtkpJ7EZQ=
Subject key identifier: C5:B1:9A:3D:AF:2E:E5:2F:C2:CC:B4:D2:E3:8B:BC:99:29:46:8A:CF
Certificate issuer: /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial: 1BEBD0
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/77bc06646ebc93132c2b20b71c63bd9ede68e16e.roa
Signing time: Sat 15 Oct 2022 11:54:28 +0000
ROA not before: Fri 14 Oct 2022 11:52:13 +0000
ROA not after: Tue 15 Oct 2024 11:52:13 +0000
asID: 27947
IP address blocks: 200.125.133.0/24 maxlen: 24
200.125.142.0/24 maxlen: 24
200.125.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1829840 (0x1bebd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
Validity
Not Before: Oct 14 11:52:13 2022 GMT
Not After : Oct 15 11:52:13 2024 GMT
Subject: CN=77bc06646ebc93132c2b20b71c63bd9ede68e16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5d:1b:67:f5:22:9e:a3:6a:b5:a9:48:18:ac:
36:cb:a8:9e:2a:20:b5:8f:7d:17:e1:e8:7f:8d:d2:
5e:2a:44:68:78:85:77:ac:2a:c1:b7:95:42:33:15:
92:6c:cf:84:40:2e:dc:61:64:a4:73:d4:ec:08:9d:
8b:39:66:38:9f:32:db:5e:81:cf:d9:a3:e7:fc:71:
59:bf:d7:0d:81:b3:37:b8:7c:4e:54:21:be:b5:67:
d0:3c:b4:87:2e:2f:ae:03:aa:45:b2:8f:d1:97:ba:
1a:70:b6:7d:15:27:85:b8:46:a2:5a:2e:dc:6a:d3:
1d:d2:a3:e7:48:c9:22:9e:a9:2b:b2:d6:16:60:01:
ee:26:7e:d0:a1:19:3d:e7:98:1c:ee:6a:3d:0a:ba:
d9:81:b1:77:5b:c6:c3:dd:82:97:e3:25:13:ca:e8:
32:ed:3c:4c:69:10:50:e9:3a:6c:4d:77:52:1a:dd:
bc:76:4e:f1:cc:fd:c3:5c:0b:35:ee:43:98:2c:d2:
35:b0:a2:93:22:e8:db:23:b0:8b:0a:f8:93:8b:9e:
69:25:0e:aa:82:22:81:53:63:0d:0f:a1:10:50:ff:
e0:c4:0f:80:31:5f:90:de:f7:bb:4f:9e:38:a3:f1:
cc:4a:88:66:02:d6:34:cb:e8:65:e2:03:9e:94:e2:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B1:9A:3D:AF:2E:E5:2F:C2:CC:B4:D2:E3:8B:BC:99:29:46:8A:CF
X509v3 Authority Key Identifier:
keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/77bc06646ebc93132c2b20b71c63bd9ede68e16e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.133.0/24
200.125.142.0/24
200.125.157.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:98:e4:25:98:19:73:06:28:b7:6f:16:64:2f:b6:58:0e:c8:
db:65:72:9e:37:1d:c0:ec:36:af:2f:0d:56:c5:94:7d:3d:30:
b9:d1:bb:49:1a:a4:76:d9:53:47:46:02:92:9d:8a:5b:7f:d3:
08:87:32:3e:5a:29:49:ae:37:9b:40:a1:fb:1f:03:fb:8d:30:
13:16:1f:b0:b8:87:00:f4:53:f8:0a:30:1a:34:81:0d:cd:80:
00:55:e3:77:c5:db:ea:47:f9:b6:ae:e6:d7:17:21:3a:61:71:
df:75:3b:57:5a:32:e1:9b:38:d5:74:ab:f1:5e:d7:7d:df:79:
94:41:a9:82:30:5e:51:3a:24:be:d6:dc:61:5a:f0:93:a5:47:
5c:d1:61:31:3e:c4:8e:da:61:0b:95:cd:55:da:23:5b:72:1a:
78:5c:51:2c:12:5c:81:7e:0c:27:81:c5:1c:61:f6:05:9e:e7:
44:9a:53:00:36:0a:09:90:0e:55:f5:63:3a:ab:df:85:3a:64:
15:05:f2:bf:5a:6b:08:5e:b0:9e:a9:86:cf:54:95:33:b0:d8:
c1:25:e3:fd:42:58:00:46:08:c8:af:a5:c1:09:1a:9c:bc:c6:
69:01:c8:c5:60:e9:3d:f1:bc:9d:6e:37:00:69:c3:e3:c2:0b:
f7:af:03:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org