![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/24f60247dca003677a9487f698035042a7755c9b.roa
File: 24f60247dca003677a9487f698035042a7755c9b.roa (raw, json)
Hash identifier: avBHita3ouJXFWd7URmE9zYcbTX7RKmsyAnp0s/MBcI=
Subject key identifier: E1:1A:A8:D9:71:39:11:FB:48:5D:C1:21:7C:F0:C5:05:9F:E1:89:8A
Certificate issuer: /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial: 266693
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/24f60247dca003677a9487f698035042a7755c9b.roa
Signing time: Fri 27 Oct 2023 16:37:44 +0000
ROA not before: Fri 27 Oct 2023 16:37:36 +0000
ROA not after: Fri 27 Oct 2028 16:37:36 +0000
asID: 19114
IP address blocks: 200.24.192.0/20 maxlen: 20
200.24.192.0/19 maxlen: 19
200.24.208.0/20 maxlen: 20
200.24.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2516627 (0x266693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Validity
Not Before: Oct 27 16:37:36 2023 GMT
Not After : Oct 27 16:37:36 2028 GMT
Subject: CN=24f60247dca003677a9487f698035042a7755c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:42:40:ae:37:41:e5:dc:94:57:1b:03:f4:
7e:70:a8:b1:d3:a1:1f:49:db:09:87:9b:60:6b:8f:
71:09:67:47:d9:5c:34:e3:05:f8:9b:c9:e8:60:d2:
2e:e7:d4:21:a9:0a:86:9f:a9:0f:ec:1a:88:b7:50:
d6:e7:2e:67:06:52:c5:64:8e:09:d5:4b:43:96:e4:
9f:9c:f8:ab:75:84:8d:f5:b6:4b:b2:62:d9:ec:60:
25:e2:8a:24:09:d0:24:1a:3d:61:62:bc:80:7f:49:
f9:5a:e7:47:c4:ca:ad:e8:d8:5b:56:94:54:a7:6b:
90:78:5f:f8:59:6b:bc:a8:db:2f:18:14:38:31:19:
03:0f:a2:5f:70:6e:11:55:63:34:a8:c7:a8:c2:00:
1a:0e:9f:2e:b0:83:04:f8:16:63:54:36:bd:3f:a2:
3c:55:0d:30:82:fd:87:19:91:11:ca:ed:71:9a:18:
17:50:12:7c:e4:b6:f5:dd:f1:37:0b:9b:79:62:f5:
63:1f:7a:64:dd:9a:eb:f3:a7:1f:41:2e:16:ce:73:
b5:21:49:4c:16:fc:6f:f7:c0:47:27:b7:83:5d:71:
b1:f7:7b:e1:a5:14:07:1f:3d:3d:c6:38:ec:24:07:
76:87:5d:56:e7:ef:39:63:5d:7d:54:d9:5d:a0:e0:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1A:A8:D9:71:39:11:FB:48:5D:C1:21:7C:F0:C5:05:9F:E1:89:8A
X509v3 Authority Key Identifier:
keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/24f60247dca003677a9487f698035042a7755c9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.24.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a3:fc:92:a0:c1:39:04:35:1b:39:aa:66:06:49:59:fc:0f:2a:
c2:04:32:fc:93:06:7f:cd:57:76:6b:84:0f:84:76:43:1b:44:
0f:8a:98:ab:d5:e9:cf:be:74:b5:c4:ec:b7:fd:8f:18:c9:d0:
8a:db:8e:76:2b:63:1c:2c:dc:30:e0:8b:53:a5:2e:8f:b5:ac:
48:4e:55:e3:d9:82:aa:9b:25:a9:5a:16:77:7c:a5:f5:a1:53:
e2:b4:5d:3a:f0:10:c7:47:ae:c8:4f:d0:82:22:d8:0a:30:fc:
d1:79:49:fc:d7:72:84:b8:e5:73:65:6f:04:a8:eb:6b:03:f0:
ea:73:5c:3f:0d:cf:6b:8b:47:fc:f2:de:62:e4:7b:dd:a8:2e:
58:72:76:81:7d:9d:94:d4:37:44:1c:2b:b8:eb:05:31:79:dc:
b8:b8:31:5f:a8:75:3e:e8:f1:76:55:c7:d7:a0:09:87:f0:1d:
ec:a1:85:f6:d7:f5:3b:db:c9:51:f2:6b:9e:ea:a9:4b:01:47:
f1:5d:5c:a8:85:c7:c9:ad:5f:49:10:f2:ee:29:9c:9e:c4:35:
43:10:6e:2a:20:2c:f6:c1:20:3d:3e:0e:9a:8f:d6:b5:b1:26:
0f:b5:a1:39:f7:eb:09:94:cc:eb:8e:91:f7:19:b0:79:5c:dd:
a2:00:0b:ab
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJmaTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQz
YzE1MjQxYzZhZjhmYzlhZTYyNTYzOWJkYmZhMmJlZjY5MTliZTQwHhcNMjMxMDI3
MTYzNzM2WhcNMjgxMDI3MTYzNzM2WjAzMTEwLwYDVQQDEygyNGY2MDI0N2RjYTAw
MzY3N2E5NDg3ZjY5ODAzNTA0MmE3NzU1YzliMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnG1CQK43QeXclFcbA/R+cKix06EfSdsJh5tga49xCWdH2Vw0
4wX4m8noYNIu59QhqQqGn6kP7BqIt1DW5y5nBlLFZI4J1UtDluSfnPirdYSN9bZL
smLZ7GAl4ookCdAkGj1hYryAf0n5WudHxMqt6NhbVpRUp2uQeF/4WWu8qNsvGBQ4
MRkDD6JfcG4RVWM0qMeowgAaDp8usIME+BZjVDa9P6I8VQ0wgv2HGZERyu1xmhgX
UBJ85Lb13fE3C5t5YvVjH3pk3Zrr86cfQS4WznO1IUlMFvxv98BHJ7eDXXGx93vh
pRQHHz09xjjsJAd2h11W5+85Y119VNldoODU6QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOEaqNlxORH7SF3BIXzwxQWf4YmKMB8GA1UdIwQYMBaAFDz9LAROcn3+W7pK
whmA4PR6+SKvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDNjMTUy
NDFjNmFmOGZjOWFlNjI1NjM5YmRiZmEyYmVmNjkxOWJlNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThhNzQ1MWYtMjYxNy00ZDBmLTllNzUtNmQyYWU5
Y2NmNTY2LzI0ZjYwMjQ3ZGNhMDAzNjc3YTk0ODdmNjk4MDM1MDQyYTc3NTVjOWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGE3NDUxZi0yNjE3LTRkMGYtOWU3NS02ZDJh
ZTljY2Y1NjYvZDNjMTUyNDFjNmFmOGZjOWFlNjI1NjM5YmRiZmEyYmVmNjkxOWJl
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBcgYwDANBgkqhkiG9w0BAQsFAAOCAQEAo/ySoME5BDUbOapm
BklZ/A8qwgQy/JMGf81XdmuED4R2QxtED4qYq9Xpz750tcTst/2PGMnQituOditj
HCzcMOCLU6Uuj7WsSE5V49mCqpslqVoWd3yl9aFT4rRdOvAQx0euyE/QgiLYCjD8
0XlJ/NdyhLjlc2VvBKjrawPw6nNcPw3Pa4tH/PLeYuR73aguWHJ2gX2dlNQ3RBwr
uOsFMXncuLgxX6h1PujxdlXH16AJh/Ad7KGF9tf1O9vJUfJrnuqpSwFH8V1cqIXH
ya1fSRDy7imcnsQ1QxBuKiAs9sEgPT4Omo/WtbEmD7WhOffrCZTM646R9xmweVzd
ogALqw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org