![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/5335d41954132eea38a9a5e152d7b70046717d43.roa
File: 5335d41954132eea38a9a5e152d7b70046717d43.roa (raw, json)
Hash identifier: rYdGBK6l/jFPS4dlNSzXptfcXMG4tsIE2qwCNDDjflI=
Subject key identifier: 2B:26:E5:7D:D9:4B:EE:86:3E:73:D2:6F:F7:5A:98:94:52:1C:8E:CA
Certificate issuer: /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial: 198F62
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/5335d41954132eea38a9a5e152d7b70046717d43.roa
Signing time: Mon 12 Jun 2023 08:42:25 +0000
ROA not before: Sun 11 Jun 2023 08:42:21 +0000
ROA not after: Thu 12 Jun 2025 08:42:21 +0000
asID: 54235
IP address blocks: 2803:5ce0::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1675106 (0x198f62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Validity
Not Before: Jun 11 08:42:21 2023 GMT
Not After : Jun 12 08:42:21 2025 GMT
Subject: CN=5335d41954132eea38a9a5e152d7b70046717d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:6a:65:6b:70:81:13:2a:0c:06:ad:4e:dd:
77:1e:c6:fd:17:04:cd:8a:c7:fa:26:f8:26:b2:f3:
1d:0a:ac:b3:1c:de:e3:41:67:66:c4:86:80:97:e6:
5c:b4:a4:8c:49:44:37:16:f0:d7:22:0c:99:5e:dd:
8c:27:a5:5d:3e:8d:16:2b:17:94:8c:ee:cb:0e:81:
d0:5e:52:69:14:33:6c:cc:6a:8b:d2:db:bf:be:28:
2c:2a:b0:0a:30:34:47:b4:34:f7:42:a6:98:b3:75:
22:8e:4e:e9:05:d0:d7:be:1c:df:c4:73:8b:44:dd:
4b:9b:75:92:28:d5:1a:bd:20:af:42:fb:9e:f1:36:
b4:c5:d5:9d:8b:a9:7c:8a:59:81:ac:a4:46:6a:f9:
7c:2d:35:9c:f4:2b:f1:ea:9c:88:c9:c8:e3:3f:19:
4a:d8:54:7f:23:a3:79:00:9e:b0:d0:4a:d7:ce:ca:
ff:a6:0d:12:10:f9:b2:92:0a:8b:5e:77:7c:8d:36:
14:7f:88:75:69:f7:6b:4a:f3:c3:23:d1:b2:42:67:
6e:fd:1b:95:3e:08:42:41:43:33:62:ed:68:c8:ee:
c3:f2:6d:2b:3a:00:cc:2b:05:9f:76:2b:d5:56:6b:
47:e8:5e:0e:9d:f6:f3:16:5a:76:aa:6a:52:dd:75:
ed:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:26:E5:7D:D9:4B:EE:86:3E:73:D2:6F:F7:5A:98:94:52:1C:8E:CA
X509v3 Authority Key Identifier:
keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/5335d41954132eea38a9a5e152d7b70046717d43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5ce0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:4a:5b:e0:ca:88:90:3f:4b:7d:75:58:48:01:81:82:92:a0:
dd:37:6d:61:83:b4:1e:1d:3c:f8:b4:fd:31:bc:38:95:57:54:
aa:ac:57:cd:97:3d:09:49:82:d0:58:79:c6:5e:2e:4e:7f:3c:
a2:39:1e:21:86:1c:3e:61:94:4a:1a:dc:b2:92:e0:a3:f9:dd:
e3:6e:2d:68:c0:e3:9a:33:2e:cb:22:ef:ad:c1:eb:84:7f:9f:
7a:a5:06:63:1f:f9:0e:b5:39:0d:f2:fa:7b:6e:3c:07:bd:1c:
61:cd:b0:8a:3f:3c:d8:d2:05:e8:50:22:75:aa:da:32:75:ad:
3a:1b:0c:af:45:f5:a0:65:87:19:0a:b7:77:66:78:57:9b:1e:
42:37:88:0e:e2:46:c8:81:a3:40:7d:a5:91:fb:96:58:f7:d8:
23:54:7a:8e:1a:0b:5c:15:ef:34:2d:f0:a0:c2:24:1e:40:44:
9d:cc:52:34:33:8c:31:f9:f8:57:0c:b9:d2:6a:4a:5b:a9:14:
23:d7:67:7c:d2:4e:25:d6:be:de:9b:f6:f3:d6:db:14:63:5c:
23:77:9b:2a:26:60:c7:0a:d2:98:ce:be:5c:f1:88:a9:c9:44:
0f:89:63:0e:c7:6e:2e:ac:98:4e:d9:ed:58:d4:bd:8e:42:43:
dd:d5:48:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org