![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abfcfc8a-5076-4f46-93a5-2afe16ecfcdf/923dda4c6736a640579053c6dc7ba5bdbfc14b6f.roa
File: 923dda4c6736a640579053c6dc7ba5bdbfc14b6f.roa (raw, json)
Hash identifier: fUJPkc2qIoc7oVwSZuw+2eJsxoIgYJt/CHLXz5fmQhc=
Subject key identifier: 21:3D:44:3E:2B:84:44:ED:7C:EE:8C:AB:01:A3:3F:48:28:9D:4A:69
Certificate issuer: /CN=fc000518b72d6e1a4fec73d96a0f7c0c48dc32b0
Certificate serial: 0C294E
Authority key identifier: 98:8F:E0:2B:93:F3:33:60:61:68:8C:2B:08:1F:20:B9:D0:DF:39:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc000518b72d6e1a4fec73d96a0f7c0c48dc32b0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/abfcfc8a-5076-4f46-93a5-2afe16ecfcdf/923dda4c6736a640579053c6dc7ba5bdbfc14b6f.roa
Signing time: Tue 26 Mar 2024 05:29:17 +0000
ROA not before: Tue 26 Mar 2024 05:29:17 +0000
ROA not after: Thu 26 Mar 2026 05:29:17 +0000
asID: 272831
IP address blocks: 2803:f490::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 797006 (0xc294e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc000518b72d6e1a4fec73d96a0f7c0c48dc32b0
Validity
Not Before: Mar 26 05:29:17 2024 GMT
Not After : Mar 26 05:29:17 2026 GMT
Subject: CN=923dda4c6736a640579053c6dc7ba5bdbfc14b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:8e:44:35:23:5b:39:49:00:50:e2:7b:0b:
49:d5:d4:4b:30:e5:5a:68:ad:9b:cd:03:49:58:ed:
14:82:49:3b:d7:a5:66:38:bb:ba:d0:a0:b7:f9:b3:
62:9b:fa:c4:3b:c4:21:a4:40:13:12:4e:31:5f:0d:
ca:d2:6e:c8:40:21:65:aa:77:17:47:24:db:7d:af:
e2:4c:2e:07:6d:73:80:14:6e:84:5b:bd:97:b8:d0:
9d:45:24:2c:2f:00:17:69:7a:af:7e:6f:20:9e:8c:
79:50:bf:e9:8d:4b:98:0a:90:61:ac:00:16:65:fa:
b8:8d:66:81:30:dc:51:bf:08:b0:84:74:da:65:5a:
d8:93:ba:09:c5:4d:6d:3d:72:38:db:a6:4e:71:1b:
a3:cd:6a:74:49:16:1b:e3:2c:41:33:dc:9d:f5:0f:
93:05:a4:16:c9:8c:28:af:06:97:34:ba:a6:47:42:
09:f3:6b:12:27:da:c1:9a:c7:41:2c:8e:4e:2a:71:
66:60:80:e3:40:81:bf:7e:e7:d6:6c:5c:25:b2:8f:
81:88:51:4b:d5:f1:f1:2d:33:a2:72:50:b0:dc:e0:
b3:dd:2c:da:2a:55:3c:a3:68:15:9b:8a:29:0e:9c:
29:aa:02:12:0b:a8:3d:5e:6b:b2:23:a3:fe:24:e1:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3D:44:3E:2B:84:44:ED:7C:EE:8C:AB:01:A3:3F:48:28:9D:4A:69
X509v3 Authority Key Identifier:
keyid:98:8F:E0:2B:93:F3:33:60:61:68:8C:2B:08:1F:20:B9:D0:DF:39:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc000518b72d6e1a4fec73d96a0f7c0c48dc32b0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abfcfc8a-5076-4f46-93a5-2afe16ecfcdf/923dda4c6736a640579053c6dc7ba5bdbfc14b6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/abfcfc8a-5076-4f46-93a5-2afe16ecfcdf/fc000518b72d6e1a4fec73d96a0f7c0c48dc32b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f490::/32
Signature Algorithm: sha256WithRSAEncryption
60:ee:78:a7:8a:e4:7b:a8:f2:52:55:a1:a5:50:1b:4d:43:d6:
98:fc:a0:75:3e:3c:0f:e0:38:03:7c:8d:03:9c:c2:c2:81:af:
3b:84:e6:7b:ce:50:22:7b:e1:88:50:bf:98:ed:ae:87:dc:d3:
82:0c:2b:a7:cd:36:5b:6c:75:aa:d4:92:ae:c7:24:28:5f:75:
00:6e:44:b2:49:c3:20:6f:77:ed:09:da:97:5a:3c:31:1e:7c:
e5:c1:4b:a0:2c:48:9d:a0:11:2b:1f:e7:40:fd:8a:0d:9b:63:
34:cd:cc:65:37:96:00:3a:b6:ed:99:e7:7c:f0:3d:93:dc:03:
00:74:21:d7:f2:d3:c0:17:9c:5d:1a:4b:c8:91:ea:fc:7c:76:
e5:7a:91:da:9d:59:34:00:dd:84:82:44:95:97:ef:b7:d9:eb:
0b:e8:2d:8f:56:14:a1:20:41:66:fb:d3:19:2a:2a:c0:f5:41:
cd:51:54:87:24:e9:81:b5:f6:a8:e2:c9:46:24:92:67:9e:2a:
31:0d:e4:88:4a:59:53:5f:cd:4d:9b:a3:2d:7a:18:14:c9:77:
42:f3:42:6e:cf:fe:69:ec:c3:51:56:86:1c:61:4f:08:3b:90:
18:de:60:ce:9b:0c:88:b7:3c:19:23:56:5d:a6:66:d3:d2:6a:
ae:d2:9c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org