![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/fe6f4cdac64805324a8927c1ff815d7ad26cbcb3.roa
File: fe6f4cdac64805324a8927c1ff815d7ad26cbcb3.roa (raw, json)
Hash identifier: 0wGwvutCsS0f9rjFTkuXpSHAofEtbL3t1YjZQ18+8JA=
Subject key identifier: CC:7C:31:7C:8C:E4:3D:39:0B:10:DB:1B:8C:92:14:94:41:34:B7:06
Certificate issuer: /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial: 0E6632
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/fe6f4cdac64805324a8927c1ff815d7ad26cbcb3.roa
Signing time: Wed 24 Mar 2021 14:38:32 +0000
ROA not before: Wed 24 Mar 2021 14:38:31 +0000
ROA not after: Tue 24 Mar 2026 14:38:31 +0000
asID: 26613
IP address blocks: 2800:370:4::/48 maxlen: 64
2800:370:18::/48 maxlen: 64
2800:370:3e::/48 maxlen: 64
2800:370:4007::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943666 (0xe6632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Validity
Not Before: Mar 24 14:38:31 2021 GMT
Not After : Mar 24 14:38:31 2026 GMT
Subject: CN=fe6f4cdac64805324a8927c1ff815d7ad26cbcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:68:a9:8f:2d:a7:dc:fd:09:b1:cd:76:5d:6c:
0a:e8:76:5f:8d:ee:07:76:81:8f:25:25:b5:61:20:
07:b0:f7:ff:39:c6:dd:e4:b9:60:cc:61:48:3f:33:
f8:a4:48:8b:32:aa:57:73:3e:2e:93:e0:8a:52:2d:
41:ed:5d:56:27:1c:fb:2a:d4:78:34:07:fa:89:f8:
23:48:c6:e0:59:4c:b6:19:c7:67:16:22:07:80:30:
53:bf:52:6f:35:e2:99:56:1f:8a:43:d6:e2:62:4b:
ec:59:a8:22:c4:63:4e:40:71:58:9a:96:a6:89:7e:
dc:44:67:82:8e:f4:2c:76:ed:ec:05:5c:e8:35:2e:
40:c6:23:6c:f2:5d:ab:ee:3a:9a:6b:5c:46:d1:aa:
1b:cb:76:51:f0:37:01:2a:e1:fb:38:a6:2f:e2:73:
30:51:af:44:e2:16:cc:be:0e:c2:fc:cd:cf:32:34:
80:56:c8:6e:b5:80:05:c0:d6:b7:a4:6f:75:7e:95:
08:6c:82:40:ec:60:fd:41:50:a9:e0:9d:07:a7:6e:
a1:14:99:b9:94:bb:6e:8b:93:a6:8d:bf:ac:ab:1b:
51:a6:dc:52:3e:7e:e0:ae:b6:30:8c:7e:cf:e0:01:
7d:ff:03:01:39:04:e6:f4:30:c4:87:53:33:86:0b:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7C:31:7C:8C:E4:3D:39:0B:10:DB:1B:8C:92:14:94:41:34:B7:06
X509v3 Authority Key Identifier:
keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/fe6f4cdac64805324a8927c1ff815d7ad26cbcb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:370:4::/48
2800:370:18::/48
2800:370:3e::/48
2800:370:4007::/48
Signature Algorithm: sha256WithRSAEncryption
17:15:a6:da:32:79:fa:15:28:90:2f:3d:af:10:6f:6e:58:2c:
13:fd:7e:2d:f1:aa:53:62:10:f9:94:a8:c8:ef:f1:55:31:3e:
62:74:23:33:19:01:c4:06:cc:e9:c3:5b:39:fe:a1:a2:b9:c7:
2e:5e:92:36:95:97:9d:43:52:8d:77:16:9c:8a:05:56:90:84:
c1:91:77:cf:22:25:81:d7:ca:b9:c1:2e:3f:94:0f:13:97:8a:
87:aa:a8:64:e5:d5:50:76:f9:48:9e:bb:29:1c:b7:df:f0:1a:
16:0b:f1:3f:ad:e1:cb:bb:c5:f5:51:4a:7e:e3:53:f2:5d:d6:
e2:e3:44:1f:b5:d9:88:93:d8:86:be:76:fc:6d:ee:7c:9c:b1:
40:33:d9:42:7b:28:71:1b:58:28:42:54:02:88:3e:d7:bb:a3:
fe:bb:65:f6:03:91:22:59:30:9f:14:d5:b5:9e:af:3e:ae:eb:
f6:ea:e3:b7:7c:9f:af:d5:e1:09:c0:25:81:1a:ec:77:d8:97:
4f:20:f0:13:a3:ed:70:26:7b:6c:49:34:5d:09:af:e2:f3:2b:
0f:f1:b5:69:d7:5d:c4:d2:ae:4d:20:d4:60:79:9b:61:51:b5:
ba:3f:ac:fb:8e:61:20:f7:e2:1c:6a:f6:e7:3d:94:9b:c3:55:
30:b0:d8:58
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIDDmYyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
NTllMWUzMzE3NzA0NTc1ZjJjMGI3NTBlZTczYjE2NmEzOWNkMzcwHhcNMjEwMzI0
MTQzODMxWhcNMjYwMzI0MTQzODMxWjAzMTEwLwYDVQQDEyhmZTZmNGNkYWM2NDgw
NTMyNGE4OTI3YzFmZjgxNWQ3YWQyNmNiY2IzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjGipjy2n3P0Jsc12XWwK6HZfje4HdoGPJSW1YSAHsPf/Ocbd
5LlgzGFIPzP4pEiLMqpXcz4uk+CKUi1B7V1WJxz7KtR4NAf6ifgjSMbgWUy2Gcdn
FiIHgDBTv1JvNeKZVh+KQ9biYkvsWagixGNOQHFYmpamiX7cRGeCjvQsdu3sBVzo
NS5AxiNs8l2r7jqaa1xG0aoby3ZR8DcBKuH7OKYv4nMwUa9E4hbMvg7C/M3PMjSA
VshutYAFwNa3pG91fpUIbIJA7GD9QVCp4J0Hp26hFJm5lLtui5Omjb+sqxtRptxS
Pn7grrYwjH7P4AF9/wMBOQTm9DDEh1MzhgvvvQIDAQABo4ICeTCCAnUwHQYDVR0O
BBYEFMx8MXyM5D05CxDbG4ySFJRBNLcGMB8GA1UdIwQYMBaAFIDwxydPgiTR6Xbz
gObvMs8Q+J3TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTA1OWUx
ZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2QzNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWNhNzEzZjUtNmNhYy00ODZlLWEwMTYtYTNlOGIz
MWJmMDI5L2ZlNmY0Y2RhYzY0ODA1MzI0YTg5MjdjMWZmODE1ZDdhZDI2Y2JjYjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hY2E3MTNmNS02Y2FjLTQ4NmUtYTAxNi1hM2U4
YjMxYmYwMjkvMTA1OWUxZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2Qz
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQu
MCwwKgQCAAIwJAMHACgAA3AABAMHACgAA3AAGAMHACgAA3AAPgMHACgAA3BABzAN
BgkqhkiG9w0BAQsFAAOCAQEAFxWm2jJ5+hUokC89rxBvblgsE/1+LfGqU2IQ+ZSo
yO/xVTE+YnQjMxkBxAbM6cNbOf6hornHLl6SNpWXnUNSjXcWnIoFVpCEwZF3zyIl
gdfKucEuP5QPE5eKh6qoZOXVUHb5SJ67KRy33/AaFgvxP63hy7vF9VFKfuNT8l3W
4uNEH7XZiJPYhr52/G3ufJyxQDPZQnsocRtYKEJUAog+17uj/rtl9gORIlkwnxTV
tZ6vPq7r9urjt3yfr9XhCcAlgRrsd9iXTyDwE6PtcCZ7bEk0XQmv4vMrD/G1addd
xNKuTSDUYHmbYVG1uj+s+45hIPfiHGr25z2Um8NVMLDYWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org