![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/c37d019ff1ca9a119b5fe05b59132fbc0a0f43fe.roa
File: c37d019ff1ca9a119b5fe05b59132fbc0a0f43fe.roa (raw, json)
Hash identifier: rbk+b+AXU/Kj3nrg4blSgdwdEszBWdAfZ9mPSYopbO0=
Subject key identifier: 07:C2:9A:AE:A4:D5:1C:21:50:2A:94:86:A3:A4:64:20:71:EF:5A:FF
Certificate issuer: /CN=349196e5906873d34fd0c8ce899971e00093557a
Certificate serial: 12A670
Authority key identifier: 91:D7:0E:F8:7D:9A:07:52:D9:46:60:B0:C1:27:3C:50:48:57:6F:0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/349196e5906873d34fd0c8ce899971e00093557a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/c37d019ff1ca9a119b5fe05b59132fbc0a0f43fe.roa
Signing time: Fri 27 Oct 2023 07:30:00 +0000
ROA not before: Fri 27 Oct 2023 07:30:00 +0000
ROA not after: Sun 26 Oct 2025 07:30:00 +0000
asID: 265702
IP address blocks: 45.5.148.0/22 maxlen: 24
2803:99c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1222256 (0x12a670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349196e5906873d34fd0c8ce899971e00093557a
Validity
Not Before: Oct 27 07:30:00 2023 GMT
Not After : Oct 26 07:30:00 2025 GMT
Subject: CN=c37d019ff1ca9a119b5fe05b59132fbc0a0f43fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:17:15:d5:44:10:f4:e5:ff:17:6b:de:0b:
3b:10:3c:7f:a2:e0:31:9e:8a:1f:45:d6:9f:48:43:
49:b4:e7:80:e5:f6:9b:2b:61:37:1c:55:ec:0b:d0:
ec:4b:41:8b:15:b9:f4:88:00:70:b0:19:19:3b:fb:
07:6b:da:8b:36:94:4a:ed:36:39:dc:b1:05:6d:93:
7c:c5:74:6f:8f:fd:19:a0:8b:19:ff:48:6c:75:6a:
d8:c0:c0:25:6b:b0:47:3d:aa:b1:39:ca:d7:b8:08:
22:97:e6:c8:8e:7d:c4:e6:6a:87:17:9e:63:2e:79:
ad:4b:d4:70:20:7d:0f:82:0d:da:40:87:74:b8:5a:
ef:25:d9:c7:e6:71:c6:1f:86:90:24:de:ea:c5:a9:
9a:d5:3c:13:06:5d:6b:e1:d9:fd:b1:c7:72:e8:94:
f5:2f:85:22:b9:ad:f4:1c:21:2a:45:c2:00:58:d1:
a9:78:8a:5e:37:ff:17:92:0a:43:5f:f1:f1:cf:02:
c1:c2:65:5d:a5:1b:09:09:59:e8:ce:f1:73:c1:c5:
30:dd:45:49:a6:08:45:81:53:da:e1:1c:8c:8d:9f:
3d:3e:6d:7a:96:4f:4e:fb:af:8a:d4:2a:cd:88:c9:
02:2d:42:5c:78:38:1c:f3:55:47:4e:59:d9:0f:86:
73:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C2:9A:AE:A4:D5:1C:21:50:2A:94:86:A3:A4:64:20:71:EF:5A:FF
X509v3 Authority Key Identifier:
keyid:91:D7:0E:F8:7D:9A:07:52:D9:46:60:B0:C1:27:3C:50:48:57:6F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/349196e5906873d34fd0c8ce899971e00093557a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/c37d019ff1ca9a119b5fe05b59132fbc0a0f43fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/349196e5906873d34fd0c8ce899971e00093557a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.148.0/22
IPv6:
2803:99c0::/32
Signature Algorithm: sha256WithRSAEncryption
2f:9c:b0:9a:0c:14:41:63:02:b5:b3:66:0e:92:84:f6:1f:7a:
c8:e8:6b:65:fd:d7:5b:3b:9b:67:ad:4f:9e:8a:47:9a:55:8e:
07:25:29:27:c9:60:46:bb:2e:aa:c0:97:c6:59:9a:9a:95:d8:
1a:f7:8e:c6:5e:5b:38:5c:3b:94:f0:2b:36:6b:a5:a7:f1:f1:
04:6b:f7:40:42:08:ac:aa:19:69:96:be:19:16:db:c1:53:04:
c5:8c:67:f5:33:be:4d:02:00:10:b0:74:e2:a8:0c:41:46:2a:
41:40:e1:bb:d7:41:23:55:37:d9:63:55:fd:88:0b:41:5b:8e:
e3:bd:03:4f:3d:8b:fb:67:cc:39:cf:db:12:9c:77:e0:cd:9e:
74:69:73:a8:21:2b:96:70:bb:ab:92:45:3f:60:f1:28:d2:9e:
59:06:3e:94:1c:20:14:89:4b:f8:07:5e:22:70:2e:d9:e4:3e:
85:b9:69:77:a1:31:ff:45:6b:28:72:12:42:a8:d1:cd:6b:6a:
ac:5d:5b:11:44:12:d9:59:53:59:ac:a3:03:f6:13:b5:10:41:
75:00:2e:d2:12:1f:bb:70:25:48:ec:24:3c:8c:8f:9e:a2:b6:
62:13:a1:62:7d:86:21:08:da:e7:5b:df:12:14:03:00:60:07:
3b:1e:e6:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEqZwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM0
OTE5NmU1OTA2ODczZDM0ZmQwYzhjZTg5OTk3MWUwMDA5MzU1N2EwHhcNMjMxMDI3
MDczMDAwWhcNMjUxMDI2MDczMDAwWjAzMTEwLwYDVQQDEyhjMzdkMDE5ZmYxY2E5
YTExOWI1ZmUwNWI1OTEzMmZiYzBhMGY0M2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr9oXFdVEEPTl/xdr3gs7EDx/ouAxnoofRdafSENJtOeA5fab
K2E3HFXsC9DsS0GLFbn0iABwsBkZO/sHa9qLNpRK7TY53LEFbZN8xXRvj/0ZoIsZ
/0hsdWrYwMAla7BHPaqxOcrXuAgil+bIjn3E5mqHF55jLnmtS9RwIH0Pgg3aQId0
uFrvJdnH5nHGH4aQJN7qxama1TwTBl1r4dn9scdy6JT1L4Uiua30HCEqRcIAWNGp
eIpeN/8XkgpDX/HxzwLBwmVdpRsJCVnozvFzwcUw3UVJpghFgVPa4RyMjZ89Pm16
lk9O+6+K1CrNiMkCLUJceDgc81VHTlnZD4ZzCQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFAfCmq6k1RwhUCqUhqOkZCBx71r/MB8GA1UdIwQYMBaAFJHXDvh9mgdS2UZg
sMEnPFBIV28MMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzQ5MTk2
ZTU5MDY4NzNkMzRmZDBjOGNlODk5OTcxZTAwMDkzNTU3YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjU5ZGQ1OGYtNDg5ZC00MmNmLTgxNTMtNDU4M2Zh
MGFiNjE3L2MzN2QwMTlmZjFjYTlhMTE5YjVmZTA1YjU5MTMyZmJjMGEwZjQzZmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNTlkZDU4Zi00ODlkLTQyY2YtODE1My00NTgz
ZmEwYWI2MTcvMzQ5MTk2ZTU5MDY4NzNkMzRmZDBjOGNlODk5OTcxZTAwMDkzNTU3
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi0FlDANBAIAAjAHAwUAKAOZwDANBgkqhkiG9w0BAQsFAAOC
AQEAL5ywmgwUQWMCtbNmDpKE9h96yOhrZf3XWzubZ61PnopHmlWOByUpJ8lgRrsu
qsCXxlmampXYGveOxl5bOFw7lPArNmulp/HxBGv3QEIIrKoZaZa+GRbbwVMExYxn
9TO+TQIAELB04qgMQUYqQUDhu9dBI1U32WNV/YgLQVuO470DTz2L+2fMOc/bEpx3
4M2edGlzqCErlnC7q5JFP2DxKNKeWQY+lBwgFIlL+AdeInAu2eQ+hblpd6Ex/0Vr
KHISQqjRzWtqrF1bEUQS2VlTWayjA/YTtRBBdQAu0hIfu3AlSOwkPIyPnqK2YhOh
Yn2GIQja51vfEhQDAGAHOx7mOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:24 2024 by rpki-client on console-ams.rpki-client.org