![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/d8c9c9833540400864684abfc430b65a1be4d8a0.roa
File: d8c9c9833540400864684abfc430b65a1be4d8a0.roa (raw, json)
Hash identifier: JNYYih4B6b0Os6KpwpkcgNpj/edG0IeovSUvoe2oTNk=
Subject key identifier: 7B:54:F4:17:53:29:B7:84:F8:59:BA:90:E7:1D:D9:33:37:17:FA:2C
Certificate issuer: /CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
Certificate serial: 27563C
Authority key identifier: A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/d8c9c9833540400864684abfc430b65a1be4d8a0.roa
Signing time: Mon 12 Feb 2024 19:41:44 +0000
ROA not before: Mon 12 Feb 2024 19:41:44 +0000
ROA not after: Thu 12 Feb 2026 19:41:44 +0000
asID: 27651
IP address blocks: 186.10.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2577980 (0x27563c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
Validity
Not Before: Feb 12 19:41:44 2024 GMT
Not After : Feb 12 19:41:44 2026 GMT
Subject: CN=d8c9c9833540400864684abfc430b65a1be4d8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ba:bc:a4:6b:1d:8f:36:16:ac:3d:27:bb:e3:
82:e2:40:54:60:46:ba:a1:f8:6d:f1:09:aa:11:b9:
5c:d3:c7:65:e1:b4:b6:c4:3e:84:4f:eb:22:7b:39:
ed:47:55:31:e5:c0:d5:70:1d:98:e5:91:fa:11:18:
a7:45:b4:a8:d1:ee:8e:c3:79:f4:9d:6b:64:8f:4f:
b6:77:14:e9:cb:e0:d6:51:ae:f6:8d:7e:f4:7d:5f:
d7:72:8e:3f:d6:49:6a:34:c1:bd:65:52:01:30:68:
07:e6:7a:23:b3:94:50:ff:0f:03:fe:b8:47:ed:1c:
3c:0f:31:0a:91:e6:03:7b:7b:16:30:79:0e:a5:0c:
ca:b0:9f:cf:8c:a1:ce:77:aa:29:6f:f5:a9:ef:cd:
db:86:4d:44:c4:3e:7a:51:f5:7b:f3:95:d6:c7:c1:
2c:b7:3f:9a:70:94:17:f6:01:e8:a7:5d:e0:65:d7:
a6:80:3d:8b:cd:c1:cf:77:bc:b8:9a:ab:5b:a5:f0:
1f:e7:51:6d:2a:43:2e:ff:3f:0f:7e:59:84:03:f1:
c7:63:72:60:22:4b:f5:b0:ca:91:02:1b:a4:08:8a:
6a:dc:20:d1:d8:33:8b:3e:9e:d7:5d:1a:d0:03:ce:
84:00:ca:33:df:ee:bd:23:e5:5c:f5:4c:8f:5d:bc:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:54:F4:17:53:29:B7:84:F8:59:BA:90:E7:1D:D9:33:37:17:FA:2C
X509v3 Authority Key Identifier:
keyid:A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/d8c9c9833540400864684abfc430b65a1be4d8a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:11:06:23:6c:b7:59:a3:f0:08:f9:b3:e4:41:41:48:cf:b8:
4e:b2:67:74:92:f2:df:8e:2e:b9:bd:fb:24:dd:92:1b:40:0f:
cd:9d:2a:3d:b3:d2:2e:7f:d3:cc:95:de:ba:d0:c5:21:c9:16:
bb:f7:63:e7:22:98:67:2b:30:8a:3d:8c:23:2e:41:be:e4:1b:
b7:24:e9:d5:64:46:dc:76:23:4b:95:8b:d4:e9:54:43:71:fc:
78:b4:d4:39:ba:1c:6e:4c:bf:af:ef:18:78:e7:87:a1:70:07:
96:4d:a7:0b:45:da:17:bc:70:32:86:e1:ae:3d:f1:dd:bd:50:
81:04:7b:9f:72:24:85:57:c8:db:ea:dd:d9:57:2f:24:d4:36:
b8:01:8c:cf:5b:f8:fa:bb:e2:af:c3:64:72:d7:bb:30:0d:ce:
46:81:c6:ee:b4:a7:34:4a:ec:4a:7e:84:eb:55:85:1b:af:64:
fe:04:f9:b2:e7:65:92:19:db:b8:07:e4:db:8f:94:c1:75:a2:
ca:8a:1c:af:34:20:03:90:16:74:82:23:c4:94:af:0e:13:22:
a6:13:b8:a9:08:a1:4b:8b:68:06:ba:8b:29:50:c7:ce:c3:ef:
ba:59:01:63:7d:2c:db:27:2b:cb:11:a3:f5:44:19:1e:f0:d2:
db:58:b0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org