![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/938d955d3546a4fbda350c3f6b2ad32ff9619199.roa
File: 938d955d3546a4fbda350c3f6b2ad32ff9619199.roa (raw, json)
Hash identifier: XwDIqzYk3dIfcURxL/WhYsqSyAGTVbwkf0PC0uFhPpo=
Subject key identifier: 1F:CB:61:D7:F1:DB:05:F7:58:3E:DD:4B:32:CC:88:AB:6A:C3:40:E2
Certificate issuer: /CN=ae85768adef6d4dde1ca45bae430571e45d9370a
Certificate serial: 1F4128
Authority key identifier: 19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae85768adef6d4dde1ca45bae430571e45d9370a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/938d955d3546a4fbda350c3f6b2ad32ff9619199.roa
Signing time: Thu 11 May 2023 16:58:40 +0000
ROA not before: Wed 10 May 2023 16:58:40 +0000
ROA not after: Sun 11 May 2025 16:58:40 +0000
asID: 262589
IP address blocks: 186.1.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048296 (0x1f4128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae85768adef6d4dde1ca45bae430571e45d9370a
Validity
Not Before: May 10 16:58:40 2023 GMT
Not After : May 11 16:58:40 2025 GMT
Subject: CN=938d955d3546a4fbda350c3f6b2ad32ff9619199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:e7:55:b4:37:5a:2e:82:a6:88:8c:df:34:
ae:3d:3d:14:42:b6:06:8b:e6:df:a2:bd:e7:23:e3:
24:07:27:90:0f:68:96:80:01:84:3d:48:6d:19:31:
50:18:af:77:da:47:d7:41:63:0f:e7:04:5b:c5:d1:
23:5a:14:db:9f:c2:1e:35:be:67:17:8f:66:65:ef:
46:4b:60:67:76:12:c1:7c:8d:73:fd:70:d9:57:46:
99:0e:8a:8b:77:06:ba:c1:e1:6d:40:3b:62:65:0f:
ef:0c:64:a4:9c:53:50:c2:b3:0b:16:97:f1:18:6c:
9a:78:0d:72:b5:7d:49:4d:75:f8:c5:bc:9b:e5:df:
44:9b:9b:c8:11:ba:1b:37:ad:26:b6:57:f3:a5:5e:
f2:1b:11:c5:9f:7f:12:a9:7c:ff:f9:5f:71:1a:74:
09:1f:fa:0d:87:7e:b4:1b:83:77:87:25:b3:11:5e:
33:68:d6:4b:57:22:0a:f5:ba:b0:ae:61:42:cd:57:
bc:fd:69:6c:e4:71:38:53:5c:ad:f5:13:c9:78:c6:
22:92:a5:8a:23:dd:24:78:c3:01:7f:62:05:b4:c4:
51:6d:c0:9c:4f:fd:17:ce:b0:00:22:b8:09:4c:38:
3f:30:c0:cd:c4:46:64:0b:8e:71:43:53:f1:f7:00:
1b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CB:61:D7:F1:DB:05:F7:58:3E:DD:4B:32:CC:88:AB:6A:C3:40:E2
X509v3 Authority Key Identifier:
keyid:19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae85768adef6d4dde1ca45bae430571e45d9370a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/938d955d3546a4fbda350c3f6b2ad32ff9619199.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/ae85768adef6d4dde1ca45bae430571e45d9370a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.1.164.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:90:ca:53:8d:10:96:d8:32:c1:d7:46:a6:09:1b:86:10:9b:
ca:99:0b:e0:52:04:27:c5:57:c0:38:de:ee:47:58:78:22:cd:
a6:3a:25:12:60:f3:64:3f:f4:21:16:e6:74:8a:0b:09:36:ad:
da:7e:d0:fe:9c:ed:7c:15:f9:af:ec:be:a4:30:ae:18:ac:e8:
54:59:7f:f9:d6:cb:04:3b:a6:ee:a9:e1:e2:83:d8:a7:9a:ad:
8d:7b:af:16:b4:72:79:dc:aa:2e:99:68:d5:15:9a:ee:f8:cc:
80:77:9c:1a:36:2b:d5:ac:5b:79:f3:eb:7c:c3:d8:56:79:3a:
00:6b:b7:06:bc:f4:ea:16:68:cd:8f:3c:f4:6f:38:4d:7f:bf:
87:cb:26:c1:12:b0:79:57:8c:4e:f5:17:36:b4:32:44:2d:e8:
b2:1e:b3:ad:d9:ed:ef:48:10:fe:65:65:78:6a:f5:2b:f0:85:
0f:dc:56:2a:01:55:79:1a:7d:39:04:ff:67:44:d2:03:cd:67:
10:37:f8:09:88:8a:fd:a7:b6:df:5f:1c:5c:76:a6:6c:60:5e:
4c:d8:90:5d:e6:1e:e8:a5:08:36:7b:85:99:71:e3:2f:95:52:
4a:fc:f1:9d:55:fe:06:89:cb:a1:a6:de:41:59:2d:a0:3b:4d:
ef:ff:a4:3e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDH0EoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFl
ODU3NjhhZGVmNmQ0ZGRlMWNhNDViYWU0MzA1NzFlNDVkOTM3MGEwHhcNMjMwNTEw
MTY1ODQwWhcNMjUwNTExMTY1ODQwWjAzMTEwLwYDVQQDEyg5MzhkOTU1ZDM1NDZh
NGZiZGEzNTBjM2Y2YjJhZDMyZmY5NjE5MTk5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyu3nVbQ3Wi6CpoiM3zSuPT0UQrYGi+bfor3nI+MkByeQD2iW
gAGEPUhtGTFQGK932kfXQWMP5wRbxdEjWhTbn8IeNb5nF49mZe9GS2BndhLBfI1z
/XDZV0aZDoqLdwa6weFtQDtiZQ/vDGSknFNQwrMLFpfxGGyaeA1ytX1JTXX4xbyb
5d9Em5vIEbobN60mtlfzpV7yGxHFn38SqXz/+V9xGnQJH/oNh360G4N3hyWzEV4z
aNZLVyIK9bqwrmFCzVe8/Wls5HE4U1yt9RPJeMYikqWKI90keMMBf2IFtMRRbcCc
T/0XzrAAIrgJTDg/MMDNxEZkC45xQ1Px9wAbQwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFB/LYdfx2wX3WD7dSzLMiKtqw0DiMB8GA1UdIwQYMBaAFBlsB4f4g99vpI8p
SmHQNNI974w2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWU4NTc2
OGFkZWY2ZDRkZGUxY2E0NWJhZTQzMDU3MWU0NWQ5MzcwYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjk3NjM4MGQtMmU5MC00ZTI4LWIwYTYtNGIzZGZl
MWQ4YWQ1LzkzOGQ5NTVkMzU0NmE0ZmJkYTM1MGMzZjZiMmFkMzJmZjk2MTkxOTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iOTc2MzgwZC0yZTkwLTRlMjgtYjBhNi00YjNk
ZmUxZDhhZDUvYWU4NTc2OGFkZWY2ZDRkZGUxY2E0NWJhZTQzMDU3MWU0NWQ5Mzcw
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALoBpDANBgkqhkiG9w0BAQsFAAOCAQEADZDKU40QltgywddG
pgkbhhCbypkL4FIEJ8VXwDje7kdYeCLNpjolEmDzZD/0IRbmdIoLCTat2n7Q/pzt
fBX5r+y+pDCuGKzoVFl/+dbLBDum7qnh4oPYp5qtjXuvFrRyedyqLplo1RWa7vjM
gHecGjYr1axbefPrfMPYVnk6AGu3Brz06hZozY889G84TX+/h8smwRKweVeMTvUX
NrQyRC3osh6zrdnt70gQ/mVleGr1K/CFD9xWKgFVeRp9OQT/Z0TSA81nEDf4CYiK
/ae2318cXHambGBeTNiQXeYe6KUINnuFmXHjL5VSSvzxnVX+BonLoabeQVktoDtN
7/+kPg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org