![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bfb53b51-2771-4955-bce8-15fa02a33048/a82bcfa9fd08559a2b19bdebef8cb7813f5be826.roa
File: a82bcfa9fd08559a2b19bdebef8cb7813f5be826.roa (raw, json)
Hash identifier: FD17YPY+H4prHVPGY7i458C+fLiT3Z1rrxT/MC/kjaw=
Subject key identifier: D8:E0:A4:AD:25:3B:06:A9:13:B9:B8:AA:D4:74:28:29:CC:87:B1:73
Certificate issuer: /CN=56e566f79450b7c73ae61f31355b7b7075b9d2b3
Certificate serial: 11BB80
Authority key identifier: 5F:C4:CC:1F:DD:C7:70:1B:1B:32:96:60:71:28:86:F8:7B:F9:CB:0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56e566f79450b7c73ae61f31355b7b7075b9d2b3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bfb53b51-2771-4955-bce8-15fa02a33048/a82bcfa9fd08559a2b19bdebef8cb7813f5be826.roa
Signing time: Fri 05 Jan 2024 07:30:01 +0000
ROA not before: Fri 05 Jan 2024 07:30:01 +0000
ROA not after: Sun 04 Jan 2026 07:30:01 +0000
asID: 269802
IP address blocks: 45.186.128.0/22 maxlen: 24
2803:2b60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1162112 (0x11bb80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e566f79450b7c73ae61f31355b7b7075b9d2b3
Validity
Not Before: Jan 5 07:30:01 2024 GMT
Not After : Jan 4 07:30:01 2026 GMT
Subject: CN=a82bcfa9fd08559a2b19bdebef8cb7813f5be826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:43:2d:25:ea:04:00:26:c3:23:46:e9:b0:
2f:1f:a5:10:43:3d:61:30:1d:2a:01:df:2e:84:f2:
c4:b9:3a:b0:2f:5b:a1:65:c7:cc:1a:91:c5:d2:ee:
bc:bd:75:7f:e0:a3:eb:1d:f5:63:b0:d5:f9:68:69:
49:c8:06:0b:c8:1c:2e:54:da:96:76:91:9e:83:48:
74:74:f5:9a:ac:81:04:75:8e:d9:99:03:4a:7d:b0:
f4:44:d7:26:65:cf:fa:f6:c4:e5:cd:11:5c:0b:ed:
b7:31:aa:69:48:85:3a:10:9b:49:25:33:1c:6d:37:
87:ec:40:22:0f:1d:cc:53:d1:64:df:be:44:d7:7a:
8b:40:34:9b:02:46:e8:a8:d2:92:24:28:00:1f:40:
17:a8:da:6b:32:15:11:78:0c:ae:c9:a1:27:ee:72:
68:64:db:85:0f:4a:4b:59:21:43:f9:fc:61:6c:e2:
be:ec:4b:b0:8d:a6:b9:7f:1a:a3:44:0d:20:68:ed:
da:77:e3:84:f7:97:b8:72:6b:16:dd:0f:3c:8b:83:
22:4d:1a:d0:7f:2a:42:f4:c7:d2:81:75:17:eb:fb:
65:2a:14:5a:07:c7:d4:0f:1a:c8:68:dd:a1:34:eb:
06:9f:64:4b:6e:99:22:f7:f6:36:59:11:76:34:c1:
e0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E0:A4:AD:25:3B:06:A9:13:B9:B8:AA:D4:74:28:29:CC:87:B1:73
X509v3 Authority Key Identifier:
keyid:5F:C4:CC:1F:DD:C7:70:1B:1B:32:96:60:71:28:86:F8:7B:F9:CB:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56e566f79450b7c73ae61f31355b7b7075b9d2b3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bfb53b51-2771-4955-bce8-15fa02a33048/a82bcfa9fd08559a2b19bdebef8cb7813f5be826.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bfb53b51-2771-4955-bce8-15fa02a33048/56e566f79450b7c73ae61f31355b7b7075b9d2b3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.128.0/22
IPv6:
2803:2b60::/32
Signature Algorithm: sha256WithRSAEncryption
3e:d0:5d:4a:f3:d9:a8:b2:8b:6e:ca:e0:99:71:d0:0b:e0:fc:
96:9e:43:7e:0b:f2:78:52:4b:75:9f:7b:0a:44:5e:68:f4:46:
e0:c9:65:0e:39:fa:46:3b:37:b7:14:97:7a:8d:31:57:04:17:
9d:28:41:19:74:1a:41:89:bc:88:0f:1e:3a:74:a5:25:ce:c2:
d4:0e:4b:61:4a:f5:a2:90:e2:01:fc:de:ea:54:aa:7a:94:07:
48:7a:16:68:0a:42:9d:7b:1b:40:5a:f0:8f:90:27:22:9e:3c:
3c:79:b9:13:d8:19:c7:35:41:dd:c4:b0:57:ee:e3:54:32:86:
14:38:2c:a2:88:ac:af:15:fb:14:b5:e7:da:58:4f:25:21:ba:
51:2e:cf:d8:48:a2:4b:65:57:41:94:54:f5:41:f4:5f:6c:04:
fc:0c:c9:f7:96:cc:49:c9:85:14:ba:9a:90:af:d2:c9:b2:e7:
d2:26:9e:17:f5:e5:38:9d:96:08:e4:34:23:cc:12:9d:6e:e6:
f4:b4:60:60:fa:80:66:b8:74:7e:f3:eb:93:98:06:16:c3:72:
3d:17:bc:20:ec:d3:d1:51:c6:f3:2e:50:ba:33:5e:ec:5e:b2:
51:ea:b1:e1:5e:f4:72:86:46:b7:ce:5d:f5:39:8c:fc:d1:67:
4f:3b:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-ams.rpki-client.org