![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c36b17a2-aea8-4bd4-ba40-922cc90fce5f/cfb8c602137a604dc3e33e7eb529a3300008dd76.roa
File: cfb8c602137a604dc3e33e7eb529a3300008dd76.roa (raw, json)
Hash identifier: icC+/yL4XZbRb3P6VMXynYDF0vuCPlcaZNWvIcfkCrc=
Subject key identifier: 31:7B:17:49:44:36:89:DE:93:B4:71:04:38:49:3C:C5:1C:42:51:CB
Certificate issuer: /CN=b18c2c69d62770b93e193b9c6af3d06a05351014
Certificate serial: 0D54CE
Authority key identifier: 76:BD:93:61:B1:09:03:4D:D3:81:93:0A:73:0F:E6:62:70:12:7E:43
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b18c2c69d62770b93e193b9c6af3d06a05351014.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c36b17a2-aea8-4bd4-ba40-922cc90fce5f/cfb8c602137a604dc3e33e7eb529a3300008dd76.roa
Signing time: Wed 24 Mar 2021 14:37:34 +0000
ROA not before: Wed 24 Mar 2021 14:37:34 +0000
ROA not after: Tue 24 Mar 2026 14:37:34 +0000
asID: 262252
IP address blocks: 190.120.240.0/22 maxlen: 24
2803:d900::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873678 (0xd54ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18c2c69d62770b93e193b9c6af3d06a05351014
Validity
Not Before: Mar 24 14:37:34 2021 GMT
Not After : Mar 24 14:37:34 2026 GMT
Subject: CN=cfb8c602137a604dc3e33e7eb529a3300008dd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:17:05:bc:f1:17:0e:70:d8:1a:b7:f7:9d:bc:
ef:e8:e4:fe:f1:54:9a:f5:ba:0f:a3:2f:5f:1a:ef:
12:1e:d1:f3:f1:77:bf:b2:3e:21:72:ac:9d:41:09:
70:13:f8:6c:d2:30:fe:1a:8a:ef:36:98:95:77:ee:
85:21:93:68:91:02:ba:98:25:ff:c2:d9:96:9d:95:
f1:76:ed:7f:60:ed:b4:7d:9c:bd:29:b1:44:08:73:
f2:a7:85:9a:8f:94:45:2c:bc:73:75:8e:38:aa:5c:
3b:ef:64:5b:7e:95:23:3f:2c:c7:e6:97:b6:96:a4:
17:9b:da:94:c7:af:70:cc:b8:e5:56:f8:a3:49:00:
93:eb:55:b0:eb:36:5a:64:04:dc:6e:49:b0:30:42:
3c:3f:7a:4a:92:c4:ae:56:15:86:c4:52:28:e5:64:
ec:a1:34:71:2c:8f:2b:f9:d3:72:99:94:ed:48:95:
37:b7:da:96:a1:bc:aa:fc:fc:31:93:01:a6:6b:cb:
d1:59:f7:cc:f7:19:2c:11:c6:25:5e:b3:29:e7:91:
4d:63:0f:ef:bc:80:ae:eb:74:41:a8:87:0e:94:98:
ce:1d:b7:b2:67:9f:53:22:d8:f8:d3:3a:27:d6:5d:
94:fb:e5:03:95:4e:2b:c4:59:5c:b9:4b:55:1d:58:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7B:17:49:44:36:89:DE:93:B4:71:04:38:49:3C:C5:1C:42:51:CB
X509v3 Authority Key Identifier:
keyid:76:BD:93:61:B1:09:03:4D:D3:81:93:0A:73:0F:E6:62:70:12:7E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b18c2c69d62770b93e193b9c6af3d06a05351014.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c36b17a2-aea8-4bd4-ba40-922cc90fce5f/cfb8c602137a604dc3e33e7eb529a3300008dd76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c36b17a2-aea8-4bd4-ba40-922cc90fce5f/b18c2c69d62770b93e193b9c6af3d06a05351014.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.120.240.0/22
IPv6:
2803:d900::/32
Signature Algorithm: sha256WithRSAEncryption
9a:6d:1c:9a:f5:9f:62:67:7a:52:c6:3d:d2:de:8e:5a:a1:c4:
ae:7f:40:07:24:35:aa:16:75:68:fc:20:03:99:4f:06:42:bf:
14:c5:05:a6:3a:8d:4a:1b:a9:3d:3a:e6:9f:35:fe:f3:51:d9:
eb:95:01:bd:03:81:3f:fc:3b:fc:d8:22:bd:c8:0f:5a:71:77:
b5:e3:4c:00:df:82:67:63:bd:d0:71:64:e9:71:a5:04:45:2b:
07:a6:b7:9f:6d:55:4a:50:9a:5d:6b:11:33:70:75:50:43:44:
ec:08:fb:88:47:5c:7a:ad:3a:78:42:ab:f4:28:aa:c6:4b:69:
d6:1f:6e:fa:9c:55:cf:a2:6f:1f:72:6d:11:e2:31:dc:e4:9a:
1b:59:c5:32:ea:02:35:e4:fe:82:7f:81:f3:ec:e4:19:51:52:
e1:b6:5a:aa:5c:89:a1:10:0d:15:9c:2b:21:54:ad:b8:a6:8d:
f3:b3:ac:05:05:74:df:b3:70:ee:76:16:38:14:51:9e:3a:39:
77:ad:90:d2:6d:90:20:32:d9:52:3e:85:a1:60:08:b4:6a:09:
94:68:48:30:b4:12:22:36:25:3c:0a:1a:66:8b:39:ef:66:c6:
62:d5:aa:a2:26:fd:7c:be:87:ac:89:a5:af:f2:8e:02:02:d4:
2b:65:9e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org