Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/908792fb-ca3a-42b4-a3ed-51c050e7dafc/21dfb7dca907acd0de93066e2870d87862ba10d6.roa
File: 21dfb7dca907acd0de93066e2870d87862ba10d6.roa (raw, json)
Hash identifier: ZUEsW+QyBh/LUQYAl5VY6siir0545jw/T4hEybwXcuA=
Subject key identifier: 1C:74:91:8A:96:9F:9F:1C:D5:AB:89:2D:D0:FF:34:61:70:B3:98:F4
Certificate issuer: /CN=376e913cd53459397e54536c4a377faf2efa14c8
Certificate serial: 09055E
Authority key identifier: BA:38:30:D9:39:89:5F:A8:09:2C:52:F4:57:10:7A:24:6E:E0:7D:BF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/376e913cd53459397e54536c4a377faf2efa14c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/908792fb-ca3a-42b4-a3ed-51c050e7dafc/21dfb7dca907acd0de93066e2870d87862ba10d6.roa
Signing time: Fri 12 Apr 2024 14:52:36 +0000
ROA not before: Fri 12 Apr 2024 14:52:36 +0000
ROA not after: Sun 12 Apr 2026 14:52:36 +0000
asID: 263726
IP address blocks: 186.189.244.0/23 maxlen: 23
186.189.244.0/24 maxlen: 24
186.189.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591198 (0x9055e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376e913cd53459397e54536c4a377faf2efa14c8
Validity
Not Before: Apr 12 14:52:36 2024 GMT
Not After : Apr 12 14:52:36 2026 GMT
Subject: CN=21dfb7dca907acd0de93066e2870d87862ba10d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:0a:fb:31:e4:27:f0:6c:a4:9e:1e:4c:71:
63:b9:83:cd:3b:df:3f:a6:35:c2:81:7b:49:cc:15:
bf:54:24:c7:db:52:23:40:23:6c:09:12:32:0b:d0:
99:75:8e:cb:f9:6e:d9:55:be:87:3b:32:30:d6:a6:
7f:b5:5a:ad:0c:33:1b:89:8c:17:d4:19:53:a2:d4:
6f:42:51:63:60:ce:61:c4:c3:45:ed:8f:cf:d2:03:
8b:af:0e:94:13:77:4c:39:75:88:e9:72:8a:20:07:
4d:c9:c0:d6:d5:d3:ea:d7:c9:4a:3f:c9:ce:70:06:
cc:76:41:69:bb:93:3d:84:96:2f:01:8a:13:0d:ee:
37:eb:9d:32:65:c5:2a:00:49:8f:1e:d8:6d:81:82:
e1:fc:29:2d:7e:a1:c6:62:53:85:38:06:86:42:50:
ae:45:83:63:d7:d3:63:8f:9c:5f:1a:0f:ad:42:dd:
22:75:ca:4f:08:ad:1d:63:35:3d:bc:28:a0:62:93:
90:51:6a:9f:27:82:a8:ab:42:95:48:18:ce:6c:cb:
74:2e:ef:ce:02:a9:69:32:db:c7:d5:db:b6:b0:28:
cb:ea:ea:ab:af:c3:ee:16:ef:53:2a:52:1f:00:09:
cb:64:dc:10:9d:80:c8:eb:cb:24:0f:f5:ac:d7:ad:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:74:91:8A:96:9F:9F:1C:D5:AB:89:2D:D0:FF:34:61:70:B3:98:F4
X509v3 Authority Key Identifier:
keyid:BA:38:30:D9:39:89:5F:A8:09:2C:52:F4:57:10:7A:24:6E:E0:7D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/376e913cd53459397e54536c4a377faf2efa14c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/908792fb-ca3a-42b4-a3ed-51c050e7dafc/21dfb7dca907acd0de93066e2870d87862ba10d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/908792fb-ca3a-42b4-a3ed-51c050e7dafc/376e913cd53459397e54536c4a377faf2efa14c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.189.244.0/23
Signature Algorithm: sha256WithRSAEncryption
45:e3:86:59:f3:09:cb:1a:d1:10:31:75:94:fb:52:3a:fb:31:
d9:27:6b:52:a9:21:63:75:ad:ec:e1:6e:27:7d:bf:f9:3d:46:
f6:4c:6f:b7:3e:4b:c0:9a:64:10:b1:83:ea:e4:aa:d1:0e:bc:
d5:99:d1:36:fa:47:7f:2e:7a:60:cf:03:03:12:d1:57:fe:53:
0f:2d:6b:f2:d1:25:72:e7:ac:e5:f3:c9:db:c0:38:85:77:22:
09:cc:6c:3f:be:8b:fa:49:79:53:50:14:03:9e:1e:8e:c6:01:
d2:17:45:95:0e:0a:58:71:29:8f:73:25:45:ff:20:43:84:6d:
77:41:35:c0:78:51:96:b7:4d:13:d8:71:58:8e:d8:33:65:57:
3b:16:d6:f4:99:12:77:d6:5f:0b:8c:7a:ed:6f:3d:f7:84:a9:
21:58:39:f4:cc:18:09:20:3a:b8:de:1e:fb:1d:e2:b1:c7:19:
34:70:45:07:91:49:9f:69:d7:35:8a:57:19:ad:f0:f5:ed:3e:
bc:05:7d:ef:ea:1b:0e:37:a4:dd:f5:4c:99:4f:32:4c:e1:5d:
e3:06:87:eb:02:55:6d:a0:71:ba:9d:f8:08:fa:73:a1:71:35:
b1:0f:41:64:3d:d6:9f:d0:eb:9c:bc:71:76:95:68:1e:9a:97:
fe:28:d8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org