Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/21f5813c431f624b137e04d44779b84fe4bc3879.roa
File: 21f5813c431f624b137e04d44779b84fe4bc3879.roa (raw, json)
Hash identifier: arjNRj84twidi/+cyNWbMI69wAsRHmPpjTiUw0OJHO0=
Subject key identifier: D6:4C:BC:3D:8B:58:32:DA:AB:84:86:10:4E:0B:F6:3D:96:8F:7E:E7
Certificate issuer: /CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Certificate serial: 1264B2
Authority key identifier: 8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/21f5813c431f624b137e04d44779b84fe4bc3879.roa
Signing time: Fri 26 Jan 2024 07:30:00 +0000
ROA not before: Fri 26 Jan 2024 07:30:00 +0000
ROA not after: Sun 25 Jan 2026 07:30:00 +0000
asID: 11315
IP address blocks: 186.100.0.0/16 maxlen: 24
200.49.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1205426 (0x1264b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Validity
Not Before: Jan 26 07:30:00 2024 GMT
Not After : Jan 25 07:30:00 2026 GMT
Subject: CN=21f5813c431f624b137e04d44779b84fe4bc3879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:3b:72:9e:90:1f:18:0e:1e:6c:17:12:9b:
92:45:97:0b:7f:8e:ee:1c:21:c6:5f:e0:ec:19:81:
27:ea:d4:cd:05:be:21:6f:5b:82:05:f8:ec:08:15:
a7:bd:e3:d3:0d:ef:21:3f:6d:84:71:21:12:00:56:
54:cf:6e:95:bd:26:3c:2c:c5:e5:32:b5:c5:72:d1:
a0:51:4f:fc:c6:b2:bf:fb:8a:93:05:51:29:5f:40:
71:2f:91:37:d3:e7:ff:f5:12:75:50:36:8e:43:6b:
34:e4:85:85:09:96:66:d2:d2:c7:00:03:a8:f0:b4:
3a:df:b7:86:b1:a8:0c:61:94:39:32:db:b6:46:e8:
c5:55:b8:d7:e5:4d:46:37:37:6a:26:69:09:93:c9:
aa:2c:03:a5:06:98:03:23:10:c2:c4:3a:45:1a:44:
22:9f:18:2b:a7:33:87:7d:f8:fe:15:6b:a2:0c:2d:
75:a3:c6:9d:6f:e1:92:a3:72:ee:3c:6d:e8:c1:39:
75:91:e5:f3:d3:16:c8:5f:51:5d:64:d3:de:3e:5b:
1b:1e:94:7c:24:25:95:b1:34:ad:99:62:1d:aa:cf:
74:fb:2e:b5:9f:f8:df:99:7b:6b:d4:ac:1f:e3:58:
f1:55:4e:ac:55:7c:44:94:ee:0e:a8:bb:a6:d7:14:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4C:BC:3D:8B:58:32:DA:AB:84:86:10:4E:0B:F6:3D:96:8F:7E:E7
X509v3 Authority Key Identifier:
keyid:8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/21f5813c431f624b137e04d44779b84fe4bc3879.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/78379cd71229f217b9f834bbc4e3fa24f7014f89.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.100.0.0/16
200.49.192.0/19
Signature Algorithm: sha256WithRSAEncryption
84:45:30:e8:7f:44:f3:ce:59:40:bf:54:3f:f4:24:e1:3d:2f:
7b:c7:4b:67:cd:64:0a:ff:30:d0:3b:58:4b:02:c3:51:3d:fa:
03:22:79:66:f7:3a:b4:d8:87:af:75:d7:ff:27:48:7a:c9:b9:
f1:cb:97:1e:43:52:92:dd:fe:58:9a:a0:d9:b4:32:d8:21:8d:
a7:7b:b0:e9:d4:49:da:66:81:54:da:37:60:07:ab:21:26:97:
3d:fa:16:f6:39:5b:c5:8d:df:dd:db:42:cc:f0:89:36:2f:29:
36:9a:a6:d5:12:ea:b8:81:79:07:0e:2c:ef:56:db:93:41:fd:
f4:00:3c:29:58:53:25:a9:61:6a:7c:b6:c0:9e:95:f9:9f:16:
8f:d1:b2:c5:53:5d:8b:aa:56:4f:e2:d0:a4:2c:72:db:9a:56:
2d:e1:20:a4:97:e8:8e:dd:87:d2:18:50:b2:e1:ca:b2:02:c7:
29:29:07:29:f5:6a:27:36:3b:09:aa:a8:09:ec:03:cb:5d:87:
d8:5a:74:7f:2c:48:47:83:ab:eb:5f:b2:b3:23:5d:91:d0:da:
e9:b8:6f:e4:cc:be:85:ee:ef:83:8e:c0:1e:56:f7:95:41:08:
25:f4:42:26:9c:e5:35:f3:d4:36:16:c9:d9:c7:22:06:48:d3:
01:14:ef:8d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIDEmSyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc4
Mzc5Y2Q3MTIyOWYyMTdiOWY4MzRiYmM0ZTNmYTI0ZjcwMTRmODkwHhcNMjQwMTI2
MDczMDAwWhcNMjYwMTI1MDczMDAwWjAzMTEwLwYDVQQDEygyMWY1ODEzYzQzMWY2
MjRiMTM3ZTA0ZDQ0Nzc5Yjg0ZmU0YmMzODc5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtDI7cp6QHxgOHmwXEpuSRZcLf47uHCHGX+DsGYEn6tTNBb4h
b1uCBfjsCBWnvePTDe8hP22EcSESAFZUz26VvSY8LMXlMrXFctGgUU/8xrK/+4qT
BVEpX0BxL5E30+f/9RJ1UDaOQ2s05IWFCZZm0tLHAAOo8LQ637eGsagMYZQ5Mtu2
RujFVbjX5U1GNzdqJmkJk8mqLAOlBpgDIxDCxDpFGkQinxgrpzOHffj+FWuiDC11
o8adb+GSo3LuPG3owTl1keXz0xbIX1FdZNPePlsbHpR8JCWVsTStmWIdqs90+y61
n/jfmXtr1Kwf41jxVU6sVXxElO4OqLum1xQ9uwIDAQABo4ICYDCCAlwwHQYDVR0O
BBYEFNZMvD2LWDLaq4SGEE4L9j2Wj37nMB8GA1UdIwQYMBaAFIsW7y9yQDIoEOj3
32Fllr30HLgdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzgzNzlj
ZDcxMjI5ZjIxN2I5ZjgzNGJiYzRlM2ZhMjRmNzAxNGY4OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTExZTYwNjMtNzBkOC00N2VkLThkM2YtZWYwNmRm
NGMzNzIyLzIxZjU4MTNjNDMxZjYyNGIxMzdlMDRkNDQ3NzliODRmZTRiYzM4Nzku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85MTFlNjA2My03MGQ4LTQ3ZWQtOGQzZi1lZjA2
ZGY0YzM3MjIvNzgzNzljZDcxMjI5ZjIxN2I5ZjgzNGJiYzRlM2ZhMjRmNzAxNGY4
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEFBQcBBwEB/wQV
MBMwEQQCAAEwCwMDALpkAwQFyDHAMA0GCSqGSIb3DQEBCwUAA4IBAQCERTDof0Tz
zllAv1Q/9CThPS97x0tnzWQK/zDQO1hLAsNRPfoDInlm9zq02Ievddf/J0h6ybnx
y5ceQ1KS3f5YmqDZtDLYIY2ne7Dp1EnaZoFU2jdgB6shJpc9+hb2OVvFjd/d20LM
8Ik2Lyk2mqbVEuq4gXkHDizvVtuTQf30ADwpWFMlqWFqfLbAnpX5nxaP0bLFU12L
qlZP4tCkLHLbmlYt4SCkl+iO3YfSGFCy4cqyAscpKQcp9WonNjsJqqgJ7APLXYfY
WnR/LEhHg6vrX7KzI12R0NrpuG/kzL6F7u+DjsAeVveVQQgl9EImnOU189Q2FsnZ
xyIGSNMBFO+N
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org