Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27749.roa
File: AS27749.roa (raw, json)
Hash identifier: KOnNM834vIFIvojxmV1bsmRFnH0tMUCpa2bvVuR2eJY=
Subject key identifier: E5:C8:C2:C5:BE:9F:BC:9E:B9:5B:C7:6B:E3:64:23:76:15:00:D7:1D
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 1B413BF4DC8F686FAC2ACA760130B8A45DF60A6E
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27749.roa
Signing time: Tue 04 Feb 2025 18:02:47 +0000
ROA not before: Tue 04 Feb 2025 17:57:47 +0000
ROA not after: Tue 03 Feb 2026 18:02:47 +0000
asID: 27749
IP address blocks: 200.46.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:41:3b:f4:dc:8f:68:6f:ac:2a:ca:76:01:30:b8:a4:5d:f6:0a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Feb 4 17:57:47 2025 GMT
Not After : Feb 3 18:02:47 2026 GMT
Subject: CN=E5C8C2C5BE9FBC9EB95BC76BE36423761500D71D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:22:78:04:a6:36:a0:c3:c0:31:cb:4f:da:
fe:06:23:7d:fc:25:1c:78:41:d5:b7:d5:da:2e:83:
29:5f:e9:39:a1:f2:62:dc:57:8d:2a:3b:9f:a1:81:
89:d8:c6:e1:a4:7b:af:10:c2:66:d8:60:9d:6d:e2:
0b:c2:95:3e:c2:10:0e:8c:14:2f:76:a7:02:99:2f:
01:61:26:51:bf:46:3c:86:de:d4:44:e2:72:a9:7b:
2a:ea:b6:2c:a3:cb:b9:83:ee:76:62:a4:c7:54:6d:
bf:39:09:76:ae:fa:4a:2a:98:3f:c6:5f:7f:dd:18:
7b:7f:c3:c9:ce:5f:03:6f:ac:59:c0:2a:5a:74:86:
12:59:f3:0a:4f:d4:05:c7:c5:dc:bd:3f:29:fd:79:
74:a7:a4:24:c2:ea:77:34:c9:7d:ba:cf:c4:6d:b5:
dd:7c:8c:06:49:14:da:ef:79:fa:da:bb:0c:73:4c:
96:73:3e:49:91:8d:ed:b2:a1:1a:1a:aa:3c:24:6f:
b5:ce:3f:21:62:91:c9:e8:6b:62:d3:66:46:5e:c2:
0a:e7:76:e3:77:68:e7:98:23:29:70:51:e2:f8:43:
07:16:35:53:f6:1c:d3:4e:e8:26:09:a8:0e:56:b9:
26:ec:a9:ef:9b:d6:43:cd:9a:6d:6a:d6:df:1c:6e:
2d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C8:C2:C5:BE:9F:BC:9E:B9:5B:C7:6B:E3:64:23:76:15:00:D7:1D
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27749.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.46.131.0/24
Signature Algorithm: sha256WithRSAEncryption
48:64:91:f0:10:3a:e8:bd:87:78:76:b9:dc:9c:37:6e:26:31:
04:e5:0c:9c:65:22:43:cb:a8:97:94:56:1c:64:83:f0:c5:51:
e7:fe:56:50:4e:da:8c:e0:0d:9a:05:d3:0d:a9:c4:ab:3d:a8:
2b:6e:32:38:46:5e:4c:c1:d8:4a:bb:4c:f1:49:10:9d:ae:b3:
58:f5:81:87:9f:04:09:da:6a:30:ae:c6:54:8c:96:fd:d2:b8:
31:a2:72:31:6d:10:7d:c6:6b:66:48:48:8c:e1:7f:1a:6f:b7:
cf:14:2d:3a:79:89:94:94:c7:e7:70:e9:72:9a:b3:56:9c:ec:
c6:a4:00:0a:4d:7a:38:dd:5e:2c:f2:b5:69:e8:18:b8:5e:bb:
08:a8:0d:f4:92:66:1a:0a:85:e3:c4:ef:ca:ca:f0:e2:db:3b:
6f:ed:b3:e1:f5:ae:11:10:cc:2d:60:db:67:d8:4d:7b:93:5d:
42:28:de:f9:ab:c0:39:b9:49:9f:5d:b1:f9:2c:9b:2d:a7:bd:
0c:4f:56:fd:7e:28:ce:83:23:c9:5a:7b:6c:42:62:fb:00:a1:
8d:7a:1d:2f:00:08:15:84:7c:46:c3:4d:ca:fc:b0:dc:65:2d:
4e:e6:28:c4:7a:f1:83:cd:06:ad:3e:0d:73:58:91:45:ee:91:
bd:1e:6f:51
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIUG0E79NyPaG+sKsp2ATC4pF32Cm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0
QzQ3NEIxRTAeFw0yNTAyMDQxNzU3NDdaFw0yNjAyMDMxODAyNDdaMDMxMTAvBgNV
BAMTKEU1QzhDMkM1QkU5RkJDOUVCOTVCQzc2QkUzNjQyMzc2MTUwMEQ3MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMCJ4BKY2oMPAMctP2v4GI338
JRx4QdW31dougylf6Tmh8mLcV40qO5+hgYnYxuGke68QwmbYYJ1t4gvClT7CEA6M
FC92pwKZLwFhJlG/RjyG3tRE4nKpeyrqtiyjy7mD7nZipMdUbb85CXau+koqmD/G
X3/dGHt/w8nOXwNvrFnAKlp0hhJZ8wpP1AXHxdy9Pyn9eXSnpCTC6nc0yX26z8Rt
td18jAZJFNrvefrauwxzTJZzPkmRje2yoRoaqjwkb7XOPyFikcnoa2LTZkZewgrn
duN3aOeYIylwUeL4QwcWNVP2HNNO6CYJqA5WuSbsqe+b1kPNmm1q1t8cbi3hAgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQU5cjCxb6fvJ65W8dr42QjdhUA1x0wHwYDVR0j
BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD
MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC
QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB
ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZDMjkzMjhCMEJG
RUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvQVMyNzc0OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgugzAN
BgkqhkiG9w0BAQsFAAOCAQEASGSR8BA66L2HeHa53Jw3biYxBOUMnGUiQ8uol5RW
HGSD8MVR5/5WUE7ajOANmgXTDanEqz2oK24yOEZeTMHYSrtM8UkQna6zWPWBh58E
CdpqMK7GVIyW/dK4MaJyMW0QfcZrZkhIjOF/Gm+3zxQtOnmJlJTH53DpcpqzVpzs
xqQACk16ON1eLPK1aegYuF67CKgN9JJmGgqF48Tvysrw4ts7b+2z4fWuERDMLWDb
Z9hNe5NdQije+avAOblJn12x+SybLae9DE9W/X4ozoMjyVp7bEJi+wChjXodLwAI
FYR8RsNNyvyw3GUtTuYoxHrxg80GrT4Nc1iRRe6RvR5vUQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:11:01 2025 by rpki-client