Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27755.roa
File: AS27755.roa (raw, json)
Hash identifier: sD4rUUMJj4y82Gh5respaqupm75fuujRlZIzt66mJUk=
Subject key identifier: 57:0C:48:21:E7:B0:2B:88:23:B9:33:F1:FF:D4:6A:5B:6D:2A:74:49
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 5ED4807DDDC290F059B0C33A2BE6F7DCB9B5090C
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27755.roa
Signing time: Tue 04 Feb 2025 18:02:46 +0000
ROA not before: Tue 04 Feb 2025 17:57:46 +0000
ROA not after: Tue 03 Feb 2026 18:02:46 +0000
asID: 27755
IP address blocks: 186.179.112.0/20 maxlen: 24
190.2.224.0/20 maxlen: 24
200.3.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d4:80:7d:dd:c2:90:f0:59:b0:c3:3a:2b:e6:f7:dc:b9:b5:09:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Feb 4 17:57:46 2025 GMT
Not After : Feb 3 18:02:46 2026 GMT
Subject: CN=570C4821E7B02B8823B933F1FFD46A5B6D2A7449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7e:fb:c4:8c:f8:13:93:f1:e5:5c:76:cc:3f:
5c:cd:db:58:63:61:fd:4a:d2:76:89:da:44:7b:70:
d9:41:8d:2c:7f:17:e8:43:98:2f:37:88:5a:13:ff:
09:5f:01:6d:3b:62:4b:90:9a:29:c8:74:53:93:01:
d3:75:d1:4e:41:55:36:34:5f:11:79:ab:56:86:c0:
7a:ea:4f:34:11:a5:13:83:48:92:67:3a:0c:94:8a:
db:67:4c:d6:41:81:69:e5:0d:e9:e1:59:2c:87:c2:
aa:e0:29:7c:9a:53:1a:a8:9a:6d:8a:62:03:2c:ed:
ed:fc:08:f8:bc:b8:1c:2e:66:93:b8:c9:ed:19:71:
90:b3:fe:28:89:db:f1:29:aa:6f:8e:2b:a8:3e:99:
47:f9:50:8e:9c:01:cd:1d:5f:bb:b8:e0:36:b5:e1:
99:e7:65:71:62:cb:be:db:4c:be:f8:c8:66:d0:b5:
65:de:33:c6:0d:00:3c:9c:e6:f7:79:60:2c:b6:af:
10:53:1b:43:be:eb:c8:13:58:92:85:52:fb:73:47:
1d:a3:5a:d5:bc:59:97:3b:26:4f:6d:73:98:63:16:
2d:49:d5:69:46:4b:27:b7:b7:2f:bc:cd:82:aa:5c:
d8:f3:83:e1:72:71:39:72:9f:b2:93:08:0b:a6:cc:
3d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0C:48:21:E7:B0:2B:88:23:B9:33:F1:FF:D4:6A:5B:6D:2A:74:49
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27755.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.179.112.0/20
190.2.224.0/20
200.3.200.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:11:bd:a1:1c:5c:fb:3c:1b:c3:f6:23:67:75:49:64:e3:f4:
8e:fe:d2:65:d9:da:fc:25:93:c0:ed:25:94:bc:9c:ed:99:9e:
02:4c:6a:20:95:ac:5c:02:1c:56:46:04:93:3e:39:30:27:b6:
e7:0c:5d:75:f4:7a:ae:ba:48:6d:99:55:29:a2:ef:1a:71:cd:
a3:28:36:78:c9:b0:6a:44:6f:e5:64:5d:e7:db:74:86:0a:01:
0a:41:1b:53:a5:cb:8d:82:8e:90:1e:3f:00:cf:96:3f:c4:02:
3b:06:05:25:07:d0:5d:e9:c9:78:ab:6b:9b:64:d3:78:bb:ce:
ed:a9:46:6c:be:c8:4c:6b:15:25:0e:a5:1f:cd:2b:1e:e9:2b:
ba:fd:63:01:8b:24:cf:7e:97:ae:b6:e8:fb:b9:74:18:60:60:
cc:cf:45:c4:69:16:14:e8:af:05:79:ed:bb:d1:f0:04:90:89:
63:d7:3a:a0:42:44:4b:d2:34:53:dd:85:fb:64:72:cd:df:3b:
40:39:24:9f:4e:c8:81:30:ea:4c:71:c2:5d:52:b3:ce:b3:22:
52:cb:9a:5c:05:79:72:64:f4:3f:99:22:46:cf:b4:0d:6b:72:
4f:27:3c:86:a2:b3:41:02:1f:77:70:7d:5a:31:81:e4:8a:49:
7c:37:07:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:38 2025 by rpki-client