
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa
File: 34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa (raw, json)
Hash identifier: sdD+4az659s6PD/uvKDKPjyLukQcDb0M4eaD4Sw7zZo=
Subject key identifier: B7:6A:7D:DC:E7:56:D8:DF:F5:3B:5C:CC:84:2D:07:74:4A:91:08:FA
Certificate issuer: /CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4
Certificate serial: 277A31AE1B67B2BE04A128A20885B7A3758E2830
Authority key identifier: 29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa
Signing time: Tue 04 Feb 2025 18:54:45 +0000
ROA not before: Tue 04 Feb 2025 18:49:45 +0000
ROA not after: Tue 03 Feb 2026 18:54:45 +0000
asID: 267776
IP address blocks: 45.171.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl
rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:7a:31:ae:1b:67:b2:be:04:a1:28:a2:08:85:b7:a3:75:8e:28:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4
Validity
Not Before: Feb 4 18:49:45 2025 GMT
Not After : Feb 3 18:54:45 2026 GMT
Subject: CN=B76A7DDCE756D8DFF53B5CCC842D07744A9108FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:e8:29:7a:7b:cd:d9:b3:21:a6:17:db:59:
a7:b0:b6:ca:ca:7a:b5:79:49:ce:05:cb:89:6a:21:
39:f9:3e:75:09:d6:fb:92:db:51:04:50:ce:39:a9:
af:be:1f:37:20:6b:a3:12:74:8b:be:7f:40:43:50:
a3:36:94:d0:95:63:72:8d:b0:ed:78:97:61:ec:23:
8a:17:05:0d:d1:80:35:1e:3b:48:90:83:bb:06:ea:
a7:90:c7:ab:32:d7:c3:9f:f7:a4:d9:ca:6b:67:94:
92:4c:67:2c:e0:a3:5c:4a:6e:9d:72:c5:d7:0b:58:
ee:85:47:d7:36:75:f8:7b:d0:e0:ba:3b:ff:ce:d8:
1a:16:9e:0f:9e:b1:b6:12:36:36:b8:aa:ac:ae:b8:
86:ba:94:b9:df:c6:16:0c:3b:25:b1:c9:07:70:4a:
e2:bd:b6:f5:44:a3:28:51:26:2d:87:d7:82:e0:aa:
fd:86:17:90:71:1d:45:d1:00:e1:01:b0:8b:87:14:
7d:e0:83:0e:17:de:97:36:e4:a3:68:e6:15:43:60:
89:cd:08:c3:4e:1b:3b:86:bc:bb:fe:d3:c0:da:5a:
cf:ea:a4:2c:3a:ed:39:f7:8f:6f:13:b0:e3:27:1a:
c2:05:56:3b:4f:c8:2c:3c:66:c2:bc:08:f9:9d:1b:
38:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6A:7D:DC:E7:56:D8:DF:F5:3B:5C:CC:84:2D:07:74:4A:91:08:FA
X509v3 Authority Key Identifier:
keyid:29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:60:81:f2:68:23:ab:5c:8a:eb:5f:05:d2:f9:b0:4b:17:b5:
bb:f6:fd:b7:46:03:ac:86:36:b6:8f:80:b5:64:b3:57:73:bb:
78:06:11:09:fe:0b:0a:9b:2e:30:94:ea:66:c1:5d:02:2a:02:
71:a0:0a:68:40:46:cc:5e:fc:1d:af:ba:5b:83:2f:e3:8d:18:
02:a0:92:69:fa:ea:a3:c7:52:1a:8e:4a:d8:94:2a:b7:4d:81:
56:5b:5d:b3:85:5b:4e:af:62:b7:c0:42:cb:99:e2:5f:b9:81:
df:45:5c:63:7b:98:fe:de:e7:1d:8a:be:15:a6:ce:e2:8b:a8:
89:80:b0:dd:f4:de:46:7b:60:b7:6a:8a:b4:0f:86:de:89:ca:
62:40:3f:83:5a:c4:25:5e:a0:43:b3:9c:cd:ee:c5:bf:f5:dd:
71:0a:1c:ff:b8:7b:52:5e:a1:01:10:1e:41:88:99:43:0b:b6:
c2:46:b2:a7:85:33:f2:0b:55:f3:e5:d0:38:21:a1:a7:49:97:
72:26:fc:80:73:50:29:ae:f8:bd:92:76:a2:b9:63:c0:23:ba:
14:c4:f2:9b:7f:93:ea:ea:7d:f7:b2:60:71:20:01:b9:e6:40:
85:3d:97:e8:70:45:ae:52:66:3f:67:7f:59:22:bc:6d:51:2c:
de:2d:7a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 21:24:19 2025 by rpki-client