
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3135382e302f32342d3234203d3e20323730313439.roa
File: 3134382e3230382e3135382e302f32342d3234203d3e20323730313439.roa (raw, json)
Hash identifier: dGrR2QSX6Ha/sqTHqH20qAFGFOH4XpKSOjD+dBCIjiw=
Subject key identifier: 94:A3:75:44:06:0A:8C:80:1E:C0:7C:26:AC:A5:1F:8A:99:7B:8F:3B
Certificate issuer: /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial: 4537543D920D1AAB471CEA0732B7D67BC49E22A7
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3135382e302f32342d3234203d3e20323730313439.roa
Signing time: Fri 29 Aug 2025 00:41:45 +0000
ROA not before: Fri 29 Aug 2025 00:36:45 +0000
ROA not after: Fri 28 Aug 2026 00:41:45 +0000
asID: 270149
IP address blocks: 148.208.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:37:54:3d:92:0d:1a:ab:47:1c:ea:07:32:b7:d6:7b:c4:9e:22:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Validity
Not Before: Aug 29 00:36:45 2025 GMT
Not After : Aug 28 00:41:45 2026 GMT
Subject: CN=94A37544060A8C801EC07C26ACA51F8A997B8F3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:21:f9:08:f2:fa:a4:41:d4:5b:1f:6c:be:42:
24:a3:77:8c:c3:cc:c1:b3:63:aa:ae:e7:f8:9c:2f:
ce:cd:9a:87:97:76:f3:f5:15:2b:19:85:35:9e:72:
c2:a8:9e:71:bc:7e:50:af:38:b1:d3:20:ee:d3:a5:
c1:a9:eb:26:b5:42:cf:c0:fa:77:e0:84:77:19:13:
5a:dd:9a:a7:12:49:79:48:ec:64:02:63:ca:66:56:
52:19:39:04:a6:37:56:5a:4d:41:30:93:d7:9c:da:
84:ff:cc:08:60:67:d5:a7:e1:4d:37:bf:c1:74:57:
a9:0b:b2:45:91:4d:43:44:f7:f6:8e:04:42:36:6a:
de:c8:3b:10:2d:19:5b:6d:be:bf:a6:5a:e9:3a:6c:
8e:92:d4:15:72:af:ba:7d:cf:34:c8:b1:73:b8:58:
0d:78:24:1a:ac:94:81:da:0a:18:ab:f9:7a:96:2b:
b8:61:ba:e7:f9:43:d8:b7:da:1a:dd:eb:30:f0:02:
32:03:a4:6f:1b:2c:ef:04:01:2f:af:e2:40:7d:ae:
df:c4:d1:bf:91:3b:45:da:b9:ca:93:d1:d2:33:e2:
80:cc:e5:d2:cd:a4:00:c0:82:d6:fe:16:e2:2e:d8:
f8:5a:85:9f:3a:cc:90:f4:5a:7e:86:50:67:84:8d:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A3:75:44:06:0A:8C:80:1E:C0:7C:26:AC:A5:1F:8A:99:7B:8F:3B
X509v3 Authority Key Identifier:
keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3135382e302f32342d3234203d3e20323730313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.208.158.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ca:cb:9b:ba:6e:82:47:5c:f8:d8:f8:35:59:a2:4d:06:bf:
46:5a:4c:6c:e5:24:79:38:f7:3c:06:9f:ac:c4:1d:78:4e:45:
6a:da:ce:2d:9e:9e:74:8f:15:b0:0f:c2:5f:d3:af:b2:13:eb:
30:4e:57:f6:e8:2f:09:34:a8:93:47:db:d0:e3:69:56:ff:49:
e9:7f:43:ff:87:86:e7:43:f3:8b:c2:74:cc:40:4c:8e:19:a3:
21:ec:36:8e:b2:a4:df:34:fd:ba:55:27:74:82:ee:a5:f5:8f:
85:65:72:40:31:f3:a8:79:85:b3:83:db:23:7d:d3:3a:95:5d:
62:dc:95:da:d8:85:1c:c7:df:78:d3:ce:49:e5:d9:e1:d7:60:
f8:94:03:5e:d3:ad:90:55:61:4f:64:86:e5:a6:89:63:bb:39:
d2:c4:94:0f:5a:4c:1e:9c:74:31:42:23:14:44:74:fd:3a:9c:
b2:7d:6a:41:a2:a0:d6:8e:b8:af:92:a1:2a:0d:aa:40:6f:2b:
81:6a:ac:61:27:40:08:1f:2d:3e:cd:21:e0:74:ab:e9:16:f1:
cc:9c:ca:a7:f1:3d:cb:1b:fb:ab:bc:8e:26:26:19:41:38:62:
00:53:b1:13:aa:19:9a:7f:50:64:66:30:2b:cb:67:18:e5:04:
f8:bf:93:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 06:58:12 2025 by rpki-client