
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3132382e302f32302d3234203d3e20323632313636.roa
File: 3136382e3233342e3132382e302f32302d3234203d3e20323632313636.roa (raw, json)
Hash identifier: 6ZbsmLBYSPi+7wALFqnnJKJmyfzeWJyOoAneHilQU+g=
Subject key identifier: 3E:FB:56:C5:4B:28:F2:F5:F4:98:21:4C:53:2E:D8:06:E8:B1:A7:76
Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial: 24B7F723AAF9FEE131D5C56E865078497C1BA88F
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3132382e302f32302d3234203d3e20323632313636.roa
Signing time: Tue 04 Feb 2025 17:59:51 +0000
ROA not before: Tue 04 Feb 2025 17:54:51 +0000
ROA not after: Tue 03 Feb 2026 17:59:51 +0000
asID: 262166
IP address blocks: 168.234.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:b7:f7:23:aa:f9:fe:e1:31:d5:c5:6e:86:50:78:49:7c:1b:a8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Validity
Not Before: Feb 4 17:54:51 2025 GMT
Not After : Feb 3 17:59:51 2026 GMT
Subject: CN=3EFB56C54B28F2F5F498214C532ED806E8B1A776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:f2:23:5d:a2:ec:08:b4:e7:12:cd:b7:13:
71:df:46:bf:96:59:cf:66:a8:c6:de:d8:d9:02:71:
3f:0c:b0:12:6e:0a:63:c9:28:e5:e3:b8:70:4b:48:
dd:ed:12:85:fd:4e:9a:d5:8a:48:8a:24:c5:2f:b9:
ff:bb:60:4b:07:03:ea:16:43:a7:b7:28:6a:d3:e8:
82:f4:70:47:50:52:e1:0e:d6:e8:eb:53:8a:8d:04:
36:18:6a:ad:02:78:b4:7f:fe:5f:35:82:9a:9f:b9:
58:1c:1b:62:af:99:12:68:d1:f0:2d:70:ce:de:60:
03:28:a5:db:d4:76:97:66:ba:9c:df:16:5a:84:b0:
b2:7a:dc:6d:c5:40:a9:a1:f2:8f:d7:a1:0d:b9:40:
5b:13:2a:ad:4c:4a:4c:9c:ac:d7:09:ab:ed:94:db:
04:72:eb:40:d4:33:17:a4:34:f7:c5:24:0f:ee:fe:
41:e1:f3:11:6f:48:29:16:d4:36:c2:61:40:cf:1e:
b2:01:db:f5:f7:3e:66:92:23:cc:3a:1b:b1:b3:a3:
80:0d:33:f4:4d:bf:bb:95:e2:a3:f8:f2:98:87:e8:
dd:54:49:57:b4:24:45:a7:bd:0f:0a:39:13:f7:fb:
61:70:06:db:d4:d9:6b:db:65:16:6e:2c:b6:83:f9:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FB:56:C5:4B:28:F2:F5:F4:98:21:4C:53:2E:D8:06:E8:B1:A7:76
X509v3 Authority Key Identifier:
keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3132382e302f32302d3234203d3e20323632313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:2b:48:f6:39:42:25:67:30:6e:4e:62:31:b2:1f:9f:92:95:
a6:8c:55:ff:b1:e5:d5:a8:90:b2:87:e4:00:8f:ad:d9:8b:d6:
5d:7d:a0:1f:b1:1a:80:73:0b:e4:df:af:6c:2d:a1:ee:a0:b8:
0c:24:3e:58:11:f8:a4:a5:0a:78:ca:5a:f2:22:ab:72:70:09:
ce:9f:8b:d7:8c:13:cc:95:b8:2f:1d:cf:f5:0a:15:85:f4:dc:
a7:38:c1:03:8c:e8:d0:0c:42:77:e1:7e:73:2b:b7:cc:1d:ad:
a3:5e:38:6e:02:de:d1:20:d1:29:45:cb:6d:cd:ee:21:43:82:
07:60:16:a3:68:f1:84:9a:fd:4e:c7:ca:fa:c9:03:24:3e:37:
c6:09:36:59:a1:e5:1f:76:0e:f3:1f:9f:ee:3f:bd:35:dd:d9:
8a:ed:13:d4:03:3c:81:9f:1b:4d:16:2b:a7:8a:26:5d:da:b6:
d7:33:ae:e3:50:73:48:02:1d:28:ff:0f:ff:e6:5f:02:a8:07:
80:39:e7:af:93:4c:15:06:e7:26:14:53:74:38:1f:86:9b:ba:
78:46:21:d8:b0:20:80:a7:d8:24:94:37:86:d0:48:53:a2:f1:
96:bc:43:ca:37:05:0e:16:e5:c9:72:15:4d:12:36:d9:1e:e8:
84:36:a3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 06:51:47 2025 by rpki-client