
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3135342e302f32332d3234203d3e20323632313636.roa
File: 3136382e3233342e3135342e302f32332d3234203d3e20323632313636.roa (raw, json)
Hash identifier: 8yqr1Lx57rJpA5H+JKZUfiTzQHPFHRiXMQZizztHqzg=
Subject key identifier: CA:9F:57:99:32:C0:17:4E:89:83:1E:3F:AB:85:EF:A9:7D:DA:46:80
Certificate issuer: /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial: 2E39BD0E33D7A20D30B5079A3423614B46B55D83
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3135342e302f32332d3234203d3e20323632313636.roa
Signing time: Tue 04 Feb 2025 17:59:39 +0000
ROA not before: Tue 04 Feb 2025 17:54:39 +0000
ROA not after: Tue 03 Feb 2026 17:59:39 +0000
asID: 262166
IP address blocks: 168.234.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:39:bd:0e:33:d7:a2:0d:30:b5:07:9a:34:23:61:4b:46:b5:5d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Validity
Not Before: Feb 4 17:54:39 2025 GMT
Not After : Feb 3 17:59:39 2026 GMT
Subject: CN=CA9F579932C0174E89831E3FAB85EFA97DDA4680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:da:1d:a3:31:2e:46:c6:d2:8d:34:fa:ed:d7:
13:2e:38:89:0d:08:fa:09:bf:c2:f7:16:6a:6f:e9:
f4:bd:c5:63:35:e8:81:40:be:cc:5f:f6:72:89:3a:
24:a5:26:a5:12:13:04:23:1c:5a:13:ae:cc:c2:46:
db:aa:5a:15:33:54:86:63:cc:81:ee:7e:0f:e7:a1:
cb:8c:70:ec:9b:8b:f1:f8:f3:e4:fc:4a:13:15:e1:
16:bc:66:7b:5f:00:b8:f9:7b:70:c4:2c:cd:63:65:
32:c8:ca:4f:a9:f7:83:2d:2a:3a:ed:b3:52:e5:77:
3c:45:2f:8e:13:c1:96:99:39:03:98:92:fa:e1:5a:
a3:46:0b:89:7f:34:65:f1:7e:ab:3f:5b:76:cf:58:
44:53:8f:ff:26:7d:36:7e:3d:8f:a3:27:99:0c:7b:
e8:aa:6b:75:d8:ab:cf:dd:aa:7e:d2:0e:49:08:51:
e3:8a:0c:a2:3a:98:86:84:47:d2:dd:6c:2d:d8:0b:
b6:ff:43:2e:d1:e5:21:c6:ac:8f:8d:9f:85:1f:8b:
36:73:47:78:11:24:9a:67:2f:71:68:f9:f5:73:0d:
c2:ae:de:cd:23:8b:16:31:99:76:65:78:42:82:02:
01:4a:ff:4c:44:46:e0:cb:74:d8:34:a3:88:53:b8:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9F:57:99:32:C0:17:4E:89:83:1E:3F:AB:85:EF:A9:7D:DA:46:80
X509v3 Authority Key Identifier:
keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3135342e302f32332d3234203d3e20323632313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.154.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:eb:25:1b:c4:57:5e:2f:3b:f0:7a:1c:5f:03:da:35:c2:d8:
24:5c:9d:44:fb:4a:91:c3:8f:e2:ca:6e:7a:fa:4d:ce:c6:c1:
49:be:55:5b:ca:85:ca:fc:7a:9d:b6:04:1d:1a:70:64:03:cf:
cd:b6:46:c0:10:b1:5c:c1:e2:0e:4d:14:4b:b8:10:aa:17:08:
a4:4c:bc:07:0a:35:e4:bd:7e:f1:26:78:29:c8:9b:c3:9b:24:
e1:d0:b3:2b:cd:25:6b:57:3f:fb:f5:68:88:d4:e4:5e:d4:3c:
e0:39:32:92:a1:ff:8f:9e:0b:b1:18:9a:50:5e:70:46:ae:40:
e7:ba:f0:74:85:2b:f5:04:e4:f7:bf:14:e8:e6:ce:04:6b:e7:
88:e4:23:fa:55:3d:70:0d:81:25:f0:56:2f:ec:3e:30:ba:ef:
13:d6:ac:b8:44:5b:e2:8c:7e:32:f0:d5:cb:62:22:7e:6b:bd:
e1:dd:48:7c:75:83:36:3d:6d:e9:58:6c:3e:93:2e:56:68:09:
9d:1b:36:88:dc:2e:25:e2:ad:e6:42:f4:f9:5e:49:ba:51:bb:
a1:32:ab:41:e1:43:96:44:b3:59:98:1c:c2:d2:5d:0c:80:23:
d5:8f:86:d5:d8:62:61:84:13:eb:88:54:e2:f9:40:bf:19:7c:
e6:ff:10:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 06:57:53 2025 by rpki-client