
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232312e302f32342d3234203d3e20323635353034.roa
File: 3136382e302e3232312e302f32342d3234203d3e20323635353034.roa (raw, json)
Hash identifier: 5PjURqj26t7vX8MXTsk9SogH6tViRkXQpJnmo7wjxbg=
Subject key identifier: 07:57:AC:38:BE:18:78:57:EB:79:50:79:AE:88:81:7A:C5:86:69:A3
Certificate issuer: /CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
Certificate serial: 5A65D289F60EF8AF1D1B6915098C704DA369D21D
Authority key identifier: 1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232312e302f32342d3234203d3e20323635353034.roa
Signing time: Tue 04 Feb 2025 18:27:36 +0000
ROA not before: Tue 04 Feb 2025 18:22:36 +0000
ROA not after: Tue 03 Feb 2026 18:27:36 +0000
asID: 265504
IP address blocks: 168.0.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl
rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:65:d2:89:f6:0e:f8:af:1d:1b:69:15:09:8c:70:4d:a3:69:d2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
Validity
Not Before: Feb 4 18:22:36 2025 GMT
Not After : Feb 3 18:27:36 2026 GMT
Subject: CN=0757AC38BE187857EB795079AE88817AC58669A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:74:c6:03:64:58:80:78:fb:c7:9f:4a:9e:11:
c9:10:fc:86:0d:07:da:5d:60:0c:56:95:6c:09:0b:
05:f6:e1:3c:37:55:8f:b0:9b:54:95:2b:48:6c:f1:
41:75:4a:51:db:ee:fd:66:f7:49:57:ca:a0:40:b9:
c9:77:69:fd:ac:20:36:f5:f0:92:1f:70:f0:e9:df:
a6:28:7d:66:48:24:23:f7:72:23:58:05:e0:8d:08:
56:3b:a0:09:10:cb:13:d5:6a:6d:6c:92:25:56:ad:
ad:5e:2e:5b:8a:a4:8c:23:ec:00:7c:99:de:d9:42:
a6:d9:a2:18:25:0e:7d:74:33:b3:72:42:01:f9:94:
dc:2b:10:88:b3:7a:e0:54:b7:e7:ad:cc:ad:d3:2d:
0d:04:28:2f:2b:2f:97:67:ca:32:cf:51:0a:98:28:
0f:ef:48:cb:d6:01:ef:37:b0:1b:5d:2e:8e:69:cc:
3c:6f:07:2d:5d:64:ca:dd:7d:06:90:92:97:31:d7:
c5:b8:ba:b0:81:81:34:75:a9:37:b6:87:9f:e3:50:
7a:68:2a:7a:4d:3f:90:22:a8:f4:ee:d9:b5:23:76:
8e:1d:7b:00:a4:87:17:0b:ff:b7:92:56:3d:57:f8:
57:2a:4f:48:49:f4:7f:3c:d3:96:ba:7a:f9:01:0a:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:57:AC:38:BE:18:78:57:EB:79:50:79:AE:88:81:7A:C5:86:69:A3
X509v3 Authority Key Identifier:
keyid:1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232312e302f32342d3234203d3e20323635353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.221.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:2a:35:7f:34:a3:2f:b0:44:8a:fe:33:8c:fe:c5:4a:60:34:
c7:a4:26:25:41:19:e4:6a:98:3e:c7:d4:96:f3:ea:70:a9:4c:
db:e1:e9:c3:1a:46:9a:18:b3:c6:ff:4e:33:18:f3:8f:e1:2b:
71:59:ec:55:b8:10:29:06:58:ce:d0:3e:08:03:af:ad:e7:f0:
e3:ee:9d:1c:32:f4:25:18:45:d5:46:87:28:ca:2e:d9:57:05:
9d:7c:f9:c7:e9:67:b8:6c:6f:b3:90:f5:c0:24:97:49:39:32:
a9:d2:65:11:da:11:9a:b8:6b:7e:62:12:26:32:94:09:fb:83:
e7:43:58:2d:96:60:87:b2:b5:7b:52:ae:d1:e9:03:12:74:28:
ad:95:4a:72:da:c2:af:c8:13:b3:68:3c:69:ff:53:0a:3e:e9:
34:f0:8d:84:93:0c:b1:06:09:17:66:57:1b:7c:32:2b:26:c7:
63:27:55:cd:e2:4a:bc:2a:77:de:fd:97:f2:c5:1f:ed:48:87:
da:36:08:07:bd:49:cf:1a:f4:f3:55:22:1c:9b:71:bc:ec:cf:
d7:3b:e5:58:b3:d0:98:80:33:fe:51:fd:ab:20:19:57:9d:5f:
6f:6e:96:70:79:26:8b:04:03:45:1d:80:2f:47:e3:9d:11:98:
ab:76:e9:89
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWmXSifYO+K8dG2kVCYxwTaNp0h0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ2MDA0MEVERTA2NkNCMEE1M0U4QUY0NDNGMEQ4NURB
ODlEN0Y2ODAeFw0yNTAyMDQxODIyMzZaFw0yNjAyMDMxODI3MzZaMDMxMTAvBgNV
BAMTKDA3NTdBQzM4QkUxODc4NTdFQjc5NTA3OUFFODg4MTdBQzU4NjY5QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLdMYDZFiAePvHn0qeEckQ/IYN
B9pdYAxWlWwJCwX24Tw3VY+wm1SVK0hs8UF1SlHb7v1m90lXyqBAucl3af2sIDb1
8JIfcPDp36YofWZIJCP3ciNYBeCNCFY7oAkQyxPVam1skiVWra1eLluKpIwj7AB8
md7ZQqbZohglDn10M7NyQgH5lNwrEIizeuBUt+etzK3TLQ0EKC8rL5dnyjLPUQqY
KA/vSMvWAe83sBtdLo5pzDxvBy1dZMrdfQaQkpcx18W4urCBgTR1qTe2h5/jUHpo
KnpNP5AiqPTu2bUjdo4dewCkhxcL/7eSVj1X+FcqT0hJ9H8805a6evkBCjFVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUB1esOL4YeFfreVB5roiBesWGaaMwHwYDVR0j
BBgwFoAUHWAEDt4GbLClPor0Q/DYXaidf2gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OTY0OTdFRjI5OTIyNzI3NEMyMDYzQkQ5NzJEQjk3Q0Iy
NDFFQUMwQUE2MjkzMkM5RTc3MkI5RDQ1MUM3NzhDLzAvMUQ2MDA0MEVERTA2NkNC
MEE1M0U4QUY0NDNGMEQ4NURBODlEN0Y2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRDYwMDQwRURFMDY2Q0IwQTUz
RThBRjQ0M0YwRDg1REE4OUQ3RjY4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDk2NDk3RUYyOTkyMjcyNzRDMjA2M0JEOTcyREI5N0NCMjQxRUFDMEFB
NjI5MzJDOUU3NzJCOUQ0NTFDNzc4Qy8wLzMxMzYzODJlMzAyZTMyMzIzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNTM1MzAzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKgA3TAN
BgkqhkiG9w0BAQsFAAOCAQEAfyo1fzSjL7BEiv4zjP7FSmA0x6QmJUEZ5GqYPsfU
lvPqcKlM2+HpwxpGmhizxv9OMxjzj+ErcVnsVbgQKQZYztA+CAOvrefw4+6dHDL0
JRhF1UaHKMou2VcFnXz5x+lnuGxvs5D1wCSXSTkyqdJlEdoRmrhrfmISJjKUCfuD
50NYLZZgh7K1e1Ku0ekDEnQorZVKctrCr8gTs2g8af9TCj7pNPCNhJMMsQYJF2ZX
G3wyKybHYydVzeJKvCp33v2X8sUf7UiH2jYIB71Jzxr081UiHJtxvOzP1zvlWLPQ
mIAz/lH9qyAZV51fb26WcHkmiwQDRR2AL0fjnRGYq3bpiQ==
-----END CERTIFICATE-----
Generated at Sat Nov 1 19:53:48 2025 by rpki-client