
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa
File: 34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa (raw, json)
Hash identifier: /elfOjbQfF2fPsMe6mNPua2FvaMW9MN/Vs+BX6OZ9K4=
Subject key identifier: 05:93:A3:03:74:18:18:54:D0:02:62:6A:B9:CF:FD:8F:87:62:01:4A
Certificate issuer: /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial: 4A354B9BAF2B8D0D94158A9A93AC5784699DF18E
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa
Signing time: Tue 04 Feb 2025 18:04:23 +0000
ROA not before: Tue 04 Feb 2025 17:59:23 +0000
ROA not after: Tue 03 Feb 2026 18:04:23 +0000
asID: 266819
IP address blocks: 45.237.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 16:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:35:4b:9b:af:2b:8d:0d:94:15:8a:9a:93:ac:57:84:69:9d:f1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
Validity
Not Before: Feb 4 17:59:23 2025 GMT
Not After : Feb 3 18:04:23 2026 GMT
Subject: CN=0593A30374181854D002626AB9CFFD8F8762014A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:80:91:73:70:f5:e3:0c:9e:28:81:cd:65:
2e:e0:5c:a1:67:b9:d4:a3:d8:d9:86:9f:62:82:cf:
67:15:07:8f:07:dc:b9:9d:2b:43:c2:e8:cf:d2:52:
ba:72:cb:bd:39:49:ff:a9:ed:b7:e6:ff:c1:d2:23:
4a:64:ca:5b:bd:48:80:95:c5:aa:33:ab:7c:53:ba:
f2:ab:d6:a6:6e:20:13:34:94:41:7e:34:17:af:12:
f6:0e:55:c6:68:ba:ad:d2:23:78:be:b7:68:23:e6:
52:2f:44:1b:8a:d9:49:b2:75:6e:7e:c3:d7:d4:5d:
aa:c9:83:31:9b:c3:5a:cc:4d:4c:f5:a5:10:60:60:
59:ab:7b:57:1c:2c:f6:e3:3c:74:51:09:38:f2:2a:
6c:47:40:d6:01:0b:23:9c:d2:57:44:3c:ca:90:a3:
1d:73:c6:06:ad:a6:84:92:e5:de:b3:b7:c7:e3:4a:
94:0f:94:e8:e6:28:e3:bb:a0:b9:3a:28:76:a5:6b:
6d:84:1f:60:ed:a5:75:13:1c:8d:43:4c:8c:6c:80:
4b:83:50:55:45:39:f0:89:a4:65:05:f0:74:32:32:
8f:60:11:68:39:a6:00:1d:bc:00:76:a7:ba:a9:0a:
af:09:e5:a1:01:22:5c:a7:44:68:ce:d4:5a:f8:eb:
72:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:93:A3:03:74:18:18:54:D0:02:62:6A:B9:CF:FD:8F:87:62:01:4A
X509v3 Authority Key Identifier:
keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.221.0/24
Signature Algorithm: sha256WithRSAEncryption
87:48:c7:34:77:d6:e6:17:26:ae:3d:01:52:12:15:e2:28:e4:
ac:2b:6e:49:7e:23:76:e2:6d:aa:2a:01:d6:81:e2:ba:63:b6:
74:34:78:66:d9:f0:ca:d4:2d:ba:65:9d:b7:31:ea:f5:22:ef:
f2:3e:fc:8f:53:b6:61:3d:cc:2b:31:34:2b:a1:1f:f3:03:b1:
dd:e9:aa:88:68:41:f0:a5:d3:b6:0d:50:58:21:61:5c:60:42:
c5:84:9b:b8:1c:7a:fc:75:bf:9c:e4:a9:e8:3b:52:51:a6:f4:
93:5e:3d:76:99:e9:05:35:f1:b8:c6:53:93:f4:78:9c:97:a5:
22:69:0c:57:48:dc:6e:04:88:19:01:c0:0c:de:47:ac:15:71:
a7:61:e5:d5:4e:55:41:4e:98:19:68:29:90:2b:b9:65:9e:4b:
9e:ee:e4:42:fc:40:a2:11:52:fb:0c:a3:58:a0:22:ab:94:5e:
63:85:bb:42:54:b6:a5:0b:6c:a0:35:19:18:e6:56:51:62:5f:
32:d8:fd:67:1f:54:83:83:87:3c:12:4f:5d:12:f7:ef:2f:0b:
66:96:6d:31:65:43:bd:e2:f7:9e:1d:b1:70:71:2f:0d:f4:a2:
1d:ee:7a:7f:e9:51:f3:06:2f:57:77:b0:f4:99:2a:ad:62:81:
28:29:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 07:03:23 2025 by rpki-client