
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a393a3a2f34382d3438203d3e20323733303431.roa
File: 323830313a3161353a393a3a2f34382d3438203d3e20323733303431.roa (raw, json)
Hash identifier: Sw2+1sZAq4vKdPeBz3McOhklGiUVtnCw9e1FTPrb1hE=
Subject key identifier: B7:29:26:BC:AA:F1:B0:F4:76:83:E9:07:8C:3C:39:E0:8B:DA:53:EA
Certificate issuer: /CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Certificate serial: 7B4BF9F0F54438898B15946165DC288B84F90AEC
Authority key identifier: D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a393a3a2f34382d3438203d3e20323733303431.roa
Signing time: Tue 04 Feb 2025 18:55:49 +0000
ROA not before: Tue 04 Feb 2025 18:50:49 +0000
ROA not after: Tue 03 Feb 2026 18:55:49 +0000
asID: 273041
IP address blocks: 2801:1a5:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:4b:f9:f0:f5:44:38:89:8b:15:94:61:65:dc:28:8b:84:f9:0a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E
Validity
Not Before: Feb 4 18:50:49 2025 GMT
Not After : Feb 3 18:55:49 2026 GMT
Subject: CN=B72926BCAAF1B0F47683E9078C3C39E08BDA53EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d7:76:32:06:1b:05:46:40:1d:e5:07:79:ce:
46:76:e6:96:89:5c:86:73:26:97:de:cf:7f:8f:79:
49:37:7f:cf:fd:e0:00:7d:17:19:ff:d1:09:12:4d:
18:10:dc:54:47:1c:8c:9c:0e:8d:d4:18:da:e3:98:
da:63:b6:f7:c9:54:c7:18:6d:15:2a:24:d7:db:9a:
e4:1b:41:fe:dc:6c:01:dc:e5:40:02:89:0a:68:8b:
02:8a:b3:ef:28:79:24:6f:98:c4:5e:cd:b3:85:be:
ad:4a:87:2e:89:f3:69:a4:be:cd:73:98:56:6e:72:
33:b9:37:bd:db:92:54:42:a2:23:f7:5f:cf:ea:51:
ba:6f:c8:45:0c:21:b5:fc:1d:c4:93:cb:d8:47:ce:
1b:30:78:ea:0a:4b:ab:b4:c0:07:70:21:f6:3c:0d:
38:7f:ad:6a:57:6a:f2:f0:7f:63:55:6d:a0:16:90:
6a:0b:7b:1c:c0:30:35:9b:0b:6f:19:51:f9:b9:43:
43:61:a9:f7:dc:11:2b:6d:06:dd:92:0b:6e:75:62:
20:6a:28:80:51:08:00:9f:65:90:23:bd:18:ba:7d:
e2:02:97:8c:55:31:14:a8:22:67:8b:d1:70:78:4b:
f2:c9:ba:ca:4d:b5:3a:d9:a8:be:27:63:66:60:99:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:29:26:BC:AA:F1:B0:F4:76:83:E9:07:8C:3C:39:E0:8B:DA:53:EA
X509v3 Authority Key Identifier:
keyid:D8:B2:2F:03:33:B8:F6:4A:EF:4F:95:D7:6A:23:E4:5D:9D:53:0D:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B22F0333B8F64AEF4F95D76A23E45D9D530D1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4AA68B181AA124E2833D86B0ABC160C2CE76C81C69568AB0E784FBF644E486/0/323830313a3161353a393a3a2f34382d3438203d3e20323733303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1a5:9::/48
Signature Algorithm: sha256WithRSAEncryption
10:a9:d2:99:f7:ca:8b:3d:fc:45:80:38:72:23:b8:ad:54:48:
c0:f2:9a:26:a7:81:67:62:53:6e:51:d8:94:45:5d:b0:ce:2b:
e3:0f:bd:c6:79:a1:18:75:6a:ea:36:fc:bc:53:54:a5:6d:67:
7a:dd:3f:69:6e:86:db:2c:82:7c:fd:f8:d7:2b:5b:4a:31:c5:
35:ca:07:eb:20:56:e4:63:53:84:0d:8f:85:24:36:a8:28:83:
f9:51:99:7f:b5:a4:19:a9:fd:63:1d:de:e0:68:ed:02:7f:62:
6e:6d:b4:7b:2a:c4:96:27:12:11:18:0b:34:39:a3:fa:27:35:
f6:e9:00:08:df:ef:40:5f:05:27:9d:de:7d:a1:f7:52:9d:1c:
44:c5:c1:1b:ab:f1:1d:c1:cd:53:d4:e9:10:3c:b5:ec:28:a2:
b1:69:77:ac:f5:1c:4a:12:8f:bc:bc:d6:7f:c8:26:26:36:2a:
bb:e0:5b:12:a1:85:12:4b:91:36:0d:96:ab:78:10:34:6a:28:
e7:44:19:e6:b2:72:49:19:9f:55:70:21:f6:af:74:e4:3c:64:
ed:3f:c4:ec:29:8c:04:5f:92:0e:c6:98:c4:4c:f2:2c:ff:56:
fd:53:8f:a5:97:dc:a6:20:b8:0f:d4:d3:88:da:59:85:e4:12:
78:21:0e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 20:06:34 2025 by rpki-client