
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa
File: 323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier: m5VxZR3PA2FMaryv5WR/i5zjeITWXaYsdh81b1B7JDM=
Subject key identifier: 04:62:D2:23:B6:FF:0E:08:E0:D2:E9:12:CE:47:59:FB:A4:B5:88:2E
Certificate issuer: /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial: 3E18C217F84AE11D9E5A6BFF52A90D272CAE6DA5
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa
Signing time: Tue 04 Feb 2025 18:25:04 +0000
ROA not before: Tue 04 Feb 2025 18:20:04 +0000
ROA not after: Tue 03 Feb 2026 18:25:04 +0000
asID: 27818
IP address blocks: 2803:3380:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:18:c2:17:f8:4a:e1:1d:9e:5a:6b:ff:52:a9:0d:27:2c:ae:6d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Validity
Not Before: Feb 4 18:20:04 2025 GMT
Not After : Feb 3 18:25:04 2026 GMT
Subject: CN=0462D223B6FF0E08E0D2E912CE4759FBA4B5882E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:b9:ae:19:d7:7f:6f:a3:a5:db:13:fd:85:
80:25:49:a8:ce:94:78:66:93:60:2b:27:b1:7e:9f:
86:58:87:68:d4:3e:8e:ac:ff:98:19:f8:d1:4f:d6:
67:a0:17:7f:3a:e9:ee:df:a2:59:3e:fa:3e:96:99:
b8:71:2c:95:4a:d1:ab:33:d4:87:41:d1:70:62:cc:
28:de:c9:12:38:b6:a9:75:0b:6e:da:4b:a0:72:21:
80:33:b1:44:e4:ca:b0:f1:a1:57:60:41:ec:ae:95:
01:98:6a:a4:da:be:30:d7:d5:8f:03:9c:a4:68:07:
68:ce:81:9b:df:0c:6d:f5:66:8e:2e:d9:cd:bd:8b:
75:85:11:5b:4e:f4:b8:77:17:08:56:20:65:45:76:
bd:3b:f1:ff:07:91:3a:fa:69:22:e4:45:38:e2:58:
44:3a:a1:a7:4e:8f:7b:03:fd:5f:fd:94:98:6b:7e:
bd:6b:ed:7d:83:b6:be:42:48:67:75:e8:79:e8:81:
1f:84:90:06:e6:cb:fb:d4:d4:5c:27:04:fb:6a:1f:
85:ce:33:e9:99:5b:23:b5:e6:d6:d3:26:dd:8e:7f:
0b:cf:94:9d:2e:9e:d1:57:d5:47:4f:e5:a4:1b:45:
c3:a5:7f:c8:7d:59:e2:df:6d:6b:b2:76:39:dd:70:
d2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:62:D2:23:B6:FF:0E:08:E0:D2:E9:12:CE:47:59:FB:A4:B5:88:2E
X509v3 Authority Key Identifier:
keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:3380:f000::/36
Signature Algorithm: sha256WithRSAEncryption
4b:0c:b3:8c:7f:e8:cc:08:78:30:e9:e0:d3:94:60:9a:04:2c:
5e:f7:ae:65:a8:4d:4e:af:a2:ea:f1:97:a0:bc:8f:98:ac:68:
c2:50:11:55:62:1c:fc:02:40:82:4b:88:c4:33:d8:77:b1:cb:
d3:5c:1a:de:20:38:70:65:4d:91:63:59:1c:af:4b:e4:89:35:
4b:d7:c1:82:eb:63:1c:5d:37:fc:1f:31:0d:b1:4c:2b:88:86:
c2:bc:5a:69:29:c3:de:35:74:cb:ce:95:29:72:7e:0a:b3:db:
00:35:2d:6f:5e:a1:9d:76:ec:e2:89:86:2d:00:cc:81:53:85:
b6:c9:5d:99:7e:03:76:b6:4b:6e:80:09:a1:80:78:93:d6:a4:
f1:e3:2b:dc:af:a0:86:4f:e3:43:06:eb:61:96:60:83:aa:50:
b6:69:3a:e1:76:70:d5:cb:b8:bd:1f:a9:1f:98:5b:0d:30:1b:
49:38:8a:08:43:22:83:ac:af:3a:2c:6b:57:18:95:58:f1:07:
3c:04:3e:f5:4d:1b:d2:36:84:be:d7:97:1a:49:4f:20:35:29:
bb:28:1c:e2:b6:eb:55:83:7f:48:7c:4a:90:c2:53:ed:f7:50:
cd:2d:cb:47:d2:c3:6a:51:0e:5b:1b:69:c9:ff:9b:a0:c2:3e:
77:09:c1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 18:19:09 2025 by rpki-client