
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3134332e302f32342d3234203d3e20323637373937.roa
File: 3136352e39382e3134332e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier: qzTmamWUnNcyNUUdOW5jzdNs6Bv/s7yC+roUkg+yCK0=
Subject key identifier: E4:AA:76:2D:80:BB:D2:5C:25:92:96:6F:86:3A:ED:CF:02:EC:07:35
Certificate issuer: /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial: 253DD0570DF75FA7F2418EBEE0DF88A23F85261D
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3134332e302f32342d3234203d3e20323637373937.roa
Signing time: Tue 11 Feb 2025 23:55:01 +0000
ROA not before: Tue 11 Feb 2025 23:50:01 +0000
ROA not after: Tue 10 Feb 2026 23:55:01 +0000
asID: 267797
IP address blocks: 165.98.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:3d:d0:57:0d:f7:5f:a7:f2:41:8e:be:e0:df:88:a2:3f:85:26:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Validity
Not Before: Feb 11 23:50:01 2025 GMT
Not After : Feb 10 23:55:01 2026 GMT
Subject: CN=E4AA762D80BBD25C2592966F863AEDCF02EC0735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:a8:83:65:1f:71:fe:a8:0f:41:4b:e5:7a:
25:55:00:94:ff:39:ff:63:7f:61:d4:e1:59:17:1c:
73:95:4d:06:55:bc:a4:72:d2:46:ba:66:3f:54:c4:
a5:ae:bc:ce:f8:9c:12:1e:98:d2:c5:23:bb:f2:7d:
21:77:c1:0b:b3:94:f0:d8:54:06:7a:2a:1f:31:2a:
b9:ea:93:5a:0a:4c:6c:de:a8:72:b4:25:b0:c1:cd:
7c:c1:24:b0:fe:9f:5f:45:f8:b7:ce:f7:5d:0c:dc:
13:10:a5:bb:3f:4e:d0:c3:31:0b:71:23:7f:70:00:
d9:06:bc:3d:a1:ca:0c:95:59:87:02:4e:d6:71:5f:
d1:cc:ec:fa:38:0b:e6:37:c5:3c:f2:f8:b3:7e:eb:
a5:45:22:76:c2:72:8b:3f:80:ca:7e:72:b8:4a:59:
df:7a:1d:56:59:3a:f5:0b:fd:b4:0d:3a:c6:7a:03:
6d:62:5d:ea:42:d6:ac:4f:a5:70:2a:08:6e:7e:bb:
67:98:29:ec:75:b8:ca:cf:8c:c4:fb:ed:ab:61:db:
dc:9a:73:7e:ac:20:4c:7e:d9:3c:ef:07:ff:a4:d4:
e0:0d:89:d0:1d:7c:bd:ae:d0:d4:07:b8:96:4c:fd:
74:5d:7f:06:df:b5:53:f4:a7:a8:7f:af:00:89:88:
ca:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AA:76:2D:80:BB:D2:5C:25:92:96:6F:86:3A:ED:CF:02:EC:07:35
X509v3 Authority Key Identifier:
keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3134332e302f32342d3234203d3e20323637373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.98.143.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:d0:3c:6e:a1:a4:91:ab:38:b5:88:62:db:e9:b5:8f:10:a8:
7f:98:02:c4:ec:46:fb:17:46:99:2d:8f:e6:47:45:31:9c:87:
97:33:8f:90:72:aa:be:83:d2:6a:cb:1b:81:17:53:2b:3b:ac:
ae:d1:c7:77:dc:5a:46:7f:4b:71:45:a2:e6:a2:20:27:83:16:
30:7c:be:cb:b1:52:06:e5:32:f0:d5:6d:ba:22:37:a9:02:97:
ba:8d:5a:1a:0f:e8:20:e9:17:16:06:1c:7d:e5:d8:2c:32:3a:
f4:47:4c:4a:88:06:84:b8:32:fc:a7:7b:66:f9:02:7e:26:3a:
8e:e4:82:89:83:73:ef:72:95:9d:17:68:06:68:8d:c6:ba:82:
fe:78:1a:1f:e0:e6:39:b3:7f:9a:d5:1e:00:f1:58:e2:8c:d3:
d3:d2:74:9e:8d:3a:00:b1:44:39:b7:07:c1:fd:f1:3f:80:e0:
c0:68:2b:06:f6:27:6a:92:0a:0a:27:c1:8b:02:8c:6b:17:21:
20:46:0a:d3:64:05:10:86:d0:94:e3:f5:c2:0c:96:6d:ad:19:
3c:71:f6:a0:d8:ce:4c:c7:ba:3a:16:7e:4f:78:17:fa:ab:2e:
62:21:67:f3:cc:c2:c1:46:d1:e6:4c:59:0d:69:88:d5:19:25:
bf:7f:d6:76
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJT3QVw33X6fyQY6+4N+Ioj+FJh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIzRkIwNjgwOTM2MkQ5MEVEODJGNEEzNjBCREVFM0ZC
MzAzQzAzRDAeFw0yNTAyMTEyMzUwMDFaFw0yNjAyMTAyMzU1MDFaMDMxMTAvBgNV
BAMTKEU0QUE3NjJEODBCQkQyNUMyNTkyOTY2Rjg2M0FFRENGMDJFQzA3MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfKiDZR9x/qgPQUvleiVVAJT/
Of9jf2HU4VkXHHOVTQZVvKRy0ka6Zj9UxKWuvM74nBIemNLFI7vyfSF3wQuzlPDY
VAZ6Kh8xKrnqk1oKTGzeqHK0JbDBzXzBJLD+n19F+LfO910M3BMQpbs/TtDDMQtx
I39wANkGvD2hygyVWYcCTtZxX9HM7Po4C+Y3xTzy+LN+66VFInbCcos/gMp+crhK
Wd96HVZZOvUL/bQNOsZ6A21iXepC1qxPpXAqCG5+u2eYKex1uMrPjMT77ath29ya
c36sIEx+2TzvB/+k1OANidAdfL2u0NQHuJZM/XRdfwbftVP0p6h/rwCJiMrtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU5Kp2LYC70lwlkpZvhjrtzwLsBzUwHwYDVR0j
BBgwFoAUGz+waAk2LZDtgvSjYL3uP7MDwD0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjg1Q0ZFNDMzNjBEM0MwNUQxQTExMDdFN0RGQTUzMkM5
QjJGNjgyNUJGMTJCQUExMjIzNUREMTU4NDJBQ0RGLzAvMUIzRkIwNjgwOTM2MkQ5
MEVEODJGNEEzNjBCREVFM0ZCMzAzQzAzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjNGQjA2ODA5MzYyRDkwRUQ4
MkY0QTM2MEJERUUzRkIzMDNDMDNELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTY4NUNGRTQzMzYwRDNDMDVEMUExMTA3RTdERkE1MzJDOUIyRjY4MjVC
RjEyQkFBMTIyMzVERDE1ODQyQUNERi8wLzMxMzYzNTJlMzkzODJlMzEzNDMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzczOTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApWKP
MA0GCSqGSIb3DQEBCwUAA4IBAQDC0DxuoaSRqzi1iGLb6bWPEKh/mALE7Eb7F0aZ
LY/mR0UxnIeXM4+Qcqq+g9JqyxuBF1MrO6yu0cd33FpGf0txRaLmoiAngxYwfL7L
sVIG5TLw1W26IjepApe6jVoaD+gg6RcWBhx95dgsMjr0R0xKiAaEuDL8p3tm+QJ+
JjqO5IKJg3PvcpWdF2gGaI3GuoL+eBof4OY5s3+a1R4A8VjijNPT0nSejToAsUQ5
twfB/fE/gODAaCsG9idqkgoKJ8GLAoxrFyEgRgrTZAUQhtCU4/XCDJZtrRk8cfag
2M5Mx7o6Fn5PeBf6qy5iIWfzzMLBRtHmTFkNaYjVGSW/f9Z2
-----END CERTIFICATE-----
Generated at Sat Nov 1 21:33:47 2025 by rpki-client