
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33322e302f31392d3234203d3e203134313837.roa
File: 3230312e3232302e33322e302f31392d3234203d3e203134313837.roa (raw, json)
Hash identifier: RMy91AD0g+Zm7aNyWE2ajakB8Ro2Np0A0yqhmyKphuk=
Subject key identifier: DD:62:DC:25:70:7A:8D:2A:8D:EB:C2:52:CB:CC:32:66:D7:03:68:74
Certificate issuer: /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial: 6EA47578CDD56D10B1A60BA2AD0EFA94888AE0B8
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33322e302f31392d3234203d3e203134313837.roa
Signing time: Tue 25 Feb 2025 20:11:03 +0000
ROA not before: Tue 25 Feb 2025 20:06:03 +0000
ROA not after: Tue 24 Feb 2026 20:11:03 +0000
asID: 14187
IP address blocks: 201.220.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:a4:75:78:cd:d5:6d:10:b1:a6:0b:a2:ad:0e:fa:94:88:8a:e0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Validity
Not Before: Feb 25 20:06:03 2025 GMT
Not After : Feb 24 20:11:03 2026 GMT
Subject: CN=DD62DC25707A8D2A8DEBC252CBCC3266D7036874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:df:29:25:69:98:1e:96:d8:da:4c:7a:63:
42:ef:23:a7:6b:0d:3d:3d:ea:4c:5e:e6:ae:bd:1d:
d6:74:c5:45:86:e3:30:7d:18:30:17:ec:2f:ae:44:
40:99:3b:67:1f:e3:4c:a5:1b:e6:f5:18:58:97:22:
4d:7d:5b:b0:ec:d4:0b:7d:b7:12:72:37:37:9e:69:
77:c9:45:8b:d7:4d:76:97:d0:9f:f3:1f:47:d2:5c:
5d:b9:a2:ec:b4:56:e2:bd:2a:15:98:a1:a6:9b:25:
72:3f:ba:64:22:71:cd:65:a6:0c:73:6b:3c:4d:6e:
21:ed:52:4f:68:8b:53:5c:07:66:b7:df:5d:d0:52:
c1:11:13:34:92:d2:68:3f:9e:db:3a:78:09:63:aa:
db:95:15:7c:7b:b1:fa:cd:11:0f:4d:89:e2:7f:d7:
c6:b4:42:18:54:3c:2a:45:e5:a7:5c:6d:5d:de:4a:
bc:5a:ad:b8:22:23:6c:10:fb:73:01:98:62:ce:ed:
4f:9c:c3:7d:7a:62:96:34:4b:28:8c:da:52:ec:8b:
4e:d1:32:69:09:b4:e0:3f:fe:29:38:03:e7:68:1c:
88:ce:4e:9f:91:41:2a:19:8f:76:24:f4:39:67:87:
12:76:28:ef:00:fe:d7:39:5b:13:28:9b:40:5d:18:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:62:DC:25:70:7A:8D:2A:8D:EB:C2:52:CB:CC:32:66:D7:03:68:74
X509v3 Authority Key Identifier:
keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33322e302f31392d3234203d3e203134313837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.220.32.0/19
Signature Algorithm: sha256WithRSAEncryption
8e:69:18:90:4c:3b:9a:a0:68:eb:ed:de:3e:a2:53:fb:77:3a:
6c:82:a0:5d:9e:15:9d:d9:2e:e0:bb:f0:9b:b9:05:81:f5:60:
77:35:30:66:c4:39:73:6c:5f:cb:dd:45:ee:1c:e2:7c:fe:4e:
c5:32:fb:fd:a8:ef:20:00:86:19:06:cc:43:18:fd:19:b3:ba:
2d:6e:20:c5:ce:e0:db:ec:43:e1:ef:b5:3f:3e:34:8b:23:9b:
35:e2:9b:10:77:5a:6d:79:46:24:45:7b:a6:d3:59:0d:0e:7e:
ee:c7:57:f7:37:2b:b3:c9:d9:f2:73:75:a6:d2:b5:a2:f4:f5:
11:11:3e:23:14:a6:82:56:70:ca:6a:07:42:37:32:09:75:62:
d9:4f:db:0c:70:37:db:4c:34:8f:56:20:9c:29:3e:29:a2:87:
df:53:64:5d:4f:77:e8:2f:90:97:1c:af:67:91:5c:7f:0d:d2:
b9:b9:b8:93:b2:3a:54:c6:7f:a4:33:44:87:81:34:82:32:85:
45:86:ad:e0:45:09:02:89:f2:5a:f9:cb:f6:e6:d3:d5:fe:10:
09:d4:14:28:12:0a:1c:1c:6e:72:53:f9:4f:03:ca:a8:23:d9:
91:aa:f1:9e:2d:d6:dc:0c:2b:84:f5:c5:00:01:69:c9:f8:78:
37:6d:51:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 07:01:47 2025 by rpki-client