
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/323830363a3364343a3a2f33322d3438203d3e20323635353836.roa
File: 323830363a3364343a3a2f33322d3438203d3e20323635353836.roa (raw, json)
Hash identifier: A00Hw1vSBws2Vorj6ybRtRasz2Ml7x/c3JQMJqA6dmw=
Subject key identifier: 7E:51:C2:6B:59:FA:81:3F:FD:77:2F:99:0A:52:F0:F0:35:BB:C1:2E
Certificate issuer: /CN=9C464528F67B00410467C3FEDE9E1DD404D5EA8B
Certificate serial: 15EAA713865DE910D18C07FA9C5C6B1789CA0C01
Authority key identifier: 9C:46:45:28:F6:7B:00:41:04:67:C3:FE:DE:9E:1D:D4:04:D5:EA:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/323830363a3364343a3a2f33322d3438203d3e20323635353836.roa
Signing time: Tue 04 Feb 2025 18:33:59 +0000
ROA not before: Tue 04 Feb 2025 18:28:59 +0000
ROA not after: Tue 03 Feb 2026 18:33:59 +0000
asID: 265586
IP address blocks: 2806:3d4::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.crl
rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ea:a7:13:86:5d:e9:10:d1:8c:07:fa:9c:5c:6b:17:89:ca:0c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C464528F67B00410467C3FEDE9E1DD404D5EA8B
Validity
Not Before: Feb 4 18:28:59 2025 GMT
Not After : Feb 3 18:33:59 2026 GMT
Subject: CN=7E51C26B59FA813FFD772F990A52F0F035BBC12E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:2e:a9:35:ee:17:d0:f7:d2:0d:ae:48:ce:
db:0e:1e:2f:88:aa:0a:80:e9:43:24:10:1a:f0:8e:
33:1a:f8:d8:8c:25:da:3c:5b:80:e8:a8:0f:af:5f:
9d:71:82:e5:93:8d:d2:58:04:d3:fe:22:af:18:98:
a4:e8:9c:1e:ba:56:63:af:17:c7:08:d1:df:b5:80:
57:74:71:57:75:e0:dc:83:02:38:a6:33:65:31:cb:
11:c2:a6:2e:48:86:fa:a3:d9:5c:65:52:e2:01:db:
4b:fb:d5:c7:f0:76:6f:ab:dd:10:8a:71:8f:83:dd:
73:5b:ab:10:56:05:5b:0f:da:fe:eb:5a:dd:56:4f:
8e:28:73:06:9c:2f:c6:2c:7f:e2:63:f7:2b:02:b9:
26:49:ff:88:97:45:42:ad:f6:9c:4a:1b:9b:7f:20:
5f:38:3a:f4:3d:e6:76:75:77:60:47:e0:0f:54:54:
27:a3:6c:1a:03:fc:89:8e:94:95:7d:7c:66:c1:33:
da:3e:f4:be:23:11:d7:71:79:c4:02:89:83:9c:c7:
9a:b9:80:fe:97:1e:45:03:8a:14:9f:29:26:8b:48:
7f:6d:a4:3f:37:74:d2:ca:de:ea:b1:7e:aa:75:76:
c4:f4:54:be:4f:71:41:40:93:b5:b8:5c:c0:35:49:
c9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:51:C2:6B:59:FA:81:3F:FD:77:2F:99:0A:52:F0:F0:35:BB:C1:2E
X509v3 Authority Key Identifier:
keyid:9C:46:45:28:F6:7B:00:41:04:67:C3:FE:DE:9E:1D:D4:04:D5:EA:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/323830363a3364343a3a2f33322d3438203d3e20323635353836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:3d4::/32
Signature Algorithm: sha256WithRSAEncryption
9e:af:9f:57:c8:a3:54:9b:36:e2:88:54:a1:48:78:fe:f2:df:
aa:4b:44:07:46:f9:a8:74:81:69:ad:4c:c8:46:be:08:74:40:
55:dd:c8:78:da:2e:87:f7:c0:49:7e:4f:73:0e:2a:31:f2:ab:
57:4b:ce:f0:f7:6d:48:3a:90:19:10:5f:35:35:ea:92:27:05:
f9:d6:c5:09:73:08:cd:be:6c:5d:ea:c8:76:85:48:b9:35:71:
7c:ca:d3:f2:1f:4e:fd:4d:cf:90:ec:38:ef:ab:ff:ba:84:76:
53:4e:e2:a5:3d:d5:5d:33:4a:55:61:1e:e2:e4:85:eb:86:85:
2e:0b:9f:85:9f:9e:22:37:9e:00:4d:a8:da:b7:f2:d6:c0:11:
5b:93:b4:3d:88:f7:f5:4a:58:22:84:d4:a9:3a:db:1f:0f:2d:
b8:ec:68:6a:15:0e:1c:52:1d:96:d9:10:0e:21:17:32:20:2b:
42:0a:35:0d:ea:24:3f:25:9d:e4:1d:d6:65:73:f0:46:f0:ab:
17:76:49:5d:1b:f6:9f:c7:0a:dd:91:77:88:dc:26:4f:72:85:
1a:5c:73:9a:71:6a:1b:76:26:1c:e1:50:9f:3e:9b:c7:58:a9:
06:95:45:9b:37:cb:eb:b4:3f:71:4a:1d:9d:e0:0e:75:69:67:
ad:64:10:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 21:25:36 2025 by rpki-client