
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32322d3232203d3e20323633323039.roa
File: 3139312e39372e36382e302f32322d3232203d3e20323633323039.roa (raw, json)
Hash identifier: Wj+9YuYKzt0oJbrfmDtWRF/tNGOi66YkT0Qd5IkIV+g=
Subject key identifier: C5:B5:AC:3D:90:F3:DB:C3:EB:F6:D7:0A:94:20:0C:79:48:98:3B:C2
Certificate issuer: /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial: 114899B24523FB31244A977A6700198135AA98DD
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32322d3232203d3e20323633323039.roa
Signing time: Tue 04 Feb 2025 18:28:30 +0000
ROA not before: Tue 04 Feb 2025 18:23:30 +0000
ROA not after: Tue 03 Feb 2026 18:28:30 +0000
asID: 263209
IP address blocks: 191.97.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:48:99:b2:45:23:fb:31:24:4a:97:7a:67:00:19:81:35:aa:98:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Validity
Not Before: Feb 4 18:23:30 2025 GMT
Not After : Feb 3 18:28:30 2026 GMT
Subject: CN=C5B5AC3D90F3DBC3EBF6D70A94200C7948983BC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:76:8f:a3:f7:f4:c8:f2:e7:af:b5:73:2e:
1c:31:d5:3f:a3:85:b8:5e:1a:60:b8:9f:a1:ad:5c:
e8:06:d3:3b:72:18:6c:d3:1f:9b:ef:5c:88:ae:c9:
e1:6e:75:db:59:8c:12:85:ea:20:92:bc:57:ab:47:
86:2e:79:e6:a4:02:7f:0f:2c:13:26:a8:2c:46:93:
b7:25:cf:5f:95:47:35:9a:16:e4:a2:c0:0e:4a:51:
69:2a:9c:d3:f5:2c:bb:3a:96:5e:6d:af:43:42:2e:
19:15:1c:fa:a7:b0:b4:5a:46:db:7d:51:72:ea:25:
c4:e8:4a:48:7c:69:ed:01:fc:3e:0a:4c:47:5f:61:
1b:f2:79:b6:e1:6d:8e:df:f9:fa:56:d8:49:13:47:
37:50:ad:6b:52:92:2e:31:f7:d4:24:80:03:6f:3b:
be:ee:d6:71:93:e2:e9:60:ee:06:24:73:74:65:60:
4b:02:db:2f:95:cb:02:a4:c9:c3:ad:30:89:b2:90:
40:14:83:32:78:a5:0e:6d:62:e4:15:56:db:30:2e:
56:c9:13:17:82:bc:ba:c2:cb:c0:d1:eb:bc:af:ab:
88:4f:17:92:47:3a:18:bf:15:f7:a8:18:39:0a:f6:
8d:97:1c:c8:f5:15:22:a1:d0:14:d8:a6:a5:e6:d1:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B5:AC:3D:90:F3:DB:C3:EB:F6:D7:0A:94:20:0C:79:48:98:3B:C2
X509v3 Authority Key Identifier:
keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e36382e302f32322d3232203d3e20323633323039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.68.0/22
Signature Algorithm: sha256WithRSAEncryption
00:48:ea:e8:e5:9d:39:2e:b9:bc:fe:31:95:99:2a:d7:9a:c3:
85:40:13:ef:ec:30:b5:79:6d:af:68:84:9d:f0:5a:e5:53:47:
50:6c:5f:16:32:49:b1:38:39:94:8f:d2:74:49:a2:89:f3:8d:
d2:32:ea:ef:80:9c:bd:36:c8:5b:ee:49:4c:75:f2:1a:ef:a7:
38:ec:b2:55:87:35:ca:be:f0:c8:5f:ab:c5:32:8c:23:f6:a6:
31:5a:4e:25:cb:82:44:ca:92:b7:e4:dc:45:5d:bb:e2:4a:9b:
a5:e8:7e:70:93:f1:a8:3f:bd:79:29:1e:a7:e0:ab:4f:b2:cd:
fe:70:61:de:55:d0:c7:fa:c4:d6:7c:2d:47:b8:d8:30:84:49:
31:f1:68:1f:43:05:b6:25:8a:e8:2c:eb:1b:82:2e:e5:ba:de:
27:c3:ba:12:f3:3c:e8:46:00:b8:79:4a:24:43:ca:c8:9c:17:
da:3e:69:76:34:c5:a8:3e:0c:fc:ff:8d:52:b8:49:b7:5e:5e:
63:d0:9f:4e:f3:71:ad:08:51:16:c7:71:ed:87:fd:63:2d:2c:
98:7e:20:45:da:bf:78:a2:d7:67:e9:28:23:4f:39:4b:41:b4:
be:b2:a1:fb:10:8a:54:94:79:6d:c8:1e:31:b7:f3:e6:74:27:
3a:62:4a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 21:48:02 2025 by rpki-client