
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3230382e302f32342d3234203d3e20323632323837.roa
File: 3133382e39392e3230382e302f32342d3234203d3e20323632323837.roa (raw, json)
Hash identifier: 1x3HavdccUhykGVqeOSy45cpT10NQLu3TIQlDpQq6Ig=
Subject key identifier: D1:36:86:7D:84:BE:17:AE:A0:70:AE:AE:6B:E6:87:CF:93:CF:F1:2E
Certificate issuer: /CN=B147831184222B0B3FD3E390249ECA7AFC171F0D
Certificate serial: 52C48B6146E5ED2541B1D7F872B81EE0F24B990B
Authority key identifier: B1:47:83:11:84:22:2B:0B:3F:D3:E3:90:24:9E:CA:7A:FC:17:1F:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3230382e302f32342d3234203d3e20323632323837.roa
Signing time: Tue 04 Feb 2025 18:31:27 +0000
ROA not before: Tue 04 Feb 2025 18:26:27 +0000
ROA not after: Tue 03 Feb 2026 18:31:27 +0000
asID: 262287
IP address blocks: 138.99.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.crl
rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Oct 2025 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c4:8b:61:46:e5:ed:25:41:b1:d7:f8:72:b8:1e:e0:f2:4b:99:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B147831184222B0B3FD3E390249ECA7AFC171F0D
Validity
Not Before: Feb 4 18:26:27 2025 GMT
Not After : Feb 3 18:31:27 2026 GMT
Subject: CN=D136867D84BE17AEA070AEAE6BE687CF93CFF12E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:42:ee:4c:e2:fb:c0:b9:cb:0b:29:ce:bb:
85:74:71:21:6f:3d:93:4b:06:9b:13:94:85:2b:70:
f3:37:f8:f3:1f:b7:a2:1e:3d:36:f6:c8:92:30:0e:
3f:06:c9:8e:4b:56:f3:b5:95:74:64:ca:9d:57:b6:
e0:70:00:8e:b1:a0:8b:b8:e0:7a:56:74:dd:c2:46:
7b:65:6a:5e:99:90:13:9a:6f:76:9c:98:d7:a7:ee:
3d:ed:c4:11:d8:c4:3f:34:7b:de:4f:47:b7:17:6c:
2b:14:3b:de:05:2f:46:c7:e1:0a:70:06:e1:49:36:
f0:8f:c3:c1:e3:a3:94:54:a2:f1:40:5a:8c:f0:fe:
f1:25:9b:13:c6:5f:24:11:d1:03:e8:84:d2:f6:31:
f8:56:f6:8f:e9:79:33:70:0e:f0:44:ed:a5:cd:9e:
89:88:1d:e7:75:86:f6:68:fd:bb:0c:7a:c0:82:de:
2f:2f:ba:af:0b:a4:6d:75:69:92:86:7a:53:71:b9:
2c:fc:ca:d0:a6:44:15:93:a7:7c:85:91:b3:76:7f:
84:20:5b:6a:6c:ac:c8:a8:fa:d5:8a:43:94:c4:b6:
1b:83:35:c2:61:62:d0:b0:1b:07:00:fb:f5:39:4f:
f1:db:af:5f:65:ce:04:cf:e6:6b:0f:98:53:25:0e:
72:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:36:86:7D:84:BE:17:AE:A0:70:AE:AE:6B:E6:87:CF:93:CF:F1:2E
X509v3 Authority Key Identifier:
keyid:B1:47:83:11:84:22:2B:0B:3F:D3:E3:90:24:9E:CA:7A:FC:17:1F:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3230382e302f32342d3234203d3e20323632323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.208.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:71:ae:e1:b8:da:cb:67:51:58:6d:b5:23:fe:9c:a2:55:64:
7c:6d:51:b7:3f:54:19:af:ae:8f:b7:a6:ba:47:7a:67:14:3e:
40:9c:60:da:9b:af:86:bd:84:fb:eb:fd:eb:ba:e4:74:14:59:
bc:b0:34:72:ff:f5:94:39:20:50:96:7d:cf:25:3e:ba:61:e3:
ad:29:3f:6e:d1:b2:11:77:1e:c8:0b:2b:17:14:bb:1d:93:14:
5d:72:9e:0a:98:f2:f7:d9:39:7f:b2:34:db:cf:93:71:fd:e0:
ca:ae:83:d3:d1:74:61:08:c8:0a:31:3b:58:8b:b1:5d:a3:1a:
4a:f8:3c:1c:60:05:cd:21:b8:a4:a6:13:1b:e8:8b:8c:40:6f:
64:69:26:68:82:64:40:16:9e:4a:ca:54:96:70:49:87:30:aa:
54:9a:f0:25:63:a4:9b:4b:e9:9e:53:0a:ff:ad:98:57:28:5b:
3b:9c:a4:57:9b:0f:75:e0:21:75:97:c9:66:cb:2d:ab:9f:dd:
ba:05:23:8f:7f:c0:97:ce:1d:d1:74:92:65:8a:f0:33:5f:33:
a6:58:b8:54:01:e0:a4:4f:28:cf:18:2c:a2:a8:c0:bd:fb:40:
0c:b0:b9:20:b8:cf:43:02:66:de:e8:a3:4e:30:0f:f3:ea:cc:
31:cf:78:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:34:54 2025 by rpki-client