
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/34352e3233302e3132352e302f32342d3234203d3e20323633313537.roa
File: 34352e3233302e3132352e302f32342d3234203d3e20323633313537.roa (raw, json)
Hash identifier: ssb7tpVXHv1g4XURL2e8QVgjv0Lzc/fo1NhewV5Zubo=
Subject key identifier: 3D:64:BF:53:53:2D:88:89:21:93:C2:6F:D6:59:B4:C9:BC:EA:50:5D
Certificate issuer: /CN=CD3DD97368EF3155FD117CD3038DE90CAB31E1F6
Certificate serial: 0C8057C602D34932D1725420D61E988B3406233A
Authority key identifier: CD:3D:D9:73:68:EF:31:55:FD:11:7C:D3:03:8D:E9:0C:AB:31:E1:F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/34352e3233302e3132352e302f32342d3234203d3e20323633313537.roa
Signing time: Tue 01 Sep 2026 18:25:00 +0000
ROA not before: Tue 01 Sep 2026 18:20:00 +0000
ROA not after: Tue 31 Aug 2027 18:25:00 +0000
asID: 263157
IP address blocks: 45.230.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.crl
rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 15 Sep 2026 10:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:80:57:c6:02:d3:49:32:d1:72:54:20:d6:1e:98:8b:34:06:23:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD3DD97368EF3155FD117CD3038DE90CAB31E1F6
Validity
Not Before: Sep 1 18:20:00 2026 GMT
Not After : Aug 31 18:25:00 2027 GMT
Subject: CN=3D64BF53532D88892193C26FD659B4C9BCEA505D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:bf:ba:c9:ed:67:21:8f:ee:6e:0e:63:57:
19:c6:a6:e6:ad:78:68:7b:5d:21:c0:17:13:8f:36:
a1:b0:ce:5e:a9:a0:f6:74:a7:5b:56:ee:5f:90:1c:
5a:aa:c4:a3:29:cb:a8:e2:48:00:17:79:cc:c6:20:
a4:77:48:47:69:8d:79:2a:c8:ae:c5:bc:5e:23:21:
6d:84:37:d0:e3:2f:35:0e:75:ff:db:fd:94:ba:f1:
98:24:5b:89:45:d0:fe:9d:c5:9d:de:8a:db:bf:be:
c9:79:da:1c:0a:56:43:70:fd:6d:92:38:e3:f5:f8:
d5:48:02:ac:ec:52:e1:8c:3a:d4:89:4e:ee:e4:95:
d2:f5:8d:9e:e4:7f:fd:fa:db:a3:ac:0b:bd:c1:32:
b8:94:73:52:05:91:77:e7:4b:a6:cd:0c:39:f3:a0:
d3:01:c2:dd:d5:1a:19:36:e4:38:da:7f:71:60:62:
9f:bd:1b:7d:64:07:ab:9d:bb:29:92:6b:d0:52:81:
cb:dc:3a:a3:31:82:1e:70:28:5d:2a:43:4f:06:fe:
2c:ca:0c:b5:0a:dd:f1:16:8f:bd:4c:c5:60:b5:e9:
96:26:fb:b2:e9:0d:63:64:69:af:b2:11:3e:a1:43:
a1:a9:6d:2f:22:67:f6:9e:50:2b:cd:f3:28:3f:26:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:64:BF:53:53:2D:88:89:21:93:C2:6F:D6:59:B4:C9:BC:EA:50:5D
X509v3 Authority Key Identifier:
keyid:CD:3D:D9:73:68:EF:31:55:FD:11:7C:D3:03:8D:E9:0C:AB:31:E1:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/34352e3233302e3132352e302f32342d3234203d3e20323633313537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.125.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9a:bb:aa:8e:9e:47:fa:9b:b3:d7:38:55:5a:79:5f:5b:f6:
aa:51:0c:20:71:ae:65:38:cd:95:73:8a:a6:64:c8:d7:f6:e6:
53:42:ae:37:49:ab:fb:fc:1c:e8:ba:76:a0:31:95:cb:a6:8c:
99:29:0e:b0:66:06:5e:91:99:29:52:38:1a:21:73:8f:fe:93:
7b:35:2c:a0:b0:c7:fb:eb:14:bf:87:19:ff:4c:13:3e:e0:8b:
16:d9:ca:ff:29:3d:31:f7:9d:c3:af:11:df:54:a1:90:b9:8d:
a4:a3:bf:e5:12:dd:ab:85:70:a0:ee:8c:51:98:13:36:cb:ef:
b9:52:7a:98:ab:68:51:88:75:92:bc:70:5c:1d:34:fb:20:63:
34:3f:22:5f:f8:b6:ee:da:ee:fd:67:84:ff:c6:7a:e3:12:39:
5d:2e:51:7a:a4:ba:43:7f:c6:aa:16:9f:30:d6:94:01:7a:9e:
92:8b:02:16:ed:16:cd:bb:18:67:7f:8b:9c:f8:15:10:03:9b:
19:a1:d9:96:74:04:87:d3:bc:33:ae:82:42:97:32:13:ff:56:
76:88:ff:44:40:8c:9a:e0:6e:b2:f2:e5:12:6c:c4:4a:a5:88:
d7:cb:7a:87:f8:9e:36:92:23:92:4c:09:8f:ad:7e:6e:a5:48:
bf:c0:3c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:07:46 2026 by rpki-client