
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa
File: 3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa (raw, json)
Hash identifier: p81G8oXFk080ghN5GKWtKTcT6PUTiGK+bopJQcZbhrE=
Subject key identifier: 86:ED:F6:37:4E:FA:2C:74:3B:50:0D:37:12:05:8B:91:10:3A:A6:26
Certificate issuer: /CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6
Certificate serial: 27136F41E754D4CE272AF6C4B072B1BA5EB8A6BB
Authority key identifier: 68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa
Signing time: Tue 04 Feb 2025 19:59:46 +0000
ROA not before: Tue 04 Feb 2025 19:54:46 +0000
ROA not after: Tue 03 Feb 2026 19:59:46 +0000
asID: 264856
IP address blocks: 190.14.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl
rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 22:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:13:6f:41:e7:54:d4:ce:27:2a:f6:c4:b0:72:b1:ba:5e:b8:a6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6
Validity
Not Before: Feb 4 19:54:46 2025 GMT
Not After : Feb 3 19:59:46 2026 GMT
Subject: CN=86EDF6374EFA2C743B500D3712058B91103AA626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6c:59:14:50:73:4c:87:ff:78:b0:ec:d1:59:
85:06:83:b8:87:25:c4:2d:af:f1:6f:75:f0:9c:e6:
35:d7:91:ff:9c:34:ec:48:66:89:14:41:fb:ed:e7:
5a:68:89:48:f8:6a:f2:cc:06:e7:f3:d6:fb:07:12:
4b:61:75:c1:55:27:8c:77:d0:b0:5e:a8:c8:1a:db:
0d:0e:05:b4:37:28:97:86:e8:84:68:b2:6a:86:59:
0a:6a:b9:c4:68:38:db:f0:4e:22:14:63:40:0e:b3:
0a:5a:d4:ac:4d:f3:98:47:a9:22:0c:fb:76:cf:e3:
a1:2f:a9:63:a9:c5:a2:b2:5f:37:df:db:30:ac:1d:
5c:ad:a8:d8:5d:0c:4c:63:98:99:21:80:0e:21:19:
14:b2:70:ff:80:65:20:99:eb:79:76:f0:7f:31:0a:
bc:0a:e3:72:32:79:ac:de:09:fd:8b:19:b7:c4:1c:
b6:87:cd:71:7f:f2:5e:98:07:cb:01:2a:36:22:3b:
5c:64:eb:2b:de:8e:b7:d5:b6:e6:73:d2:86:17:3f:
28:9e:f1:fa:07:05:52:d6:29:cb:f4:55:db:7a:86:
99:77:52:f0:ad:23:f0:48:df:84:6e:4a:f7:81:65:
d8:42:6a:f9:13:a0:5c:d5:55:a9:dd:4d:ef:65:47:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:ED:F6:37:4E:FA:2C:74:3B:50:0D:37:12:05:8B:91:10:3A:A6:26
X509v3 Authority Key Identifier:
keyid:68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.14.144.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:7d:ae:7c:3e:63:10:c8:a6:86:f9:6e:ed:47:99:8e:f3:47:
bb:f4:5f:f6:77:f7:01:e6:5c:62:12:6b:5a:38:de:ab:5b:2b:
bf:28:57:40:92:55:f9:c9:76:c2:68:05:08:b0:46:5b:63:c0:
91:71:39:22:bc:82:04:a3:6a:96:32:83:28:2d:f2:79:d1:4b:
e0:20:9c:c3:ff:5f:08:3f:da:69:e9:c2:b7:4a:7d:72:46:db:
4d:d4:97:dd:37:0d:3b:df:f5:6e:ea:38:76:90:a7:05:90:d6:
b7:9f:e6:c3:66:39:82:77:6b:92:e3:6b:b7:dd:07:a9:e3:00:
25:6d:f4:37:0d:ff:89:bd:f9:ab:c8:89:1d:79:9b:41:6e:e2:
aa:5b:49:e0:ec:b6:4e:65:3d:19:26:8c:64:37:f1:81:e6:c9:
f6:80:25:fc:6b:94:46:dc:ef:61:89:83:79:ae:ef:50:28:7b:
7a:c0:c6:4e:de:35:d2:f7:f8:4e:ec:e9:76:9f:58:cf:b6:e8:
36:95:64:c8:5f:99:31:a1:29:2d:18:57:82:fa:df:41:5a:e0:
35:72:d5:2a:28:b2:41:76:02:a1:a9:7b:56:db:35:1d:d9:4e:
f7:f1:f2:cd:f1:e0:92:fc:13:49:1a:eb:27:9b:75:f7:a1:be:
d3:57:79:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:08:25 2025 by rpki-client