
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203232393237.roa
File: 3139312e35322e3230382e302f32322d3234203d3e203232393237.roa (raw, json)
Hash identifier: gRdH3H8RjxElpm/RvFwW6CMjZhwjI+QOwZxdFOH6rBg=
Subject key identifier: 57:13:B9:81:CC:1E:46:45:38:C9:2C:81:51:C0:16:4D:6C:FB:5F:83
Certificate issuer: /CN=BFFF9ED422983457E784A1C5DF441797B00B1886
Certificate serial: 62DF338B5EE46C7B02A33B69205458DBD6F8A530
Authority key identifier: BF:FF:9E:D4:22:98:34:57:E7:84:A1:C5:DF:44:17:97:B0:0B:18:86
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203232393237.roa
Signing time: Wed 09 Jul 2025 17:24:53 +0000
ROA not before: Wed 09 Jul 2025 17:19:53 +0000
ROA not after: Wed 08 Jul 2026 17:24:53 +0000
asID: 22927
IP address blocks: 191.52.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/BFFF9ED422983457E784A1C5DF441797B00B1886.crl
rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/BFFF9ED422983457E784A1C5DF441797B00B1886.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 21:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:df:33:8b:5e:e4:6c:7b:02:a3:3b:69:20:54:58:db:d6:f8:a5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFFF9ED422983457E784A1C5DF441797B00B1886
Validity
Not Before: Jul 9 17:19:53 2025 GMT
Not After : Jul 8 17:24:53 2026 GMT
Subject: CN=5713B981CC1E464538C92C8151C0164D6CFB5F83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:2e:f9:61:45:df:2b:1e:40:9b:67:e5:54:
27:29:64:72:26:dd:92:34:97:d7:0a:fd:32:cd:49:
3a:17:7c:13:18:61:cf:bc:d1:8f:c1:21:48:1e:f3:
a1:0f:23:a5:58:00:f6:d3:df:cc:3e:df:47:5c:b2:
1e:1b:a2:10:c9:02:a6:9d:cb:62:c4:d0:41:e9:9f:
39:6a:b6:56:92:b1:d2:49:9f:3a:4d:e5:cd:86:46:
83:c7:4f:c7:a9:c7:d0:f4:64:81:1a:8f:e9:38:a9:
3f:2d:c0:f6:f9:38:66:da:cb:f9:34:82:30:86:4c:
45:52:c3:bc:60:13:c4:88:0e:5c:b5:ed:7d:3c:ca:
2b:e1:42:85:f4:4e:44:50:ce:6c:ba:3e:0a:43:67:
2d:05:94:d0:f9:d6:b1:fd:1d:26:cb:32:11:8d:48:
cf:76:eb:fd:27:e7:cb:21:39:78:17:a7:39:f2:a1:
e7:78:1f:c2:4c:06:59:ec:aa:9c:a4:e0:c1:0d:5f:
ac:7c:77:f0:e3:37:39:63:e8:45:eb:d6:31:b9:36:
87:e0:e5:cb:ba:c8:aa:7c:91:d2:3f:d6:57:6a:c9:
44:90:a6:f8:5f:91:39:45:e2:35:07:14:07:29:c9:
76:eb:13:db:2e:59:24:27:5e:ac:9b:86:80:90:75:
45:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:13:B9:81:CC:1E:46:45:38:C9:2C:81:51:C0:16:4D:6C:FB:5F:83
X509v3 Authority Key Identifier:
keyid:BF:FF:9E:D4:22:98:34:57:E7:84:A1:C5:DF:44:17:97:B0:0B:18:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/BFFF9ED422983457E784A1C5DF441797B00B1886.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203232393237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.52.208.0/22
Signature Algorithm: sha256WithRSAEncryption
45:9a:2a:80:eb:e8:f2:ea:fe:50:69:7b:a4:de:6c:19:e0:e7:
35:21:5c:a4:c6:9a:37:e7:e3:1f:5c:7e:5e:bc:30:5c:82:c5:
c1:b4:8a:ce:fd:d8:97:dd:90:ec:84:22:0a:6d:0f:67:e5:eb:
e1:b5:d1:0f:d5:84:93:d1:90:77:1f:c3:ce:b3:b6:fc:1b:02:
68:7e:e7:97:f9:6d:41:dc:77:53:1c:51:25:27:6c:af:17:07:
bb:b2:ed:ea:fb:0a:36:03:dc:01:cd:3a:31:35:46:ef:f5:55:
be:d7:7a:2f:bc:8d:a9:7b:66:8a:2b:1c:83:31:af:8a:5f:28:
05:68:60:88:6d:c3:cb:04:93:91:21:db:67:5f:ec:63:82:d5:
cb:34:83:33:1b:c5:86:a4:47:dd:ad:a2:6b:98:e2:83:5e:2b:
16:e1:a2:d4:42:9d:6a:50:4b:1b:32:c7:64:ea:87:fd:90:4b:
23:fa:9f:16:26:54:e7:39:8f:62:02:22:79:a7:e2:b2:6f:87:
4a:b9:d4:2f:b4:9b:8e:4f:b9:aa:2d:e8:22:5d:e3:b1:ef:f5:
d4:cd:36:bd:c6:a0:5e:98:d5:d6:fe:48:75:0a:cd:2c:ee:04:
cf:45:18:a9:50:fa:be:c7:ca:07:9b:b8:70:9c:af:81:94:01:
bc:c9:d3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:35:26 2025 by rpki-client