
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230342e302f32332d3233203d3e20313938363336.roa
File: 34352e342e3230342e302f32332d3233203d3e20313938363336.roa (raw, json)
Hash identifier: Vrrrcw6loqOhCpY2Pbo5lcFRqb436xU2gDXp+xokG7Y=
Subject key identifier: 58:CD:37:7E:5F:E1:21:69:7A:57:6D:02:71:84:28:7E:F9:52:A8:CF
Certificate issuer: /CN=B4CF94EC7154D2BC51066D5BB556A7589514A5C6
Certificate serial: 7D0FA9DD746870D18FC6F14C28593752C2D19E87
Authority key identifier: B4:CF:94:EC:71:54:D2:BC:51:06:6D:5B:B5:56:A7:58:95:14:A5:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230342e302f32332d3233203d3e20313938363336.roa
Signing time: Tue 04 Feb 2025 18:21:55 +0000
ROA not before: Tue 04 Feb 2025 18:16:55 +0000
ROA not after: Tue 03 Feb 2026 18:21:55 +0000
asID: 198636
IP address blocks: 45.4.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.crl
rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Oct 2025 05:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:0f:a9:dd:74:68:70:d1:8f:c6:f1:4c:28:59:37:52:c2:d1:9e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4CF94EC7154D2BC51066D5BB556A7589514A5C6
Validity
Not Before: Feb 4 18:16:55 2025 GMT
Not After : Feb 3 18:21:55 2026 GMT
Subject: CN=58CD377E5FE121697A576D027184287EF952A8CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:76:f1:b0:61:b7:41:af:e7:fd:cf:5f:19:
c3:69:8a:82:7b:52:2f:46:b1:10:5f:f2:6e:d7:d3:
5b:99:63:2d:04:c1:40:2c:69:ee:f9:1b:51:ef:6d:
4d:d7:58:46:c5:be:80:b0:e3:53:42:35:b9:1e:4c:
bc:38:e7:43:7d:7f:30:46:94:c5:16:b2:09:ef:90:
e1:4b:ac:61:d7:08:43:54:a2:2e:b1:e0:3f:3f:c4:
73:8d:0a:e4:71:45:5e:e6:a4:c0:06:f5:10:1f:49:
7f:b4:c4:2a:cb:2d:43:21:35:6b:79:9d:b3:9e:7d:
0c:6d:a9:51:71:fe:1b:99:1e:8c:e7:f1:f5:3b:cf:
2d:42:93:03:22:98:2b:bc:1d:62:42:32:7d:94:98:
a7:d5:3e:77:d6:ee:c2:a2:ec:7a:c2:08:a0:27:b5:
65:32:2c:c9:0c:1e:85:ea:6b:af:d6:6c:74:9e:38:
69:a9:9a:80:1e:f8:7e:c7:fd:1a:f1:74:f4:29:17:
86:c6:e3:0b:c2:fd:03:0c:15:47:fe:6d:37:3b:5a:
96:74:aa:90:0d:12:2b:fc:42:52:80:13:74:ec:54:
56:70:6c:de:7b:da:19:0d:4f:ac:70:28:a7:8d:06:
9b:39:ef:8e:bb:45:54:29:9d:44:76:d2:52:65:d5:
45:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CD:37:7E:5F:E1:21:69:7A:57:6D:02:71:84:28:7E:F9:52:A8:CF
X509v3 Authority Key Identifier:
keyid:B4:CF:94:EC:71:54:D2:BC:51:06:6D:5B:B5:56:A7:58:95:14:A5:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230342e302f32332d3233203d3e20313938363336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.204.0/23
Signature Algorithm: sha256WithRSAEncryption
53:9c:fa:80:53:e6:81:73:4e:ca:92:32:a3:5e:1d:b1:59:fd:
4e:93:8b:c0:82:0e:c6:c2:da:8e:16:7f:c6:5c:ac:e6:75:6a:
68:5d:02:57:59:e1:e7:17:3d:fa:46:6f:78:e1:c3:82:e7:e8:
c4:e6:27:62:1a:c5:66:5a:b1:9d:de:18:db:ee:62:7a:62:b6:
eb:45:7a:1d:19:07:0c:73:d8:59:a5:ed:16:62:ab:6d:f0:30:
c0:e3:93:dd:86:d2:0a:13:de:6d:ed:24:30:44:b5:f6:cb:83:
45:9c:bd:88:19:3b:f1:f3:d8:14:55:0d:2e:68:79:ab:6a:a0:
b3:02:f5:80:82:35:d7:40:25:c2:4b:4e:ec:6d:c8:b2:9a:26:
e1:be:e9:b0:e1:ec:08:0a:b1:a9:4e:23:82:d0:10:91:cb:2a:
f9:36:cc:62:45:8f:85:6f:ec:e5:3f:87:74:2f:6a:1a:ea:f0:
a5:3b:6c:db:5a:9f:c8:cd:a0:88:35:f2:77:e1:9d:82:95:54:
e6:1c:77:91:83:0e:af:5b:15:1d:4b:bb:13:9a:40:b4:69:da:
74:2e:bb:c0:05:fd:9f:cd:95:4f:c5:16:a6:d4:a5:20:29:a0:
e0:01:fc:18:9d:b7:77:3e:db:22:1f:71:4e:11:18:14:da:f2:
3d:52:7e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 15:42:15 2025 by rpki-client