
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65303a3a2f32382d3330203d3e203133343839.roa
File: 323830303a65303a3a2f32382d3330203d3e203133343839.roa (raw, json)
Hash identifier: IkRxhnX8SPtbw7IHIyW+ImH17coKP0D7k/sn1rMIyMg=
Subject key identifier: ED:1F:23:BD:94:1C:50:A4:39:57:4A:53:53:02:55:FE:D9:DF:0D:A8
Certificate issuer: /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial: 0B9A35533718017E3BCA25D070AED5FD4A753F09
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65303a3a2f32382d3330203d3e203133343839.roa
Signing time: Mon 01 Sep 2025 23:42:34 +0000
ROA not before: Mon 01 Sep 2025 23:37:34 +0000
ROA not after: Mon 31 Aug 2026 23:42:34 +0000
asID: 13489
IP address blocks: 2800:e0::/28 maxlen: 30
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Oct 2025 08:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:9a:35:53:37:18:01:7e:3b:ca:25:d0:70:ae:d5:fd:4a:75:3f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Validity
Not Before: Sep 1 23:37:34 2025 GMT
Not After : Aug 31 23:42:34 2026 GMT
Subject: CN=ED1F23BD941C50A439574A53530255FED9DF0DA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:db:82:b2:ef:b3:c6:23:0a:b6:1e:60:03:83:
6d:00:f0:c9:43:da:17:3e:de:5e:d4:fd:f3:5a:57:
dd:d8:d2:3c:d7:38:eb:82:c0:51:98:4c:a9:22:b6:
54:fb:35:da:36:e3:2a:b1:15:91:4c:c6:42:d6:cd:
07:8a:ee:f0:7f:b7:8e:7f:56:63:db:71:32:32:45:
62:14:99:d4:65:52:bf:77:3a:e5:2b:d0:64:7c:5c:
62:ea:dc:27:4d:50:bd:41:5d:94:25:8a:c6:03:62:
e2:5e:cf:65:39:c1:74:af:3b:85:64:c3:d0:5e:39:
93:69:34:33:98:e9:84:64:ab:dc:8b:cd:30:74:73:
ad:c5:fe:cd:f4:37:e3:14:5a:ad:4b:a1:ce:7b:2a:
7f:74:b9:8c:a1:c4:62:d8:66:84:f8:ac:f3:6a:b0:
48:fc:1c:fd:c7:f6:b6:7e:09:f9:8e:23:88:d7:8e:
6b:31:a5:58:84:4f:19:07:41:b0:fb:73:61:e4:83:
9c:15:bf:65:8c:90:96:2d:b2:49:dc:57:a0:2b:c9:
2f:2d:c9:97:75:d0:0b:e6:b0:14:f8:a6:f1:2a:87:
70:40:8d:3d:94:bb:c3:ca:a3:76:89:9d:eb:37:58:
a5:54:c7:23:6e:2b:73:be:fa:a2:c1:6a:30:ae:66:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1F:23:BD:94:1C:50:A4:39:57:4A:53:53:02:55:FE:D9:DF:0D:A8
X509v3 Authority Key Identifier:
keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65303a3a2f32382d3330203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:e0::/28
Signature Algorithm: sha256WithRSAEncryption
01:bc:f8:f4:fb:90:c0:97:fe:34:bb:61:2f:5d:5e:94:4b:28:
95:d0:c8:b9:7d:7c:f5:fb:28:2c:69:8e:cc:2a:2d:f5:d9:b2:
23:4c:e7:a5:ee:11:08:74:c3:a4:3f:1a:6f:78:d1:b0:f1:36:
33:02:b7:90:b4:66:b8:06:44:65:1a:98:43:ed:97:07:41:11:
d9:e4:ab:85:2c:5d:b8:77:ab:06:86:05:6e:a1:cc:3b:05:be:
fd:6f:0b:68:4b:fe:f5:63:76:a1:c4:f2:04:6a:b1:5d:16:12:
1d:b6:a2:25:a8:5b:c3:e2:98:e5:45:b7:e8:0b:82:77:93:e2:
6b:23:5e:6a:b1:5c:26:d1:a5:a4:e5:f9:ac:e1:82:20:48:18:
f6:8d:55:a3:6a:df:00:fe:f8:34:9d:71:c0:13:c3:f0:33:62:
33:6f:69:b0:8a:7b:70:02:96:73:67:06:83:c6:8e:12:f8:e5:
d6:18:26:50:18:a7:e3:a4:50:2d:fe:fe:96:ea:fb:dc:d8:7b:
ff:a9:c9:65:f1:31:af:91:9c:8a:e3:f4:39:1a:a2:b7:2a:31:
d0:dc:d6:ea:45:1f:af:6d:b2:94:39:7e:30:c5:86:b5:f0:00:
4c:63:d8:eb:79:cc:69:8d:5b:5e:35:fc:e0:a0:29:c7:dc:fb:
86:c4:60:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:48:23 2025 by rpki-client