
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3139302e34302e302e302f31342d3234203d3e2036313437.roa
File: 3139302e34302e302e302f31342d3234203d3e2036313437.roa (raw, json)
Hash identifier: xH1mBsySNUmVUjkQbY6cP5K3rwkDhsMdX9XLUHXAo3U=
Subject key identifier: BD:A4:D2:1C:18:04:4E:9E:5E:17:6F:8C:6E:48:04:90:08:94:D5:0E
Certificate issuer: /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial: 569F879489BEA60B13CCC3B7521B5A6022F1CC59
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3139302e34302e302e302f31342d3234203d3e2036313437.roa
Signing time: Tue 04 Feb 2025 20:05:11 +0000
ROA not before: Tue 04 Feb 2025 20:00:11 +0000
ROA not after: Tue 03 Feb 2026 20:05:11 +0000
asID: 6147
IP address blocks: 190.40.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:9f:87:94:89:be:a6:0b:13:cc:c3:b7:52:1b:5a:60:22:f1:cc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Validity
Not Before: Feb 4 20:00:11 2025 GMT
Not After : Feb 3 20:05:11 2026 GMT
Subject: CN=BDA4D21C18044E9E5E176F8C6E4804900894D50E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:ac:32:42:23:ef:f8:3d:55:b6:38:43:f5:
4b:e5:f5:b1:72:e7:81:46:59:b7:17:1e:83:d9:34:
ed:2c:e7:8f:e1:15:41:3b:96:6e:67:1a:67:0d:29:
9e:7e:64:cc:e6:5c:22:ca:31:3f:a4:78:2a:81:d9:
2b:c1:be:a9:d3:bc:1d:45:b6:42:20:68:50:ba:39:
42:5f:d4:e1:a1:69:c1:3c:bc:25:5a:8c:ad:ad:bb:
4b:c7:71:c0:d2:8b:24:f0:72:3e:7f:f8:c3:b7:98:
a3:46:79:7e:5e:5c:e6:58:2d:da:9c:ec:52:25:4a:
19:83:ae:fe:27:20:d3:71:1f:f5:96:e6:0f:94:fe:
a9:48:44:3a:03:de:9a:10:86:4c:2f:95:0a:f9:67:
e8:34:b6:29:cc:9d:c0:b1:6b:5c:a8:44:b8:2d:18:
2d:e1:48:02:fb:9b:c0:03:d1:d9:e1:83:95:82:09:
3a:f7:70:b9:73:2c:0a:e7:71:01:bc:a9:55:7e:da:
d1:9f:29:c8:05:10:5d:00:ac:37:cb:c9:f5:66:40:
02:81:c2:a2:01:59:c3:4b:51:2c:98:fd:af:f1:8a:
51:44:cb:95:8a:f8:7b:74:5b:c2:b8:f3:1d:9e:01:
36:21:bf:a1:18:cd:70:d5:f2:2b:1e:4d:7b:ee:a0:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A4:D2:1C:18:04:4E:9E:5E:17:6F:8C:6E:48:04:90:08:94:D5:0E
X509v3 Authority Key Identifier:
keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3139302e34302e302e302f31342d3234203d3e2036313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.40.0.0/14
Signature Algorithm: sha256WithRSAEncryption
24:7e:64:c9:bc:d2:29:d2:d7:4e:16:22:44:77:d0:37:f9:e7:
9b:fb:da:7b:8a:c9:29:73:4b:1c:c1:d2:2c:3f:84:1e:91:4c:
c1:b1:33:8a:09:12:0f:ba:be:10:d8:f9:b6:d6:7a:58:9a:09:
52:46:4c:8d:83:87:e5:9c:f3:75:7b:36:eb:74:f5:76:2b:c6:
88:f0:98:ba:13:6b:3a:0a:cf:82:9c:be:58:d8:91:00:9b:dd:
64:78:80:ef:89:1c:6d:49:e1:11:ba:ed:2f:e0:b7:fd:c2:8b:
50:76:09:e9:81:12:1c:6a:9c:fc:52:4e:7a:0d:11:e7:11:08:
d1:6c:39:82:bd:4a:f3:c4:ae:46:30:34:14:c8:1b:84:cf:ed:
af:e3:43:1a:e1:c1:ef:a7:7c:a7:92:8d:aa:61:3f:03:04:8e:
42:7f:ad:c5:30:7d:2a:d1:80:ff:f3:e9:20:79:25:fa:2c:c3:
6c:65:3c:0a:ee:ba:7d:29:ac:4f:ae:54:94:b9:9b:cf:45:05:
0a:10:f3:d1:d4:1a:f1:e2:7a:5f:87:41:05:27:ac:2b:0a:ec:
03:48:80:21:ed:3e:cb:70:bc:a8:b1:ba:18:7d:e0:3a:bb:12:
c0:6d:be:12:78:da:39:cd:de:12:55:3d:ec:92:2f:8e:21:dd:
50:b2:4f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 00:50:12 2025 by rpki-client