
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/323030313a313332303a3a2f33322d3438203d3e203237373333.roa
File: 323030313a313332303a3a2f33322d3438203d3e203237373333.roa (raw, json)
Hash identifier: JUOxFDO809fHz2UDcdbSGk60DXAGM1owWub4x5h/wmk=
Subject key identifier: B6:B9:19:73:E8:F8:47:21:EA:82:0E:72:6D:3E:2D:80:F5:F1:A0:D9
Certificate issuer: /CN=C3E7368D35E3633A3376945DE03867D2B31CDD87
Certificate serial: 2531325228AE4979A0230C3B145A30200C30F1F2
Authority key identifier: C3:E7:36:8D:35:E3:63:3A:33:76:94:5D:E0:38:67:D2:B3:1C:DD:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/323030313a313332303a3a2f33322d3438203d3e203237373333.roa
Signing time: Tue 04 Feb 2025 18:09:54 +0000
ROA not before: Tue 04 Feb 2025 18:04:54 +0000
ROA not after: Tue 03 Feb 2026 18:09:54 +0000
asID: 27733
IP address blocks: 2001:1320::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.crl
rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 01 Nov 2025 23:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:31:32:52:28:ae:49:79:a0:23:0c:3b:14:5a:30:20:0c:30:f1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3E7368D35E3633A3376945DE03867D2B31CDD87
Validity
Not Before: Feb 4 18:04:54 2025 GMT
Not After : Feb 3 18:09:54 2026 GMT
Subject: CN=B6B91973E8F84721EA820E726D3E2D80F5F1A0D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:49:c7:e5:8d:fc:ec:c1:85:a8:9d:7d:96:
3c:f4:cf:33:02:19:2a:b7:9b:e4:8f:db:dc:fb:a3:
fd:e4:71:2a:a3:96:c3:ab:5a:67:78:04:1a:cb:f7:
c8:87:da:f5:88:f2:67:63:2d:72:da:66:31:b4:6d:
ae:56:53:51:a8:40:2b:bc:bc:db:07:d2:9e:68:07:
7e:bd:32:40:f4:9f:45:52:da:70:c2:c0:c3:21:bc:
49:2b:99:36:b5:8d:a3:18:23:20:86:02:a1:a2:a1:
e3:4e:99:14:26:24:5a:15:8a:d7:87:1d:d5:dc:5f:
b4:9e:c4:45:62:7f:bf:cc:30:e4:3f:07:6e:c5:bd:
43:f0:a0:37:70:fd:d2:26:e3:d2:df:86:cd:9f:5b:
f4:f5:48:3f:4d:52:5c:4e:36:ca:30:3d:29:e4:42:
63:32:c8:e9:59:71:17:61:a0:ad:bb:93:3a:b7:ac:
3c:80:50:92:25:6b:87:55:09:3f:3c:51:f0:d6:c6:
45:35:17:e5:f0:3d:f7:c8:86:81:2f:69:eb:35:61:
95:23:d9:6d:c1:d2:3a:dc:e4:62:20:7b:7a:1f:f3:
fb:77:65:0f:2a:3e:3e:30:c5:71:7f:c2:47:18:e8:
8f:4e:ab:da:49:55:1e:f2:3d:9b:9a:d6:2c:6d:64:
3f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B9:19:73:E8:F8:47:21:EA:82:0E:72:6D:3E:2D:80:F5:F1:A0:D9
X509v3 Authority Key Identifier:
keyid:C3:E7:36:8D:35:E3:63:3A:33:76:94:5D:E0:38:67:D2:B3:1C:DD:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/323030313a313332303a3a2f33322d3438203d3e203237373333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1320::/32
Signature Algorithm: sha256WithRSAEncryption
09:f3:85:6a:fe:79:16:45:ed:78:38:8d:2c:71:fb:d0:32:03:
39:aa:fa:8c:6f:d0:72:dc:be:ab:b4:46:d3:fe:f6:21:32:41:
e6:59:e3:d0:f4:17:e5:de:37:c5:61:6c:38:eb:ab:92:8c:bc:
a1:10:4f:3f:f4:6f:d4:e4:fb:03:9b:3b:26:6f:df:71:a8:a4:
4d:a5:9f:42:6c:68:42:b4:2a:88:5a:4b:46:5c:c5:46:84:cf:
68:a7:42:36:32:e4:f1:d2:ab:9c:f9:2d:64:a0:48:73:74:bd:
d6:7d:3d:df:52:54:7f:aa:3d:d5:9a:f3:df:23:43:5d:32:bb:
2c:33:87:b0:e1:74:b2:14:ec:ed:ac:5a:d2:97:73:0e:48:95:
03:db:20:3a:e5:ce:50:de:a9:7e:c4:d0:93:50:70:b6:53:da:
6a:60:5b:e5:2a:16:f0:79:42:3b:fc:3b:a9:6d:f6:eb:3e:dc:
fb:4e:ea:5f:dc:e5:7b:81:27:30:f4:2d:1f:65:08:41:d9:43:
57:fe:d8:fd:f1:d2:fd:d5:48:2a:77:56:75:c8:f0:96:f3:71:
bd:12:7d:56:0f:b5:33:8d:22:8b:be:10:b1:11:82:eb:f9:65:
2f:d3:c5:a9:d6:d7:70:6d:f8:20:81:39:12:9d:bc:49:0d:e7:
91:97:a5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 00:57:49 2025 by rpki-client