
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83B5586F0F077F1E1E66194862964C958AA2FF26481F8DB692B7A2B4434DFFF9/0/34352e37302e38382e302f32322d3234203d3e203532343737.roa
File: 34352e37302e38382e302f32322d3234203d3e203532343737.roa (raw, json)
Hash identifier: obE0y/0U7a0qfbP69igVE0QLTcGJgakNpNhIRedmTVA=
Subject key identifier: 50:2F:FE:27:1B:F3:6D:4D:04:18:9B:22:F6:B4:84:E2:A1:D1:20:C0
Certificate issuer: /CN=598E51DA545EC07345EFDA9CFC6827DD00710573
Certificate serial: 609DDD736240FD6ACE926B0C67B25BE393F73CEE
Authority key identifier: 59:8E:51:DA:54:5E:C0:73:45:EF:DA:9C:FC:68:27:DD:00:71:05:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/598E51DA545EC07345EFDA9CFC6827DD00710573.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/83B5586F0F077F1E1E66194862964C958AA2FF26481F8DB692B7A2B4434DFFF9/0/34352e37302e38382e302f32322d3234203d3e203532343737.roa
Signing time: Tue 04 Feb 2025 18:19:20 +0000
ROA not before: Tue 04 Feb 2025 18:14:20 +0000
ROA not after: Tue 03 Feb 2026 18:19:20 +0000
asID: 52477
IP address blocks: 45.70.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/83B5586F0F077F1E1E66194862964C958AA2FF26481F8DB692B7A2B4434DFFF9/0/598E51DA545EC07345EFDA9CFC6827DD00710573.crl
rsync://repository.lacnic.net/rpki/lacnic/83B5586F0F077F1E1E66194862964C958AA2FF26481F8DB692B7A2B4434DFFF9/0/598E51DA545EC07345EFDA9CFC6827DD00710573.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/598E51DA545EC07345EFDA9CFC6827DD00710573.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 02 Nov 2025 00:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:9d:dd:73:62:40:fd:6a:ce:92:6b:0c:67:b2:5b:e3:93:f7:3c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=598E51DA545EC07345EFDA9CFC6827DD00710573
Validity
Not Before: Feb 4 18:14:20 2025 GMT
Not After : Feb 3 18:19:20 2026 GMT
Subject: CN=502FFE271BF36D4D04189B22F6B484E2A1D120C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8e:21:95:a7:97:4c:6b:76:28:64:74:d0:1d:
86:70:3c:45:a7:87:b3:80:cd:26:75:e5:42:f4:97:
1b:70:18:13:d3:5b:93:6b:87:b8:1b:65:d0:f4:3e:
c0:d9:41:9f:72:10:48:43:d9:49:8c:a8:82:ad:6d:
17:d9:07:a1:49:c9:40:01:da:0e:ef:5b:3b:c8:49:
12:f8:ef:cd:02:21:2d:2c:00:cf:80:68:09:60:41:
1c:a6:65:d2:f8:1a:72:87:2f:0a:6d:e3:3c:b8:8f:
89:b7:1e:75:ef:1d:7c:64:40:dd:e4:14:d5:82:1b:
0e:85:0a:10:d2:82:e6:4e:80:3f:f4:70:e3:d2:3c:
6a:6e:17:ef:25:4c:40:29:49:cb:0f:1a:79:58:b3:
35:15:7a:86:e2:48:d0:8b:bd:81:bb:6d:44:ed:35:
35:1d:d8:cd:bf:d1:2b:14:f2:de:bb:15:95:4e:c9:
f6:46:1f:6a:8d:7e:82:0c:8b:3a:29:36:39:c4:f4:
f9:3c:c4:36:7e:54:42:1e:74:80:4e:f1:78:58:a3:
5e:ba:b7:30:ff:d1:ed:fb:4b:1f:da:71:fc:77:63:
0b:b7:5f:af:a8:2d:8d:2a:c8:8b:73:d5:12:63:70:
c9:eb:37:3e:ea:35:1e:db:40:cf:b7:b4:bd:76:90:
67:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2F:FE:27:1B:F3:6D:4D:04:18:9B:22:F6:B4:84:E2:A1:D1:20:C0
X509v3 Authority Key Identifier:
keyid:59:8E:51:DA:54:5E:C0:73:45:EF:DA:9C:FC:68:27:DD:00:71:05:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/83B5586F0F077F1E1E66194862964C958AA2FF26481F8DB692B7A2B4434DFFF9/0/598E51DA545EC07345EFDA9CFC6827DD00710573.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/598E51DA545EC07345EFDA9CFC6827DD00710573.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83B5586F0F077F1E1E66194862964C958AA2FF26481F8DB692B7A2B4434DFFF9/0/34352e37302e38382e302f32322d3234203d3e203532343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.88.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:6c:15:24:6f:c0:de:dc:bd:68:42:84:a7:8d:c5:33:fa:c1:
4b:a0:4d:85:8b:47:3a:ab:64:56:a8:ef:30:d3:bf:15:fa:d9:
44:bd:58:23:cd:78:66:d0:8e:16:57:6e:85:67:cd:48:d1:14:
ad:01:3b:ec:50:6b:8e:48:0a:d0:41:da:a9:be:2d:74:e6:4e:
30:1d:75:ee:7c:9e:dc:85:83:0c:af:0a:5d:c2:12:d3:ec:6f:
dc:d7:5f:4b:95:66:7a:f9:d6:8e:89:55:ae:f4:bc:ad:77:7e:
33:6c:a8:ce:d0:fd:7c:6a:80:b2:0a:4d:a8:1e:0d:a9:0f:35:
33:de:5f:9f:73:60:dc:c3:fe:df:7a:bf:b8:c2:f2:e8:c4:a9:
3f:f8:b3:61:f2:71:2d:57:36:21:55:63:27:6f:89:21:18:1a:
e6:98:39:f3:62:0a:ff:2d:2c:a4:d3:9e:63:bd:30:68:c6:cf:
09:e7:bd:98:1e:d9:5d:62:38:c8:68:85:c5:8c:5b:ef:66:c1:
e0:9f:5f:18:a0:9e:9e:8e:d3:6e:5c:6b:2c:8d:90:aa:2e:8a:
37:f8:8a:4a:1d:0e:d9:17:a0:e2:e3:a6:49:b1:5e:ee:9d:9a:
47:c9:cd:ee:8b:40:66:42:e0:da:97:99:3d:d2:4b:74:26:d2:
17:2f:b5:ef
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUYJ3dc2JA/WrOkmsMZ7Jb45P3PO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk4RTUxREE1NDVFQzA3MzQ1RUZEQTlDRkM2ODI3REQw
MDcxMDU3MzAeFw0yNTAyMDQxODE0MjBaFw0yNjAyMDMxODE5MjBaMDMxMTAvBgNV
BAMTKDUwMkZGRTI3MUJGMzZENEQwNDE4OUIyMkY2QjQ4NEUyQTFEMTIwQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbjiGVp5dMa3YoZHTQHYZwPEWn
h7OAzSZ15UL0lxtwGBPTW5Nrh7gbZdD0PsDZQZ9yEEhD2UmMqIKtbRfZB6FJyUAB
2g7vWzvISRL4780CIS0sAM+AaAlgQRymZdL4GnKHLwpt4zy4j4m3HnXvHXxkQN3k
FNWCGw6FChDSguZOgD/0cOPSPGpuF+8lTEApScsPGnlYszUVeobiSNCLvYG7bUTt
NTUd2M2/0SsU8t67FZVOyfZGH2qNfoIMizopNjnE9Pk8xDZ+VEIedIBO8XhYo166
tzD/0e37Sx/acfx3Ywu3X6+oLY0qyItz1RJjcMnrNz7qNR7bQM+3tL12kGfrAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUUC/+JxvzbU0EGJsi9rSE4qHRIMAwHwYDVR0j
BBgwFoAUWY5R2lRewHNF79qc/Ggn3QBxBXMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84M0I1NTg2RjBGMDc3RjFFMUU2NjE5NDg2Mjk2NEM5NThB
QTJGRjI2NDgxRjhEQjY5MkI3QTJCNDQzNERGRkY5LzAvNTk4RTUxREE1NDVFQzA3
MzQ1RUZEQTlDRkM2ODI3REQwMDcxMDU3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OThFNTFEQTU0NUVDMDczNDVF
RkRBOUNGQzY4MjdERDAwNzEwNTczLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODNCNTU4NkYwRjA3N0YxRTFFNjYxOTQ4NjI5NjRDOTU4QUEyRkYyNjQ4
MUY4REI2OTJCN0EyQjQ0MzRERkZGOS8wLzM0MzUyZTM3MzAyZTM4MzgyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNTMyMzQzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUZYMA0GCSqG
SIb3DQEBCwUAA4IBAQBNbBUkb8De3L1oQoSnjcUz+sFLoE2Fi0c6q2RWqO8w078V
+tlEvVgjzXhm0I4WV26FZ81I0RStATvsUGuOSArQQdqpvi105k4wHXXufJ7chYMM
rwpdwhLT7G/c119LlWZ6+daOiVWu9Lytd34zbKjO0P18aoCyCk2oHg2pDzUz3l+f
c2Dcw/7fer+4wvLoxKk/+LNh8nEtVzYhVWMnb4khGBrmmDnzYgr/LSyk055jvTBo
xs8J572YHtldYjjIaIXFjFvvZsHgn18YoJ6ejtNuXGssjZCqLoo3+IpKHQ7ZF6Di
46ZJsV7unZpHyc3ui0BmQuDal5k90kt0JtIXL7Xv
-----END CERTIFICATE-----
Generated at Wed Oct 29 19:08:15 2025 by rpki-client