
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/34352e3232392e38362e302f32342d3234203d3e20323636373035.roa
File: 34352e3232392e38362e302f32342d3234203d3e20323636373035.roa (raw, json)
Hash identifier: Pfr6859cFfG0sBLTdjPs00WhawlAyb1KWQveG3bDB0I=
Subject key identifier: 5A:02:AF:D8:B0:3C:FE:D3:5E:41:EE:C6:EC:56:0D:AE:72:69:7B:94
Certificate issuer: /CN=09452D3964845A96D0C2242C6550EF5DDE90180A
Certificate serial: 3E546A5027AAA9EA72AAE463B317231855DAEBEA
Authority key identifier: 09:45:2D:39:64:84:5A:96:D0:C2:24:2C:65:50:EF:5D:DE:90:18:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/34352e3232392e38362e302f32342d3234203d3e20323636373035.roa
Signing time: Wed 22 Oct 2025 20:55:00 +0000
ROA not before: Wed 22 Oct 2025 20:50:00 +0000
ROA not after: Wed 21 Oct 2026 20:55:00 +0000
asID: 266705
IP address blocks: 45.229.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.crl
rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Oct 2025 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:54:6a:50:27:aa:a9:ea:72:aa:e4:63:b3:17:23:18:55:da:eb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09452D3964845A96D0C2242C6550EF5DDE90180A
Validity
Not Before: Oct 22 20:50:00 2025 GMT
Not After : Oct 21 20:55:00 2026 GMT
Subject: CN=5A02AFD8B03CFED35E41EEC6EC560DAE72697B94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:a0:50:09:9c:94:28:9a:b5:a4:0a:84:88:
33:fe:73:18:b7:0f:3e:0d:50:ec:16:05:9a:41:90:
12:05:10:43:6f:af:9c:51:df:d0:cb:5e:95:65:5c:
3a:c4:d8:6c:d3:7b:ca:a7:7b:8d:47:6c:32:54:ae:
49:ff:b8:ac:4f:b8:2b:21:04:60:07:7b:e2:90:d9:
4e:61:78:1c:bd:30:e1:08:1e:fc:81:80:4b:59:22:
f8:41:22:9c:57:8c:49:fd:8c:ee:3d:6f:a8:66:76:
e8:92:17:78:f2:56:72:84:03:e7:d8:2d:f3:2e:01:
fe:d3:34:29:f0:e7:d9:70:89:e2:0e:b3:27:af:56:
f2:1b:f3:c2:02:c6:2f:e5:02:34:98:7e:9c:c3:50:
46:ef:8f:42:11:60:0b:63:dc:71:38:66:99:22:20:
eb:d3:23:18:5c:da:35:62:d5:a3:c6:43:57:87:59:
11:1c:e5:76:87:60:5c:59:0f:f6:56:3c:9f:ec:b9:
e9:7e:ef:a3:f1:db:02:48:6a:1f:74:0b:24:11:de:
8c:49:cc:19:59:e7:fc:b3:16:dd:6b:b9:fe:cc:01:
da:d0:c2:fe:36:ba:e7:9d:6c:a4:d9:37:23:7d:5e:
97:b9:7f:c9:8a:fe:d3:f0:df:c4:d5:93:71:6d:e7:
cc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:02:AF:D8:B0:3C:FE:D3:5E:41:EE:C6:EC:56:0D:AE:72:69:7B:94
X509v3 Authority Key Identifier:
keyid:09:45:2D:39:64:84:5A:96:D0:C2:24:2C:65:50:EF:5D:DE:90:18:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/34352e3232392e38362e302f32342d3234203d3e20323636373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.86.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:02:7a:ce:64:2e:b7:a0:8c:39:76:65:42:e9:ad:81:9c:cf:
80:e5:2e:57:4a:7f:58:87:11:4f:85:e6:67:cf:3f:0b:0d:cb:
fd:f4:53:65:6a:2a:d1:bf:a6:cd:7e:af:39:d3:87:34:d8:56:
f2:36:dc:21:02:27:3b:16:73:9e:67:62:c8:ac:bf:18:45:08:
19:bf:5f:d4:c6:ce:a1:25:65:71:7a:7b:a9:c5:ec:6a:27:ee:
7d:f5:23:22:06:62:a0:88:cb:cd:38:48:4f:d3:2c:05:06:7c:
cf:3a:f4:f8:a4:d6:60:7d:2c:a5:5a:f1:a9:a1:4c:2a:ad:25:
59:9c:1f:86:03:5e:5d:0b:9a:69:cb:9a:83:69:7c:de:2f:51:
5f:7a:0a:84:15:7c:83:84:ff:dd:d7:66:c1:50:37:7f:f2:d0:
f0:f9:0a:c4:6a:10:91:59:e7:da:fb:4b:e8:04:74:65:2b:0c:
76:d6:52:51:67:ea:58:ed:b9:e5:06:15:0b:81:15:9a:67:5c:
7c:c0:70:83:27:a2:96:ed:ba:b0:e8:53:a1:ca:c8:6d:aa:c8:
d1:09:d6:d5:c2:db:69:0d:2d:91:91:12:41:15:7c:7d:37:b7:
5a:bd:86:e5:67:bc:7e:61:ea:17:95:d2:3d:40:70:9c:0b:c0:
e3:0b:16:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:35 2025 by rpki-client