
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a3a2f33322d3438203d3e2034323730.roa
File: 323830303a3131303a3a2f33322d3438203d3e2034323730.roa (raw, json)
Hash identifier: UxNqnDd3cdbOoJEt21CaVFHecmK/gxM1CDNWs1OPHac=
Subject key identifier: 05:9D:B5:2B:46:14:96:A8:5E:25:86:CB:94:BC:7F:91:0F:93:33:48
Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial: 3466B19E1D1AED747F9609B4BED33A93EFDE488D
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a3a2f33322d3438203d3e2034323730.roa
Signing time: Tue 04 Feb 2025 18:27:01 +0000
ROA not before: Tue 04 Feb 2025 18:22:01 +0000
ROA not after: Tue 03 Feb 2026 18:27:01 +0000
asID: 4270
IP address blocks: 2800:110::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Oct 2025 12:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:66:b1:9e:1d:1a:ed:74:7f:96:09:b4:be:d3:3a:93:ef:de:48:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Validity
Not Before: Feb 4 18:22:01 2025 GMT
Not After : Feb 3 18:27:01 2026 GMT
Subject: CN=059DB52B461496A85E2586CB94BC7F910F933348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:6a:75:9d:44:38:26:28:a8:eb:a0:cf:71:
f5:c9:3e:d8:fa:ef:fa:69:4a:f7:1d:45:05:98:d6:
29:7b:91:55:bd:da:26:61:6a:bf:f9:4a:d0:da:ee:
0f:fa:69:3a:f8:fe:51:cd:12:46:e4:79:e2:cd:a1:
47:6f:18:28:b2:4a:a8:2c:04:5e:75:26:f1:54:a7:
2a:6f:88:e0:62:4e:d0:45:25:d2:ba:77:93:f7:78:
f3:2c:cc:c8:fd:39:2e:99:17:48:9e:44:8b:07:7b:
a2:79:f4:e6:84:fb:05:58:a7:a0:6a:32:0a:6a:43:
5a:77:5f:77:62:d6:92:bb:48:a9:23:71:3b:42:86:
ec:17:88:5d:96:2a:76:98:07:95:8b:b5:a6:19:c8:
1e:6c:d0:e3:a6:0e:14:49:62:25:34:b6:1f:88:7a:
d9:c6:48:b9:a6:f9:fe:f1:e9:62:4e:d4:a8:55:8c:
fb:9c:dc:8d:be:98:18:ae:2e:70:e5:47:cc:0a:75:
b4:aa:d0:59:56:60:a9:64:31:76:20:f8:4c:42:26:
07:37:0b:44:c4:36:6a:0a:32:8c:cb:36:d0:90:86:
b2:14:15:57:49:38:24:16:c9:95:b6:00:d5:a7:0b:
a3:1d:9d:9f:a4:b8:fa:f2:dd:c4:eb:1a:03:8d:d0:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9D:B5:2B:46:14:96:A8:5E:25:86:CB:94:BC:7F:91:0F:93:33:48
X509v3 Authority Key Identifier:
keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a3a2f33322d3438203d3e2034323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:110::/32
Signature Algorithm: sha256WithRSAEncryption
8d:b8:7e:d1:51:95:65:19:76:b7:37:0d:2f:91:fc:cc:7a:86:
6a:6b:41:35:8b:87:5b:cd:1c:03:1a:92:8b:fd:df:27:25:4a:
41:f8:bf:4e:5e:ca:d7:7e:14:9a:c8:b1:9f:b3:2b:e1:e7:70:
b0:4f:10:bb:b6:cb:d7:92:18:87:61:45:35:a1:60:c6:a8:06:
d2:0a:e1:7c:a5:4e:1d:ac:25:63:09:05:5c:86:12:78:67:55:
23:2f:ca:0f:91:0b:33:5a:3b:7c:40:22:ec:4c:b4:6d:62:12:
89:20:0e:1b:e4:da:b2:80:08:ee:45:c5:6f:98:26:e2:a6:67:
95:4a:09:c7:cb:4f:59:f7:d1:46:38:26:85:d2:ac:a1:5b:24:
54:8f:7e:45:55:2c:55:79:63:b9:1a:a6:6f:e3:73:30:7e:52:
e2:4e:38:76:74:ac:b6:8c:83:c2:e9:0f:f9:f2:bc:08:dd:7c:
64:db:b9:c0:b2:bd:d8:f1:6e:46:69:26:4d:57:1b:32:99:e5:
a2:43:49:19:a8:71:37:90:2c:67:a4:02:df:43:74:d8:29:eb:
92:86:e5:14:33:99:17:e5:83:61:b5:99:df:5d:c0:6a:37:09:
75:37:2d:59:31:52:4f:cd:5e:94:21:0f:72:63:79:f2:6b:c9:
b3:81:be:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 15:52:24 2025 by rpki-client