
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133382e302f32342d3234203d3e203532323333.roa
File: 3139302e38382e3133382e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier: exQ4bAsI3mmAKyPhi7mvgVM6myOiaI+ba2fncU87dqI=
Subject key identifier: 1C:43:71:7D:65:56:25:A6:E6:C5:F5:41:74:51:EE:07:D5:EE:AF:49
Certificate issuer: /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial: 081E35BE5EDEC76A9DF4739965BBAEF1B5DFE696
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133382e302f32342d3234203d3e203532323333.roa
Signing time: Thu 20 Mar 2025 19:20:00 +0000
ROA not before: Thu 20 Mar 2025 19:15:00 +0000
ROA not after: Thu 19 Mar 2026 19:20:00 +0000
asID: 52233
IP address blocks: 190.88.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Oct 2025 23:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:1e:35:be:5e:de:c7:6a:9d:f4:73:99:65:bb:ae:f1:b5:df:e6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Validity
Not Before: Mar 20 19:15:00 2025 GMT
Not After : Mar 19 19:20:00 2026 GMT
Subject: CN=1C43717D655625A6E6C5F5417451EE07D5EEAF49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:89:88:36:1c:5a:dc:af:20:b8:c8:11:4f:
65:98:44:0e:bd:7e:cb:4c:5a:0d:58:52:a7:c0:d8:
00:35:8b:ae:89:e3:c5:bd:e0:2e:3d:14:8d:14:da:
30:02:39:28:6a:82:17:7d:78:3d:56:fb:dd:48:72:
b8:35:fa:ca:da:9c:23:7f:c4:12:6e:0f:65:4b:2c:
0d:7f:50:d0:5d:a0:4e:61:58:db:45:30:be:3d:04:
d8:0b:78:2c:f3:09:1b:f7:97:8e:81:9b:6e:f5:73:
df:4f:77:c5:75:2d:09:1e:4b:01:72:19:6a:7e:09:
0c:b2:5a:d9:58:1c:3f:37:c2:d2:f5:b6:4d:4e:51:
a5:bb:b3:33:0d:65:f9:d2:a4:e3:15:66:bc:bb:9f:
e9:1f:cb:7b:a8:39:94:d1:4d:ea:a7:0c:e6:c2:39:
58:a6:db:48:53:e4:dd:a5:87:1b:4d:4d:3f:dc:86:
86:a4:9d:1f:6a:5c:ae:57:1e:ef:58:0d:73:5b:00:
4a:ec:7f:37:b8:a6:85:68:1a:2e:c7:3c:eb:f9:97:
85:73:04:9a:4f:73:31:5e:5c:ce:33:9e:ff:96:33:
ca:bb:dc:9b:a6:9c:1b:6c:f9:3e:e4:34:6c:68:5b:
5a:6a:2c:5a:49:e4:68:1f:e1:80:6a:b2:34:e0:7c:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:43:71:7D:65:56:25:A6:E6:C5:F5:41:74:51:EE:07:D5:EE:AF:49
X509v3 Authority Key Identifier:
keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133382e302f32342d3234203d3e203532323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.88.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:31:5b:36:69:54:47:b6:97:50:4c:f0:2c:1f:4b:87:bd:56:
5f:c6:1c:20:0e:47:f6:a0:c5:ed:14:aa:29:07:f2:ea:da:ea:
3c:75:03:82:7d:78:25:7c:87:2b:f5:89:ea:33:47:7f:fb:d2:
cf:e3:0d:3e:c6:36:2d:a3:ce:97:31:b1:93:14:12:27:6d:94:
90:27:8d:99:b1:f0:25:74:21:e5:35:a4:aa:98:57:40:22:89:
c9:da:8c:f2:0d:f4:d9:c9:6a:c6:f6:eb:60:c7:1b:89:8c:dc:
a9:45:4c:0f:90:e9:49:ea:e4:88:b7:87:31:a2:87:57:ac:b2:
54:bf:51:42:13:e7:90:a8:27:ce:4f:6d:b4:34:a7:7b:a9:e2:
4d:ec:eb:20:fe:1c:09:4b:1e:ae:5e:f9:fb:a1:9e:0a:0d:cd:
fe:58:57:2e:32:19:13:1b:d7:2f:e4:e4:c5:01:d0:54:96:6f:
6a:f4:3e:64:60:20:9f:13:b2:70:71:c7:4c:b1:9b:25:33:94:
bf:5b:18:02:a2:0a:98:7c:06:02:5e:28:07:71:ef:4d:f4:ce:
0f:33:f1:7e:89:6b:22:fe:f3:71:e2:db:ba:0e:97:5b:67:86:
08:46:a1:bd:b1:e9:25:7e:46:da:34:b4:3e:2f:dd:7f:94:c6:
e0:33:d9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:16:03 2025 by rpki-client