
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/323830333a376138303a3a2f33322d3438203d3e20323633373133.roa
File: 323830333a376138303a3a2f33322d3438203d3e20323633373133.roa (raw, json)
Hash identifier: XFuSkwlJX45qbOzJrmGNb3hDLSxMJvvMTQ5f4JzJKIk=
Subject key identifier: 05:AA:E9:70:E4:34:A8:2C:48:F6:52:DD:E7:53:38:73:3A:06:08:31
Certificate issuer: /CN=1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D
Certificate serial: 31DC243CF59E38B141EA2AF3D11C64C05BEDE4E4
Authority key identifier: 1F:E1:4B:93:7D:D7:6E:5B:FD:D9:CA:AB:4B:F1:12:CF:61:E3:92:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/323830333a376138303a3a2f33322d3438203d3e20323633373133.roa
Signing time: Tue 04 Feb 2025 18:22:02 +0000
ROA not before: Tue 04 Feb 2025 18:17:02 +0000
ROA not after: Tue 03 Feb 2026 18:22:02 +0000
asID: 263713
IP address blocks: 2803:7a80::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.crl
rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 17:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:dc:24:3c:f5:9e:38:b1:41:ea:2a:f3:d1:1c:64:c0:5b:ed:e4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D
Validity
Not Before: Feb 4 18:17:02 2025 GMT
Not After : Feb 3 18:22:02 2026 GMT
Subject: CN=05AAE970E434A82C48F652DDE75338733A060831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:4b:e0:ac:4f:a5:9d:d8:a5:b3:ec:20:b9:
9d:ee:45:cb:4e:b6:56:c2:77:6f:16:b2:23:d8:8b:
ac:d6:e6:a5:1f:58:99:c4:fa:46:9e:98:a8:8f:bc:
8a:aa:3a:a8:1a:19:d1:df:db:9f:b4:86:ff:b0:d4:
ac:24:c6:d5:82:7e:88:a0:c5:64:4c:17:fd:7e:99:
90:ee:11:53:23:ea:ed:03:b9:57:97:46:87:14:0b:
7f:40:58:09:29:94:e1:a1:f4:35:26:dd:86:d9:08:
1d:50:1d:89:db:d1:29:9f:8c:97:90:5b:44:ef:4e:
39:f8:5a:82:28:c8:5a:d2:ed:ee:39:89:cd:8f:f3:
b0:67:33:90:b4:0c:9a:2d:93:10:aa:bc:ca:3b:9f:
22:75:65:31:11:c8:11:8c:10:ec:8e:4f:e5:5a:4a:
d5:79:77:df:10:9a:fb:e5:82:b3:16:d9:e7:da:31:
58:62:3d:f6:3b:00:ec:6b:cf:df:10:8a:e3:40:e1:
ab:0d:d2:0a:a9:0b:d8:ee:cc:5a:8f:9f:48:3d:cd:
84:85:37:34:6d:52:94:bc:7a:c8:58:de:ff:39:9f:
01:6c:8e:e4:8c:23:19:44:4b:51:a5:78:7c:f8:4a:
ec:f5:c9:7c:bb:34:3f:42:44:bf:b4:25:ae:06:e0:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AA:E9:70:E4:34:A8:2C:48:F6:52:DD:E7:53:38:73:3A:06:08:31
X509v3 Authority Key Identifier:
keyid:1F:E1:4B:93:7D:D7:6E:5B:FD:D9:CA:AB:4B:F1:12:CF:61:E3:92:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/323830333a376138303a3a2f33322d3438203d3e20323633373133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:7a80::/32
Signature Algorithm: sha256WithRSAEncryption
63:9f:d9:14:7f:f3:d6:3a:34:ac:c8:c2:c2:6b:9f:71:f5:47:
c2:9f:b9:6b:8b:49:f0:15:21:f2:24:60:95:46:ab:17:53:9f:
30:6b:75:c9:8d:0f:04:a9:12:af:c8:f4:e9:bc:7f:c1:fc:cb:
d6:2e:f7:32:12:36:04:84:fa:f8:24:82:38:14:1f:48:8c:ae:
82:f3:6c:ba:41:a2:f6:95:f8:29:af:5f:ef:8b:9b:1e:a7:0b:
69:83:b4:a1:69:1e:f3:c1:55:27:20:03:96:b3:40:24:ca:73:
c1:22:4e:ea:ea:30:6b:51:11:6d:20:26:ad:15:7e:65:cd:7b:
b9:fb:ea:d8:3c:76:24:04:31:d9:df:de:4f:a1:3e:1a:7b:c0:
78:9a:c8:de:63:a6:3c:0b:67:7d:6a:87:df:59:d5:13:3a:d4:
bb:0a:c8:84:f4:f5:05:6c:fa:15:60:df:12:de:00:a6:97:ba:
a8:3f:c9:de:aa:31:5a:c6:f2:44:8a:40:c6:6c:6f:f7:3e:b6:
dc:c5:8b:a6:bc:1f:c0:ee:4a:98:3f:3f:10:d3:bb:b7:1d:62:
0d:1a:14:04:fb:1b:63:1c:87:2b:fe:54:e3:32:63:00:83:85:
2c:cc:71:d1:57:ff:b1:74:38:d1:68:04:54:34:ec:54:87:60:
10:9f:9f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 14:56:28 2025 by rpki-client