
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139362e302f32342d3234203d3e203238303939.roa
File: 3136382e3139342e3139362e302f32342d3234203d3e203238303939.roa (raw, json)
Hash identifier: y29yNVnIEGA5cvIvTFHrG/Jdd0KwDXBMpZil5EODutI=
Subject key identifier: D5:F5:B1:C0:20:2E:B7:E7:85:90:3B:1F:71:0F:56:46:02:82:5F:4D
Certificate issuer: /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Certificate serial: 62109F9BC9E3D3611D0DDAA4BD33E351E9BE1803
Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139362e302f32342d3234203d3e203238303939.roa
Signing time: Tue 04 Feb 2025 18:27:47 +0000
ROA not before: Tue 04 Feb 2025 18:22:47 +0000
ROA not after: Tue 03 Feb 2026 18:27:47 +0000
asID: 28099
IP address blocks: 168.194.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl
rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 31 Oct 2025 11:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:10:9f:9b:c9:e3:d3:61:1d:0d:da:a4:bd:33:e3:51:e9:be:18:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Validity
Not Before: Feb 4 18:22:47 2025 GMT
Not After : Feb 3 18:27:47 2026 GMT
Subject: CN=D5F5B1C0202EB7E785903B1F710F564602825F4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:1a:da:ef:c1:0d:94:02:3e:ba:40:80:a3:
f2:c7:75:14:c4:a7:4b:ee:9b:33:16:2d:76:85:80:
cf:5a:80:bd:01:ab:70:1f:f2:6e:22:f7:62:ce:a1:
25:c3:ba:8a:73:08:3d:4c:84:ce:e5:66:f1:2d:46:
10:e3:f2:4a:00:0c:ff:ad:7b:41:10:f5:6a:53:40:
ee:66:5e:7b:e7:42:be:24:c0:8d:e9:25:1c:58:d6:
62:47:65:93:16:bc:1a:48:13:99:fc:26:c9:8b:22:
ec:a3:c2:c3:77:75:e4:48:c8:e6:30:c5:4c:8d:ba:
89:cf:ba:d2:28:82:b6:41:d2:a7:6c:a5:2e:60:0b:
c5:7c:03:c6:80:39:cc:03:4a:a7:9a:95:62:a5:25:
cd:6f:b7:4a:00:91:65:70:d1:ae:1f:8e:c9:94:0c:
c3:b0:95:16:e2:ad:41:de:2b:81:28:42:97:76:b0:
98:98:e9:8b:89:e1:41:49:ba:bb:78:53:a5:88:ae:
51:35:01:52:bf:0f:6b:a7:91:d3:6a:c1:cf:ec:76:
41:83:34:a0:30:1a:7a:c1:93:f4:93:37:38:1e:eb:
5d:6d:04:6b:f6:dd:7f:4f:4f:8c:d4:ec:73:4f:89:
d5:ee:5a:49:20:cc:c4:f4:f2:49:69:94:88:15:79:
6d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F5:B1:C0:20:2E:B7:E7:85:90:3B:1F:71:0F:56:46:02:82:5F:4D
X509v3 Authority Key Identifier:
keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139362e302f32342d3234203d3e203238303939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.196.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:44:00:4f:a0:ca:c1:57:66:f6:8f:71:fa:a2:a9:b8:d0:48:
b7:32:b7:65:74:d9:54:a3:a7:48:9f:fc:2b:ac:4e:d4:b9:ef:
c5:2d:10:e2:32:e9:b1:f6:8f:c1:04:f6:c4:2d:66:65:d5:9b:
ae:89:99:e1:7f:64:bd:32:ec:b9:e9:2a:6f:d3:aa:eb:69:8f:
3e:63:e7:5f:2a:c5:85:06:f3:71:a7:6c:30:b2:11:5a:07:b8:
b7:38:4d:93:c7:1a:a6:cc:f2:7b:6c:b1:0c:09:93:d9:d9:1e:
9c:24:0d:a8:f8:16:be:f8:ad:42:ff:38:2a:47:3e:37:ab:ba:
2c:0b:21:40:1f:57:77:81:4c:7b:42:70:90:79:80:1a:d7:da:
01:18:6e:35:7a:cb:37:89:23:27:3b:f1:ac:91:0b:45:f1:ef:
26:20:e4:70:01:04:d7:14:e4:29:98:da:b4:e4:d4:89:8c:47:
29:b3:6f:5f:71:bb:94:99:f8:71:28:61:cf:77:aa:fb:ce:3c:
77:5b:06:d2:ea:12:ce:e2:67:13:5b:07:c3:e5:b4:f5:03:68:
71:01:21:51:82:b9:ec:f1:57:dc:48:50:a9:f6:a1:dc:40:f4:
a1:f0:3d:7e:41:f4:07:3d:90:e8:db:bc:1f:81:b4:10:50:00:
35:1f:29:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:46:45 2025 by rpki-client