
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/323830333a616561303a3a2f33322d3332203d3e20323637363738.roa
File: 323830333a616561303a3a2f33322d3332203d3e20323637363738.roa (raw, json)
Hash identifier: Jxk3mVgD1gXaWmwZTrxh7kvrnDNkMfkNGeFuC/ap3Gw=
Subject key identifier: 86:1F:F7:29:13:46:73:FE:F0:A9:C9:D2:89:6D:68:A2:21:40:EA:DC
Certificate issuer: /CN=02ED3395A01A385371573CF59B1E5D8F2BF6D57E
Certificate serial: 24F69F841A2622D56D98E30884574150864260FB
Authority key identifier: 02:ED:33:95:A0:1A:38:53:71:57:3C:F5:9B:1E:5D:8F:2B:F6:D5:7E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/323830333a616561303a3a2f33322d3332203d3e20323637363738.roa
Signing time: Tue 04 Feb 2025 18:45:48 +0000
ROA not before: Tue 04 Feb 2025 18:40:48 +0000
ROA not after: Tue 03 Feb 2026 18:45:48 +0000
asID: 267678
IP address blocks: 2803:aea0::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.crl
rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f6:9f:84:1a:26:22:d5:6d:98:e3:08:84:57:41:50:86:42:60:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ED3395A01A385371573CF59B1E5D8F2BF6D57E
Validity
Not Before: Feb 4 18:40:48 2025 GMT
Not After : Feb 3 18:45:48 2026 GMT
Subject: CN=861FF729134673FEF0A9C9D2896D68A22140EADC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4e:38:83:a0:78:f8:ca:19:56:8c:58:88:a1:
3c:7c:b2:82:31:28:40:46:4e:41:89:ea:58:42:90:
fc:7a:76:60:8b:c7:78:5d:93:29:7d:f6:82:5a:11:
4f:ae:d7:48:d4:26:26:9e:63:7e:8f:99:db:50:52:
37:8e:02:58:2a:a9:12:c1:0a:b3:2f:d1:ab:34:87:
83:89:47:3b:7a:3a:d9:4f:8f:86:05:2c:ce:14:4c:
82:32:50:e4:09:5d:82:8e:b9:f6:a9:f8:fe:8e:d4:
a3:ae:8d:aa:de:27:7b:cf:47:ea:e5:b2:f8:9c:7e:
0c:d2:52:cb:00:bc:c2:0a:3d:ba:d8:9e:82:3e:7c:
d5:50:68:03:c5:2b:4a:95:42:b5:a1:1e:8d:5f:a0:
b1:55:63:c4:38:70:ec:6a:3a:5b:7e:73:63:26:dd:
f5:45:36:72:7c:2e:af:87:21:05:24:ff:66:c1:e9:
68:84:fe:e0:22:33:dd:f8:5f:b2:00:94:d5:07:06:
f0:d2:0a:c4:f7:1e:5e:74:53:7f:9b:a6:42:a3:cd:
f0:fe:83:02:a9:49:85:3a:67:34:c2:47:18:fb:b1:
4b:55:ec:26:b0:a6:93:d0:53:f0:e8:5d:1a:e5:7a:
d1:24:55:4a:22:f8:4d:69:ed:d5:27:dc:f9:b7:80:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1F:F7:29:13:46:73:FE:F0:A9:C9:D2:89:6D:68:A2:21:40:EA:DC
X509v3 Authority Key Identifier:
keyid:02:ED:33:95:A0:1A:38:53:71:57:3C:F5:9B:1E:5D:8F:2B:F6:D5:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/323830333a616561303a3a2f33322d3332203d3e20323637363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:aea0::/32
Signature Algorithm: sha256WithRSAEncryption
3d:af:45:a2:54:b7:83:4d:e5:f9:0f:ce:c5:d6:7a:9f:68:c0:
26:e6:bd:92:eb:de:da:d0:c8:88:00:c8:62:93:f4:66:81:d1:
cf:81:e3:27:a5:65:76:70:0b:6c:82:a9:33:e1:b5:6b:78:39:
84:4f:8c:8f:1d:d3:2e:6e:7f:d0:72:ca:0c:76:28:88:87:b5:
77:1a:5f:d8:3e:77:ae:c5:fb:7f:6b:f4:e6:ed:49:a2:aa:ea:
44:f3:f6:e4:46:ea:9c:bb:0f:92:be:c6:ac:a3:d9:1e:72:c9:
14:90:3d:59:4b:f5:96:b0:4a:37:81:c1:01:45:9e:b2:a6:8c:
35:2c:5d:e8:7c:d6:88:08:d6:4c:ff:18:33:74:f9:7e:5b:d2:
81:da:80:79:26:31:db:2e:45:40:27:14:8e:c4:e5:93:8b:ba:
b9:4c:1a:57:00:cc:38:ef:51:12:5c:09:5e:f3:77:50:ec:50:
5e:eb:25:73:a3:44:80:dd:7c:60:4a:b8:cb:b9:21:55:f6:10:
5f:c5:bf:ca:f1:69:d1:6b:9d:e6:93:f1:b4:60:50:b8:6b:13:
37:7a:10:96:28:4f:66:18:52:cb:2d:b3:fa:34:a0:67:bc:2d:
c7:e3:01:41:bd:26:86:a6:99:76:06:f7:2d:07:af:e8:a6:95:
ea:a1:27:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 19:28:47 2025 by rpki-client