
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e36342e302f31382d3234203d3e203136383134.roa
File: 3230302e36382e36342e302f31382d3234203d3e203136383134.roa (raw, json)
Hash identifier: 49RybJpTvdc6o7PPhe9KVzEROl65Ax80/j06GwaCXzI=
Subject key identifier: 01:3A:EA:93:1A:6F:FE:BF:A0:6B:05:90:F8:EB:EB:67:A8:D7:FE:F7
Certificate issuer: /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial: 35E39ABC0B494F751F9710061DE9497D33292461
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e36342e302f31382d3234203d3e203136383134.roa
Signing time: Tue 04 Feb 2025 20:04:12 +0000
ROA not before: Tue 04 Feb 2025 19:59:12 +0000
ROA not after: Tue 03 Feb 2026 20:04:12 +0000
asID: 16814
IP address blocks: 200.68.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Oct 2025 06:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e3:9a:bc:0b:49:4f:75:1f:97:10:06:1d:e9:49:7d:33:29:24:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Validity
Not Before: Feb 4 19:59:12 2025 GMT
Not After : Feb 3 20:04:12 2026 GMT
Subject: CN=013AEA931A6FFEBFA06B0590F8EBEB67A8D7FEF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:b5:91:37:de:93:fa:cc:6a:d8:04:ac:85:
81:d1:9b:27:51:9a:bf:4a:aa:13:56:90:59:37:2d:
fa:3f:bf:d5:8d:f6:a2:6a:48:f3:e0:f6:87:45:46:
75:de:77:cf:a8:53:b7:ce:75:ad:99:be:ad:ce:49:
fc:24:1c:ec:62:16:0b:bc:5f:b0:5e:c5:ca:d7:9d:
2b:49:67:14:af:09:3f:0d:8b:e2:e5:6e:76:9a:85:
b1:f5:43:08:cf:48:07:64:89:dc:d3:62:60:8d:26:
9b:12:01:c6:98:ac:24:e4:83:ec:7b:ed:5d:ad:d6:
2e:59:88:44:d1:0c:06:97:13:03:5a:ae:73:6e:40:
fd:02:66:f7:e8:73:bb:83:fe:42:0f:a6:6d:12:3d:
4e:2b:4d:fc:e6:26:df:f4:2f:59:38:4d:8e:22:3b:
a8:57:95:34:c8:f3:33:35:8d:b7:dc:84:d5:5b:cd:
dc:26:14:bc:bd:9e:67:2a:bc:f8:02:dc:2d:7a:11:
d6:4e:24:85:89:a9:79:53:50:e6:b9:e7:69:2e:d7:
a3:03:68:2b:f7:ff:21:91:35:16:85:0b:a1:e0:5f:
c5:86:18:d0:3d:c5:86:ee:50:cb:07:4a:bb:40:ed:
cd:07:01:a7:ae:6d:44:59:bb:30:39:d3:24:44:0f:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3A:EA:93:1A:6F:FE:BF:A0:6B:05:90:F8:EB:EB:67:A8:D7:FE:F7
X509v3 Authority Key Identifier:
keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e36342e302f31382d3234203d3e203136383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.68.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a2:06:0f:35:76:bb:8e:74:15:c8:b4:79:75:ea:8d:0a:c7:5e:
27:da:91:35:5c:b6:dd:30:24:2c:f3:2c:00:fa:87:1d:c2:4e:
8e:3b:a3:88:f2:7c:f0:0a:7a:51:4e:42:c8:81:05:79:23:62:
d7:40:f4:9a:dd:6a:a9:eb:7a:46:47:da:1d:52:be:21:8f:72:
c6:fa:3f:2b:e3:10:06:59:d5:e3:58:8a:ad:75:d1:dc:58:93:
59:b3:e8:46:8b:39:29:3b:53:1b:13:45:e2:a8:50:c0:d3:99:
a4:b3:7e:91:2d:13:91:83:86:8d:1e:c7:6b:84:04:08:14:1e:
f9:c5:fa:3b:13:41:63:5e:d9:00:3a:8e:01:62:3e:30:c4:53:
d5:18:f3:bb:cf:e9:30:0e:ba:84:85:38:82:96:a0:8d:5d:c7:
a4:89:af:69:91:4a:d0:f3:0f:38:2d:0a:53:33:ca:63:a6:54:
59:d4:8d:fd:40:2b:bc:f6:18:27:42:7f:fe:cf:f4:1a:ea:81:
47:99:99:10:fc:f5:8d:9b:6e:49:c4:d3:23:49:02:d9:15:76:
c8:d4:34:4d:98:1d:d0:10:a1:ed:7f:24:94:18:c0:d5:4f:2c:
10:90:e1:74:d3:a3:e1:da:d0:49:3f:19:b9:54:ff:85:bf:d4:
84:07:17:53
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUNeOavAtJT3UflxAGHelJfTMpJGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTcxRjE0RDVBRUVDODlGNEFFNDEwNEMwRjYwOURFMjc3
RDFEM0NENzAeFw0yNTAyMDQxOTU5MTJaFw0yNjAyMDMyMDA0MTJaMDMxMTAvBgNV
BAMTKDAxM0FFQTkzMUE2RkZFQkZBMDZCMDU5MEY4RUJFQjY3QThEN0ZFRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8GLWRN96T+sxq2ASshYHRmydR
mr9KqhNWkFk3Lfo/v9WN9qJqSPPg9odFRnXed8+oU7fOda2Zvq3OSfwkHOxiFgu8
X7BexcrXnStJZxSvCT8Ni+LlbnaahbH1QwjPSAdkidzTYmCNJpsSAcaYrCTkg+x7
7V2t1i5ZiETRDAaXEwNarnNuQP0CZvfoc7uD/kIPpm0SPU4rTfzmJt/0L1k4TY4i
O6hXlTTI8zM1jbfchNVbzdwmFLy9nmcqvPgC3C16EdZOJIWJqXlTUOa552ku16MD
aCv3/yGRNRaFC6HgX8WGGNA9xYbuUMsHSrtA7c0HAaeubURZuzA50yRED35PAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUATrqkxpv/r+gawWQ+OvrZ6jX/vcwHwYDVR0j
BBgwFoAUFx8U1a7sifSuQQTA9gneJ30dPNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMTM4MkIxQTRDQ0FCNjZEQTYxOEIxRUY5QUI0QzYzMDg2
RUFBQTE4RTdGMEM5NUJEOTQxODAzQzQ2RjVENTY3LzAvMTcxRjE0RDVBRUVDODlG
NEFFNDEwNEMwRjYwOURFMjc3RDFEM0NENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNzFGMTRENUFFRUM4OUY0QUU0
MTA0QzBGNjA5REUyNzdEMUQzQ0Q3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzEzODJCMUE0Q0NBQjY2REE2MThCMUVGOUFCNEM2MzA4NkVBQUExOEU3
RjBDOTVCRDk0MTgwM0M0NkY1RDU2Ny8wLzMyMzAzMDJlMzYzODJlMzYzNDJlMzAy
ZjMxMzgyZDMyMzQyMDNkM2UyMDMxMzYzODMxMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbIREAwDQYJ
KoZIhvcNAQELBQADggEBAKIGDzV2u450Fci0eXXqjQrHXifakTVctt0wJCzzLAD6
hx3CTo47o4jyfPAKelFOQsiBBXkjYtdA9JrdaqnrekZH2h1SviGPcsb6PyvjEAZZ
1eNYiq110dxYk1mz6EaLOSk7UxsTReKoUMDTmaSzfpEtE5GDho0ex2uEBAgUHvnF
+jsTQWNe2QA6jgFiPjDEU9UY87vP6TAOuoSFOIKWoI1dx6SJr2mRStDzDzgtClMz
ymOmVFnUjf1AK7z2GCdCf/7P9BrqgUeZmRD89Y2bbknE0yNJAtkVdsjUNE2YHdAQ
oe1/JJQYwNVPLBCQ4XTTo+Ha0Ek/GblU/4W/1IQHF1M=
-----END CERTIFICATE-----
Generated at Fri Oct 24 16:13:12 2025 by rpki-client