
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e3132342e302f32322d3234203d3e203134373039.roa
File: 3138312e3139372e3132342e302f32322d3234203d3e203134373039.roa (raw, json)
Hash identifier: BGpwE4PXsDT00Q7GPwftDpbOpLUhJ4Ri2bXZcaT8T9M=
Subject key identifier: AB:DD:42:AA:EB:56:4E:9E:74:FB:3F:84:2F:4E:EA:4D:38:F6:B1:47
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 298C192019E560FE21417C70E2C657E42E923EA2
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e3132342e302f32322d3234203d3e203134373039.roa
Signing time: Fri 24 Oct 2025 14:35:01 +0000
ROA not before: Fri 24 Oct 2025 14:30:01 +0000
ROA not after: Fri 23 Oct 2026 14:35:01 +0000
asID: 14709
IP address blocks: 181.197.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 11 Nov 2025 18:10:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:8c:19:20:19:e5:60:fe:21:41:7c:70:e2:c6:57:e4:2e:92:3e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Oct 24 14:30:01 2025 GMT
Not After : Oct 23 14:35:01 2026 GMT
Subject: CN=ABDD42AAEB564E9E74FB3F842F4EEA4D38F6B147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:38:64:17:31:86:33:2a:7d:cf:0f:45:61:
30:af:06:42:82:46:84:9f:d0:9d:da:fe:2d:06:1d:
fa:38:24:c8:d0:88:2d:70:df:4b:54:c3:0a:0f:aa:
38:7a:02:8a:43:ab:e5:c6:b8:91:76:e9:ec:02:6d:
be:b9:d6:4a:52:4c:a0:26:76:77:ce:fe:64:e7:f3:
ff:15:c0:f1:51:f2:ce:2d:4d:b0:88:5d:d5:d0:1b:
af:c9:8a:ee:a9:1e:54:2d:33:72:79:58:ff:de:01:
c3:a3:78:d2:63:07:34:5a:25:a3:28:73:44:80:42:
86:c3:f8:92:cf:bf:77:a7:c1:69:dc:78:f3:d5:54:
d1:38:e2:6c:9b:a3:a6:c8:e9:39:0a:71:66:c8:bc:
f5:82:17:88:53:23:b4:a8:d8:be:24:8e:d8:65:ec:
de:77:55:7e:d2:d3:70:e0:aa:68:61:27:88:0e:6d:
6f:bf:6e:cc:1b:d5:31:e1:95:cd:24:7b:04:1a:00:
57:c3:a0:e2:1c:3f:9d:eb:fd:a6:97:23:67:f0:00:
83:eb:3d:7b:db:68:f9:e1:91:6d:51:6b:01:ee:f7:
26:4f:fd:b0:31:c7:e4:c0:b3:a8:a8:8e:b3:3c:9e:
78:7e:34:a7:c0:b3:02:7b:ca:95:26:43:60:f7:2d:
2e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DD:42:AA:EB:56:4E:9E:74:FB:3F:84:2F:4E:EA:4D:38:F6:B1:47
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e3132342e302f32322d3234203d3e203134373039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.197.124.0/22
Signature Algorithm: sha256WithRSAEncryption
44:92:ef:8e:59:ee:d4:1a:65:3c:11:11:12:7e:85:75:54:61:
7f:82:59:d4:de:ec:51:90:28:87:b0:d9:48:28:b5:0a:21:9a:
2b:3b:59:35:17:66:3f:9c:a8:05:a5:3e:ed:31:c7:98:02:6f:
c8:60:6b:0b:eb:b9:1a:ab:60:3c:7d:b4:3e:5b:e1:b3:6f:03:
18:9b:7d:47:3b:91:3c:96:ee:c4:67:73:d2:4a:c1:11:45:f7:
b2:12:f2:ec:58:67:cd:08:5b:9d:44:ba:dd:f1:8b:47:d6:65:
5d:41:3d:de:ef:a9:89:1c:e1:57:78:5d:d2:f4:2a:e1:a7:2e:
82:db:37:ae:f3:5e:08:aa:f4:68:60:49:ca:3e:5b:5b:00:ea:
e7:17:ed:78:9f:82:c6:b2:5f:67:34:09:83:ef:7c:b2:dd:07:
67:fe:a6:71:94:f9:cd:e8:b0:79:b4:55:da:22:4f:53:23:00:
1a:53:a1:f0:7a:c7:0f:5c:27:72:a1:ee:22:49:83:81:5c:cb:
df:e4:32:ba:11:45:4a:b4:d8:7c:3e:21:71:c2:e0:fd:e2:2c:
a0:0b:ab:f2:d7:e2:e6:6e:fa:30:a6:c0:25:15:4c:0d:48:07:
f4:63:06:11:d6:85:71:72:03:e0:f9:b1:0b:fd:d1:3c:c3:b1:
d0:77:7a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 16:59:28 2025 by rpki-client